๐ซ๐ท
tecnicorioja
2026-07-23 22:00:52
(1 day ago)
POST /xmlrpc.php [23/Jul/2026:03:25:57
Brute-Force
Web App Attack
๐ช๐ธ
elcruzado.es
2026-07-23 03:25:07
(1 day ago)
(wordpress) Failed wordpress login from 81.173.115.7 (DE/Germany/-)
Brute-Force
๐ฎ๐น
VHosting
2026-07-23 03:20:04
(1 day ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
๐ฉ๐ช
BlueWire Hosting
2026-07-23 02:55:08
(1 day ago)
Probing websites for vulnerabilities
Web App Attack
SQL Injection
๐ซ๐ท
Kimax
2026-07-23 02:23:51
(1 day ago)
RdpGuard detected brute-force attempt on HTTP
Brute-Force
๐จ๐ฆ
KIsmay
2026-07-23 02:06:29
(1 day ago)
Jul 22 21:27:35 www4 WPAudit[1572988]: 81.173.115.7 www.bestnelson.org "Mozilla/5.0 (Windows NT 10.0 ...
show more
Jul 22 21:27:35 www4 WPAudit[1572988]: 81.173.115.7 www.bestnelson.org "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" katietabor-developer:Katietabor-developer123!@# FAIL
Jul 22 21:33:30 www4 WPAudit[1573327]: 81.173.115.7 imaginesalmon.com "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" se7enoaks:F*uckYou FAIL
Jul 22 21:38:04 www4 WPAudit[1573617]: 81.173.115.7 lemoncreekcampground.ca "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" sbd-admin:sbd-adminadmin FAIL
Jul 22 22:03:15 www4 WPAudit[1575427]: 81.173.115.7 terratherma.com "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" sbd-admin:sbd-admin! FAIL
Jul 22 22:06:29 www4 WPAudit[1575702]: 81.173.115.7 imaginesalmon.com "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/5
...
show less
Brute-Force
Web App Attack
๐ฉ๐ช
tentwentyfour
2026-07-23 01:31:07
(1 day ago)
81.173.115.7 - - [23/Jul/2026:03:21:31 +0200] "POST /wp-login.php HTTP/2.0" 200 2458 "https://lxp.de ...
show more
81.173.115.7 - - [23/Jul/2026:03:21:31 +0200] "POST /wp-login.php HTTP/2.0" 200 2458 "https://lxp.debug.lu/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36"
81.173.115.7 - - [23/Jul/2026:03:24:09 +0200] "POST /wp-login.php HTTP/2.0" 200 3162 "https://brennpunkt.debug.lu/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36"
81.173.115.7 - - [23/Jul/2026:03:24:24 +0200] "POST /wp-login.php HTTP/2.0" 200 3162 "https://babysitting.debug.lu/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36"
81.173.115.7 - - [23/Jul/2026:03:25:59 +0200] "POST /wp-login.php HTTP/2.0" 200 3162 "https://hostmaster.debug.lu/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36"
81.173.115.7 - - [23/Jul/2026:03:26:40
...
show less
Brute-Force
Web App Attack
Anonymous
2026-07-23 00:50:17
(1 day ago)
IP banned by Fail2Ban in jail nginx-abusive-ips
Web App Attack
Brute-Force
Bad Web Bot
๐ณ๐ฑ
Site.eu
2026-07-23 00:19:05
(1 day ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
๐ฒ๐พ
Rizzy
2026-07-22 23:30:32
(2 days ago)
Multiple WAF Violations
Brute-Force
Web App Attack
๐ง๐ฌ
HighWay
2026-07-22 22:16:58
(2 days ago)
81.173.115.7 - - [22/Jul/2026:22:16:56 +0000] "GET /wp-login.php HTTP/1.1" 200 6989 "-" "Mozilla/5.0 ...
show more
81.173.115.7 - - [22/Jul/2026:22:16:56 +0000] "GET /wp-login.php HTTP/1.1" 200 6989 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36"
81.173.115.7 - - [22/Jul/2026:22:16:56 +0000] "POST /wp-login.php HTTP/1.1" 200 7069 "https://www.jobseu.org/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36"
...
show less
Port Scan
Bad Web Bot
Web App Attack
๐ซ๐ท
tecnicorioja
2026-07-22 22:00:25
(2 days ago)
POST /xmlrpc.php [22/Jul/2026:12:35:00
Brute-Force
Web App Attack
๐ฉ๐ช
4server
2026-07-22 21:48:19
(2 days ago)
[WedJul2223:48:17.8951922026][security2:error][pid718651:tid718773][client81.173.115.7:0]ModSecurity ...
show more
[WedJul2223:48:17.8951922026][security2:error][pid718651:tid718773][client81.173.115.7:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"ipv6.gmint.ch\"][uri\"/xmlrpc.php\"][unique_id\"amE6od0dhJd1w0BpZYDd7QAAANQ\"]
show less
Port Scan
Brute-Force
Web App Attack
Anonymous
2026-07-22 21:30:19
(2 days ago)
(PERMBLOCK) 81.173.115.7 (DE/Germany/-) has had more than 4 temp blocks
Hacking
๐ซ๐ท
dynamix
2026-07-22 20:51:46
(2 days ago)
WordPress wp-login.php Brute Force Attack
Brute-Force
Web App Attack