🇨🇿
sweet_acid
2026-09-07 00:19:56
(1 week ago)
Local web evidence: family=path_probe; path=/wp-login.php; enforce_count=10; active_ban_hits=0
Web App Attack
🇨🇦
Webmestre
2026-09-06 11:42:00
(1 week ago)
Attempts against non-existent all CMS and PHP pages /components/com_rsfiles/rsfiles.php
Bad Web Bot
Web App Attack
Hacking
🇩🇪
maxpower
2026-09-06 09:35:51
(1 week ago)
(wp_login) REGOLA 1 - WP Login Attack 143.198.168.244 (US/United States/-): 5 in the last 3600 secs; ...
show more
(wp_login) REGOLA 1 - WP Login Attack 143.198.168.244 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 143.198.168.244 - - [06/Sep/2026:10:38:53 +0200] "POST /wp-login.php HTTP/1.1" 200 12037 "-" "Mozilla/5.0" "-" host=ninodifrancesco.it
143.198.168.244 - - [06/Sep/2026:10:52:54 +0200] "POST /wp-login.php HTTP/1.1" 200 11923 "-" "Mozilla/5.0" "-" host=ninodifrancesco.it
143.198.168.244 - - [06/Sep/2026:11:07:12 +0200] "POST /wp-login.php HTTP/1.1" 200 11933 "-" "Mozilla/5.0" "-" host=ninodifrancesco.it
143.198.168.244 - - [06/Sep/2026:11:21:27 +0200] "POST /wp-login.php HTTP/1.1" 200 11957 "-" "Mozilla/5.0" "-" host=ninodifrancesco.it
143.198.168.244 - - [06/Sep/2026:11:35:43 +0200] "POST /wp-login.php HTTP/1.1" 200 11933 "-" "Mozilla/5.0" "-" host=ninodifrancesco.it
show less
Port Scan
🇩🇪
maxpower
2026-09-06 08:24:58
(1 week ago)
(PERMBLOCK) 143.198.168.244 (US/United States/-) has had more than 4 temp blocks in the last 86400 s ...
show more
(PERMBLOCK) 143.198.168.244 (US/United States/-) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs:
show less
Port Scan
🇩🇪
maxpower
2026-09-06 07:15:24
(1 week ago)
(wp_login) REGOLA 1 - WP Login Attack 143.198.168.244 (US/United States/-): 5 in the last 3600 secs; ...
show more
(wp_login) REGOLA 1 - WP Login Attack 143.198.168.244 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 143.198.168.244 - - [06/Sep/2026:08:20:58 +0200] "POST /wp-login.php HTTP/1.1" 200 11908 "-" "Mozilla/5.0" "-" host=ninodifrancesco.it
143.198.168.244 - - [06/Sep/2026:08:34:44 +0200] "POST /wp-login.php HTTP/1.1" 200 11912 "-" "Mozilla/5.0" "-" host=ninodifrancesco.it
143.198.168.244 - - [06/Sep/2026:08:48:29 +0200] "POST /wp-login.php HTTP/1.1" 200 11916 "-" "Mozilla/5.0" "-" host=ninodifrancesco.it
143.198.168.244 - - [06/Sep/2026:09:01:47 +0200] "POST /wp-login.php HTTP/1.1" 200 11882 "-" "Mozilla/5.0" "-" host=ninodifrancesco.it
143.198.168.244 - - [06/Sep/2026:09:15:21 +0200] "POST /wp-login.php HTTP/1.1" 200 11928 "-" "Mozilla/5.0" "-" host=ninodifrancesco.it
show less
Port Scan
🇩🇪
maxpower
2026-09-06 06:07:24
(1 week ago)
(wp_login) REGOLA 1 - WP Login Attack 143.198.168.244 (US/United States/-): 5 in the last 3600 secs; ...
show more
(wp_login) REGOLA 1 - WP Login Attack 143.198.168.244 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 143.198.168.244 - - [06/Sep/2026:07:14:26 +0200] "POST /wp-login.php HTTP/1.1" 200 11887 "-" "Mozilla/5.0" "-" host=ninodifrancesco.it
143.198.168.244 - - [06/Sep/2026:07:27:35 +0200] "POST /wp-login.php HTTP/1.1" 200 11922 "-" "Mozilla/5.0" "-" host=ninodifrancesco.it
143.198.168.244 - - [06/Sep/2026:07:40:45 +0200] "POST /wp-login.php HTTP/1.1" 200 11948 "-" "Mozilla/5.0" "-" host=ninodifrancesco.it
143.198.168.244 - - [06/Sep/2026:07:53:56 +0200] "POST /wp-login.php HTTP/1.1" 200 11922 "-" "Mozilla/5.0" "-" host=ninodifrancesco.it
143.198.168.244 - - [06/Sep/2026:08:07:22 +0200] "POST /wp-login.php HTTP/1.1" 200 11913 "-" "Mozilla/5.0" "-" host=ninodifrancesco.it
show less
Port Scan
🇩🇪
maxpower
2026-09-06 05:01:12
(1 week ago)
(wp_login) REGOLA 1 - WP Login Attack 143.198.168.244 (US/United States/-): 5 in the last 3600 secs; ...
