🇩🇪
tentwentyfour
2026-08-28 16:27:27
(5 minutes ago)
Blocked for brute-forcing WordPress log-in
Brute-Force
Web App Attack
🇹🇷
oalver
2026-08-28 11:22:18
(5 hours ago)
Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: nginx_path_signa ...
show more
Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: nginx_path_signature. Sources: nginx. Details: path_signature: request to /wp-login.php (HTTP 200). First seen: 2026-08-26. Risk score: 90/100.
show less
Web App Attack
🇫🇷
Yepngo
2026-08-28 07:40:58
(8 hours ago)
50.6.154.222 - - [28/Aug/2026:09:40:58 +0200] "POST /wp-login.php HTTP/2.0" 200 12505 "https://yepng ...
show more
50.6.154.222 - - [28/Aug/2026:09:40:58 +0200] "POST /wp-login.php HTTP/2.0" 200 12505 "https://yepngo.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
...
show less
Brute-Force
Web App Attack
🇩🇪
Marc
2026-08-28 07:38:51
(8 hours ago)
50.6.154.222 - - [28/Aug/2026:08:36:51 +0200] "GET /wp-login.php HTTP/2.0" 200 4257 "-" "Mozilla/5.0 ...
show more
50.6.154.222 - - [28/Aug/2026:08:36:51 +0200] "GET /wp-login.php HTTP/2.0" 200 4257 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 50.6.154.222 - - [28/Aug/2026:08:36:51 +0200] "POST /wp-login.php HTTP/2.0" 403 11907 "https://www.saatschule.de/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 50.6.154.222 - - [28/Aug/2026:08:42:01 +0200] "GET /wp-login.php HTTP/2.0" 200 3446 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 50.6.154.222 - - [28/Aug/2026:08:42:02 +0200] "POST /wp-login.php HTTP/2.0" 200 3283 "https://als-arnsberg.eu/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 50.6.154.222 - - [28/Aug/2026:09:38:51 +0200] "GET /wp-login.php HTTP/2.0" 200 4248 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKi
show less
Brute-Force
Web App Attack
🇩🇪
LRob
2026-08-28 06:50:27
(9 hours ago)
WordPress login brute-force | path: /wp-login.php | 2026-08-28 06:50 UTC
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-08-28 06:50:19
(9 hours ago)
(mod_security) mod_security (id:225170) triggered by 50.6.154.222 (box4195.bluehost.com): 1 in the l ...
show more
(mod_security) mod_security (id:225170) triggered by 50.6.154.222 (box4195.bluehost.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 02:50:07.613052 2026] [security2:error] [pid 29830:tid 29830] [client 50.6.154.222:0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mail.rodrigoaldecoa.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mail.rodrigoaldecoa.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "apEvnzXP8y_rbADk9AIH7gAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-08-28 06:49:03
(9 hours ago)
(PERMBLOCK) 50.6.154.222 (US/United States/box4195.bluehost.com) has had more than 4 temp blocks in ...
show more
(PERMBLOCK) 50.6.154.222 (US/United States/box4195.bluehost.com) has had more than 4 temp blocks in the last 86400 secs (0-197)
show less
Hacking
🇩🇪
AlexEventfahrtenIPDB
2026-08-28 06:41:50
(9 hours ago)
[Fri Aug 28 08:41:49.873436 2026] [authz_core:error] [pid 45534:tid 45570] [remote 50.6.154.222:2041 ...
show more
[Fri Aug 28 08:41:49.873436 2026] [authz_core:error] [pid 45534:tid 45570] [remote 50.6.154.222:20414] AH01630: client denied by server configuration: /var/www/std-sites/cadillac/wp-login.php
[Fri Aug 28 08:41:50.209460 2026] [authz_core:error] [pid 45534:tid 45572] [remote 50.6.154.222:20416] AH01630: client denied by server configuration: /var/www/std-sites/cadillac/wp-login.php, referer: https://powerstar.spdns.de/wp-login.php
...
show less
Brute-Force
Web App Attack
🇲🇹
Malta
2026-08-28 05:46:56
(10 hours ago)
50.6.154.222 - - [28/Aug/2026:07:46:56 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT ...
show more
50.6.154.222 - - [28/Aug/2026:07:46:56 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
Brute-force password attempt
show less
Hacking
Web App Attack
Brute-Force
🇺🇸
Ghost Rider
2026-08-28 05:33:36
(10 hours ago)
RdpGuard detected brute-force attempt on RDP
Brute-Force
🇹🇷
oalver
2026-08-28 05:25:30
(11 hours ago)
Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: nginx_path_signa ...
show more
Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: nginx_path_signature. Sources: nginx. Details: path_signature: request to /wp-login.php (HTTP 200). First seen: 2026-08-26. Risk score: 60/100.
show less
Web App Attack
🇲🇽
octageeks.com
2026-08-28 04:10:37
(12 hours ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇩🇪
dbmwebdesign
2026-08-28 03:55:09
(12 hours ago)
Repeated attacks detected by Fail2Ban in recidive jail
Hacking
🇲🇾
Rizzy
2026-08-28 03:37:56
(12 hours ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇩🇪
brechtr
2026-08-28 03:31:37
(13 hours ago)
[Press84-BanHammer] bad username — Sourced from: www.langsvlaamsewegen.be — Request: POST /wp-login. ...
show more
[Press84-BanHammer] bad username — Sourced from: www.langsvlaamsewegen.be — Request: POST /wp-login.php
show less
Brute-Force