🇧🇪
cmbplf
2026-10-14 00:31:29
UTC ·
(1 month ago)
2.822 POST requests with url.path */wp-login.php
Brute-Force
Bad Web Bot
🇨🇭
Masterpiece
2026-10-13 21:52:02
UTC ·
(1 month ago)
Web exploit attempt (http-cve-probing), 1 requests.
Hacking
Web App Attack
🇩🇪
ger-stg-sifi1
2026-10-13 16:34:30
UTC ·
(1 month ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
Anonymous
2026-10-13 14:25:50
UTC ·
(1 month ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇺🇸
IndigoRidge
2026-10-13 14:17:38
UTC ·
(1 month ago)
64.226.64.245 - - [13/Oct/2026:10:06:30 -0400] "POST /wp-login.php HTTP/1.1" 200 14702 "-" "Mozilla/5.0"
64.226.64.245 - - [13/Oct/2026:10:06:30 -0400] "POST /wp-login.php HTTP/1.1" 200 14702 "-" "Mozilla/5.0"
64.226.64.245 - - [13/Oct/2026:10:10:14 ...
show more
64.226.64.245 - - [13/Oct/2026:10:06:30 -0400] "POST /wp-login.php HTTP/1.1" 200 14702 "-" "Mozilla/5.0"
64.226.64.245 - - [13/Oct/2026:10:06:30 -0400] "POST /wp-login.php HTTP/1.1" 200 14702 "-" "Mozilla/5.0"
64.226.64.245 - - [13/Oct/2026:10:10:14 -0400] "POST /wp-login.php HTTP/1.1" 200 14252 "-" "Mozilla/5.0"
64.226.64.245 - - [13/Oct/2026:10:17:37 -0400] "POST /wp-login.php HTTP/1.1" 200 14702 "-" "Mozilla/5.0"
64.226.64.245 - - [13/Oct/2026:10:17:37 -0400] "POST /wp-login.php HTTP/1.1" 200 14702 "-" "Mozilla/5.0"
...
show less
Web App Attack
🇺🇸
IndigoRidge
2026-10-13 13:55:33
UTC ·
(1 month ago)
64.226.64.245 - - [13/Oct/2026:09:44:36 -0400] "POST /wp-login.php HTTP/1.1" 200 14702 "-" "Mozilla/5.0"
64.226.64.245 - - [13/Oct/2026:09:44:36 -0400] "POST /wp-login.php HTTP/1.1" 200 14702 "-" "Mozilla/5.0"
64.226.64.245 - - [13/Oct/2026:09:48:19 ...
show more
64.226.64.245 - - [13/Oct/2026:09:44:36 -0400] "POST /wp-login.php HTTP/1.1" 200 14702 "-" "Mozilla/5.0"
64.226.64.245 - - [13/Oct/2026:09:44:36 -0400] "POST /wp-login.php HTTP/1.1" 200 14702 "-" "Mozilla/5.0"
64.226.64.245 - - [13/Oct/2026:09:48:19 -0400] "POST /wp-login.php HTTP/1.1" 200 14252 "-" "Mozilla/5.0"
64.226.64.245 - - [13/Oct/2026:09:55:33 -0400] "POST /wp-login.php HTTP/1.1" 200 14702 "-" "Mozilla/5.0"
64.226.64.245 - - [13/Oct/2026:09:55:33 -0400] "POST /wp-login.php HTTP/1.1" 200 14702 "-" "Mozilla/5.0"
...
show less
Web App Attack
🇮🇹
VHosting
2026-10-13 12:05:06
UTC ·
(1 month ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇮🇹
sssrit
2026-10-13 11:58:43
UTC ·
(1 month ago)
64.226.64.245 - - [13/Oct/2026:13:58:43 +0200] "POST /wp-login.php HTTP/1.1" 401 4732 "-" "Mozilla/5.0"
...
