🇺🇸
ArturShelby
2026-09-10 14:05:35
(9 hours ago)
Suspicious path access: /wp-includes/css/buttons.css
Web App Attack
🇩🇪
bryth
2026-09-09 18:02:52
(1 day ago)
Wordpress login/xmlrpc abuse (Wed Sep 9 05:45:09 PM UTC 2026)
Hacking
Web App Attack
🇨🇦
KIsmay
2026-09-09 06:06:09
(1 day ago)
Sep 9 00:44:13 www4 WPAudit[3467525]: 23.94.155.135 lemoncreekcampground.ca "Mozilla/5.0 (Windows N ...
show more
Sep 9 00:44:13 www4 WPAudit[3467525]: 23.94.155.135 lemoncreekcampground.ca "Mozilla/5.0 (Windows NT 10.0; Win64; rv:143.0) Gecko/20100101 Firefox/143.0" sbd-admin:sbd-admin@1234 FAIL
Sep 9 01:38:25 www4 WPAudit[3471610]: 23.94.155.135 lemoncreekcampground.ca "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/129.0.0.0 Safari/537.36" lemoncreek:lemoncreek123 FAIL
Sep 9 01:46:25 www4 WPAudit[3472267]: 23.94.155.135 lemoncreekcampground.ca "Mozilla/5.0 (Windows NT 10.0; Win64; rv:143.0) Gecko/20100101 Firefox/143.0" sbd-admin:sbd-adminpass FAIL
Sep 9 01:55:06 www4 WPAudit[3472805]: 23.94.155.135 lemoncreekcampground.ca "Mozilla/5.0 (Windows NT 10.0; Win64; rv:143.0) Gecko/20100101 Firefox/143.0" sbd-admin:sbd-admin@2024 FAIL
Sep 9 02:06:08 www4 WPAudit[3473615]: 23.94.155.135 lemoncreekcampground.ca "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/17.0 Safari/605.1.15" sbd-admin:sbd-admin@2025 FAIL
...
show less
Brute-Force
Web App Attack
🇫🇮
oh.mg
2026-09-08 22:41:27
(2 days ago)
[Wed Sep 09 00:41:26.160924 2026] [security2:error] [pid 1654052:tid 1654059] [client 23.94.155.135: ...
show more
[Wed Sep 09 00:41:26.160924 2026] [security2:error] [pid 1654052:tid 1654059] [client 23.94.155.135:54075] [client 23.94.155.135] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "95.216.72.247"] [uri "/rest/.env"] [unique_id "aqCPFn7y9qNhPbTGz5DbKwAAAAU"]
[Wed Sep 09 00:41:26.644039 2026] [security2:error] [pid 1654052:tid 1654065] [client 23.94.155.135:54075] [client 23.94.155.135] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [ver "OWASP_CRS/4.10.0-dev"] [
...
show less
Web App Attack
Bad Web Bot
🇩🇪
LRob
2026-09-07 11:57:06
(3 days ago)
WordPress login brute-force | path: /wp-login.php | 2026-09-07 11:57 UTC
Brute-Force
Web App Attack
Anonymous
2026-09-06 04:46:19
(4 days ago)
Failed Wordpress Logins
Web App Attack
🇮🇹
CoreTech srl
2026-09-05 03:43:56
(5 days ago)
cloudlinux2 fail2ban: 2026-09-05 05:39:38,139 fail2ban.filter [1594]: INFO [plesk-wordpre ...
show more
cloudlinux2 fail2ban: 2026-09-05 05:39:38,139 fail2ban.filter [1594]: INFO [plesk-wordpress] Found 23.94.155.135 - 2026-09-05 05:39:36cloudlinux2 fail2ban: 2026-09-05 05:39:47,899 fail2ban.filter [1594]: INFO [plesk-wordpress] Found 142.111.152.22 - 2026-09-05 05:39:47cloudlinux2 fail2ban: 2026-09-05 05:40:15,896 fail2ban.filter [1594]: INFO [plesk-wordpress] Found 23.94.155.5 - 2026-09-05 05:40:15cloudlinux2 fail2ban: 2026-09-05 05:40:47,001 fail2ban.filter [1594]: INFO [plesk-wordpress] Found 193.56.116.71 - 2026-09-05 05:40:46cloudlinux2 fail2ban: 2026-09-05 05:40:52,789 fail2ban.filter [1594]: INFO [plesk-wordpress] Found 193.56.116.69 - 2026-09-05 05:40:52cloudlinux2 fail2ban: 2026-09-05 05:40:51,648 fail2ban.filter [1594]: INFO [plesk-wordpress] Found 193.56.116.71 - 2026-09-05 05:40:51cloudlinux2 fail2ban: 2026-09-05 05:41:03,505 fail2ban.filter [1594]: INFO [plesk-wordpress] Found 45.131.193.40 - 2026-09-05 05:41:03cloudlinux
show less
Web App Attack
🇩🇪
netclix.gr
2026-09-05 01:14:15
(5 days ago)
(wordpress) Failed wordpress login from 23.94.155.135 (US/United States/23-94-155-135-host.colocross ...
show more
(wordpress) Failed wordpress login from 23.94.155.135 (US/United States/23-94-155-135-host.colocrossing.com): (CF_ENABLE)
show less
Brute-Force
Anonymous
2026-09-05 01:14:02
(5 days ago)
Bot / scanning and/or hacking attempts: POST /wp-login.php HTTP/1.1
Hacking
Web App Attack
🇩🇪
neckaralb-admin.de
2026-09-05 00:03:49
(5 days ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
Anonymous
2026-09-04 22:23:38
(6 days ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇩🇪
LRob
2026-09-04 05:07:36
(6 days ago)
WordPress login brute-force | path: /wp-login.php | 2026-09-04 05:07 UTC
Brute-Force
Web App Attack
🇧🇪
cmbplf
2026-09-04 04:33:33
(6 days ago)
4.787 POST requests with url.path */wp-login.php
Brute-Force
Bad Web Bot
🇩🇪
Vegascosmetics
2026-09-04 02:17:04
(6 days ago)
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after first-seen suspicion / AbuseIPDB repu ...
show more
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after first-seen suspicion / AbuseIPDB reputation policy (no URL signature). Evidence: Suspicion-Ban (Score 76>=65, Abuse 83, NonEU, first-seen, Change* path)
show less
Hacking
Exploited Host
Web App Attack
🇩🇪
LRob
2026-09-04 00:31:10
(6 days ago)
WordPress login brute-force | path: /wp-login.php | 2026-09-04 00:31 UTC
Brute-Force
Web App Attack