๐ฆ๐บ
A.i.D.A.N.N
2026-09-30 04:29:59
(1 hour ago)
A.i.D.A.N.N: Anomaly Detected - Signature match Web Service - Web vulnerability scanning detected
Web App Attack
๐ฉ๐ช
Marc
2026-09-30 03:48:34
(1 hour ago)
162.241.253.111 - - [30/Sep/2026:03:27:07 +0200] "GET /wp-login.php HTTP/2.0" 200 4267 "-" "Mozilla/ ...
show more
162.241.253.111 - - [30/Sep/2026:03:27:07 +0200] "GET /wp-login.php HTTP/2.0" 200 4267 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 162.241.253.111 - - [30/Sep/2026:03:27:08 +0200] "POST /wp-login.php HTTP/2.0" 403 11970 "https://www.saatschule.de/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 162.241.253.111 - - [30/Sep/2026:03:27:10 +0200] "GET /wp-login.php?redirect_to=https%3A%2F%2Fwww.saatschule.de%2Fwp-admin%2F&reauth=1 HTTP/2.0" 200 5341 "https://www.saatschule.de/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 162.241.253.111 - - [30/Sep/2026:03:27:11 +0200] "GET /wp-login.php?redirect_to=https%3A%2F%2Fwww.saatschule.de%2Fwp-admin%2Fprofile.php&reauth=1 HTTP/2.0" 200 5349 "https://www.saatschule.de/wp-admin/profile.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/
show less
Brute-Force
Web App Attack
๐ช๐ธ
ofm-abuse
2026-09-29 22:51:56
(6 hours ago)
Brute-force
...
Brute-Force
Web App Attack
Bad Web Bot
Anonymous
2026-09-29 21:26:21
(8 hours ago)
Attempt to POST to xmlrpc.php at 2026-09-29T21:26:21+00:00
Brute-Force
Web App Attack
๐ฒ๐น
Malta
2026-09-29 19:50:50
(9 hours ago)
162.241.253.111 - - [29/Sep/2026:21:50:50 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Li ...
show more
162.241.253.111 - - [29/Sep/2026:21:50:50 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36"
Brute-force password attempt
show less
Hacking
Web App Attack
Brute-Force
๐บ๐ธ
agenciahypelab.com.br
2026-09-29 19:32:59
(10 hours ago)
WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_TRIGGER
Brute-Force
SSH
๐ง๐ท
dominioz
2026-09-29 18:39:59
(11 hours ago)
2026-09-29 18:39:47 GET /wp-login.php - - 162.241.253.111 HTTP/2 Mozilla/5.0+(Windows+NT+10.0;+Win64 ...
show more
2026-09-29 18:39:47 GET /wp-login.php - - 162.241.253.111 HTTP/2 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/146.0.0.0+Safari/537.36 - 200 11672
2026-09-29 18:39:47 POST /wp-login.php - - 162.241.253.111 HTTP/2 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/146.0.0.0+Safari/537.36 https://www.inspara.org.br/wp-login.php 200 12091
2026-09-29 18:39:48 POST /xmlrpc.php - - 162.241.253.111 HTTP/2 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/146.0.0.0+Safari/537.36 - 301 566
...
show less
Web Spam
Blog Spam
Brute-Force
Web App Attack
๐บ๐ธ
nyt
2026-09-29 18:03:22
(11 hours ago)
Brute-Force, Web App Attack, suspicious: WP login POST blocked by WAF
Brute-Force
Web App Attack
Anonymous
2026-09-29 17:45:14
(11 hours ago)
Web attack blocked by Wordfence on kunstkringhenrijonas.nl (6 hits). Reported by CRMON.
Web App Attack
๐ฎ๐น
VHosting
2026-09-29 17:40:02
(12 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
๐ต๐ฑ
bmino.pl
2026-09-29 17:35:21
(12 hours ago)
Autoban IP(2): 162.241.253.111 - Hostname: Unified Layer - City: Phoenix - Country: United States - ...
show more
Autoban IP(2): 162.241.253.111 - Hostname: Unified Layer - City: Phoenix - Country: United States - Organization: Oracle Corporation - Reason: POST /xmlrpc.php HTTP/2.0
show less
Web App Attack
๐ณ๐ฑ
Alt255
2026-09-29 16:43:48
(13 hours ago)
[ti-14al] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail <name>. Examp ...
show more
[ti-14al] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail <name>. Example: 162.241.253.111 - - \[29/Sep/2026:18:33:58 +0200\] "POST /wp-login.php HTTP/1.1" 200 10423 "https://vve-onderhoudsplan.nl/wp-login.php" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/149.0.0.0 Safari/537.36"
162.241.253.111 - - \[29/Sep/2026:18:34:00 +0200\] "POST /xmlrpc.php HTTP/1.1" 301 5891 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/149.0.0.0 Safari/537.36"
162.241.253.111 - - \[29/Sep/2026:18:43:42 +0200\] "POST /wp-login.php HTTP/1.1" 200 10425 "https://vastgoedkeur.nl/wp-login.php" "Mozilla/5.0 \(Macintosh\; Intel Mac OS X 10_15_7\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/150.0.0.0 Safari/537.36"
vastgoedkeu
...
show less
Brute-Force
Web App Attack
๐จ๐ญ
4server
2026-09-29 16:00:32
(13 hours ago)
[TueSep2918:00:29.8614312026][security2:error][pid1010629:tid1010666][client162.241.253.111:0]ModSec ...
show more
[TueSep2918:00:29.8614312026][security2:error][pid1010629:tid1010666][client162.241.253.111:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"714\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"r102.ch\"][uri\"/xmlrpc.php\"][unique_id\"arvgncPZcepet3-n1_khqgAAAQU\"]
show less
Hacking
Web App Attack
๐ฉ๐ช
FeG Deutschland
2026-09-29 15:37:04
(14 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257
Exploited Host
Web App Attack
๐ธ๐ช
vaia.cloud
2026-09-29 14:35:02
(15 hours ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack