๐ฉ๐ช
dbmwebdesign
2026-09-22 15:45:03
(4 weeks ago)
WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail
Brute-Force
Web App Attack
๐ฉ๐ช
neckaralb-admin.de
2026-09-22 15:42:37
(4 weeks ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
๐ฉ๐ช
grassau.com
2026-09-22 15:41:03
(4 weeks ago)
(wordpress) Failed wordpress login from 34.21.95.92 (US/United States/District of Columbia/Washingto ...
show more
(wordpress) Failed wordpress login from 34.21.95.92 (US/United States/District of Columbia/Washington/92.95.21.34.bc.googleusercontent.com)
show less
Brute-Force
๐ช๐ธ
robotstxt
2026-09-22 15:40:07
(4 weeks ago)
34.21.95.92 - - [22/Sep/2026:15:39:17 +0000] "GET //xmlrpc.php?rsd HTTP/1.1" 403 5 "-" "Mozilla/5.0 ...
show more
34.21.95.92 - - [22/Sep/2026:15:39:17 +0000] "GET //xmlrpc.php?rsd HTTP/1.1" 403 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" "-" edge="34.21.95.92"
34.21.95.92 - - [22/Sep/2026:15:39:17 +0000] "GET //?author=1 HTTP/1.1" 403 2594 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" "-" edge="34.21.95.92"
34.21.95.92 - - [22/Sep/2026:15:39:17 +0000] "GET //?author=1 HTTP/1.1" 403 2594 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" "-" edge="34.21.95.92"
34.21.95.92 - - [22/Sep/2026:15:39:17 +0000] "GET //xmlrpc.php?rsd HTTP/1.1" 403 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" "-" edge="34.21.95.92"
34.21.95.92 - - [22/Sep/2026:15:39:17 +0000] "GET //xmlrpc.php?rsd HTTP/1.1" 403 5 "-" "Mozi
...
show less
Web App Attack
๐บ๐ธ
agenciahypelab.com.br
2026-09-22 15:37:15
(4 weeks ago)
WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_TRIGGER
Brute-Force
SSH
๐บ๐ธ
dot.mg
2026-09-22 15:35:45
(4 weeks ago)
Abuse on login/xmlrpc
Brute-Force
๐ฒ๐ฝ
octageeks.com
2026-08-18 04:08:51
(2 months ago)
Wordpress malicious attack:[octamissingdomain]
Web App Attack
๐ฉ๐ช
sprobst76
2026-08-17 12:45:32
(2 months ago)
Blocked by Traefik Dashboard. Reason: Auto-blocked: AbuseIPDB: 79% score, 13 reports
Web App Attack
Hacking
๐ณ๐ฑ
Site.eu
2026-08-17 12:30:55
(2 months ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
๐ฉ๐ช
raph
2026-08-17 12:30:35
(2 months ago)
[Wordpress] crawler /wp-admin/*, /wp-content/*, etc.
Bad Web Bot
Web App Attack
๐ต๐ฑ
Budyn
2026-08-17 12:21:11
(2 months ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: gsw.budyn.wtf | URI: //xmlrpc.php?rsd | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
ghostwarriors
2026-08-17 12:20:08
(2 months ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
๐ฆ๐ฟ
scientra
2026-08-17 12:11:34
(2 months ago)
High-speed endpoint enumeration โ //2019/wp-includes/wlwmanifest.xml | evidence: 9 unrelated unknown ...
show more
High-speed endpoint enumeration โ //2019/wp-includes/wlwmanifest.xml | evidence: 9 unrelated unknown paths in 20s: //2019/wp-includes/wlwmanifest.xml, //2020/wp-includes/wlwmanifest.xml, //blog/wp-includes/wlwmanifest.xml, //feed/, //web/wp-includes/wlwmanifest.xml [detected by Bitwall WAF]
show less
Port Scan
Web App Attack
๐จ๐ญ
zynex
2026-08-17 12:11:24
(2 months ago)
URL Probing: /2021/wp-includes/wlwmanifest.xml
Web App Attack
๐ฉ๐ช
yitzhaq
2026-08-17 12:09:43
(2 months ago)
34.21.95.92 - - [17/Aug/2026:14:09:40 +0200] "GET / HTTP/1.1" 301 587 "-" "Mozilla/5.0 (Windows NT 1 ...
show more
34.21.95.92 - - [17/Aug/2026:14:09:40 +0200] "GET / HTTP/1.1" 301 587 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.21.95.92 - - [17/Aug/2026:14:09:40 +0200] "GET //wp-includes/ID3/license.txt HTTP/1.1" 404 4377 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.21.95.92 - - [17/Aug/2026:14:09:40 +0200] "GET //feed/ HTTP/1.1" 404 526 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.21.95.92 - - [17/Aug/2026:14:09:41 +0200] "GET //xmlrpc.php?rsd HTTP/1.1" 403 529 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.21.95.92 - - [17/Aug/2026:14:09:41 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 301 716 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Geck
show less
Web App Attack
Hacking