๐ฒ๐ฉ
176.123.9.124
13 Sep 2026
Fail2Ban jail [wordpress-soft]: Web App Attack - 2026-09-13T19:57:48.498645+00:00 ubuntu-wp wordpres ...
show more
Fail2Ban jail [wordpress-soft]: Web App Attack - 2026-09-13T19:57:48.498645+00:00 ubuntu-wp wordpress([redacted-domain])[45991]: Attempted user enumeration from 176.123.9.1242026-09-13T19:57:48.687449+00:00 ubuntu-wp wordpress([redacted-domain])[46229]: Attempted user enumeration from 176.123.9.1242026-09-13T19:57:48.963188+00:00 ubuntu-wp wordpress([redacted-domain])[45990]: Attempted user enumeration from 176.123.9.1242026-09-13T19:57:49.187702+00:00 ubuntu-wp wordpress([redacted-domain])[46275]: Attempted user enumeration from 176.123.9.1242026-09-13T1
show less
Web App Attack
๐ฉ๐ช
185.104.184.230
13 Sep 2026
Fail2Ban jail [xmlrpc]: Hacking,Web App Attack - 185.104.184.230 - - [13/Sep/2026:18:24:56 +0000] "P ...
show more
Fail2Ban jail [xmlrpc]: Hacking,Web App Attack - 185.104.184.230 - - [13/Sep/2026:18:24:56 +0000] "POST //xmlrpc.php HTTP/1.1" 200 5420 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"185.104.184.230 - - [13/Sep/2026:18:24:57 +0000] "POST //xmlrpc.php HTTP/1.1" 200 5420 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"185.104.184.230 - - [13/Sep/2026:18:24:57 +0000] "POST //xmlrpc.php HTTP/1.1" 200
show less
Hacking
Web App Attack
๐ต๐ฑ
185.241.208.40
13 Sep 2026
Fail2Ban jail [apache-auth]: Web App Attack - [Sun Sep 13 16:21:34.366743 2026] [access_compat:error ...
show more
Fail2Ban jail [apache-auth]: Web App Attack - [Sun Sep 13 16:21:34.366743 2026] [access_compat:error] [pid 43794:tid 43794] [client 185.241.208.40:0] AH01797: client denied by server configuration: /var/www/html/wordpress/wp-includes/IXR/about.php, referer: http://[redacted-domain]/wp-includes/IXR/about.php[Sun Sep 13 16:21:34.416059 2026] [access_compat:error] [pid 43795:tid 43795] [client 185.241.208.40:0] AH01797: client denied by server configuration: /var/www/html/wordpress/wp-includes/blocks/comment-content/index.php, referer: http://nix
show less
Web App Attack
๐บ๐ธ
136.70.115.148
13 Sep 2026
Fail2Ban jail [xmlrpc]: Hacking,Web App Attack - 136.70.115.148 - - [13/Sep/2026:15:00:25 +0000] "PO ...
show more
Fail2Ban jail [xmlrpc]: Hacking,Web App Attack - 136.70.115.148 - - [13/Sep/2026:15:00:25 +0000] "POST //xmlrpc.php HTTP/1.1" 200 5420 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"136.70.115.148 - - [13/Sep/2026:15:00:26 +0000] "POST //xmlrpc.php HTTP/1.1" 200 5420 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"136.70.115.148 - - [13/Sep/2026:15:00:26 +0000] "POST //xmlrpc.php HTTP/1.1" 200 542
show less
Hacking
Web App Attack
๐บ๐ธ
34.24.114.81
13 Sep 2026
Fail2Ban jail [xmlrpc]: Hacking,Web App Attack - 34.24.114.81 - - [13/Sep/2026:14:56:35 +0000] "POST ...
show more
Fail2Ban jail [xmlrpc]: Hacking,Web App Attack - 34.24.114.81 - - [13/Sep/2026:14:56:35 +0000] "POST //xmlrpc.php HTTP/1.1" 200 5417 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"34.24.114.81 - - [13/Sep/2026:14:56:35 +0000] "POST //xmlrpc.php HTTP/1.1" 200 5417 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"34.24.114.81 - - [13/Sep/2026:14:56:36 +0000] "POST //xmlrpc.php HTTP/1.1" 200 5417 "-"
show less
Hacking
Web App Attack
๐บ๐ธ
35.184.92.236
13 Sep 2026
Fail2Ban jail [xmlrpc]: Hacking,Web App Attack - 35.184.92.236 - - [13/Sep/2026:14:40:24 +0000] "POS ...
show more
Fail2Ban jail [xmlrpc]: Hacking,Web App Attack - 35.184.92.236 - - [13/Sep/2026:14:40:24 +0000] "POST //xmlrpc.php HTTP/1.1" 200 5420 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"35.184.92.236 - - [13/Sep/2026:14:40:25 +0000] "POST //xmlrpc.php HTTP/1.1" 200 5420 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"35.184.92.236 - - [13/Sep/2026:14:40:25 +0000] "POST //xmlrpc.php HTTP/1.1" 200 5420 "
show less
Hacking
Web App Attack
๐ท๐ด
185.19.40.36
13 Sep 2026
Fail2Ban jail [xmlrpc]: Hacking,Web App Attack - 185.19.40.36 - - [13/Sep/2026:13:48:37 +0000] "POST ...
show more
Fail2Ban jail [xmlrpc]: Hacking,Web App Attack - 185.19.40.36 - - [13/Sep/2026:13:48:37 +0000] "POST //xmlrpc.php HTTP/1.1" 200 5418 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"185.19.40.36 - - [13/Sep/2026:13:48:37 +0000] "POST //xmlrpc.php HTTP/1.1" 200 5418 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"185.19.40.36 - - [13/Sep/2026:13:48:38 +0000] "POST //xmlrpc.php HTTP/1.1" 200 624 "-" "
show less
Hacking
Web App Attack
๐บ๐ธ
34.148.55.87
13 Sep 2026
Fail2Ban jail [xmlrpc]: Hacking,Web App Attack - 34.148.55.87 - - [13/Sep/2026:13:37:15 +0000] "POST ...
show more
Fail2Ban jail [xmlrpc]: Hacking,Web App Attack - 34.148.55.87 - - [13/Sep/2026:13:37:15 +0000] "POST //xmlrpc.php HTTP/1.1" 200 624 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"34.148.55.87 - - [13/Sep/2026:13:37:16 +0000] "POST //xmlrpc.php HTTP/1.1" 200 5418 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"34.148.55.87 - - [13/Sep/2026:13:37:16 +0000] "POST //xmlrpc.php HTTP/1.1" 200 624 "-" "M
show less
Hacking
Web App Attack
๐บ๐ธ
136.69.130.185
13 Sep 2026
Fail2Ban jail [xmlrpc]: Hacking,Web App Attack - 136.69.130.185 - - [13/Sep/2026:11:43:39 +0000] "PO ...
show more
Fail2Ban jail [xmlrpc]: Hacking,Web App Attack - 136.69.130.185 - - [13/Sep/2026:11:43:39 +0000] "POST //xmlrpc.php HTTP/1.1" 200 626 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"136.69.130.185 - - [13/Sep/2026:11:43:40 +0000] "POST //xmlrpc.php HTTP/1.1" 200 5420 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"136.69.130.185 - - [13/Sep/2026:11:43:41 +0000] "POST //xmlrpc.php HTTP/1.1" 200 626
show less
Hacking
Web App Attack
๐น๐ท
45.8.196.221
13 Sep 2026
Fail2Ban jail [apache-auth]: Web App Attack - [Sun Sep 13 07:50:16.150194 2026] [access_compat:error ...
show more
Fail2Ban jail [apache-auth]: Web App Attack - [Sun Sep 13 07:50:16.150194 2026] [access_compat:error] [pid 29359:tid 29359] [client 45.8.196.221:0] AH01797: client denied by server configuration: /var/www/html/wordpress/wp-includes/wplog.php[Sun Sep 13 07:50:16.641036 2026] [access_compat:error] [pid 29374:tid 29374] [client 45.8.196.221:0] AH01797: client denied by server configuration: /var/www/html/wordpress/wp-includes/wplog.php
show less
Web App Attack
๐ฎ๐ณ
2401:4900:bff6:9930:8183:17bb:1755:e718
13 Sep 2026
Fail2Ban jail [wordpress-hard]: Web App Attack - 2026-09-13T06:20:11.453247+00:00 ubuntu-wp wordpres ...
