Anonymous
2026-09-11 11:15:49
(1 hour ago)
Web attack blocked by Wordfence on www.gerhuntjens.nl (6 hits). Reported by CRMON.
Web App Attack
🇭🇺
bcsaba
2026-09-11 10:56:47
(1 hour ago)
CMS (WordPress or Joomla) login attempt.
192.185.83.71 - - [11/Sep/2026:12:56:43 +0200] "POST /wp-lo ...
show more
CMS (WordPress or Joomla) login attempt.
192.185.83.71 - - [11/Sep/2026:12:56:43 +0200] "POST /wp-login.php HTTP/2.0" 200 4312 "https://*REDACTED*/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36"
show less
Hacking
Brute-Force
Web App Attack
🇩🇪
AlexEventfahrtenIPDB
2026-09-11 10:55:53
(1 hour ago)
[Fri Sep 11 12:55:52.724075 2026] [authz_core:error] [pid 1273207:tid 1273239] [remote 192.185.83.71 ...
show more
[Fri Sep 11 12:55:52.724075 2026] [authz_core:error] [pid 1273207:tid 1273239] [remote 192.185.83.71:39444] AH01630: client denied by server configuration: /var/www/std-sites/cadillac/wp-login.php
[Fri Sep 11 12:55:53.339765 2026] [authz_core:error] [pid 1273208:tid 1273257] [remote 192.185.83.71:39458] AH01630: client denied by server configuration: /var/www/std-sites/cadillac/wp-login.php, referer: https://powerstar.spdns.de/
...
show less
Brute-Force
Web App Attack
🇩🇪
nyt
2026-09-11 10:49:16
(1 hour ago)
Repeated WordPress login POSTs blocked by WAF (3 in 6h)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-11 10:49:16
(1 hour ago)
(mod_security) mod_security (id:225170) triggered by 192.185.83.71 (zastava.websitewelcome.com): 1 i ...
show more
(mod_security) mod_security (id:225170) triggered by 192.185.83.71 (zastava.websitewelcome.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 06:49:10.135392 2026] [security2:error] [pid 3605:tid 3605] [client 192.185.83.71:37622] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||fundingworkingcapital.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "fundingworkingcapital.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aqPcprERRMCZfVvj-_QBaAAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-09-11 10:37:42
(1 hour ago)
WordPress login brute-force | path: /wp-fi/wp-login.php (+1 more) | 2026-09-11 10:37 UTC
Brute-Force
Web App Attack
🇩🇪
ger-stg-sifi1
2026-09-11 09:54:10
(2 hours ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
🇩🇪
Marc
2026-09-11 09:52:53
(2 hours ago)
192.185.83.71 - - [11/Sep/2026:09:53:12 +0200] "GET /wp-login.php HTTP/2.0" 200 3452 "-" "Mozilla/5. ...
show more
192.185.83.71 - - [11/Sep/2026:09:53:12 +0200] "GET /wp-login.php HTTP/2.0" 200 3452 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" 192.185.83.71 - - [11/Sep/2026:09:53:13 +0200] "POST /wp-login.php HTTP/2.0" 200 3291 "https://als-arnsberg.eu/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" 192.185.83.71 - - [11/Sep/2026:10:56:50 +0200] "GET /wp-login.php HTTP/2.0" 200 3461 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" 192.185.83.71 - - [11/Sep/2026:10:56:51 +0200] "POST /wp-login.php HTTP/2.0" 200 3394 "https://heckmann-elektro.de/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" 192.185.83.71 - - [11/Sep/2026:11:52:51 +0200] "GET /wp-login.php HTTP/2.0" 200 4342 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/
show less
Brute-Force
Web App Attack
🇧🇪
cmbplf
2026-09-11 09:36:41
(2 hours ago)
9.720 POST requests with url.path */wp-login.php
Brute-Force
Bad Web Bot
🇮🇹
CoreTech srl
2026-09-11 08:58:56
(3 hours ago)
cloudlinux2 fail2ban: 2026-09-11 10:54:05,217 fail2ban.filter [1606]: INFO [plesk-modsecu ...
show more
cloudlinux2 fail2ban: 2026-09-11 10:54:05,217 fail2ban.filter [1606]: INFO [plesk-modsecurity] Found 154.192.0.234 - 2026-09-11 10:54:04cloudlinux2 fail2ban: 2026-09-11 10:54:26,006 fail2ban.actions [1606]: NOTICE [plesk-modsecurity] Unban 103.165.62.75cloudlinux2 fail2ban: 2026-09-11 10:54:56,986 fail2ban.filter [1606]: INFO [plesk-modsecurity] Found 165.101.51.152 - 2026-09-11 10:54:56cloudlinux2 fail2ban: 2026-09-11 10:55:06,131 fail2ban.filter [1606]: INFO [plesk-modsecurity] Found 192.185.83.71 - 2026-09-11 10:55:06cloudlinux2 fail2ban: 2026-09-11 10:55:29,284 fail2ban.filter [1606]: INFO [plesk-modsecurity] Found 154.192.0.234 - 2026-09-11 10:55:29cloudlinux2 fail2ban: 2026-09-11 10:55:40,108 fail2ban.actions [1606]: NOTICE [plesk-modsecurity] Ban 154.192.0.234cloudlinux2 fail2ban: 2026-09-11 10:55:40,115 fail2ban.filter [1606]: INFO [recidive] Found 154.192.0.234 - 2026-09-11 10:55:40cloudlinux2 fail2ban: 2026-09-11 10:55:39,823 fai
show less
Brute-Force
🇪🇸
masterguru
2026-09-11 08:42:15
(3 hours ago)
(wplogin) Failed WordPress login from 192.185.83.71 (US/United States/zastava.websitewelcome.com): 5 ...
show more
(wplogin) Failed WordPress login from 192.185.83.71 (US/United States/zastava.websitewelcome.com): 5 in the last 3600 secs (0-122)
show less
Hacking
🇩🇪
LRob
2026-09-11 08:37:38
(3 hours ago)
WordPress login brute-force | path: /wp-fi/wp-login.php | 2026-09-11 08:37 UTC
Brute-Force
Web App Attack
🇮🇹
VHosting
2026-09-11 07:45:03
(4 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇩🇪
FeG Deutschland
2026-09-11 07:42:24
(4 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257
Exploited Host
Web App Attack
🇺🇸
cwytech
2026-09-11 07:32:30
(4 hours ago)
Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/wordpress-login-lockdown-high.
Bad Web Bot
Web App Attack