๐ซ๐ท
dynamix
2026-10-20 06:31:54
(2 weeks ago)
Multiple WAF Violations
Web App Attack
๐ฉ๐ช
Viveronese
2026-10-14 03:08:28
(2 weeks ago)
Wordpress vulnerability scanning
Web App Attack
๐ณ๐ฑ
Site.eu
2026-10-14 02:16:27
(2 weeks ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
๐บ๐ธ
Ben Schoolland
2026-10-13 22:19:35
(3 weeks ago)
WordPress credential brute-force against chalkwild.com: 2 failed POST /wp-login.php (HTTP 200, login form re-rendered) between 13/Oct/2026:04:51:32 and 13/Oct/2026:05:36:57 UTC, plus 4 GET /wp-admin/ probes that returned 302 to the login page. User-A ...
show more
WordPress credential brute-force against chalkwild.com: 2 failed POST /wp-login.php (HTTP 200, login form re-rendered) between 13/Oct/2026:04:51:32 and 13/Oct/2026:05:36:57 UTC, plus 4 GET /wp-admin/ probes that returned 302 to the login page. User-Agent rotated across 6 distinct strings from this single address. Part of a coordinated campaign from 49 addresses in 45.131.195.0/24 (240 failed logins today), each pacing itself under per-IP rate thresholds. No successful authentication.
show less
Brute-Force
Web App Attack
๐ฉ๐ช
XICTRON
2026-10-13 18:50:10
(3 weeks ago)
WordPress attack attempt detected by Fail2Ban
Web App Attack
๐จ๐ฆ
KIsmay
2026-10-13 17:34:36
(3 weeks ago)
2026-10-13T13:33:56.612522-04:00 www4 WPAudit[2240674]: 45.131.195.174 www.terencegower.com "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:119.0) Gecko/20100101 Firefox/119.0" admin:topsites FAIL
2026-10-13T13:34:02.138698-04:00 www4 WPAudit[2239518]: ...
show more
2026-10-13T13:33:56.612522-04:00 www4 WPAudit[2240674]: 45.131.195.174 www.terencegower.com "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:119.0) Gecko/20100101 Firefox/119.0" admin:topsites FAIL
2026-10-13T13:34:02.138698-04:00 www4 WPAudit[2239518]: 45.131.195.174 www.terencegower.com "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:119.0) Gecko/20100101 Firefox/119.0" admin:admin1234 FAIL
2026-10-13T13:34:13.351675-04:00 www4 WPAudit[2240674]: 45.131.195.174 www.terencegower.com "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15" admin:123456 FAIL
2026-10-13T13:34:23.136090-04:00 www4 WPAudit[2239518]: 45.131.195.174 www.terencegower.com "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" moderator:Test1234 FAIL
2026-10-13T13:34:35.374603-04:00 www4 WPAudit[2240674]: 45.131.195.174 www.terencegower.com "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:119.0) Gecko/
...
show less
Brute-Force
Web App Attack
๐ฆ๐บ
screwlooseit.com.au
2026-10-13 08:07:46
(3 weeks ago)
Blocked by CSF 13 firewall - Rule: WPLOGIN
NL/Netherlands/-
Web App Attack
Anonymous
2026-10-12 23:38:57
(3 weeks ago)
Banned by Fail2Ban on server
Web App Attack
๐ซ๐ท
dynamix
2026-10-12 13:06:47
(3 weeks ago)
WordPress wp-login.php Brute Force Attack
Brute-Force
Web App Attack
๐ช๐ธ
masterguru
2026-10-11 02:08:54
(3 weeks ago)
(wplogin) Failed WordPress login from 45.131.195.174 (US/United States/-): 5 in the last 3600 secs (0-122)
Hacking
๐บ๐ธ
Jason Howell
2026-10-10 21:35:39
(3 weeks ago)
45.131.195.174 - - [10/Oct/2026:16:35:33 -0500] "GET /wp-admin/profile.php HTTP/1.1" 302 4513 "https://www.ponderosamobilehomepark.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.3 ...
show more
45.131.195.174 - - [10/Oct/2026:16:35:33 -0500] "GET /wp-admin/profile.php HTTP/1.1" 302 4513 "https://www.ponderosamobilehomepark.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
45.131.195.174 - - [10/Oct/2026:16:35:33 -0500] "GET /wp-login.php?redirect_to=https%3A%2F%2Fwww.ponderosamobilehomepark.com%2Fwp-admin%2Fprofile.php&reauth=1 HTTP/1.1" 200 3739 "https://www.ponderosamobilehomepark.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
45.131.195.174 - - [10/Oct/2026:16:35:34 -0500] "POST /wp-login.php HTTP/1.1" 200 2061 "https://www.ponderosamobilehomepark.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15"
45.131.195.174 - - [10/Oct/2026:16:35:34 -0500] "GET /wp-admin/index.php HTTP/1.1" 302 500 "https://www.ponderosamobilehomepark.com/wp-login.php" "Mo
...
