Anonymous
2026-11-07 14:46:17
UTC ·
(4 hours ago)
Failed Wordpress Logins
Web App Attack
🇳🇱
Alt255
2026-11-07 14:37:51
UTC ·
(5 hours ago)
[cb17al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 91.193.232.28 - - [07/Nov/2026:15:37:48 +0100] "GET /wp-content/plugins/buddypress/alfa.php HTTP/2.0" 404 98577 "https://krantvandeaarde.nl/wp-con ...
show more
[cb17al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 91.193.232.28 - - [07/Nov/2026:15:37:48 +0100] "GET /wp-content/plugins/buddypress/alfa.php HTTP/2.0" 404 98577 "https://krantvandeaarde.nl/wp-content/plugins/buddypress/alfa.php" "Go-http-client/2.0"
...
show less
Bad Web Bot
Web App Attack
Anonymous
2026-11-07 09:05:36
UTC ·
(10 hours ago)
Attacks websites by trying to access known vulnerables of plugins, brute-force of backends or probing of administrative tools
Brute-Force
Web App Attack
🇦🇺
Bay13
2026-11-06 10:30:36
UTC ·
(1 day ago)
CrowdSec:custom/http-sensitive-files
Web App Attack
🇩🇪
Blexyel
2026-11-06 01:12:03
UTC ·
(1 day ago)
91.193.232.28 - - [06/Nov/2026:02:12:01 +0100] "GET /wp-login.php HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/17.0 Safari/605.1.15" "pingusmc.org"
...
Brute-Force
Web App Attack
🇦🇺
2000cn.com.au
2026-11-05 23:34:22
UTC ·
(1 day ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-wordpress-scan
Web App Attack
Hacking
🇦🇺
afleventoffice.com.au
2026-11-05 20:17:01
UTC ·
(1 day ago)
GET /wp-content/style.php HTTP/1.1
Web App Attack
🇩🇪
neckaralb-admin.de
2026-11-02 14:14:35
UTC ·
(5 days ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇺🇸
TtlPst
2026-11-01 14:25:21
UTC ·
(6 days ago)
App probing / vulnerability scanning in path /wp-login.php
Web App Attack
Bad Web Bot
🇮🇹
CoreTech srl
2026-10-30 15:04:00
UTC ·
(1 week ago)
cloudlinux2 fail2ban: 2026-10-30 15:58:53,081 fail2ban.filter [1802]: INFO [plesk-wordpress] Found 31.40.146.255 - 2026-10-30 15:58:52cloudlinux2 fail2ban: 2026-10-30 15:59:13,517 fail2ban.filter [1802]: INFO [plesk-modsecurity] ...
show more
cloudlinux2 fail2ban: 2026-10-30 15:58:53,081 fail2ban.filter [1802]: INFO [plesk-wordpress] Found 31.40.146.255 - 2026-10-30 15:58:52cloudlinux2 fail2ban: 2026-10-30 15:59:13,517 fail2ban.filter [1802]: INFO [plesk-modsecurity] Found 82.41.64.75 - 2026-10-30 15:59:13cloudlinux2 fail2ban: 2026-10-30 15:59:14,061 fail2ban.filter [1802]: INFO [plesk-wordpress] Found 174.63.163.118 - 2026-10-30 15:59:12cloudlinux2 fail2ban: 2026-10-30 15:59:13,874 fail2ban.filter [1802]: INFO [plesk-modsecurity] Found 82.41.64.75 - 2026-10-30 15:59:13cloudlinux2 fail2ban: 2026-10-30 15:59:33,422 fail2ban.actions [1802]: NOTICE [plesk-modsecurity] Unban 34.32.117.117cloudlinux2 fail2ban: 2026-10-30 15:59:48,575 fail2ban.filter [1802]: INFO [plesk-wordpress] Found 91.193.232.33 - 2026-10-30 15:59:48cloudlinux2 fail2ban: 2026-10-30 15:59:48,760 fail2ban.filter [1802]: INFO [plesk-wordpress] Found 91.193.232.28 - 2026-10-30 15:59:48cloudlinux2 fail2ban: 2026-1
show less
Web App Attack
🇩🇪
pltcldvlpr
2026-10-30 10:43:45
UTC ·
(1 week ago)
CMS/framework probe: 91.193.232.28 - - [30/Oct/2026:11:43:44 +0100] "GET /wp-login.php HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/17.0 Safari/605.1.15" asn=62240 org="Clouvider Limited" country=U ...
show more
CMS/framework probe: 91.193.232.28 - - [30/Oct/2026:11:43:44 +0100] "GET /wp-login.php HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/17.0 Safari/605.1.15" asn=62240 org="Clouvider Limited" country=US
...
show less
Web App Attack
🇨🇦
KIsmay
2026-10-29 21:19:05
UTC ·
(1 week ago)
2026-10-29T14:58:53.232243-04:00 www4 WPAudit[1073764]: 91.193.232.28 siscobc.com "Mozilla/5.0 (Windows NT 10.0; Win64; rv:143.0) Gecko/20100101 Firefox/143.0" sisco:sisco2025 FAIL
2026-10-29T15:19:38.252789-04:00 www4 WPAudit[1076253]: 91.193.232.28 ...
show more
2026-10-29T14:58:53.232243-04:00 www4 WPAudit[1073764]: 91.193.232.28 siscobc.com "Mozilla/5.0 (Windows NT 10.0; Win64; rv:143.0) Gecko/20100101 Firefox/143.0" sisco:sisco2025 FAIL
2026-10-29T15:19:38.252789-04:00 www4 WPAudit[1076253]: 91.193.232.28 katharinedickerson.com "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/129.0.0.0 Safari/537.36" sbd-admin:sbd-adminsbd-admin FAIL
2026-10-29T15:48:13.762521-04:00 www4 WPAudit[1078383]: 91.193.232.28 katharinedickerson.com "Mozilla/5.0 (Windows NT 10.0; Win64; rv:143.0) Gecko/20100101 Firefox/143.0" sbd-admin:pass FAIL
2026-10-29T16:41:37.127488-04:00 www4 WPAudit[1080737]: 91.193.232.28 siscobc.com "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/17.0 Safari/605.1.15" sisco:sisco01 FAIL
2026-10-29T17:19:04.732615-04:00 www4 WPAudit[1085537]: 91.193.232.28 katharinedickerson.com "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/17.0 Safari/605.1.15" katharined:ka
...
show less
Brute-Force
Web App Attack
🇫🇷
✨
2026-10-29 02:34:13
UTC ·
(1 week ago)
Rule : WORDPRESS BOT
[2026-10-29 02:33:19] Unauthorized login attempt to waresconsult.com wordpress from IP 91.193.232.28 with username admin
Port Scan
🇫🇷
masterguru
2026-10-28 16:04:32
UTC ·
(1 week ago)
wp-login request blocked, no referer. Pattern match "wp-login.php" at REQUEST_URI. (88020-197)
Hacking
🇩🇪
neckaralb-admin.de
2026-10-28 12:34:57
UTC ·
(1 week ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack