Anonymous
2026-05-25 03:50:25
(1 week ago)
[osotir.org] httpd-login-spray-site: sites=agonistes.gr; logs=/var/log/httpd/domains/agonistes.gr.lo ...
show more
[osotir.org] httpd-login-spray-site: sites=agonistes.gr; logs=/var/log/httpd/domains/agonistes.gr.log; samples=site_wide=true | distinct_ips=19 | /wp-login.php
show less
Hacking
Web App Attack
๐ณ๐ฑ
Site.eu
2026-05-24 20:50:17
(1 week ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
Anonymous
2026-05-24 18:00:19
(1 week ago)
Failed Wordpress Logins
Web App Attack
๐ซ๐ท
masterguru
2026-05-24 06:30:27
(1 week ago)
wp-login request blocked, no referer. Pattern match "wp-login.php" at REQUEST_URI. (88020-195)
Hacking
๐ฆ๐น
neo72
2026-05-23 21:31:39
(1 week ago)
Detected malicious activity - bulk block
Brute-Force
Web App Attack
๐จ๐ฆ
KIsmay
2026-05-23 11:14:23
(1 week ago)
May 23 07:12:27 www4 WPAudit[397222]: 104.234.53.119 www.cottonwoodc.ca "Mozilla/5.0 (Macintosh; Int ...
show more
May 23 07:12:27 www4 WPAudit[397222]: 104.234.53.119 www.cottonwoodc.ca "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" cottonwoodcreek-admin:cottonwoodcreek-admin123 FAIL
May 23 07:12:30 www4 WPAudit[397220]: 104.234.53.119 www.cottonwoodc.ca "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" cottonwoodcreek-admin:cottonwoodcreek-admin111 FAIL
May 23 07:14:10 www4 WPAudit[397564]: 104.234.53.119 www.cottonwoodc.ca "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cottonwoodcreek-admin:passcottonwoodcreek-admin FAIL
May 23 07:14:15 www4 WPAudit[397564]: 104.234.53.119 www.cottonwoodc.ca "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15" cottonwoodcreek-admin:cottonwoodcreek-admin! FAIL
May 23 07:14:22 www4 WPAudit[397568]: 10
...
show less
Brute-Force
Web App Attack
๐จ๐ฆ
KIsmay
2026-05-23 06:34:35
(1 week ago)
May 22 20:00:41 ismay WPAudit[289693]: 104.234.53.119 christinesutherland.com "Mozilla/5.0" SBD:user ...
show more
May 22 20:00:41 ismay WPAudit[289693]: 104.234.53.119 christinesutherland.com "Mozilla/5.0" SBD:user%02 FAIL
May 22 20:45:59 ismay WPAudit[289693]: 104.234.53.119 christinesutherland.com "Mozilla/5.0" denis:%resu% FAIL
May 22 22:04:39 ismay WPAudit[295583]: 104.234.53.119 christinesutherland.com "Mozilla/5.0" SBD:SBD@2025 FAIL
May 22 23:12:06 ismay WPAudit[289693]: 104.234.53.119 christinesutherland.com "Mozilla/5.0" denis:denis00 FAIL
May 22 23:34:34 ismay WPAudit[305810]: 104.234.53.119 christinesutherland.com "Mozilla/5.0" denis:admin888 FAIL
...
show less
Brute-Force
Web App Attack
๐บ๐ธ
RLDD
2026-05-23 06:24:37
(1 week ago)
WP probing -sol
Web App Attack
๐ซ๐ท
dwmp
2026-05-23 06:03:29
(1 week ago)
104.234.53.119 - - [23/May/2026:08:03:10 +0200] "POST /wp-login.php HTTP/1.1" 200 7491 "https://www. ...
show more
104.234.53.119 - - [23/May/2026:08:03:10 +0200] "POST /wp-login.php HTTP/1.1" 200 7491 "https://www.elementotelefonia.it/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"
104.234.53.119 - - [23/May/2026:08:03:22 +0200] "POST /wp-login.php HTTP/1.1" 200 7492 "https://www.elementotelefonia.it/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36"
104.234.53.119 - - [23/May/2026:08:03:28 +0200] "POST /wp-login.php HTTP/1.1" 200 7490 "https://www.elementotelefonia.it/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0"
...