show more
Fail2Ban jail [wordpress-hard]: Web App Attack - 2026-09-13T06:20:11.453247+00:00 ubuntu-wp wordpress([redacted-domain])[27799]: XML-RPC authentication attempt for unknown user admin from 2401:4900:bff6:9930:8183:17bb:1755:e7182026-09-13T06:20:21.263866+00:00 ubuntu-wp wordpress([redacted-domain])[27246]: XML-RPC authentication attempt for unknown user admin from 2401:4900:bff6:9930:8183:17bb:1755:e7182026-09-13T06:20:32.273512+00:00 ubuntu-wp wordpress([redacted-domain])[27252]: XML-RPC authentication attempt for unknown user admin from 2401:4900:bff6:
show less
Web App Attack
๐ฎ๐ณ
2405:201:c011:a0b0:5013:7b62:71bc:7579
13 Sep 2026
Fail2Ban jail [wordpress-hard]: Web App Attack - 2026-09-13T05:58:31.599482+00:00 ubuntu-wp wordpres ...
show more
Fail2Ban jail [wordpress-hard]: Web App Attack - 2026-09-13T05:58:31.599482+00:00 ubuntu-wp wordpress([redacted-domain])[27258]: XML-RPC authentication attempt for unknown user admin from 2405:201:c011:a0b0:5013:7b62:71bc:75792026-09-13T05:58:41.034787+00:00 ubuntu-wp wordpress([redacted-domain])[27255]: XML-RPC authentication attempt for unknown user admin from 2405:201:c011:a0b0:5013:7b62:71bc:75792026-09-13T05:58:51.655734+00:00 ubuntu-wp wordpress([redacted-domain])[27260]: XML-RPC authentication attempt for unknown user admin from 2405:201:c011:a0b
show less
Web App Attack
๐ฏ๐ต
140.238.39.22
13 Sep 2026
Fail2Ban jail [xmlrpc]: Hacking,Web App Attack - 140.238.39.22 - - [13/Sep/2026:04:49:45 +0000] "POS ...
show more
Fail2Ban jail [xmlrpc]: Hacking,Web App Attack - 140.238.39.22 - - [13/Sep/2026:04:49:45 +0000] "POST /wp-login.php HTTP/1.1" 401 8868 "https://[redacted-domain]/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36"140.238.39.22 - - [13/Sep/2026:04:49:47 +0000] "POST /wp-login.php HTTP/1.1" 401 4073 "https://[redacted-domain]/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.1 Safari/605.1.15"140.238.39.22 - - [13
show less
Hacking
Web App Attack
๐ซ๐ท
85.204.70.92
13 Sep 2026
Fail2Ban jail [apache-auth]: Web App Attack - [Sun Sep 13 03:20:23.668793 2026] [access_compat:error ...
show more
Fail2Ban jail [apache-auth]: Web App Attack - [Sun Sep 13 03:20:23.668793 2026] [access_compat:error] [pid 24766:tid 24766] [client 85.204.70.92:0] AH01797: client denied by server configuration: /var/www/html/wordpress/wp-content/uploads/index.php[Sun Sep 13 03:20:23.773946 2026] [access_compat:error] [pid 25130:tid 25130] [client 85.204.70.92:0] AH01797: client denied by server configuration: /var/www/html/wordpress/wp-includes/index.php
show less
Web App Attack
๐ณ๐ฑ
78.142.18.40
13 Sep 2026
Fail2Ban jail [wordpress-soft]: Web App Attack - 2026-09-13T02:26:06.817880+00:00 ubuntu-wp wordpres ...
show more
Fail2Ban jail [wordpress-soft]: Web App Attack - 2026-09-13T02:26:06.817880+00:00 ubuntu-wp wordpress([redacted-domain])[24415]: Attempted user enumeration from 78.142.18.402026-09-13T02:26:07.052332+00:00 ubuntu-wp wordpress([redacted-domain])[24419]: Attempted user enumeration from 78.142.18.402026-09-13T02:26:07.362771+00:00 ubuntu-wp wordpress([redacted-domain])[24415]: Attempted user enumeration from 78.142.18.402026-09-13T02:26:07.546145+00:00 ubuntu-wp wordpress([redacted-domain])[24334]: Attempted user enumeration from 78.142.18.402026-09-13T02:26
show less
Web App Attack
๐ธ๐ฌ
85.203.23.97
13 Sep 2026
Fail2Ban jail [apache-auth]: Web App Attack - [Sun Sep 13 02:11:56.126009 2026] [access_compat:error ...
