๐ซ๐ท
tecnicorioja
2026-06-26 22:02:04
(1 day ago)
wp-login attack [26/Jun/2026:11:07:13
Brute-Force
Web App Attack
๐บ๐ธ
cwytech
2026-06-26 17:06:51
(1 day ago)
Fleet-wide ban from the Ghostfleet ๐ป. Triggered by scenario: cwy/wordpress-login-lockdown-high.
Bad Web Bot
Web App Attack
๐จ๐ฆ
KIsmay
2026-06-26 15:23:05
(1 day ago)
Jun 26 08:06:42 www4 WPAudit[3238331]: 184.168.120.142 www.bestnelson.org "Mozilla/5.0 (Windows NT 1 ...
show more
Jun 26 08:06:42 www4 WPAudit[3238331]: 184.168.120.142 www.bestnelson.org "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" sbd-admin:sbd-admin FAIL
Jun 26 11:15:30 www4 WPAudit[3254187]: 184.168.120.142 www.cottonwoodc.ca "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cottonwoodcreek-admin:cottonwoodcreek-admin@123 FAIL
Jun 26 11:16:28 www4 WPAudit[3254204]: 184.168.120.142 imaginesalmon.com "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" imagine:imagine! FAIL
Jun 26 11:19:24 www4 WPAudit[3253036]: 184.168.120.142 siscobc.com "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" sisco:Sisco@12345 FAIL
Jun 26 11:23:05 www4 WPAudit[3254361]: 184.168.120.142 siscobc.com "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KH
...
show less
Brute-Force
Web App Attack
๐ฌ๐ง
spamverify.com
2026-06-26 15:17:13
(1 day ago)
Honeypot Hit: WordPress Login
Web Spam
Blog Spam
Bad Web Bot
Web App Attack
๐ฉ๐ช
ger-stg-sifi1
2026-06-26 13:39:56
(1 day ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
๐บ๐ธ
Victor Lรณpez
2026-06-26 13:30:21
(1 day ago)
sites.digitalhypepro.com 184.168.120.142 - - [26/Jun/2026:08:28:48 -0500] "GET /wp-login.php HTTP/2. ...
show more
sites.digitalhypepro.com 184.168.120.142 - - [26/Jun/2026:08:28:48 -0500] "GET /wp-login.php HTTP/2.0" 200 3085 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
sites.digitalhypepro.com 184.168.120.142 - - [26/Jun/2026:08:28:53 -0500] "POST /wp-login.php HTTP/2.0" 200 3226 "https://sites.digitalhypepro.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
reparaya.com.co 184.168.120.142 - - [26/Jun/2026:08:30:20 -0500] "GET /wp-login.php HTTP/2.0" 200 2992 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0"
...
show less
Hacking
Web App Attack
๐ฉ๐ช
AlexEventfahrtenIPDB
2026-06-26 13:22:33
(1 day ago)
[Fri Jun 26 15:22:31.745110 2026] [authz_core:error] [pid 1162165:tid 1162165] [client 184.168.120.1 ...
show more
[Fri Jun 26 15:22:31.745110 2026] [authz_core:error] [pid 1162165:tid 1162165] [client 184.168.120.142:59216] AH01630: client denied by server configuration: /var/www/std-sites/cadillac/wp-login.php
[Fri Jun 26 15:22:32.988781 2026] [authz_core:error] [pid 1275170:tid 1275170] [client 184.168.120.142:59226] AH01630: client denied by server configuration: /var/www/std-sites/cadillac/wp-login.php, referer: https://powerstar.spdns.de/wp-login.php
...
show less
Brute-Force
Web App Attack
Anonymous
2026-06-26 13:13:00
(1 day ago)
[Fri Jun 26 14:02:45.042031 2026] [authz_core:error] [pid 1486:tid 1624] [client 184.168.120.142:356 ...
show more
[Fri Jun 26 14:02:45.042031 2026] [authz_core:error] [pid 1486:tid 1624] [client 184.168.120.142:35630] AH01630: client denied by server configuration: /var/www/cimt-precision/wp-login.php
[Fri Jun 26 14:02:45.473109 2026] [authz_core:error] [pid 1486:tid 1595] [client 184.168.120.142:35630] AH01630: client denied by server configuration: /var/www/cimt-precision/wp-login.php, referer: https://cimt-precision.de/wp-login.php
[Fri Jun 26 15:12:57.905184 2026] [authz_core:error] [pid 1484:tid 1647] [client 184.168.120.142:43936] AH01630: client denied by server configuration: /var/www/cimt-precision/wp-login.php
[Fri Jun 26 15:12:58.565529 2026] [authz_core:error] [pid 1484:tid 1661] [client 184.168.120.142:43936] AH01630: client denied by server configuration: /var/www/cimt-precision/wp-login.php, referer: https://pre.cimt-precision.de/wp-login.php
...
show less
Brute-Force
Web App Attack
๐ฒ๐ฝ
octageeks.com
2026-06-26 04:23:36
(2 days ago)
Wordpress malicious attack:[octaflood]
Web App Attack
Anonymous
2026-06-26 00:58:04
(2 days ago)
Bot / scanning and/or hacking attempts: POST /wp-login.php HTTP/2.0, GET /wp-login.php HTTP/2.0, [2/ ...
show more
Bot / scanning and/or hacking attempts: POST /wp-login.php HTTP/2.0, GET /wp-login.php HTTP/2.0, [2/2] done
show less
Hacking
Web App Attack
๐จ๐ฟ
ptlab
2026-06-26 00:45:07
(2 days ago)
Detected wp_login attack from WP-host.
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-26 00:40:59
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 184.168.120.142 (142.120.168.184.host.secureser ...
show more
(mod_security) mod_security (id:225170) triggered by 184.168.120.142 (142.120.168.184.host.secureserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 20:40:53.035357 2026] [security2:error] [pid 20576:tid 20576] [client 184.168.120.142:38912] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||livingminimal.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "livingminimal.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aj3KlZFWqEp8E1rYVL6rLgAAADk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
Hazzard
2026-06-26 00:31:51
(2 days ago)
(wordpress) Failed wordpress login from 184.168.120.142 (SG/Singapore/-/Singapore/142.120.168.184.ho ...
show more
(wordpress) Failed wordpress login from 184.168.120.142 (SG/Singapore/-/Singapore/142.120.168.184.host.secureserver.net/[redacted]): (CF_ENABLE)
show less
Brute-Force
๐ญ๐บ
bcsaba
2026-06-25 23:54:11
(2 days ago)
CMS (WordPress or Joomla) login attempt.
184.168.120.142 - - [26/Jun/2026:01:54:06 +0200] "POST /wp- ...
show more
CMS (WordPress or Joomla) login attempt.
184.168.120.142 - - [26/Jun/2026:01:54:06 +0200] "POST /wp-login.php HTTP/2.0" 200 3205 "https://*REDACTED*.*REDACTED*/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0"
show less
Hacking
Brute-Force
Web App Attack
Anonymous
2026-06-25 23:36:24
(2 days ago)
WordPress Brute Force
Brute-Force