Web App Attack
🇺🇸
IndigoRidge
2026-10-13 11:57:55
UTC ·
(1 month ago)
64.226.64.245 - - [13/Oct/2026:07:53:04 -0400] "POST /wp-login.php HTTP/1.1" 200 14252 "-" "Mozilla/5.0"
64.226.64.245 - - [13/Oct/2026:07:55:00 -0400] "POST /wp-login.php HTTP/1.1" 200 14717 "-" "Mozilla/5.0"
64.226.64.245 - - [13/Oct/2026:07:55:00 ...
show more
64.226.64.245 - - [13/Oct/2026:07:53:04 -0400] "POST /wp-login.php HTTP/1.1" 200 14252 "-" "Mozilla/5.0"
64.226.64.245 - - [13/Oct/2026:07:55:00 -0400] "POST /wp-login.php HTTP/1.1" 200 14717 "-" "Mozilla/5.0"
64.226.64.245 - - [13/Oct/2026:07:55:00 -0400] "POST /wp-login.php HTTP/1.1" 200 14717 "-" "Mozilla/5.0"
64.226.64.245 - - [13/Oct/2026:07:55:58 -0400] "POST /wp-login.php HTTP/1.1" 200 14252 "-" "Mozilla/5.0"
64.226.64.245 - - [13/Oct/2026:07:57:55 -0400] "POST /wp-login.php HTTP/1.1" 200 14717 "-" "Mozilla/5.0"
...
show less
Web App Attack
🇸🇪
vaia.cloud
2026-10-13 11:45:02
UTC ·
(1 month ago)
crowdsecurity/http-cve-probing
Brute-Force
Web App Attack
🇨🇭
Origon
2026-10-13 11:33:41
UTC ·
(1 month ago)
http-cve-probing - IP: 64.226.64.245 - time="2026-10-13T13:33:40+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-cve-probing by ip 64.226.64.245 (DE/14061) : 4h ban on Ip 64.226.64.245" module=db
Web App Attack
🇺🇸
IndigoRidge
2026-10-13 08:52:54
UTC ·
(1 month ago)
64.226.64.245 - - [13/Oct/2026:04:52:51 -0400] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0"
64.226.64.245 - - [13/Oct/2026:04:52:51 -0400] "GET /wp-login.php HTTP/1.1" 200 14302 "-" "Mozilla/5.0"
64.226.64.245 - - [13/Oct/2026:04:52:52 -040 ...
show more
64.226.64.245 - - [13/Oct/2026:04:52:51 -0400] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0"
64.226.64.245 - - [13/Oct/2026:04:52:51 -0400] "GET /wp-login.php HTTP/1.1" 200 14302 "-" "Mozilla/5.0"
64.226.64.245 - - [13/Oct/2026:04:52:52 -0400] "GET /?author=1 HTTP/1.1" 301 5536 "-" "Mozilla/5.0"
64.226.64.245 - - [13/Oct/2026:04:52:52 -0400] "GET /?author=2 HTTP/1.1" 301 5536 "-" "Mozilla/5.0"
64.226.64.245 - - [13/Oct/2026:04:52:53 -0400] "GET /?author=3 HTTP/1.1" 404 69731 "-" "Mozilla/5.0"
...
show less
Web App Attack
🇳🇴
jad-abuse
2026-10-13 08:51:58
UTC ·
(1 month ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: wp_login. Observed by 1 sensor(s); 2 hits.
Brute-Force
Web App Attack
🇵🇱
Budyn
2026-10-13 08:49:02
UTC ·
(1 month ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: dont-eat-the-pudding.xyz | URI: /wp-login.php | UA: Mozilla/5 ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: dont-eat-the-pudding.xyz | URI: /wp-login.php | UA: Mozilla/5.0 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇺🇸
xxkodedxx
2026-10-13 08:19:51
UTC ·
(1 month ago)
[Zorvexus edge-defense] GET .env / WordPress honeypot probe
Trigger: 1× honeypot-get in 10m window.
Active: 08:19:14 UTC
Volume: 1 honeypot probe(s)
Bait taken: /wp-login.php
UA: "Mozilla/5.0"
Auto-banned 30d. zorvexus-banner.
Bad Web Bot
Web App Attack