๐ฉ๐ช
Marc
2026-07-28 23:42:47
(1 hour ago)
149.202.168.36 - - [28/Jul/2026:21:34:48 +0200] "POST /wp-login.php HTTP/2.0" 403 10782 "https://www ...
show more
149.202.168.36 - - [28/Jul/2026:21:34:48 +0200] "POST /wp-login.php HTTP/2.0" 403 10782 "https://www.saatschule.de/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" 149.202.168.36 - - [28/Jul/2026:23:21:55 +0200] "GET /wp-login.php HTTP/2.0" 200 3905 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" 149.202.168.36 - - [28/Jul/2026:23:21:55 +0200] "POST /wp-login.php HTTP/2.0" 403 10789 "https://www.saatschule.de/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" 149.202.168.36 - - [29/Jul/2026:01:42:46 +0200] "GET /wp-login.php HTTP/2.0" 200 3905 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" 149.202.168.36 - - [29/Jul/2026:01:42:47 +0200] "POST /wp-login.php HTTP/2.0" 403 11195 "https://saatschule.de/wp-login.php" "Mozi
show less
Brute-Force
Web App Attack
๐ฉ๐ช
LRob
2026-07-28 23:32:14
(1 hour ago)
CrowdSec: lrob/wp-login-slow-bf | req: /wp-login.php | 2 distinct paths | UA: Mozilla/5.0 (Windows N ...
show more
CrowdSec: lrob/wp-login-slow-bf | req: /wp-login.php | 2 distinct paths | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36
show less
Brute-Force
Web App Attack
๐บ๐ธ
nationaleventpros.com
2026-07-28 23:11:49
(1 hour ago)
WordPress login attempt
Brute-Force
๐ญ๐บ
bcsaba
2026-07-28 19:22:33
(5 hours ago)
CMS (WordPress or Joomla) login attempt.
149.202.168.36 - - [28/Jul/2026:21:22:32 +0200] "POST /wp-l ...
show more
CMS (WordPress or Joomla) login attempt.
149.202.168.36 - - [28/Jul/2026:21:22:32 +0200] "POST /wp-login.php HTTP/2.0" 200 4009 "https://*REDACTED*/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36"
show less
Hacking
Brute-Force
Web App Attack
๐ฉ๐ช
4server
2026-07-28 19:12:55
(5 hours ago)
[TueJul2821:12:48.9542152026][security2:error][pid538079:tid538154][client149.202.168.36:0]ModSecuri ...
show more
[TueJul2821:12:48.9542152026][security2:error][pid538079:tid538154][client149.202.168.36:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"gmint.ch\"][uri\"/xmlrpc.php\"][unique_id\"amj_MP6YFwIsrkm0KD67_wAAAIg\"]
show less
Port Scan
Brute-Force
Web App Attack
๐บ๐ธ
cwytech
2026-07-28 18:52:30
(6 hours ago)
Fleet-wide ban from the Ghostfleet ๐ป. Triggered by scenario: cwy/wp-us-login-only-high.
Bad Web Bot
Web App Attack
๐ฉ๐ช
Hazzard
2026-07-28 17:41:30
(7 hours ago)
(wordpress) Failed wordpress login from 149.202.168.36 (FR/France/-/-/-/[redacted]): (CF_ENABLE)
Brute-Force
๐ญ๐บ
bcsaba
2026-07-28 15:14:14
(9 hours ago)
CMS (WordPress or Joomla) login attempt.
149.202.168.36 - - [28/Jul/2026:17:14:10 +0200] "POST /wp-l ...
show more
CMS (WordPress or Joomla) login attempt.
149.202.168.36 - - [28/Jul/2026:17:14:10 +0200] "POST /wp-login.php HTTP/2.0" 200 3204 "https://*REDACTED*.*REDACTED*/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36"
show less
Hacking
Brute-Force
Web App Attack
๐ฎ๐น
VHosting
2026-07-28 13:43:02
(11 hours ago)
Detected mail brute force attack from 4 different servers
Brute-Force