🇷🇺
BellFix
2026-08-26 12:05:15
(1 week ago)
Fail2ban reported 103.125.146.50 for npm-docker
Web App Attack
🇺🇸
xmission.com
2026-08-19 08:56:58
(2 weeks ago)
Blocked by UFW (TCP on 54579)
Source port: 1329
TTL: 115
Packet length: 52
TOS: 0x08
This report (f ...
show more
Blocked by UFW (TCP on 54579)
Source port: 1329
TTL: 115
Packet length: 52
TOS: 0x08
This report (for 103.125.146.50) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
🇺🇸
IndigoRidge
2026-08-05 23:05:11
(1 month ago)
103.125.146.50 - - [05/Aug/2026:19:05:07 -0400] "POST /wp-login.php HTTP/1.0" 200 12669 "-" "Mozilla ...
show more
103.125.146.50 - - [05/Aug/2026:19:05:07 -0400] "POST /wp-login.php HTTP/1.0" 200 12669 "-" "Mozilla/5.0 (Linux; Android 11; Nokia G50) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.61 Mobile Safari/537.36"
103.125.146.50 - - [05/Aug/2026:19:05:08 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5088 "https://www.ampanalytic.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36"
103.125.146.50 - - [05/Aug/2026:19:05:09 -0400] "GET /wp-login.php HTTP/1.0" 200 12239 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:130.0) Gecko/20100101 Firefox/130.0"
103.125.146.50 - - [05/Aug/2026:19:05:10 -0400] "POST /wp-login.php HTTP/1.0" 200 12669 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:130.0) Gecko/20100101 Firefox/130.0"
103.125.146.50 - - [05/Aug/2026:19:05:10 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5088 "https://www.ampanalytic.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4
...
show less
Web App Attack
🇩🇪
John Chrys.
2026-08-05 22:47:12
(1 month ago)
103.125.146.50 - - [06/Aug/2026:01:38:22 +0300] "POST /xmlrpc.php HTTP/1.1" 403 366 "https://sotirch ...
show more
103.125.146.50 - - [06/Aug/2026:01:38:22 +0300] "POST /xmlrpc.php HTTP/1.1" 403 366 "https://sotirchou.gr" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
103.125.146.50 - - [06/Aug/2026:01:38:56 +0300] "POST /xmlrpc.php HTTP/1.1" 403 366 "https://sotirchou.gr" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15"
103.125.146.50 - - [06/Aug/2026:01:39:08 +0300] "POST /xmlrpc.php HTTP/1.1" 403 366 "https://sotirchou.gr" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:130.0) Gecko/20100101 Firefox/130.0"
103.125.146.50 - - [06/Aug/2026:01:39:33 +0300] "POST /xmlrpc.php HTTP/1.1" 403 366 "https://sotirchou.gr" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
103.125.146.50 - - [06/Aug/2026:01:47:11 +0300] "POST /xmlrpc.php HTTP/1.1" 403 366 "https://sotirchou.gr" "Mozilla/5.0 (Windows NT 1
...
show less
Brute-Force
Web App Attack
🇨🇿
ptlab
2026-08-05 22:45:45
(1 month ago)
Detected wp_login attack from WP-host.
Hacking
Web App Attack
🇺🇸
nationaleventpros.com
2026-08-05 22:24:39
(1 month ago)
WordPress login attempt
Brute-Force
🇩🇪
big-cloud.nl
2026-08-05 21:35:54
(1 month ago)
Try to access /xmlrpc.php
Web App Attack
🇹🇷
neron
2026-08-02 00:16:22
(1 month ago)
CrowdSec blocked: http:exploit detected via OPNsense firewall
Hacking
Web App Attack
🇹🇷
neron
2026-07-31 09:06:18
(1 month ago)
CrowdSec blocked: http:exploit detected via OPNsense firewall
Hacking
Web App Attack
🇩🇪
ghostwarriors
2026-07-20 11:20:10
(1 month ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
🇯🇵
ki3
2026-06-23 13:54:08
(2 months ago)
Fail2Ban: Web App Attacks and Forum Spam 103.125.146.50 1782222847(JST)
Web Spam
Bad Web Bot
Web App Attack
Anonymous
2026-06-22 11:58:55
(2 months ago)
103.125.146.50 - - [22/Jun/2026:13:57:01 +0200] "POST /wp-login.php HTTP/1.1" 200 7945 "-" "Mozilla/ ...
show more
103.125.146.50 - - [22/Jun/2026:13:57:01 +0200] "POST /wp-login.php HTTP/1.1" 200 7945 "-" "Mozilla/5.0"
103.125.146.50 - - [22/Jun/2026:13:57:02 +0200] "POST /wp-login.php HTTP/1.1" 200 7450 "-" "Mozilla/5.0"
103.125.146.50 - - [22/Jun/2026:13:57:57 +0200] "POST /wp-login.php HTTP/1.1" 200 7450 "-" "Mozilla/5.0"
103.125.146.50 - - [22/Jun/2026:13:57:56 +0200] "POST /wp-login.php HTTP/1.1" 200 7945 "-" "Mozilla/5.0"
103.125.146.50 - - [22/Jun/2026:13:58:53 +0200] "POST /wp-login.php HTTP/1.1" 200 7945 "-" "Mozilla/5.0"
...
show less
Brute-Force
Web App Attack
🇬🇧
consul.to
2026-06-20 04:57:11
(2 months ago)
Web attack/malicious scanning detected
Web App Attack
🇳🇱
Site.eu
2026-06-18 23:57:46
(2 months ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
🇩🇪
LRob
2026-06-18 06:45:03
(2 months ago)
Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail
Bad Web Bot
Web App Attack