🇩🇪
tentwentyfour
2026-09-06 16:02:44
(59 minutes ago)
178.128.61.12 - - [06/Sep/2026:18:01:53 +0200] "POST /wp-login.php HTTP/1.1" 200 3150 "https://luxta ...
show more
178.128.61.12 - - [06/Sep/2026:18:01:53 +0200] "POST /wp-login.php HTTP/1.1" 200 3150 "https://luxtable.debug.lu/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:118.0) Gecko/20100101 Firefox/118.0"
178.128.61.12 - - [06/Sep/2026:18:02:05 +0200] "POST /wp-login.php HTTP/1.1" 200 3148 "https://luxtable.debug.lu/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"
178.128.61.12 - - [06/Sep/2026:18:02:12 +0200] "POST /wp-login.php HTTP/1.1" 200 3160 "https://test1.office.esch2022.debug.lu/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
178.128.61.12 - - [06/Sep/2026:18:02:16 +0200] "POST /wp-login.php HTTP/1.1" 200 3148 "https://luxtable.debug.lu/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"
178.128.61.12 - - [06/Sep/2026:18:02:25 +0200] "POST /wp-l
...
show less
Brute-Force
Web App Attack
🇩🇪
tentwentyfour
2026-09-06 14:57:09
(2 hours ago)
178.128.61.12 - - [06/Sep/2026:16:55:22 +0200] "POST /wp-login.php HTTP/1.1" 200 3146 "https://mb.de ...
show more
178.128.61.12 - - [06/Sep/2026:16:55:22 +0200] "POST /wp-login.php HTTP/1.1" 200 3146 "https://mb.debug.lu/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1; rv:119.0) Gecko/20100101 Firefox/119.0"
178.128.61.12 - - [06/Sep/2026:16:55:37 +0200] "POST /wp-login.php HTTP/1.1" 200 3144 "https://mb.debug.lu/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36"
178.128.61.12 - - [06/Sep/2026:16:55:52 +0200] "POST /wp-login.php HTTP/1.1" 200 3144 "https://mb.debug.lu/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15"
178.128.61.12 - - [06/Sep/2026:16:56:06 +0200] "POST /wp-login.php HTTP/1.1" 200 3145 "https://mb.debug.lu/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
178.128.61.12 - - [06/Sep/2026:16:56:21 +0200] "POST /wp-login.php HTTP/1.1
...
show less
Brute-Force
Web App Attack
Anonymous
2026-09-06 14:15:18
(2 hours ago)
Web attack blocked by Wordfence on limburgsekunstkring.nl (74 hits). Reported by CRMON.
Web App Attack
🇩🇪
tentwentyfour
2026-09-06 13:51:28
(3 hours ago)
178.128.61.12 - - [06/Sep/2026:15:50:57 +0200] "POST /wp-login.php HTTP/1.1" 200 3147 "https://yfb.d ...
show more
178.128.61.12 - - [06/Sep/2026:15:50:57 +0200] "POST /wp-login.php HTTP/1.1" 200 3147 "https://yfb.debug.lu/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"
178.128.61.12 - - [06/Sep/2026:15:51:04 +0200] "POST /wp-login.php HTTP/1.1" 200 3145 "https://yfb.debug.lu/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15"
178.128.61.12 - - [06/Sep/2026:15:51:08 +0200] "POST /wp-login.php HTTP/1.1" 200 3145 "https://yfb.debug.lu/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:121.0) Gecko/20100101 Firefox/121.0"
178.128.61.12 - - [06/Sep/2026:15:51:11 +0200] "POST /wp-login.php HTTP/1.1" 200 3147 "https://yfb.debug.lu/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:118.0) Gecko/20100101 Firefox/118.0"
178.128.61.12 - - [06/Sep/2026:15:51:14 +0200] "POST /wp-login.php HTTP/1.1" 200 3147 "https://yfb.de
...
show less
Brute-Force
Web App Attack
🇩🇪
Vegascosmetics
2026-09-06 10:03:09
(6 hours ago)
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after first-seen suspicion / AbuseIPDB repu ...
show more
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after first-seen suspicion / AbuseIPDB reputation policy (no URL signature). Evidence: Suspicion-Ban (Score 80>=65, Abuse 91, NonEU, first-seen)
show less
Hacking
Exploited Host
Web App Attack
🇳🇿
Tripwire
2026-09-06 06:26:22
(10 hours ago)
Scanning for exploits - /license.txt
Web App Attack
🇵🇱
Budyn
2026-09-06 04:34:29
(12 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: shop.budyn.top | URI: /wp-login.php | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-09-06 02:33:17
(14 hours ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
🇩🇪
neckaralb-admin.de
2026-09-06 01:09:57
(15 hours ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇩🇪
neogenius
2026-09-06 01:07:07
(15 hours ago)
Web App Attack
Web App Attack
Brute-Force
🇺🇸
dot.mg
2026-09-06 00:38:02
(16 hours ago)
Bad behaviour
Web Spam
🇺🇸
dtorrer
2026-09-06 00:34:20
(16 hours ago)
Brute-force general attack.
Brute-Force
🇨🇿
ddw
2026-09-05 21:52:29
(19 hours ago)
WordPress Brute Force Attack.
Hacking
Brute-Force
Web App Attack
🇩🇪
R.G.
2026-09-05 19:56:03
(21 hours ago)
(WPLOGINorWHATEVER) Get lost please 178.128.61.12 (SG/Singapore/-): 7 in the last 600 secs; Ports: * ...
show more
(WPLOGINorWHATEVER) Get lost please 178.128.61.12 (SG/Singapore/-): 7 in the last 600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇩🇪
FeG Deutschland
2026-09-05 18:46:53
(22 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247
Exploited Host
Web App Attack