Anonymous
2026-10-12 16:06:13
(18 hours ago)
193.19.109.159 - - [12/Oct/2026:16:06:11 +0000] "GET /wp-login.php HTTP/1.1" 404 54262 "-" "Mozilla/ ...
show more
193.19.109.159 - - [12/Oct/2026:16:06:11 +0000] "GET /wp-login.php HTTP/1.1" 404 54262 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; rv:143.0) Gecko/20100101 Firefox/143.0"
...
show less
Bad Web Bot
Web App Attack
๐ณ๐ด
jad-abuse
2026-10-12 15:02:59
(19 hours ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: wp_login. ...
show more
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: wp_login. Observed by 1 sensor(s); 1 hits.
show less
Brute-Force
Web App Attack
๐ฌ๐ง
Apache
2026-10-11 06:36:30
(2 days ago)
(wplogin) WordPress login brute-force 193.19.109.159 (US/United States/-): 5 in the last 300 secs
Brute-Force
๐ฒ๐น
Malta
2026-09-04 01:57:49
(1 month ago)
193.19.109.159 - - [04/Sep/2026:03:57:49 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows ...
show more
193.19.109.159 - - [04/Sep/2026:03:57:49 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/129.0.0.0 Safari/537.36"
Brute-force password attempt
show less
Hacking
Web App Attack
Brute-Force
๐ฎ๐น
CoreTech srl
2026-09-04 00:18:57
(1 month ago)
cloudlinux2 fail2ban: 2026-09-04 02:14:35,130 fail2ban.actions [1472]: NOTICE [plesk-modsecu ...
show more
cloudlinux2 fail2ban: 2026-09-04 02:14:35,130 fail2ban.actions [1472]: NOTICE [plesk-modsecurity] Unban 34.138.25.192cloudlinux2 fail2ban: 2026-09-04 02:14:52,110 fail2ban.filter [1472]: INFO [plesk-wordpress] Found 193.19.109.159 - 2026-09-04 02:14:51cloudlinux2 fail2ban: 2026-09-04 02:15:52,598 fail2ban.filter [1472]: INFO [plesk-wordpress] Found 194.1.188.73 - 2026-09-04 02:15:52cloudlinux2 fail2ban: 2026-09-04 02:16:58,234 fail2ban.filter [1472]: INFO [plesk-wordpress] Found 185.223.152.225 - 2026-09-04 02:16:57cloudlinux2 fail2ban: 2026-09-04 02:17:15,344 fail2ban.actions [1472]: NOTICE [plesk-modsecurity] Unban 18.222.108.120cloudlinux2 fail2ban: 2026-09-04 02:17:16,686 fail2ban.filter [1472]: INFO [plesk-modsecurity] Found 18.222.108.120 - 2026-09-04 02:17:16cloudlinux2 fail2ban: 2026-09-04 02:17:24,576 fail2ban.filter [1472]: INFO [recidive] Found 18.222.108.120 - 2026-09-04 02:17:24cloudlinux2 fail2ban: 2026-09-04 02:17:24,217 fai
show less
Web App Attack
๐บ๐ธ
antlac1
2026-09-02 20:21:31
(1 month ago)
crowdsecurity/http-wordpress_user-enum
Brute-Force
Web App Attack
๐บ๐ธ
WizardsToolkit
2026-08-31 05:56:20
(1 month ago)
attempted to access
Web App Attack
๐ช๐ธ
alferez
2026-07-29 09:57:21
(2 months ago)
wp2shell bug exploit
Hacking
Exploited Host
Web App Attack
Anonymous
2026-07-13 14:23:29
(2 months ago)
193.19.109.159 - - [13/Jul/2026:16:23:25 +0200] "GET /env.js HTTP/1.1" 404 164 "-" "Mozilla/5.0 (Win ...
show more
193.19.109.159 - - [13/Jul/2026:16:23:25 +0200] "GET /env.js HTTP/1.1" 404 164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0"
193.19.109.159 - - [13/Jul/2026:16:23:26 +0200] "GET /env.prod.js HTTP/1.1" 404 164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0"
193.19.109.159 - - [13/Jul/2026:16:23:26 +0200] "GET /env.production.js HTTP/1.1" 404 164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0"
193.19.109.159 - - [13/Jul/2026:16:23:26 +0200] "GET /..;/env.dev.js HTTP/1.1" 403 164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0"
193.19.109.159 - - [13/Jul/2026:16:23:26 +0200] "GET /..;/env.development.js HTTP/1.1" 403 164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0"
193.19.109.159 - - [13/Jul/2026:16:23:26 +0200] "GET /..;/env.js HTTP/1.1" 403 164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64;
...
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
Dolphi
2026-07-10 06:00:10
(3 months ago)
POST //xmlrpc.php
Brute-Force
Web App Attack
๐ธ๐ช
vaia.cloud
2026-07-10 04:50:02
(3 months ago)
trying wp-login.php/xmlrpc.php 45 times in 1 minutes
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-10 04:03:02
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 193.19.109.159 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 193.19.109.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 10 00:02:58.107184 2026] [security2:error] [pid 24042:tid 24042] [client 193.19.109.159:23055] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.letmespeakpodcast.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.letmespeakpodcast.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "alBu8qiYF9MLl5Ht6VoqggAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
LRob
2026-06-11 03:00:06
(4 months ago)
WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail
Brute-Force
Web App Attack
๐บ๐ธ
dtorrer
2026-06-10 23:16:17
(4 months ago)
Brute-force general attack.
Brute-Force
๐บ๐ธ
Jason Howell
2026-06-08 05:24:13
(4 months ago)
193.19.109.159 - - [07/Jun/2026:23:31:09 -0500] "POST /wp-login.php HTTP/1.1" 200 4914 "-" "Mozilla/ ...
show more
193.19.109.159 - - [07/Jun/2026:23:31:09 -0500] "POST /wp-login.php HTTP/1.1" 200 4914 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/129.0.0.0 Safari/537.36"
193.19.109.159 - - [07/Jun/2026:23:42:20 -0500] "POST /wp-login.php HTTP/1.1" 200 4911 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/17.0 Safari/605.1.15"
193.19.109.159 - - [08/Jun/2026:00:00:50 -0500] "POST /wp-login.php HTTP/1.1" 200 4909 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/129.0.0.0 Safari/537.36"
193.19.109.159 - - [08/Jun/2026:00:11:37 -0500] "POST /wp-login.php HTTP/1.1" 200 4909 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; rv:143.0) Gecko/20100101 Firefox/143.0"
193.19.109.159 - - [08/Jun/2026:00:24:11 -0500] "POST /wp-login.php HTTP/1.1" 200 4910 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/17.0 Safari/605.1.15"
...
show less
Web App Attack