show more
(wp_login) REGOLA 1 - WP Login Attack 143.198.168.244 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 143.198.168.244 - - [06/Sep/2026:06:08:33 +0200] "POST /wp-login.php HTTP/1.1" 200 11962 "-" "Mozilla/5.0" "-" host=ninodifrancesco.it
143.198.168.244 - - [06/Sep/2026:06:21:44 +0200] "POST /wp-login.php HTTP/1.1" 200 11947 "-" "Mozilla/5.0" "-" host=ninodifrancesco.it
143.198.168.244 - - [06/Sep/2026:06:34:52 +0200] "POST /wp-login.php HTTP/1.1" 200 11883 "-" "Mozilla/5.0" "-" host=ninodifrancesco.it
143.198.168.244 - - [06/Sep/2026:06:47:57 +0200] "POST /wp-login.php HTTP/1.1" 200 12042 "-" "Mozilla/5.0" "-" host=ninodifrancesco.it
143.198.168.244 - - [06/Sep/2026:07:01:06 +0200] "POST /wp-login.php HTTP/1.1" 200 11877 "-" "Mozilla/5.0" "-" host=ninodifrancesco.it
show less
Port Scan
🇩🇪
maxpower
2026-09-06 03:55:30
(1 week ago)
(wp_login) REGOLA 1 - WP Login Attack 143.198.168.244 (US/United States/-): 5 in the last 3600 secs; ...
show more
(wp_login) REGOLA 1 - WP Login Attack 143.198.168.244 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 143.198.168.244 - - [06/Sep/2026:05:03:19 +0200] "GET /wp-login.php HTTP/1.1" 200 9207 "-" "Mozilla/5.0" "-" host=ninodifrancesco.it
143.198.168.244 - - [06/Sep/2026:05:03:20 +0200] "GET /?author=2 HTTP/1.1" 404 46946 "-" "Mozilla/5.0" "-" host=ninodifrancesco.it
143.198.168.244 - - [06/Sep/2026:05:37:42 +0200] "POST /wp-login.php HTTP/1.1" 200 11857 "-" "Mozilla/5.0" "-" host=ninodifrancesco.it
143.198.168.244 - - [06/Sep/2026:05:42:44 +0200] "POST /wp-login.php HTTP/1.1" 200 11968 "-" "Mozilla/5.0" "-" host=ninodifrancesco.it
143.198.168.244 - - [06/Sep/2026:05:55:28 +0200] "POST /wp-login.php HTTP/1.1" 200 11945 "-" "Mozilla/5.0" "-" host=ninodifrancesco.it
show less
Port Scan
🇩🇪
Nerdscave Hosting
2026-09-06 03:50:03
(1 week ago)
WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail
Brute-Force
Web App Attack
🇮🇹
VHosting
2026-09-06 03:40:03
(1 week ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇩🇪
LRob
2026-09-06 02:39:35
(1 week ago)
Malicious web request: probing for secrets, traversal or a known exploit path | method: GET | path: ...
show more
Malicious web request: probing for secrets, traversal or a known exploit path | method: GET | path: /wp-login.php | 2026-09-06 02:39 UTC
show less
Hacking
Web App Attack
🇩🇪
FeG Deutschland
2026-09-06 02:39:27
(1 week ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247
Exploited Host
Web App Attack
🇳🇴
jad-abuse
2026-09-06 02:36:27
(1 week ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: wp_login. ...
show more
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: wp_login. Observed by 1 sensor(s); 1 hits.
show less
Brute-Force
Web App Attack
🇩🇪
iNetWorker
2026-03-15 10:33:27
(5 months ago)
trolling for resource vulnerabilities
Web App Attack
🇺🇸
BSG Webmaster
2025-03-30 07:35:08
(1 year ago)
Port scanning (Port 14000)
Port Scan
Hacking