Anonymous
2026-06-09 12:07:30
(2 weeks ago)
[Tue Jun 09 14:07:25.793635 2026] [authz_core:error] [pid 102812:tid 102881] [client 64.62.254.50:46 ...
show more
[Tue Jun 09 14:07:25.793635 2026] [authz_core:error] [pid 102812:tid 102881] [client 64.62.254.50:46642] AH01630: client denied by server configuration: /var/www/cimt-precision/wp-login.php
[Tue Jun 09 14:07:28.920798 2026] [authz_core:error] [pid 102812:tid 102867] [client 64.62.254.50:46642] AH01630: client denied by server configuration: /var/www/cimt-precision/wp-login.php, referer: https://cimt-precision.de/wp-login.php
[Tue Jun 09 14:07:28.920798 2026] [authz_core:error] [pid 102812:tid 102867] [client 64.62.254.50:46642] AH01630: client denied by server configuration: /var/www/cimt-precision/wp-login.php, referer: https://cimt-precision.de/wp-login.php
...
show less
Brute-Force
Web App Attack
๐ฉ๐ช
Marc
2026-06-09 11:50:00
(2 weeks ago)
64.62.254.50 - - [09/Jun/2026:12:18:13 +0200] "GET /wp-login.php HTTP/1.1" 200 4233 "-" "Mozilla/5.0 ...
show more
64.62.254.50 - - [09/Jun/2026:12:18:13 +0200] "GET /wp-login.php HTTP/1.1" 200 4233 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 64.62.254.50 - - [09/Jun/2026:12:59:45 +0200] "GET /wp-login.php HTTP/2.0" 200 3463 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 11_7_10) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 64.62.254.50 - - [09/Jun/2026:12:59:48 +0200] "POST /wp-login.php HTTP/2.0" 200 3394 "https://www.heckmann-elektro.de/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 11_7_10) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 64.62.254.50 - - [09/Jun/2026:13:49:58 +0200] "GET /wp-login.php HTTP/2.0" 200 3459 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_7_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 64.62.254.50 - - [09/Jun/2026:13:49:59 +0200] "POST /wp-login.php HTTP/2.0" 200 3297 "https://alsarnsberg.de/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac
show less
Brute-Force
Web App Attack
๐ณ๐ฑ
juutis
2026-06-09 10:55:13
(2 weeks ago)
64.62.254.50 - - [08/Jun/2026:16:48:27 +0200] "POST /wp-login.php HTTP/1.1" 200 7812 "https://taides ...
show more
64.62.254.50 - - [08/Jun/2026:16:48:27 +0200] "POST /wp-login.php HTTP/1.1" 200 7812 "https://taidesuunnistus.net/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0"
64.62.254.50 - - [09/Jun/2026:04:05:08 +0200] "POST /wp-login.php HTTP/1.1" 200 7793 "https://taidesuunnistus.net/wp-login.php" "Mozilla/5.0 (X11; Fedora; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
64.62.254.50 - - [09/Jun/2026:12:55:12 +0200] "POST /wp-login.php HTTP/1.1" 200 7789 "https://taidesuunnistus.net/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3 Safari/605.1.15"
show less
Web App Attack
๐ซ๐ท
Yepngo
2026-06-09 09:28:05
(2 weeks ago)
64.62.254.50 - - [09/Jun/2026:11:28:04 +0200] "POST /wp-login.php HTTP/2.0" 200 12136 "https://www.y ...
show more
64.62.254.50 - - [09/Jun/2026:11:28:04 +0200] "POST /wp-login.php HTTP/2.0" 200 12136 "https://www.yepngo.com/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
...
show less
Brute-Force
Web App Attack
๐ฉ๐ช
LRob.fr
2026-06-09 08:45:04
(2 weeks ago)
Repeated attacks detected by Fail2Ban in recidive jail
Hacking
๐บ๐ธ
TPI-Abuse
2026-06-09 08:14:38
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 64.62.254.50 (cp.rdsindia.net): 1 in the last 3 ...
show more
(mod_security) mod_security (id:225170) triggered by 64.62.254.50 (cp.rdsindia.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 04:14:30.854677 2026] [security2:error] [pid 8672:tid 8672] [client 64.62.254.50:0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||forsaleincr.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "forsaleincr.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aifLZvU30duaEsavTkldcAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
factor1
2026-06-09 08:02:21
(2 weeks ago)
Fail2ban at saturn Reports Abuse.
Brute-Force
Web App Attack
Anonymous
2026-06-09 06:59:13
(2 weeks ago)
64.62.254.50 - - [09/Jun/2026:08:59:11 +0200] "POST /xmlrpc.php HTTP/1.1" 200 426
...
Brute-Force
Bad Web Bot
๐ฉ๐ช
Viveronese
2026-06-09 06:55:56
(2 weeks ago)
Wordpress vulnerability scanning
Web App Attack
๐ซ๐ท
Yepngo
2026-06-09 06:36:49
(2 weeks ago)
64.62.254.50 - - [09/Jun/2026:08:13:07 +0200] "POST /wp-login.php HTTP/2.0" 200 12136 "https://yepng ...
show more
64.62.254.50 - - [09/Jun/2026:08:13:07 +0200] "POST /wp-login.php HTTP/2.0" 200 12136 "https://yepngo.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0"
64.62.254.50 - - [09/Jun/2026:08:36:48 +0200] "POST /xmlrpc.php HTTP/2.0" 200 408 "-" "Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
...
show less
Brute-Force
Web App Attack
Anonymous
2026-06-09 06:32:35
(2 weeks ago)
[Tue Jun 09 06:42:23.379847 2026] [authz_core:error] [pid 102812:tid 102884] [client 64.62.254.50:57 ...
show more
[Tue Jun 09 06:42:23.379847 2026] [authz_core:error] [pid 102812:tid 102884] [client 64.62.254.50:57008] AH01630: client denied by server configuration: /var/www/cimt-precision/wp-login.php
[Tue Jun 09 06:42:26.823447 2026] [authz_core:error] [pid 102812:tid 102869] [client 64.62.254.50:57008] AH01630: client denied by server configuration: /var/www/cimt-precision/wp-login.php, referer: https://pre.cimt-precision.de/wp-login.php
[Tue Jun 09 08:32:31.260009 2026] [authz_core:error] [pid 102517:tid 102563] [client 64.62.254.50:36662] AH01630: client denied by server configuration: /var/www/cimt-precision/wp-login.php
[Tue Jun 09 08:32:34.199638 2026] [authz_core:error] [pid 102517:tid 102548] [client 64.62.254.50:36662] AH01630: client denied by server configuration: /var/www/cimt-precision/wp-login.php, referer: https://pre.cimt-precision.de/wp-login.php
...
show less
Brute-Force
Web App Attack
๐ฉ๐ช
reznekcs
2026-06-09 06:28:40
(2 weeks ago)
F2B wordpress ban. Logs: 64.62.254.50 - - [09/Jun/2026:08:27:51 +0200] "POST /xmlrpc.php HTTP/1.1" 2 ...
show more
F2B wordpress ban. Logs: 64.62.254.50 - - [09/Jun/2026:08:27:51 +0200] "POST /xmlrpc.php HTTP/1.1" 200 3129 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0"
64.62.254.50 - - [09/Jun/2026:08:28:39 +0200] "POST /wp-login.php HTTP/1.1" 200 3943 "https://floartdekor.hu/wp-login.php" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
show less
Brute-Force
Web App Attack
๐ซ๐ท
dynamix
2026-06-09 06:26:05
(2 weeks ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
Anonymous
2026-06-09 04:57:24
(2 weeks ago)
64.62.254.50 - - [09/Jun/2026:06:57:22 +0200] "POST /xmlrpc.php HTTP/1.1" 200 426
...
Brute-Force
Bad Web Bot
๐ฌ๐ง
spamverify.com
2026-06-09 04:52:17
(2 weeks ago)
Honeypot Hit: WordPress Users
Web Spam
Blog Spam
Bad Web Bot
Web App Attack