๐ณ๐ฑ
Redeco Hosting
2026-07-22 23:45:19
(2 hours ago)
Failed login attempt detected by Fail2Ban in plesk-wordpress jail
Exploited Host
๐จ๐ฆ
KIsmay
2026-07-22 07:07:13
(18 hours ago)
Jul 22 03:06:46 www4 WPAudit[1490758]: 45.131.195.112 ouchiaccounting.ca "Mozilla/5.0 (X11; Linux x8 ...
show more
Jul 22 03:06:46 www4 WPAudit[1490758]: 45.131.195.112 ouchiaccounting.ca "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" admin:admin2025@@@ FAIL
Jul 22 03:06:52 www4 WPAudit[1490758]: 45.131.195.112 ouchiaccounting.ca "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" superadmin:superadmin2022 FAIL
Jul 22 03:06:57 www4 WPAudit[1490758]: 45.131.195.112 ouchiaccounting.ca "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" admin:admin123 FAIL
Jul 22 03:07:08 www4 WPAudit[1490758]: 45.131.195.112 ouchiaccounting.ca "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:118.0) Gecko/20100101 Firefox/118.0" admin:admin@123 FAIL
Jul 22 03:07:11 www4 WPAudit[1490758]: 45.131.195.112 ouchiaccounting.ca "Mozilla/5.0 (Windows NT 11.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" sbd-admin:123456 FAIL
...
show less
Brute-Force
Web App Attack
๐ซ๐ท
dynamix
2026-07-22 02:45:02
(23 hours ago)
WordPress wp-login.php Brute Force Attack
Brute-Force
Web App Attack
Anonymous
2026-07-20 12:47:58
(2 days ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
๐บ๐ธ
raymarron.com
2026-07-19 18:20:54
(3 days ago)
/wp-login.php
Web App Attack
๐ฎ๐น
CoreTech srl
2026-07-18 03:28:57
(4 days ago)
cloudlinux2 fail2ban: 2026-07-18 05:23:47,722 fail2ban.filter [1598]: INFO [plesk-modsecu ...
show more
cloudlinux2 fail2ban: 2026-07-18 05:23:47,722 fail2ban.filter [1598]: INFO [plesk-modsecurity] Found 3.107.25.229 - 2026-07-18 05:23:47cloudlinux2 fail2ban: 2026-07-18 05:23:48,700 fail2ban.actions [1598]: NOTICE [plesk-modsecurity] Ban 3.107.25.229cloudlinux2 fail2ban: 2026-07-18 05:23:46,829 fail2ban.filter [1598]: INFO [plesk-modsecurity] Found 3.107.25.229 - 2026-07-18 05:23:46cloudlinux2 fail2ban: 2026-07-18 05:23:48,706 fail2ban.filter [1598]: INFO [recidive] Found 3.107.25.229 - 2026-07-18 05:23:48cloudlinux2 fail2ban: 2026-07-18 05:23:48,434 fail2ban.filter [1598]: INFO [plesk-modsecurity] Found 3.107.25.229 - 2026-07-18 05:23:48cloudlinux2 fail2ban: 2026-07-18 05:24:25,496 fail2ban.filter [1598]: INFO [plesk-modsecurity] Found 112.134.191.97 - 2026-07-18 05:24:25cloudlinux2 fail2ban: 2026-07-18 05:24:25,961 fail2ban.filter [1598]: INFO [recidive] Found 112.134.191.97 - 2026-07-18 05:24:25cloudlinux2 fail2ban: 2026-07-18 05:24:2
show less
Web App Attack
๐ฉ๐ช
neckaralb-admin.de
2026-07-18 01:15:37
(5 days ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
๐ฉ๐ช
pltcldvlpr
2026-07-17 19:17:53
(5 days ago)
CMS/framework probe: 45.131.195.112 - - [17/Jul/2026:21:17:52 +0200] "GET /wp-login.php HTTP/1.1" 44 ...
show more
CMS/framework probe: 45.131.195.112 - - [17/Jul/2026:21:17:52 +0200] "GET /wp-login.php HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/129.0.0.0 Safari/537.36" asn=62240 org="Clouvider Limited" country=US
...
show less
Web App Attack
Anonymous
2026-07-16 01:06:41
(1 week ago)
45.131.195.112 - - [16/Jul/2026:01:06:41 +0000] "GET /wp-login.php HTTP/1.1" 404 34513 "-" "Mozilla/ ...
show more
45.131.195.112 - - [16/Jul/2026:01:06:41 +0000] "GET /wp-login.php HTTP/1.1" 404 34513 "-" "Mozilla/5.0"
...
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
nyt
2026-07-15 11:53:04
(1 week ago)
Brute-Force, Web App Attack, suspicious: WP login POST blocked by WAF, Bare UA + POST
Brute-Force
Web App Attack
๐ซ๐ท
ELYAZ
2026-07-14 10:32:12
(1 week ago)
(y4) Failed scan -byebye- from 45.131.195.112 (US/United States/-): (CF_ENABLE)
Hacking
๐ณ๐ฑ
Site.eu
2026-07-13 10:25:10
(1 week ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
๐บ๐ธ
Jason Howell
2026-07-12 01:50:28
(1 week ago)
45.131.195.112 - - [11/Jul/2026:20:29:21 -0500] "GET /wp-admin/plugins.php HTTP/1.1" 302 4444 "https ...
show more
45.131.195.112 - - [11/Jul/2026:20:29:21 -0500] "GET /wp-admin/plugins.php HTTP/1.1" 302 4444 "https://abstractco.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"
45.131.195.112 - - [11/Jul/2026:20:30:36 -0500] "GET /wp-login.php?redirect_to=https%3A%2F%2Fabstractco.com%2Fwp-admin%2Fedit.php&reauth=1 HTTP/1.1" 200 8283 "https://abstractco.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
45.131.195.112 - - [11/Jul/2026:20:35:53 -0500] "GET /wp-admin/plugins.php HTTP/1.1" 302 4445 "https://abstractco.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
45.131.195.112 - - [11/Jul/2026:20:47:19 -0500] "GET /wp-login.php?redirect_to=https%3A%2F%2Fabstractco.com%2Fwp-admin%2Findex.php&reauth=1 HTTP/1.1" 200 8283 "https://abstractco.com/wp-login.
...
show less
Web App Attack
๐ณ๐ฑ
Site.eu
2026-07-11 21:06:26
(1 week ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
๐จ๐ฆ
KIsmay
2026-07-11 13:33:20
(1 week ago)
Jul 11 09:29:06 www4 WPAudit[293833]: 45.131.195.112 amandasrestaurant.ca "Mozilla/5.0 (X11; Ubuntu; ...
show more
Jul 11 09:29:06 www4 WPAudit[293833]: 45.131.195.112 amandasrestaurant.ca "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" sbd-admin:admin FAIL
Jul 11 09:29:08 www4 WPAudit[294352]: 45.131.195.112 amandasrestaurant.ca "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15" sbd-admin:admin123 FAIL
Jul 11 09:29:11 www4 WPAudit[293833]: 45.131.195.112 amandasrestaurant.ca "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15" sbd-admin:amandasrestaurant FAIL
Jul 11 09:33:18 www4 WPAudit[294352]: 45.131.195.112 amandasrestaurant.ca "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:120.0) Gecko/20100101 Firefox/120.0" administrator:amandasrestaurant2025 FAIL
Jul 11 09:33:19 www4 WPAudit[293833]: 45.131.195.112 amandasrestaurant.ca "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Geck
...
show less
Brute-Force
Web App Attack