show more
Fail2Ban jail [apache-auth]: Web App Attack - [Sun Sep 13 02:11:56.126009 2026] [access_compat:error] [pid 23800:tid 23800] [client 85.203.23.97:0] AH01797: client denied by server configuration: /var/www/html/wordpress/wp-includes/core.php, referer: http://www.[redacted-domain]/wp-includes/core.php[Sun Sep 13 02:12:10.932953 2026] [access_compat:error] [pid 24039:tid 24039] [client 85.203.23.97:0] AH01797: client denied by server configuration: /var/www/html/wordpress/wp-content/uploads/index.php, referer: http://www.[redacted-domain]/wp-content/
show less
Web App Attack
๐บ๐ธ
193.26.115.84
12 Sep 2026
Fail2Ban jail [apache-auth]: Web App Attack - [Sat Sep 12 22:52:43.683705 2026] [access_compat:error ...
show more
Fail2Ban jail [apache-auth]: Web App Attack - [Sat Sep 12 22:52:43.683705 2026] [access_compat:error] [pid 20270:tid 20270] [client 193.26.115.84:0] AH01797: client denied by server configuration: /var/www/html/wordpress/wp-content/uploads/2026/09/index.php, referer: binance.com[Sat Sep 12 22:52:45.951041 2026] [access_compat:error] [pid 20269:tid 20269] [client 193.26.115.84:0] AH01797: client denied by server configuration: /var/www/html/wordpress/wp-content/uploads/2026/08/index.php, referer: binance.com
show less
Web App Attack
๐ฌ๐ง
31.171.130.85
12 Sep 2026
Fail2Ban jail [apache-auth]: Web App Attack - [Sat Sep 12 22:49:18.576001 2026] [access_compat:error ...
show more
Fail2Ban jail [apache-auth]: Web App Attack - [Sat Sep 12 22:49:18.576001 2026] [access_compat:error] [pid 20256:tid 20256] [client 31.171.130.85:0] AH01797: client denied by server configuration: /var/www/html/wordpress/wp-includes/hp2.php, referer: http://[redacted-domain]/wp-includes/hp2.php[Sat Sep 12 22:49:54.029075 2026] [access_compat:error] [pid 20250:tid 20250] [client 31.171.130.85:0] AH01797: client denied by server configuration: /var/www/html/wordpress/wp-includes/txets.php, referer: http://[redacted-domain]/wp-includes/txets.php
show less
Web App Attack
๐บ๐ธ
137.131.43.163
12 Sep 2026
Fail2Ban jail [xmlrpc]: Hacking,Web App Attack - 137.131.43.163 - - [12/Sep/2026:20:33:54 +0000] "PO ...
show more
Fail2Ban jail [xmlrpc]: Hacking,Web App Attack - 137.131.43.163 - - [12/Sep/2026:20:33:54 +0000] "POST //xmlrpc.php HTTP/1.1" 200 5261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"137.131.43.163 - - [12/Sep/2026:20:33:55 +0000] "POST //xmlrpc.php HTTP/1.1" 200 5419 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"137.131.43.163 - - [12/Sep/2026:20:33:56 +0000] "POST //xmlrpc.php HTTP/1.1" 200 526
show less
Hacking
Web App Attack
๐ธ๐ฎ
102.220.160.173
12 Sep 2026
Fail2Ban jail [xmlrpc]: Hacking,Web App Attack - 102.220.160.173 - - [12/Sep/2026:19:51:36 +0000] "P ...
show more
Fail2Ban jail [xmlrpc]: Hacking,Web App Attack - 102.220.160.173 - - [12/Sep/2026:19:51:36 +0000] "POST //xmlrpc.php HTTP/1.1" 200 626 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36"102.220.160.173 - - [12/Sep/2026:19:51:36 +0000] "POST //xmlrpc.php HTTP/1.1" 200 5420 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36"102.220.160.173 - - [12/Sep/2026:19:51:37 +0000] "POST //xmlrpc.php HTTP/1.1" 200 6
show less
Hacking
Web App Attack
๐ฎ๐ณ
2409:40d7:c:251f:186d:9815:4581:6a89
12 Sep 2026
Fail2Ban jail [wordpress-hard]: Web App Attack - 2026-09-12T19:22:48.230647+00:00 ubuntu-wp wordpres ...
