IP Address Inspector

L.Nicolai commented...

DataShack, LC DSV4-7 (NET-192-187-96-0-1) 192.187.96.0 - 192.187.127.255
Michael Griffin DS-99-194-198 (NET-192-187-99-192-1) 192.187.99.192 - 192.187.99.199 - CIDR 192.187.99.192/29

Hacker "HEAD /wp-login.php HTTP/1.1"
no referer and no user_agent

Listed CBL: http://cbl.abuseat.org/lookup.cgi?ip=192.187.99.194
IP Address 192.187.99.194 is listed in the CBL. It appears to be infected with a spam sending trojan, proxy or some other form of botnet.
It was last detected at 2014-11-12 18:00 GMT (+/- 30 minutes).

This IP address is infected with, or is NATting for a machine infected with the ZeuS trojan, also known as "Zbot" and "WSNPoem".
ZeuS is a malicious software (malware) used by cybercriminals to commit ebanking fraud and steal sensitive personal data, such as credentials (username, password) for online services (email, webmail, etc.).
November 12 2014 03:07 PM

J.Hyde4 commented...

Repeated attacks on WordPress admin login using admin as username. Missing user agent.
November 11 2014 03:10 AM

B.Garden commented...

Still at it ..
/wp-login.php
Also, no user agent, which = up to no good
October 24 2014 06:15 AM

R.B26 commented...

A user with IP address 192.187.99.194 has been locked out from the signing in or using the password recovery form for the following reason: Used an invalid username 'admin' to try to sign in.
User IP: 192.187.99.194
October 21 2014 10:23 AM

B.Garden commented...

/wp-login.php
Also, no user agent, which = up to no good
October 08 2014 10:51 PM

J.Woody commented...

ATTEMPTED EXPLOIT HACK(Attempt to access non existing area using known exploit script attack)

192.99.201.174 - Canada - Beauharnois - Ovh Hosting Inc. - Resolve Host: ns501758.ip-192-99-201.net
24.205.41.27 - United States - Burbank - Charter Communications - Resolve Host: 24-205-41-27.dhcp.gldl.ca.charter.com
184.163.167.201 - Canada - Boischatel - Videotron Ltee - Resolve Host: modemcable201.167-163-184.mc.videotron.ca
192.187.99.194 - United States - North Kansas City - Michael Griffin

SMALL SAMPLE:
192.99.201.174 - - [08/Oct/2014:06:18:12 +0100] "GET /CFIDE/administrator/ HTTP/1.1" 403 xxx "-" "-"
24.205.41.27 - - [08/Oct/2014:06:23:53 +0100] "GET /tmUnblock.cgi HTTP/1.1" 403 xxx "-" "-"
184.163.167.201 - - [08/Oct/2014:08:20:03 +0100] "GET /tmUnblock.cgi HTTP/1.1" 403 xxx "-" "-"
192.187.99.194 - - [08/Oct/2014:10:30:41 +0100] "HEAD /wp-login.php HTTP/1.1" 403 xxx "-" "-"
October 08 2014 12:28 PM

C.Jackson12 commented...

Looking for wp-login.php
October 02 2014 12:34 PM

T.Jarvis commented...

Probes for: /wp-login.php
Agent: "-"
September 18 2014 02:10 PM