π©πͺ
neckaralb-admin.de
2026-08-24 10:16:17
(2 days ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
π³π±
Site.eu
2026-08-23 12:42:54
(3 days ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
π¦πΊ
AWW-Admin
2026-08-22 23:57:25
(3 days ago)
(wordpress) Failed wordpress login from 136.144.35.212 (US/United States/-)
Brute-Force
π³π±
Site.eu
2026-08-22 04:21:05
(4 days ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
π©πͺ
Marc
2026-08-22 02:04:09
(4 days ago)
136.144.35.212 - - [22/Aug/2026:01:57:48 +0200] "POST /wp-login.php HTTP/1.1" 403 16712 "https://saa ...
show more
136.144.35.212 - - [22/Aug/2026:01:57:48 +0200] "POST /wp-login.php HTTP/1.1" 403 16712 "https://saatschule.de/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:120.0) Gecko/20100101 Firefox/120.0" 136.144.35.212 - - [22/Aug/2026:02:41:45 +0200] "POST /wp-login.php HTTP/1.1" 403 16841 "https://saatschule.de/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 136.144.35.212 - - [22/Aug/2026:03:25:58 +0200] "POST /wp-login.php HTTP/1.1" 403 16842 "https://saatschule.de/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 136.144.35.212 - - [22/Aug/2026:03:58:02 +0200] "POST /wp-login.php HTTP/1.1" 403 16850 "https://saatschule.de/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64; rv:118.0) Gecko/20100101 Firefox/118.0" 136.144.35.212 - - [22/Aug/2026:04:04:08 +0200] "POST /wp-login.php HTTP/1.1" 403 16849 "https://saatschule.de/wp-login.php" "Mozi
show less
Brute-Force
Web App Attack
π¨π¦
KIsmay
2026-08-21 11:14:53
(5 days ago)
Aug 21 07:01:43 www4 WPAudit[993650]: 136.144.35.212 imaginesalmon.com "Mozilla/5.0 (X11; Ubuntu; Li ...
show more
Aug 21 07:01:43 www4 WPAudit[993650]: 136.144.35.212 imaginesalmon.com "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" kyleparks:Kyleparks123 FAIL
Aug 21 07:01:52 www4 WPAudit[993650]: 136.144.35.212 imaginesalmon.com "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" kyleparks:skrapelyk FAIL
Aug 21 07:01:59 www4 WPAudit[993650]: 136.144.35.212 imaginesalmon.com "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:121.0) Gecko/20100101 Firefox/121.0" kyleparks:kyleparks111 FAIL
Aug 21 07:02:05 www4 WPAudit[993650]: 136.144.35.212 imaginesalmon.com "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" kyleparks:wpkyleparks FAIL
Aug 21 07:14:52 www4 WPAudit[994653]: 136.144.35.212 imaginesalmon.com "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"
...
show less
Brute-Force
Web App Attack
πΊπΈ
integrantservices.com
2026-08-21 08:06:14
(5 days ago)
(wordpress) Failed wordpress login from 136.144.35.212 (US/United States/-)
Brute-Force
π©πͺ
LRob
2026-08-21 06:59:47
(5 days ago)
WordPress login brute-force | path: /wp-login.php
Brute-Force
Web App Attack
π¦πΊ
screwlooseit.com.au
2026-08-21 06:48:31
(5 days ago)
Blocked by CSF 13 firewall - Rule: WPLOGIN
US/United States/-
Web App Attack
π³π±
Site.eu
2026-08-20 10:47:55
(6 days ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
π©πͺ
FeG Deutschland
2026-08-20 05:17:36
(6 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247
Exploited Host
Web App Attack
π΅π±
Budyn
2026-08-20 05:17:00
(6 days ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: teddypot.cloud | URI: /wp-login.php | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/17.0 Safari/605.1.15 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
π¨π¦
KIsmay
2026-08-19 00:36:50
(1 week ago)
Aug 18 20:35:31 www4 WPAudit[740039]: 136.144.35.212 terencegower.com "Mozilla/5.0 (X11; Ubuntu; Lin ...
show more
Aug 18 20:35:31 www4 WPAudit[740039]: 136.144.35.212 terencegower.com "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" administrator:welcome123 FAIL
Aug 18 20:35:52 www4 WPAudit[740039]: 136.144.35.212 terencegower.com "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" julien:welcome123 FAIL
Aug 18 20:35:58 www4 WPAudit[740039]: 136.144.35.212 terencegower.com "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" julienlocke:welcome123 FAIL
Aug 18 20:36:04 www4 WPAudit[740039]: 136.144.35.212 terencegower.com "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15" nora85:welcome123 FAIL
Aug 18 20:36:49 www4 WPAudit[740039]: 136.144.35.212 terencegower.com "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.1
...
show less
Brute-Force
Web App Attack
πΊπΈ
WeekendWeb
2026-08-19 00:04:42
(1 week ago)
Wordpress Vunerability attack
Web App Attack
π¨π¦
KIsmay
2026-08-18 12:42:43
(1 week ago)
Aug 18 08:41:57 www4 WPAudit[688245]: 136.144.35.212 bestnelson.org "Mozilla/5.0 (X11; Ubuntu; Linux ...
show more
Aug 18 08:41:57 www4 WPAudit[688245]: 136.144.35.212 bestnelson.org "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" admin:Password@123 FAIL
Aug 18 08:42:19 www4 WPAudit[688245]: 136.144.35.212 bestnelson.org "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" admin:Admin123 FAIL
Aug 18 08:42:27 www4 WPAudit[688244]: 136.144.35.212 bestnelson.org "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" admin:password123 FAIL
Aug 18 08:42:35 www4 WPAudit[688245]: 136.144.35.212 bestnelson.org "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1; rv:120.0) Gecko/20100101 Firefox/120.0" admin:Password123 FAIL
Aug 18 08:42:42 www4 WPAudit[688244]: 136.144.35.212 bestnelson.org "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" admin_demouser1:demopa
...
show less
Brute-Force
Web App Attack