๐ณ๐ฑ
Alt255
2026-09-16 09:08:30
(6 days ago)
[ti-27al] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail apache-wordpr ...
show more
[ti-27al] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail apache-wordpress. Example: 104.234.53.194 - - [16/Sep/2026:11:08:05 +0200] "POST /wp-login.php HTTP/1.1" 200 10177 "https://screensolutions.nl/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0"
104.234.53.194 - - [16/Sep/2026:11:08:09 +0200] "POST /wp-login.php HTTP/1.1" 200 4392 "https://screensolutions.nl/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:118.0) Gecko/20100101 Firefox/118.0"
104.234.53.194 - - [16/Sep/2026:11:08:12 +0200] "POST /wp-login.php HTTP/1.1" 200 4392 "https://screensolutions.nl/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
104.234.53.194 - - [16/Sep/2
...
show less
Brute-Force
Web App Attack
๐ณ๐ฑ
Site.eu
2026-09-16 04:59:31
(6 days ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
๐ฉ๐ช
london2038.com
2026-09-15 17:51:38
(1 week ago)
Attacking WordPress
104.234.53.194 - - [15/Sep/2026:19:51:34 +0200] "POST /wp-login.php HTTP/1.1" 50 ...
show more
Attacking WordPress
104.234.53.194 - - [15/Sep/2026:19:51:34 +0200] "POST /wp-login.php HTTP/1.1" 503 19311 "-" "Mozilla/5.0"
show less
Brute-Force
Web App Attack
๐ฌ๐ง
consul.to
2026-09-15 10:30:39
(1 week ago)
Web attack/malicious scanning detected
Web App Attack
๐ฉ๐ช
FeG Deutschland
2026-09-14 09:07:17
(1 week ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 27
Exploited Host
Web App Attack
๐ช๐ธ
masterguru
2026-09-14 02:03:07
(1 week ago)
wp-login request blocked, no referer. Pattern match "wp-login.php" at REQUEST_URI. (5001900-122)
Web App Attack
๐ฉ๐ช
ger-stg-sifi1
2026-09-14 00:09:23
(1 week ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
๐ธ๐ฌ
pusathosting.com
2026-09-13 09:20:09
(1 week ago)
24ds22 bruteforce
Brute-Force
Web App Attack
๐ฉ๐ช
tentwentyfour
2026-09-13 09:13:52
(1 week ago)
Blocked for brute-forcing WordPress log-in
Brute-Force
Web App Attack
๐ง๐ช
cmbplf
2026-09-12 19:59:28
(1 week ago)
2.756 requests with url.path //xmlrpc.php
Brute-Force
Bad Web Bot
๐ฉ๐ช
FeG Deutschland
2026-09-11 18:40:14
(1 week ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 27
Exploited Host
Web App Attack
๐จ๐ฆ
KIsmay
2026-09-10 00:59:54
(1 week ago)
2026-09-09T19:18:40.106275-04:00 www4 WPAudit[3558876]: 104.234.53.194 terencegower.com "Mozilla/5.0 ...
show more
2026-09-09T19:18:40.106275-04:00 www4 WPAudit[3558876]: 104.234.53.194 terencegower.com "Mozilla/5.0 (Windows NT 10.0; Win64; rv:143.0) Gecko/20100101 Firefox/143.0" nora85:nora852025 FAIL
2026-09-09T19:23:33.919245-04:00 www4 WPAudit[3559512]: 104.234.53.194 lemoncreekcampground.ca "Mozilla/5.0 (Windows NT 10.0; Win64; rv:143.0) Gecko/20100101 Firefox/143.0" lemoncreek:lemoncreek2025 FAIL
2026-09-09T19:40:45.936654-04:00 www4 WPAudit[3561185]: 104.234.53.194 ouchiaccounting.ca "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/17.0 Safari/605.1.15" sbd-admin:sbd-adminsbd-admin FAIL
2026-09-09T20:53:42.148360-04:00 www4 WPAudit[3567899]: 104.234.53.194 imaginesalmon.com "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/17.0 Safari/605.1.15" se7enoaks:se7enoaks1 FAIL
2026-09-09T20:59:53.012090-04:00 www4 WPAudit[3568497]: 104.234.53.194 bcadjuster.com "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/17.0
...
show less
Brute-Force
Web App Attack
๐บ๐ธ
Epimetheus
2026-08-17 16:34:43
(1 month ago)
Zombie network / Bot scanner detected:
[GET] /wp-login.php
UA: Mozilla/5.0 (X11; Linux x86_64) Gec ...
show more
Zombie network / Bot scanner detected:
[GET] /wp-login.php
UA: Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/119.0.1
show less
Bad Web Bot
Exploited Host
Web App Attack
๐น๐ท
neron
2026-08-12 09:06:48
(1 month ago)
CrowdSec blocked: http:exploit detected via OPNsense firewall
Hacking
Web App Attack
๐ซ๐ฎ
bittiguru.fi
2026-08-09 15:51:31
(1 month ago)
104.234.53.194 - [09/Aug/2026:18:50:36 +0300] "POST /wp-login.php HTTP/1.1" 403 754 "https://www.var ...
show more
104.234.53.194 - [09/Aug/2026:18:50:36 +0300] "POST /wp-login.php HTTP/1.1" 403 754 "https://www.varpunen.fi/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" "2.37"
104.234.53.194 - [09/Aug/2026:18:50:49 +0300] "POST /wp-login.php HTTP/1.1" 403 755 "https://www.varpunen.fi/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "2.37"
104.234.53.194 - [09/Aug/2026:18:51:04 +0300] "POST /wp-login.php HTTP/1.1" 403 754 "https://www.varpunen.fi/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15" "2.37"
104.234.53.194 - [09/Aug/2026:18:51:16 +0300] "POST /wp-login.php HTTP/1.1" 403 755 "https://www.varpunen.fi/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" "2.37"
104.234.53.19
...
show less
Hacking
Brute-Force
Web App Attack