show less
Web App Attack
๐ซ๐ท
dynamix
2026-10-10 17:35:30
(3 weeks ago)
WordPress wp-login.php Brute Force Attack
Brute-Force
Web App Attack
๐บ๐ธ
Jason Howell
2026-10-10 16:08:18
(3 weeks ago)
45.131.195.174 - - [10/Oct/2026:10:41:11 -0500] "POST /wp-login.php HTTP/1.1" 200 6304 "https://www.barbsgardenandpantry.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64; rv:120.0) Gecko/20100101 Firefox/120.0"
45.131.195.174 - - [10/Oct/2 ...
show more
45.131.195.174 - - [10/Oct/2026:10:41:11 -0500] "POST /wp-login.php HTTP/1.1" 200 6304 "https://www.barbsgardenandpantry.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64; rv:120.0) Gecko/20100101 Firefox/120.0"
45.131.195.174 - - [10/Oct/2026:10:41:12 -0500] "GET /wp-admin/index.php HTTP/1.1" 302 468 "https://www.barbsgardenandpantry.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
45.131.195.174 - - [10/Oct/2026:10:41:15 -0500] "GET /wp-login.php?redirect_to=https%3A%2F%2Fwww.barbsgardenandpantry.com%2Fwp-admin%2Findex.php&reauth=1 HTTP/1.1" 200 4116 "https://www.barbsgardenandpantry.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
45.131.195.174 - - [10/Oct/2026:10:55:05 -0500] "POST /wp-login.php HTTP/1.1" 200 6320 "https://www.barbsgardenandpantry.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel
...
show less
Web App Attack
๐จ๐ฆ
KIsmay
2026-10-10 04:52:43
(3 weeks ago)
2026-10-09T21:31:52.759916-07:00 ismay WPAudit[4183333]: 45.131.195.174 christinesutherland.com "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1; rv:121.0) Gecko/20100101 Firefox/121.0" christine:christine FAIL
2026-10-09T21:39:43.370379-07:00 ismay WP ...
show more
2026-10-09T21:31:52.759916-07:00 ismay WPAudit[4183333]: 45.131.195.174 christinesutherland.com "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1; rv:121.0) Gecko/20100101 Firefox/121.0" christine:christine FAIL
2026-10-09T21:39:43.370379-07:00 ismay WPAudit[4185920]: 45.131.195.174 christinesutherland.com "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" natalka:password123 FAIL
2026-10-09T21:39:57.097885-07:00 ismay WPAudit[4185921]: 45.131.195.174 christinesutherland.com "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" natalka:12345678 FAIL
2026-10-09T21:40:14.422914-07:00 ismay WPAudit[4185920]: 45.131.195.174 christinesutherland.com "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1; rv:119.0) Gecko/20100101 Firefox/119.0" natalka:admin FAIL
2026-10-09T21:52:42.162837-07:00 ismay WPAudit[4186487]: 45.131.195.174 christinesutherland.com "Mozilla/5.0 (
...
show less
Brute-Force
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-09 12:49:39
(3 weeks ago)
[ti-02ra] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail apache-wordpress. Example: 45.131.195.174 - - [09/Oct/2026:14:49:10 +0200] "POST /wp-login.php HTTP/1.1" 200 8031 "https://praktijklavitelle.nl/wp-login.php" "Mozi ...
show more
[ti-02ra] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail apache-wordpress. Example: 45.131.195.174 - - [09/Oct/2026:14:49:10 +0200] "POST /wp-login.php HTTP/1.1" 200 8031 "https://praktijklavitelle.nl/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"
45.131.195.174 - - [09/Oct/2026:14:49:17 +0200] "POST /wp-login.php HTTP/1.1" 200 4018 "https://praktijklavitelle.nl/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1; rv:120.0) Gecko/20100101 Firefox/120.0"
45.131.195.174 - - [09/Oct/2026:14:49:20 +0200] "POST /wp-login.php HTTP/1.1" 200 4019 "https://praktijklavitelle.nl/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
praktijklavi
...
show less
Brute-Force
Web App Attack