Anonymous
2025-08-04 14:00:23
(1 year ago)
Failed Wordpress Logins
Web App Attack
π©πͺ
Marc
2025-07-26 11:15:34
(1 year ago)
Brute-Force
Web App Attack
πΊπΈ
Jason Howell
2025-07-26 10:08:32
(1 year ago)
213.158.93.223 - - [26/Jul/2025:04:09:21 -0500] "GET /wp-login.php HTTP/1.1" 200 4726 "-" "Mozilla/5 ...
show more
213.158.93.223 - - [26/Jul/2025:04:09:21 -0500] "GET /wp-login.php HTTP/1.1" 200 4726 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"
213.158.93.223 - - [26/Jul/2025:04:09:23 -0500] "POST /wp-login.php HTTP/1.1" 200 2133 "https://www.wrsdeckdoctors.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"
213.158.93.223 - - [26/Jul/2025:04:47:56 -0500] "GET /wp-login.php HTTP/1.1" 200 4727 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"
213.158.93.223 - - [26/Jul/2025:04:47:58 -0500] "POST /wp-login.php HTTP/1.1" 200 2133 "https://www.wrsdeckdoctors.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"
213.158.93.223 - - [26/Jul/2025:05:08:32 -0500] "GET /wp-login.php HTTP/1.1" 200 4725 "-" "Mozilla
...
show less
Web App Attack
πΊπΈ
Jason Howell
2025-07-26 05:28:43
(1 year ago)
213.158.93.223 - - [25/Jul/2025:23:43:25 -0500] "GET /wp-login.php HTTP/1.1" 200 4726 "-" "Mozilla/5 ...
show more
213.158.93.223 - - [25/Jul/2025:23:43:25 -0500] "GET /wp-login.php HTTP/1.1" 200 4726 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"
213.158.93.223 - - [25/Jul/2025:23:43:26 -0500] "POST /wp-login.php HTTP/1.1" 200 2133 "https://www.wrsdeckdoctors.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"
213.158.93.223 - - [25/Jul/2025:23:48:03 -0500] "GET /wp-login.php HTTP/1.1" 200 4726 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"
213.158.93.223 - - [25/Jul/2025:23:48:03 -0500] "POST /wp-login.php HTTP/1.1" 200 2133 "https://www.wrsdeckdoctors.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"
213.158.93.223 - - [26/Jul/2025:00:28:43 -0500] "GET /wp-login.php HTTP/1.1" 200 4725 "-" "Mozilla
...
show less
Web App Attack
π©πͺ
bsoft.de
2025-07-25 03:47:47
(1 year ago)
[Fri Jul 25 05:24:42.938169 2025] [ssl:error] [pid 20850] [client 213.158.93.223:45534] AH02032: Hos ...
show more
[Fri Jul 25 05:24:42.938169 2025] [ssl:error] [pid 20850] [client 213.158.93.223:45534] AH02032: Hostname kgsjw.de provided via SNI and hostname bogl.no provided via HTTP have no compatible SSL setup
[Fri Jul 25 05:32:04.462808 2025] [ssl:error] [pid 20449] [client 213.158.93.223:15802] AH02032: Hostname kgsjw.de provided via SNI and hostname bogl.no provided via HTTP have no compatible SSL setup
[Fri Jul 25 05:47:46.699498 2025] [ssl:error] [pid 21349] [client 213.158.93.223:15124] AH02032: Hostname kgsjw.de provided via SNI and hostname bogl.no provided via HTTP have no compatible SSL setup
show less
Brute-Force
π©πͺ
bsoft.de
2025-07-24 23:29:30
(1 year ago)
[Fri Jul 25 01:15:39.330888 2025] [ssl:error] [pid 14333] [client 213.158.93.223:9396] AH02032: Host ...
