๐ณ๐ฑ
Alt255
2026-10-08 17:55:32
(1 week ago)
[ti-10al] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail apache-wordpr ...
show more
[ti-10al] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail apache-wordpress. Example: 139.59.106.61 - - [08/Oct/2026:19:50:44 +0200] "POST /wp-login.php HTTP/1.1" 301 6308 "https://trouwborsthout.nl/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
139.59.106.61 - - [08/Oct/2026:19:52:17 +0200] "POST /wp-login.php HTTP/1.1" 301 6308 "https://trouwborsthout.nl/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15"
139.59.106.61 - - [08/Oct/2026:19:53:45 +0200] "POST /wp-login.php HTTP/1.1" 301 6308 "https://trouwborsthout.nl/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
trouwborsthout.nl:
...
show less
Brute-Force
Web App Attack
๐ฉ๐ช
FeG Deutschland
2026-10-08 04:43:28
(1 week ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247
Exploited Host
Web App Attack
๐ฆ๐บ
A.i.D.A.N.N
2026-10-08 03:04:19
(1 week ago)
A.i.D.A.N.N: Anomaly Detected - Signature match Web Service - Web vulnerability scanning detected
Web App Attack
๐ณ๐ฑ
Site.eu
2026-10-08 00:39:26
(1 week ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
Anonymous
2026-10-07 19:35:15
(1 week ago)
COPSLICOM WEBEXPLOIT 139.59.106.61 (139.59.106.61)
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-07 15:10:54
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 139.59.106.61 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 139.59.106.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 11:10:47.229278 2026] [security2:error] [pid 10086:tid 10086] [client 139.59.106.61:54237] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mail.bigholegolf.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mail.bigholegolf.com"] [uri "/wp-json/wp/v2/users"] [unique_id "asZg99QsnCM4HgJ0mwpJ1gAAABQ"], referer: https://t.co/
show less
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ฆ
KIsmay
2026-10-07 07:07:23
(1 week ago)
2026-10-07T03:06:56.777339-04:00 www4 WPAudit[1568174]: 139.59.106.61 www.nelsonbcwelding.com "Mozil ...
show more
2026-10-07T03:06:56.777339-04:00 www4 WPAudit[1568174]: 139.59.106.61 www.nelsonbcwelding.com "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:120.0) Gecko/20100101 Firefox/120.0" site_admin:PtXe*JMQ%jT2HS!BSRc4a$$^ FAIL
2026-10-07T03:07:02.834934-04:00 www4 WPAudit[1568174]: 139.59.106.61 www.nelsonbcwelding.com "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" aios:x8sad7xzcasd6xzc5** FAIL
2026-10-07T03:07:10.098135-04:00 www4 WPAudit[1568174]: 139.59.106.61 www.nelsonbcwelding.com "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:118.0) Gecko/20100101 Firefox/118.0" itsme:jsj211 FAIL
2026-10-07T03:07:16.392334-04:00 www4 WPAudit[1568174]: 139.59.106.61 www.nelsonbcwelding.com "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:120.0) Gecko/20100101 Firefox/120.0" pgslot:9wbpsb12T!K FAIL
2026-10-07T03:07:22.302559-04:00 www4 WPAudit[1568174]: 139.59.106.61 www.nelsonbcwelding.com "Mozilla/5.0 (Macintosh; Intel Mac O
...
show less
Brute-Force
Web App Attack
๐ง๐ช
cmbplf
2026-10-07 00:12:28
(1 week ago)
26.751 requests from untrusted country (1w8h39m)
Brute-Force
Bad Web Bot
๐ณ๐ฑ
Site.eu
2026-10-06 22:33:16
(1 week ago)
Excessive 404/403 errors
Brute-Force
๐ฉ๐ช
pscriptos
2026-10-06 22:27:47
(1 week ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-admin-interface-probing
Web App Attack
Hacking
๐ฉ๐ช
FeG Deutschland
2026-10-06 20:13:57
(1 week ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247
Exploited Host
Web App Attack
๐ซ๐ท
j-tap
2026-10-06 16:07:21
(1 week ago)
WordPress honeypot: automated scanner (xmlrpc / installer / .env / direct login POST)
Web App Attack
Anonymous
2026-10-06 11:29:29
(1 week ago)
Attempted access to sensitive endpoint (/license.txt) detected. Automated scan or unauthorized probi ...
show more
Attempted access to sensitive endpoint (/license.txt) detected. Automated scan or unauthorized probing.
show less
Web App Attack