🇩🇪
pltcldvlpr
2026-10-18 04:23:28
(1 week ago)
CMS/framework probe: 23.94.155.120 - - [18/Oct/2026:06:23:27 +0200] "GET /wp-login.php HTTP/1.1" 404 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/17.0 Safari/605.1.15" asn=262287 org="Maxihost LTDA" country=US ...
show more
CMS/framework probe: 23.94.155.120 - - [18/Oct/2026:06:23:27 +0200] "GET /wp-login.php HTTP/1.1" 404 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/17.0 Safari/605.1.15" asn=262287 org="Maxihost LTDA" country=US
...
show less
Web App Attack
🇮🇹
CoreTech srl
2026-10-17 12:04:43
(1 week ago)
cloudlinux2 fail2ban: 2026-10-17 10:20:05,422 fail2ban.filter [1597]: INFO [plesk-modsecurity] Found 223.185.18.203 - 2026-10-17 10:20:05cloudlinux2 fail2ban: 2026-10-17 10:20:18,191 fail2ban.actions [1597]: NOTICE [plesk-modsecuri ...
show more
cloudlinux2 fail2ban: 2026-10-17 10:20:05,422 fail2ban.filter [1597]: INFO [plesk-modsecurity] Found 223.185.18.203 - 2026-10-17 10:20:05cloudlinux2 fail2ban: 2026-10-17 10:20:18,191 fail2ban.actions [1597]: NOTICE [plesk-modsecurity] Unban 150.107.232.65cloudlinux2 fail2ban: 2026-10-17 10:20:15,471 fail2ban.filter [1597]: INFO [plesk-wordpress] Found 23.94.155.120 - 2026-10-17 10:20:14cloudlinux2 fail2ban: 2026-10-17 10:21:17,042 fail2ban.filter [1597]: INFO [plesk-modsecurity] Found 223.185.18.203 - 2026-10-17 10:21:17cloudlinux2 fail2ban: 2026-10-17 10:21:28,286 fail2ban.filter [1597]: INFO [plesk-modsecurity] Found 24.133.64.3 - 2026-10-17 10:21:28cloudlinux2 fail2ban: 2026-10-17 10:21:59,083 fail2ban.filter [1597]: INFO [plesk-wordpress] Found 45.131.193.46 - 2026-10-17 10:21:58cloudlinux2 fail2ban: 2026-10-17 10:21:58,659 fail2ban.filter [1597]: INFO [plesk-wordpress] Found 136.144.43.93 - 2026-10-17 10:21:57cloudlinux2 fail2ban:
show less
Web App Attack
🇪🇸
masterguru
2026-10-13 00:12:21
(2 weeks ago)
wp-login request blocked, no referer. Pattern match "wp-login.php" at REQUEST_URI. (5001900-122)
Web App Attack
🇫🇷
masterguru
2026-10-12 16:53:02
(2 weeks ago)
wp-login request blocked, no referer. Pattern match "wp-login.php" at REQUEST_URI. (88020-193)
Hacking
🇫🇷
masterguru
2026-10-12 14:56:12
(2 weeks ago)
wp-login request blocked, no referer. Pattern match "wp-login.php" at REQUEST_URI. (88020-201)
Hacking
🇧🇷
borbolla
2026-10-04 03:47:31
(3 weeks ago)
Automated web credential/secret scanner blocked by Fail2Ban. Probed: "GET /2019/wp-includes/wlwmanifest.xml HTTP/1.1"
Web App Attack
Bad Web Bot
🇩🇪
gadix
2026-10-01 14:39:52
(3 weeks ago)
23.94.155.120 - - [01/Oct/2026:15:21:12 +0200] "POST /wp-login.php HTTP/1.1" 200 16922 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; rv:143.0) Gecko/20100101 Firefox/143.0"
23.94.155.120 - - [01/Oct/2026:15:45:18 +0200] "POST /wp-login.php HTTP/1.1" 200 ...
show more
23.94.155.120 - - [01/Oct/2026:15:21:12 +0200] "POST /wp-login.php HTTP/1.1" 200 16922 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; rv:143.0) Gecko/20100101 Firefox/143.0"
23.94.155.120 - - [01/Oct/2026:15:45:18 +0200] "POST /wp-login.php HTTP/1.1" 200 16926 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/129.0.0.0 Safari/537.36"
23.94.155.120 - - [01/Oct/2026:16:39:51 +0200] "POST /wp-login.php HTTP/1.1" 200 16929 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/
...
show less
Web App Attack
🇩🇪
conseilgouz
2026-09-30 20:33:55
(4 weeks ago)
lae-6 : Trying access system files=>/wp-login.php(wp-login.php)
Hacking
🇨🇭
Ribeye375
2026-09-30 04:20:44
(4 weeks ago)
HIPS rce-attempt - Block tcp/0:65535
Hacking
Web App Attack
🇩🇪
LRob
2026-09-27 08:10:03
(1 month ago)
This address requests our sites over plain http, is answered with a redirect to https, and never follows it — over and over. A browser follows redirects; a scanner enumerating hosts does not. It reads nothing it asks for and only loads the server; bl ...
show more
This address requests our sites over plain http, is answered with a redirect to https, and never follows it — over and over. A browser follows redirects; a scanner enumerating hosts does not. It reads nothing it asks for and only loads the server; blocked. Please check what runs on this address. | method: GET | path: /wp-login.php | 2026-09-27 08:10 UTC
show less
Bad Web Bot
🇹🇷
oalver
2026-09-27 04:47:50
(1 month ago)
Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: nginx_path_signature. Sources: nginx. Details: path_signature: request to /wp-login.php (HTTP 200); path_signature: request to /wp-login.php (HTTP 404). First seen: 2 ...
show more
Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: nginx_path_signature. Sources: nginx. Details: path_signature: request to /wp-login.php (HTTP 200); path_signature: request to /wp-login.php (HTTP 404). First seen: 2026-07-28. Risk score: 100/100.
show less
Web App Attack
🇩🇪
neckaralb-admin.de
2026-09-26 23:28:09
(1 month ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇧🇷
Halux
2026-09-26 16:14:08
(1 month ago)
23.94.155.120 Web Application Firewall multiple violations
Hacking
Web App Attack
2026-09-19 21:46:20
(1 month ago)
Failed Wordpress Logins
Web App Attack
🇺🇸
lostswordfish.com
2026-09-19 16:56:03
(1 month ago)
Wordfence waf block on illinoisvoices
Web App Attack