show more
Fail2Ban jail [wordpress-hard]: Web App Attack - 2026-09-12T19:22:48.230647+00:00 ubuntu-wp wordpress([redacted-domain])[16371]: XML-RPC authentication attempt for unknown user nixintel from 2409:40d7:c:251f:186d:9815:4581:6a892026-09-12T19:22:57.675533+00:00 ubuntu-wp wordpress([redacted-domain])[16434]: XML-RPC authentication attempt for unknown user nixintel from 2409:40d7:c:251f:186d:9815:4581:6a892026-09-12T19:23:08.551574+00:00 ubuntu-wp wordpress([redacted-domain])[16394]: XML-RPC authentication attempt for unknown user nixintel from 2409:40d7:c:
show less
Web App Attack
๐ต๐ฑ
195.3.220.7
12 Sep 2026
Fail2Ban jail [apache-auth]: Web App Attack - [Sat Sep 12 18:44:26.795838 2026] [access_compat:error ...
show more
Fail2Ban jail [apache-auth]: Web App Attack - [Sat Sep 12 18:44:26.795838 2026] [access_compat:error] [pid 15537:tid 15537] [client 195.3.220.7:0] AH01797: client denied by server configuration: /var/www/html/wordpress/wp-content/uploads/222.php[Sat Sep 12 18:44:27.287762 2026] [access_compat:error] [pid 15593:tid 15593] [client 195.3.220.7:0] AH01797: client denied by server configuration: /var/www/html/wordpress/wp-content/uploads/2026/222.php
show less
Web App Attack
๐บ๐ธ
188.213.202.91
12 Sep 2026
Fail2Ban jail [xmlrpc]: Hacking,Web App Attack - 188.213.202.91 - - [12/Sep/2026:18:41:14 +0000] "PO ...
show more
Fail2Ban jail [xmlrpc]: Hacking,Web App Attack - 188.213.202.91 - - [12/Sep/2026:18:41:14 +0000] "POST //xmlrpc.php HTTP/1.1" 200 5420 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"188.213.202.91 - - [12/Sep/2026:18:41:15 +0000] "POST //xmlrpc.php HTTP/1.1" 200 5420 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"188.213.202.91 - - [12/Sep/2026:18:41:16 +0000] "POST //xmlrpc.php HTTP/1.1" 200 626 "
show less
Hacking
Web App Attack
๐ฉ๐ช
64.89.163.35
12 Sep 2026
Fail2Ban jail [apache-auth]: Web App Attack - [Sat Sep 12 15:14:04.846137 2026] [access_compat:error ...
show more
Fail2Ban jail [apache-auth]: Web App Attack - [Sat Sep 12 15:14:04.846137 2026] [access_compat:error] [pid 13065:tid 13065] [client 64.89.163.35:0] AH01797: client denied by server configuration: /var/www/html/wordpress/wp-includes/hp2.php, referer: http://[redacted-domain]/wp-includes/hp2.php[Sat Sep 12 15:14:11.788201 2026] [access_compat:error] [pid 13372:tid 13372] [client 64.89.163.35:0] AH01797: client denied by server configuration: /var/www/html/wordpress/wp-includes/txets.php, referer: http://[redacted-domain]/wp-includes/txets.php
show less
Web App Attack
๐ฑ๐น
62.60.130.249
12 Sep 2026
Fail2Ban jail [apache-auth]: Web App Attack - [Sat Sep 12 14:45:52.325954 2026] [access_compat:error ...
show more
Fail2Ban jail [apache-auth]: Web App Attack - [Sat Sep 12 14:45:52.325954 2026] [access_compat:error] [pid 12731:tid 12731] [client 62.60.130.249:0] AH01797: client denied by server configuration: /var/www/html/wordpress/wp-includes/index.php[Sat Sep 12 14:45:52.633217 2026] [access_compat:error] [pid 13007:tid 13007] [client 62.60.130.249:0] AH01797: client denied by server configuration: /var/www/html/wordpress/wp-includes/Text/index.php
show less
Web App Attack