๐ง๐ช
cmbplf
2026-09-11 06:37:15
(10 hours ago)
1.323 POST requests with url.path */wp-login.php
Brute-Force
Bad Web Bot
๐ฉ๐ช
FeG Deutschland
2026-09-10 22:16:04
(18 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247
Exploited Host
Web App Attack
๐ฉ๐ช
Marc
2026-09-09 20:58:56
(1 day ago)
45.132.115.205 - - [09/Sep/2026:22:56:56 +0200] "POST /wp-login.php HTTP/1.1" 200 5250 "http://www.w ...
show more
45.132.115.205 - - [09/Sep/2026:22:56:56 +0200] "POST /wp-login.php HTTP/1.1" 200 5250 "http://www.weiss-blau-hemer.de/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 45.132.115.205 - - [09/Sep/2026:22:56:57 +0200] "GET /wp-login.php?redirect_to=http%3A%2F%2Fwww.weiss-blau-hemer.de%2Fwp-admin%2F&reauth=1 HTTP/1.1" 200 6247 "http://www.weiss-blau-hemer.de/wp-admin/" "Mozilla/5.0 (iPhone; CPU iPhone OS 14_6 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Mobile/15E148 Safari/604.1" 45.132.115.205 - - [09/Sep/2026:22:56:59 +0200] "POST /wp-login.php HTTP/1.1" 200 5250 "http://www.weiss-blau-hemer.de/wp-admin/" "Mozilla/5.0 (iPhone; CPU iPhone OS 14_6 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Mobile/15E148 Safari/604.1" 45.132.115.205 - - [09/Sep/2026:22:57:00 +0200] "GET /wp-login.php?redirect_to=http%3A%2F%2Fwww.weiss-blau-hemer.de%2Fwp-admin%2F&reauth=1 HTTP/1.1" 200 6247 "http://www.
show less
Brute-Force
Web App Attack
๐ซ๐ท
dynamix
2026-09-09 20:03:54
(1 day ago)
WordPress wp-login.php Brute Force Attack
Brute-Force
Web App Attack
๐ฉ๐ช
neckaralb-admin.de
2026-08-24 01:22:05
(2 weeks ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
๐จ๐ฆ
KIsmay
2026-08-23 03:44:01
(2 weeks ago)
Aug 22 21:51:18 www4 WPAudit[1161597]: 45.132.115.205 katharinedickerson.com "Mozilla/5.0 (Windows N ...
show more
Aug 22 21:51:18 www4 WPAudit[1161597]: 45.132.115.205 katharinedickerson.com "Mozilla/5.0 (Windows NT 10.0; Win64; rv:143.0) Gecko/20100101 Firefox/143.0" sbd-admin:sbd-admin FAIL
Aug 22 22:09:34 www4 WPAudit[1162670]: 45.132.115.205 katharinedickerson.com "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/17.0 Safari/605.1.15" katharined:katharinedkatharined FAIL
Aug 22 23:04:42 www4 WPAudit[1166236]: 45.132.115.205 katharinedickerson.com "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/129.0.0.0 Safari/537.36" SBD:katharinedickerson1234 FAIL
Aug 22 23:04:43 www4 WPAudit[1166237]: 45.132.115.205 katharinedickerson.com "Mozilla/5.0 (Windows NT 10.0; Win64; rv:143.0) Gecko/20100101 Firefox/143.0" Katharine:katharinedickerson1234 FAIL
Aug 22 23:44:00 www4 WPAudit[1167242]: 45.132.115.205 www.servicesfyi.ca "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/129.0.0.0 Safari/537.36" servicesfyi:servicesfyi@https://servicesfyi
...
show less
Brute-Force
Web App Attack
Anonymous
2026-08-22 06:31:10
(2 weeks ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
๐ซ๐ท
mrcrassi
2026-08-21 10:51:52
(3 weeks ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
Protocol: HTTP/1.1 (POST meth ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
Protocol: HTTP/1.1 (POST method)
Endpoint: /wp-login.php
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/129.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐ฉ๐ช
FeG Deutschland
2026-08-20 02:38:46
(3 weeks ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247
Exploited Host
Web App Attack
๐บ๐ธ
nyt
2026-08-16 09:09:25
(3 weeks ago)
WP Author Enumeration, WP User Enumeration
Web App Attack
๐ฉ๐ช
LRob
2026-08-16 06:24:25
(3 weeks ago)
WordPress probing | req: /wp-login.php | UA: Mozilla/5.0 (Windows NT 10.0; Win64; rv:143.0) Gecko/20 ...
show more
WordPress probing | req: /wp-login.php | UA: Mozilla/5.0 (Windows NT 10.0; Win64; rv:143.0) Gecko/20100101 Firefox/143.0
show less
Brute-Force
Web App Attack
๐ฎ๐น
VHosting
2026-08-15 06:20:04
(3 weeks ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
๐ฎ๐น
CoreTech srl
2026-08-15 05:58:56
(3 weeks ago)
cloudlinux2 fail2ban: 2026-08-15 07:53:45,473 fail2ban.filter [1695]: INFO [plesk-wordpre ...
show more
cloudlinux2 fail2ban: 2026-08-15 07:53:45,473 fail2ban.filter [1695]: INFO [plesk-wordpress] Found 44.232.92.220 - 2026-08-15 07:53:44cloudlinux2 fail2ban: 2026-08-15 07:54:27,329 fail2ban.filter [1695]: INFO [plesk-wordpress] Found 45.132.115.212 - 2026-08-15 07:54:25cloudlinux2 fail2ban: 2026-08-15 07:54:28,201 fail2ban.filter [1695]: INFO [plesk-wordpress] Found 45.132.115.212 - 2026-08-15 07:54:25cloudlinux2 fail2ban: 2026-08-15 07:54:27,499 fail2ban.filter [1695]: INFO [plesk-wordpress] Found 45.132.115.205 - 2026-08-15 07:54:25cloudlinux2 fail2ban: 2026-08-15 07:55:45,638 fail2ban.filter [1695]: INFO [plesk-wordpress] Found 136.144.43.156 - 2026-08-15 07:55:44cloudlinux2 fail2ban: 2026-08-15 07:57:42,615 fail2ban.filter [1695]: INFO [plesk-wordpress] Found 172.98.33.188 - 2026-08-15 07:57:42cloudlinux2 fail2ban: 2026-08-15 07:58:31,863 fail2ban.filter [1695]: INFO [plesk-modsecurity] Found 34.156.200.162 - 2026-08-15 07:58:31cl
show less
Web App Attack
๐ฒ๐น
Malta
2026-08-12 12:24:50
(4 weeks ago)
45.132.115.205 - - [12/Aug/2026:14:24:49 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows ...
show more
45.132.115.205 - - [12/Aug/2026:14:24:49 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; rv:143.0) Gecko/20100101 Firefox/143.0"
Brute-force password attempt
show less
Hacking
Web App Attack
Brute-Force
๐ซ๐ท
tecnicorioja
2026-07-21 22:01:06
(1 month ago)
wp-login attack [21/Jul/2026:05:19:35
Brute-Force
Web App Attack