show more
[Fri Jul 25 01:15:39.330888 2025] [ssl:error] [pid 14333] [client 213.158.93.223:9396] AH02032: Hostname kgsjw.de provided via SNI and hostname bogl.no provided via HTTP have no compatible SSL setup
[Fri Jul 25 01:21:41.938173 2025] [ssl:error] [pid 2678] [client 213.158.93.223:19078] AH02032: Hostname kgsjw.de provided via SNI and hostname bogl.no provided via HTTP have no compatible SSL setup
[Fri Jul 25 01:29:30.316804 2025] [ssl:error] [pid 14359] [client 213.158.93.223:22982] AH02032: Hostname kgsjw.de provided via SNI and hostname bogl.no provided via HTTP have no compatible SSL setup
show less
Brute-Force
π©πͺ
bsoft.de
2025-07-24 19:41:42
(1 year ago)
[Thu Jul 24 21:31:19.184114 2025] [ssl:error] [pid 30694] [client 213.158.93.223:23264] AH02032: Hos ...
show more
[Thu Jul 24 21:31:19.184114 2025] [ssl:error] [pid 30694] [client 213.158.93.223:23264] AH02032: Hostname kgsjw.de provided via SNI and hostname bogl.no provided via HTTP have no compatible SSL setup
[Thu Jul 24 21:34:37.165584 2025] [ssl:error] [pid 31020] [client 213.158.93.223:55882] AH02032: Hostname kgsjw.de provided via SNI and hostname bogl.no provided via HTTP have no compatible SSL setup
[Thu Jul 24 21:41:42.126196 2025] [ssl:error] [pid 31129] [client 213.158.93.223:45684] AH02032: Hostname kgsjw.de provided via SNI and hostname bogl.no provided via HTTP have no compatible SSL setup
show less
Brute-Force
π¨π¦
KIsmay
2025-07-24 12:39:15
(1 year ago)
Jul 24 04:21:46 www4 WPAudit[220839]: 213.158.93.223 www.servicesfyi.ca "Mozilla/5.0 (Windows NT 10. ...
show more
Jul 24 04:21:46 www4 WPAudit[220839]: 213.158.93.223 www.servicesfyi.ca "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" pathwise:Www@5 FAIL
Jul 24 04:41:20 www4 WPAudit[223807]: 213.158.93.223 www.servicesfyi.ca "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" pathwise:www54321 FAIL
Jul 24 05:09:23 www4 WPAudit[227012]: 213.158.93.223 www.servicesfyi.ca "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" pathwise:Www-123 FAIL
Jul 24 06:11:28 www4 WPAudit[235068]: 213.158.93.223 www.servicesfyi.ca "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" pathwise:Pathwise!@#$ FAIL
Jul 24 08:39:14 www4 WPAudit[251086]: 213.158.93.223 www.servicesfyi.ca "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130
...
show less
Brute-Force
Web App Attack
πΊπΈ
nationaleventpros.com
2025-07-24 12:24:19
(1 year ago)
WordPress login attempt
Brute-Force
π©πͺ
LRob
2025-07-23 15:15:12
(1 year ago)
WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail
Brute-Force
Web App Attack
πΊπΈ
myagent.site
2025-07-22 19:36:15
(1 year ago)
Blocking for trying to access an exploit file: /xmlrpc.php
Hacking
π©πͺ
Marc
2025-07-22 16:37:26
(1 year ago)
Brute-Force
Web App Attack
Anonymous
2025-07-22 00:40:03
(1 year ago)
IP banned by Fail2Ban in jail nginx-abusive-ips
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
EarthAsylum
2025-07-21 21:07:50
(1 year ago)
Repeated exploit attempts on WordPress entry points (prohibited XML method)
Brute-Force
Web App Attack
π³π±
ipoac.nl
2025-07-21 19:50:52
(1 year ago)
***:443 213.158.93.223 - - [21/Jul/2025:21:50:52 +0200] *** "POST /xmlrpc.php HTTP/2.0" 403 1052 "-" ...
show more
***:443 213.158.93.223 - - [21/Jul/2025:21:50:52 +0200] *** "POST /xmlrpc.php HTTP/2.0" 403 1052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
show less
Bad Web Bot