🇩🇪
todix
2026-09-12 11:02:26
(7 hours ago)
Web App Attack Exploid from 104.234.53.157
Web App Attack
🇨🇦
KIsmay
2026-09-10 00:18:19
(2 days ago)
2026-09-09T18:53:03.605361-04:00 www4 WPAudit[3556538]: 104.234.53.157 terratherma.com "Mozilla/5.0 ...
show more
2026-09-09T18:53:03.605361-04:00 www4 WPAudit[3556538]: 104.234.53.157 terratherma.com "Mozilla/5.0 (Windows NT 10.0; Win64; rv:143.0) Gecko/20100101 Firefox/143.0" sbd-admin:sbd-admin FAIL
2026-09-09T19:18:14.424080-04:00 www4 WPAudit[3559028]: 104.234.53.157 goldislandforestproducts.ca "Mozilla/5.0 (Windows NT 10.0; Win64; rv:143.0) Gecko/20100101 Firefox/143.0" gifp:gifp2025 FAIL
2026-09-09T19:26:42.805771-04:00 www4 WPAudit[3559775]: 104.234.53.157 arcrightplumbingandheating.com "Mozilla/5.0 (Windows NT 10.0; Win64; rv:143.0) Gecko/20100101 Firefox/143.0" sbd-admin:sbd-adminsbd-admin FAIL
2026-09-09T19:36:46.964897-04:00 www4 WPAudit[3560652]: 104.234.53.157 goldislandforestproducts.ca "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/129.0.0.0 Safari/537.36" sbd-admin:sbd-adminsbd-admin FAIL
2026-09-09T20:18:17.919978-04:00 www4 WPAudit[3564340]: 104.234.53.157 trilloperelloyates.com "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/1
...
show less
Brute-Force
Web App Attack
🇮🇳
evicky2002
2026-08-21 12:05:53
(3 weeks ago)
Confirmed malicious by STILWaters CTI platform (score=93, sources=1)
Hacking
Brute-Force
SSH
🇫🇮
bittiguru.fi
2026-08-09 16:02:15
(1 month ago)
104.234.53.157 - [09/Aug/2026:19:01:05 +0300] "POST /wp-login.php HTTP/1.1" 403 754 "https://www.var ...
show more
104.234.53.157 - [09/Aug/2026:19:01:05 +0300] "POST /wp-login.php HTTP/1.1" 403 754 "https://www.varpunen.fi/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15" "2.37"
104.234.53.157 - [09/Aug/2026:19:01:26 +0300] "POST /wp-login.php HTTP/1.1" 403 753 "https://www.varpunen.fi/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "2.37"
104.234.53.157 - [09/Aug/2026:19:01:37 +0300] "POST /wp-login.php HTTP/1.1" 403 755 "https://www.varpunen.fi/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" "2.37"
104.234.53.157 - [09/Aug/2026:19:01:49 +0300] "POST /wp-login.php HTTP/1.1" 403 754 "https://www.varpunen.fi/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" "2.37"
104.234.
...
show less
Hacking
Brute-Force
Web App Attack
🇫🇮
bittiguru.fi
2026-08-09 15:36:20
(1 month ago)
104.234.53.157 - [09/Aug/2026:18:34:24 +0300] "POST /wp-login.php HTTP/1.1" 404 46080 "https://www.v ...
show more
104.234.53.157 - [09/Aug/2026:18:34:24 +0300] "POST /wp-login.php HTTP/1.1" 404 46080 "https://www.varpunen.fi/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "3.31"
104.234.53.157 - [09/Aug/2026:18:34:50 +0300] "POST /wp-login.php HTTP/1.1" 404 46080 "https://www.varpunen.fi/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" "3.31"
104.234.53.157 - [09/Aug/2026:18:35:20 +0300] "POST /wp-login.php HTTP/1.1" 403 754 "https://www.varpunen.fi/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "2.37"
104.234.53.157 - [09/Aug/2026:18:35:54 +0300] "POST /wp-login.php HTTP/1.1" 403 754 "https://www.varpunen.fi/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" "2.37"
104.234.53.157 - [09/Aug/2026:
...
show less
Hacking
Brute-Force
Web App Attack
🇳🇱
BlueWire Hosting
2026-08-09 14:34:04
(1 month ago)
Wordpress brute force attempt
Brute-Force
Web App Attack
🇲🇾
Rizzy
2026-08-09 07:07:12
(1 month ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇳🇱
Site.eu
2026-08-09 04:56:01
(1 month ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
🇦🇺
screwlooseit.com.au
2026-08-09 01:41:25
(1 month ago)
Blocked by CSF 13 firewall - Rule: WPLOGIN
CA/Canada/-
Web App Attack
🇩🇪
Viveronese
2026-08-08 19:27:03
(1 month ago)
Wordpress vulnerability scanning
Web App Attack
🇫🇷
SpaceHost-Server
2026-08-08 09:11:21
(1 month ago)
104.234.53.157 - - [08/Aug/2026:11:11:06 +0200] "POST /wp-login.php HTTP/1.1" 200 9548 "https://star ...
show more
104.234.53.157 - - [08/Aug/2026:11:11:06 +0200] "POST /wp-login.php HTTP/1.1" 200 9548 "https://start-the-loop.com/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
104.234.53.157 - - [08/Aug/2026:11:11:12 +0200] "POST /wp-login.php HTTP/1.1" 200 9556 "https://start-the-loop.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36"
104.234.53.157 - - [08/Aug/2026:11:11:19 +0200] "POST /wp-login.php HTTP/1.1" 200 9552 "https://start-the-loop.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
show less
Hacking
Web App Attack
🇩🇪
FD-IX
2026-08-08 03:16:48
(1 month ago)
Fail2Ban: WordPress brute-force attack detected.
Bad Web Bot
Web App Attack
🇺🇸
nyt
2026-08-07 14:46:59
(1 month ago)
WP login POST blocked by WAF, 503 error indicates potential unauthorized access attempt.
Brute-Force
Web App Attack
🇺🇸
WeekendWeb
2026-08-07 05:48:47
(1 month ago)
Wordpress Vunerability attack
Web App Attack
🇫🇷
dynamix
2026-08-07 02:29:00
(1 month ago)
WordPress wp-login.php Brute Force Attack
Brute-Force
Web App Attack