๐ฎ๐น
CoreTech srl
2026-10-13 08:33:56
(12 hours ago)
cloudlinux2 fail2ban: 2026-10-13 10:29:10,790 fail2ban.filter [1878]: INFO [plesk-wordpre ...
show more
cloudlinux2 fail2ban: 2026-10-13 10:29:10,790 fail2ban.filter [1878]: INFO [plesk-wordpress] Found 45.146.55.21 - 2026-10-13 10:29:09cloudlinux2 fail2ban: 2026-10-13 10:29:21,024 fail2ban.filter [1878]: INFO [plesk-modsecurity] Found 120.89.35.90 - 2026-10-13 10:29:20cloudlinux2 fail2ban: 2026-10-13 10:30:04,092 fail2ban.actions [1878]: NOTICE [plesk-apache] Unban 52.141.7.184cloudlinux2 fail2ban: 2026-10-13 10:30:11,855 fail2ban.filter [1878]: INFO [plesk-wordpress] Found 216.73.160.99 - 2026-10-13 10:30:10cloudlinux2 fail2ban: 2026-10-13 10:30:11,833 fail2ban.filter [1878]: INFO [plesk-wordpress] Found 216.73.160.87 - 2026-10-13 10:30:10cloudlinux2 fail2ban: 2026-10-13 10:30:11,735 fail2ban.filter [1878]: INFO [plesk-wordpress] Found 216.73.160.82 - 2026-10-13 10:30:10cloudlinux2 fail2ban: 2026-10-13 10:30:11,623 fail2ban.filter [1878]: INFO [plesk-wordpress] Found 216.73.160.80 - 2026-10-13 10:30:10cloudlinux2 fail2ban: 2026-10-13 10
show less
Web App Attack
๐ฌ๐ง
Apache
2026-10-11 03:57:09
(2 days ago)
(wplogin) WordPress login brute-force 45.146.55.21 (US/United States/-): 5 in the last 300 secs
Brute-Force
๐ฉ๐ช
neckaralb-admin.de
2026-10-10 12:55:03
(3 days ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-10 08:48:37
(3 days ago)
[cb-15al] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail apache-wordpr ...
show more
[cb-15al] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail apache-wordpress. Example: 45.146.55.21 - - [10/Oct/2026:10:48:14 +0200] "POST /wp-login.php HTTP/2.0" 503 19304 "https://www.casalphen.nl/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Safari/605.1.15"
45.146.55.21 - - [10/Oct/2026:10:48:18 +0200] "POST /wp-login.php HTTP/2.0" 503 18433 "https://www.casalphen.nl/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64; rv:89.0) Gecko/20100101 Firefox/89.0.2"
45.146.55.21 - - [10/Oct/2026:10:48:21 +0200] "POST /wp-login.php HTTP/2.0" 503 18438 "https://www.casalphen.nl/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.63 Safari/537.36"
45.146.55.21 - - [10/Oct/2026:10:48:24 +02
...
show less
Brute-Force
Web App Attack
๐ณ๐ฑ
Site.eu
2026-10-09 21:30:41
(3 days ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
๐ณ๐ฑ
GabrielJST
2026-10-09 05:12:04
(4 days ago)
(wordpress) Failed wordpress login from 45.146.55.21 (US/United States/-)
Brute-Force
๐ซ๐ท
Baking333
2026-10-08 22:09:08
(4 days ago)
[redacted] 45.146.55.21 - - [08/Oct/2026:23:09:06 +0100] "GET /[redacted] HTTP/1.1" 302 6763 0/80823 ...
show more
[redacted] 45.146.55.21 - - [08/Oct/2026:23:09:06 +0100] "GET /[redacted] HTTP/1.1" 302 6763 0/80823 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; rv:143.0) Gecko/20100101 Firefox/143.0" 443 [redacted] 45.146.55.21 - - [08/Oct/2026:23:09:07 +0100] "GET /wp-admin/ HTTP/1.1" 301 5825 0/5828 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/17.0 Safari/605.1.15" 443
show less
Bad Web Bot
Web App Attack
๐ง๐ช
brechtr
2026-10-08 01:03:32
(5 days ago)
[Press84-BanHammer] bad username โ Sourced from: brechtryckaert.com โ Request: POST /wp-login.php
Brute-Force
๐ฉ๐ช
neckaralb-admin.de
2026-10-07 22:58:40
(5 days ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
๐ซ๐ท
mrcrassi
2026-10-07 22:53:50
(5 days ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
Protocol: HTTP/1.1 (POST meth ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
Protocol: HTTP/1.1 (POST method)
Endpoint: /wp-login.php
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/129.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐ซ๐ท
tecnicorioja
2026-10-07 22:00:58
(5 days ago)
wp-login attack [07/Oct/2026:21:44:51
Brute-Force
Web App Attack
๐บ๐ธ
NerdyMcNerderson
2026-10-04 18:38:25
(1 week ago)
MarekCloud auto-ban: PHP scanner: GET /wp-login.php
Bad Web Bot
Web App Attack
๐ต๐ฑ
Budyn
2026-10-04 06:09:01
(1 week ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: astropot.store | URI: /wp-login.php | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/129.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
neckaralb-admin.de
2026-10-02 23:27:35
(1 week ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
๐ฉ๐ช
gadix
2026-09-24 18:19:39
(2 weeks ago)
45.146.55.21 - - [24/Sep/2026:16:52:59 +0200] "POST /wp-login.php HTTP/1.1" 200 3320 "-" "Mozilla/5. ...
show more
45.146.55.21 - - [24/Sep/2026:16:52:59 +0200] "POST /wp-login.php HTTP/1.1" 200 3320 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; rv:143.0) Gecko/20100101 Firefox/143.0"
45.146.55.21 - - [24/Sep/2026:18:18:06 +0200] "POST /wp-login.php HTTP/1.1" 200 3320 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/17.0 Safari/605.1.15"
45.146.55.21 - - [24/Sep/2026:20:19:38 +0200] "POST /wp-login.php HTTP/1.1" 200 3320 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/
...
show less
Web App Attack