show less
Brute-Force
๐ฉ๐ช
AetherFox
2026-05-23 05:14:32
(1 week ago)
AetherFox VoidGuard detected: [Sat May 23 05:14:31.830268 2026] [authz_core:error] [pid 1254001:tid ...
show more
AetherFox VoidGuard detected: [Sat May 23 05:14:31.830268 2026] [authz_core:error] [pid 1254001:tid 1254025] [client 104.234.53.119:44779] AH01630: client denied by server configuration: proxy:http://[MASKED]/wp-includes/SimplePie/
[Sat May 23 05:14:31.830481 2026] [authz_core:error] [pid 1254001:tid 1254025] [client 104.234.53.119:44779] AH01630: client denied by server configuration: /var/www/html/ERRORpages/403.html
[Sat May 23 05:14:32.038969 2026] [authz_core:error] [pid 1254001:tid 1254033] [client 104.234.53.119:44779] AH01630: client denied by server configuration: proxy:http://[MASKED]/wp-includes/theme-compat/
[Sat May 23 05:14:32.039123 2026] [authz_core:error] [pid 1254001:tid 1254033] [client 104.234.53.119:44779] AH01630: client denied by server configuration: /var/www/html/ERRORpages/403.html
[Sat May 23 05:14:32.255933 2026] [authz_core:error] [pid 1254001:tid 1254019] [client 104.234.53.119:44779] AH01630: client denied by server configuration
...
show less
Bad Web Bot
Web App Attack
๐จ๐ฆ
KIsmay
2026-05-23 03:01:29
(1 week ago)
May 22 20:49:34 www4 WPAudit[311382]: 104.234.53.119 hvrhaulers.com "Mozilla/5.0 (Windows NT 10.0; W ...
show more
May 22 20:49:34 www4 WPAudit[311382]: 104.234.53.119 hvrhaulers.com "Mozilla/5.0 (Windows NT 10.0; Win64; rv:143.0) Gecko/20100101 Firefox/143.0" hvr:hvr123 FAIL
May 22 22:45:37 www4 WPAudit[331894]: 104.234.53.119 katharinedickerson.com "Mozilla/5.0 (Windows NT 10.0; Win64; rv:143.0) Gecko/20100101 Firefox/143.0" katharined:katharined2 FAIL
May 22 22:56:38 www4 WPAudit[333809]: 104.234.53.119 cottonwoodc.ca "Mozilla/5.0 (Windows NT 10.0; Win64; rv:143.0) Gecko/20100101 Firefox/143.0" Elyena:cottonwoodc FAIL
May 22 23:01:19 www4 WPAudit[334675]: 104.234.53.119 hvrhaulers.com "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/17.0 Safari/605.1.15" hvr:hvrhaulers FAIL
May 22 23:01:28 www4 WPAudit[334700]: 104.234.53.119 katharinedickerson.com "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/129.0.0.0 Safari/537.36" SBD:katharinedickerson FAIL
...
show less
Brute-Force
Web App Attack
๐บ๐ธ
masterguru
2026-05-22 00:22:51
(1 week ago)
(WPLOGIN) WP Login Attack 104.234.53.119 (US/United States/-): 10 in the last 3600 secs (0-173)
Hacking
๐ณ๐ฑ
wlt-blocker
2026-05-21 20:37:25
(1 week ago)
Unauthorized access to webpage admin
Web App Attack
๐ฉ๐ช
FeG Deutschland
2026-05-21 20:23:36
(1 week ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247
Exploited Host
Web App Attack
๐ฉ๐ช
R.G.
2026-05-21 14:04:32
(1 week ago)
(WPLOGINorWHATEVER) Get lost please 104.234.53.119 (US/United States/-): 7 in the last 600 secs; Por ...
show more
(WPLOGINorWHATEVER) Get lost please 104.234.53.119 (US/United States/-): 7 in the last 600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack