The IP 217.216.72.72 performed automated attacks against a WordPress website.
Observed activity i ...
show moreThe IP 217.216.72.72 performed automated attacks against a WordPress website.
Observed activity includes:
- User enumeration via REST API endpoints:
GET /wp-json/wp/v2/users
- Multiple password reset abuse attempts:
POST /wp-login.php?action=lostpassword
- Invalid password reset attempts using forged keys:
GET /wp-login.php?action=rp&key=invalid
- Repeated reset attempts for multiple usernames in a short time window
This activity triggered WordPress password reset emails and matches automated brute-force / web application attack behavior.
Timestamps: 2026-02-04 19:00–19:01 UTC+3
Affected platform: WordPress
Attack type: Web application attack / brute-force / bad bot
show less
Blog SpamHackingBrute-ForceBad Web BotWeb App Attack