🇫🇷
GEDAL
2026-03-26 16:59:28
UTC ·
(7 months ago)
Fail2ban webexploits @ <hostname> : 167.172.78.58 - - [18/Mar/2026:17:06:47 +0100] "GET /wp-login.php HTTP/1.1" 503 592 "https://duckduckgo.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 ...
show more
Fail2ban webexploits @ <hostname> : 167.172.78.58 - - [18/Mar/2026:17:06:47 +0100] "GET /wp-login.php HTTP/1.1" 503 592 "https://duckduckgo.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
show less
Brute-Force
SSH
🇳🇱
Site.eu
2026-03-23 19:58:19
UTC ·
(7 months ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
🇫🇮
as211431.net
2026-03-20 12:04:19
UTC ·
(7 months ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: python-requests/2.27.1
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
Bad Web Bot
🇩🇪
Didier Lagaert
2026-03-20 09:04:55
UTC ·
(7 months ago)
lie-6 : Trying access system files=>/license.txt(license.txt)
Hacking
🇫🇷
Savoie
2026-03-20 07:27:00
UTC ·
(7 months ago)
167.172.78.58 ***.*** - [20/Mar/2026:08:27:33 +0100] "GET /license.txt HTTP/1.1" 302 250 "-" "python-requests/2.27.1"
Bad Web Bot
Web App Attack
🇲🇾
Rizzy
2026-03-20 02:14:30
UTC ·
(7 months ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇺🇸
Jason Howell
2026-03-20 00:44:38
UTC ·
(7 months ago)
167.172.78.58 - - [19/Mar/2026:19:34:28 -0500] "POST /wp-login.php HTTP/1.1" 503 22230 "https://earthworksdesign.org/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15) Gecko/20100101 Firefox/119.0.1"
167.172.78.58 - - [19/Mar/2026:19:34:32 ...
show more
167.172.78.58 - - [19/Mar/2026:19:34:28 -0500] "POST /wp-login.php HTTP/1.1" 503 22230 "https://earthworksdesign.org/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15) Gecko/20100101 Firefox/119.0.1"
167.172.78.58 - - [19/Mar/2026:19:34:32 -0500] "GET /wp-admin/index.php HTTP/1.1" 503 22063 "https://earthworksdesign.org/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15) Gecko/20100101 Firefox/119.0.1"
167.172.78.58 - - [19/Mar/2026:19:44:31 -0500] "GET /wp-admin/index.php HTTP/1.1" 302 3116 "https://earthworksdesign.org/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15) Gecko/20100101 Firefox/119.0.1"
167.172.78.58 - - [19/Mar/2026:19:44:34 -0500] "GET /wp-login.php?redirect_to=https%3A%2F%2Fearthworksdesign.org%2Fwp-admin%2Findex.php&reauth=1 HTTP/1.1" 200 7258 "https://earthworksdesign.org/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15) Gecko/20100101 Firefox/119.0.1"
167.172.78.58 - - [19/Mar/2026:19:44:35 -0500] "POST /wp-login.php HTTP/1.
...
show less
Web App Attack
🇩🇪
EGP Abuse Dept
2026-03-20 00:18:30
UTC ·
(7 months ago)
Scanning for port/service exploits on tpc-026.mach3builders.nl
Port Scan
Hacking
🇺🇸
Jason Howell
2026-03-19 23:34:29
UTC ·
(7 months ago)
167.172.78.58 - - [19/Mar/2026:18:24:07 -0500] "GET /wp-login.php HTTP/1.1" 200 5192 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.6045.159 Safari/537.36"
167.172.78.58 - - [19/Mar/2026:18:24:12 -0500] "GET ...
show more
167.172.78.58 - - [19/Mar/2026:18:24:07 -0500] "GET /wp-login.php HTTP/1.1" 200 5192 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.6045.159 Safari/537.36"
167.172.78.58 - - [19/Mar/2026:18:24:12 -0500] "GET /wp-login.php HTTP/1.1" 200 5191 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15) Gecko/20100101 Firefox/122.0"
167.172.78.58 - - [19/Mar/2026:18:24:23 -0500] "POST /wp-login.php HTTP/1.1" 503 22233 "https://earthworksdesign.org/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Gecko/20100101 Firefox/122.0"
167.172.78.58 - - [19/Mar/2026:18:24:42 -0500] "GET /wp-admin/index.php HTTP/1.1" 503 22066 "https://earthworksdesign.org/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Gecko/20100101 Firefox/122.0"
167.172.78.58 - - [19/Mar/2026:18:34:27 -0500] "GET /wp-admin/index.php HTTP/1.1" 302 3117 "https://earthworksdesign.org/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Gecko/20100101 Firefox/122.0"
...
show less
Web App Attack
🇳🇱
homeshowdomain.nl
2026-03-19 23:01:19
UTC ·
(7 months ago)
Auto-ban: 13 malicious requests on 2026-03-18 (e.g., env/backup probes, brute-force, or error bursts).
Web App Attack
SSH
Hacking
🇺🇸
Jason Howell
2026-03-19 22:31:20
UTC ·
(7 months ago)
167.172.78.58 - - [19/Mar/2026:17:31:15 -0500] "POST /wp-login.php HTTP/1.1" 200 4558 "https://devilsglenstorage.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15) Gecko/20100101 Firefox/120.0.1"
167.172.78.58 - - [19/Mar/2026:17:31:15 ...
show more
167.172.78.58 - - [19/Mar/2026:17:31:15 -0500] "POST /wp-login.php HTTP/1.1" 200 4558 "https://devilsglenstorage.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15) Gecko/20100101 Firefox/120.0.1"
167.172.78.58 - - [19/Mar/2026:17:31:15 -0500] "GET /wp-admin/index.php HTTP/1.1" 302 476 "https://devilsglenstorage.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15) Gecko/20100101 Firefox/120.0.1"
167.172.78.58 - - [19/Mar/2026:17:31:18 -0500] "GET /wp-login.php?redirect_to=https%3A%2F%2Fdevilsglenstorage.com%2Fwp-admin%2Findex.php&reauth=1 HTTP/1.1" 200 6226 "https://devilsglenstorage.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15) Gecko/20100101 Firefox/120.0.1"
167.172.78.58 - - [19/Mar/2026:17:31:19 -0500] "POST /wp-login.php HTTP/1.1" 200 1916 "https://devilsglenstorage.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15) Gecko/20100101 Firefox/122.0"
167.172.78.58 - - [19/Mar/2026:17:31:19 -0500] "GET /wp-admin/index.php HTTP/1.
...
show less
Web App Attack
🇺🇸
Jason Howell
2026-03-19 21:31:14
UTC ·
(7 months ago)
167.172.78.58 - - [19/Mar/2026:16:30:57 -0500] "GET /wp-login.php HTTP/1.1" 200 4195 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15) Gecko/20100101 Firefox/121.0"
167.172.78.58 - - [19/Mar/2026:16:31:05 -0500] "GET /wp-login.php HTTP/1.1" 200 4194 ...
show more
167.172.78.58 - - [19/Mar/2026:16:30:57 -0500] "GET /wp-login.php HTTP/1.1" 200 4195 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15) Gecko/20100101 Firefox/121.0"
167.172.78.58 - - [19/Mar/2026:16:31:05 -0500] "GET /wp-login.php HTTP/1.1" 200 4194 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.130 Safari/537.36"
167.172.78.58 - - [19/Mar/2026:16:31:06 -0500] "POST /wp-login.php HTTP/1.1" 200 1932 "https://devilsglenstorage.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Gecko/20100101 Firefox/120.0.1"
167.172.78.58 - - [19/Mar/2026:16:31:06 -0500] "GET /wp-admin/index.php HTTP/1.1" 302 619 "https://devilsglenstorage.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Gecko/20100101 Firefox/120.0.1"
167.172.78.58 - - [19/Mar/2026:16:31:13 -0500] "GET /wp-login.php?redirect_to=https%3A%2F%2Fdevilsglenstorage.com%2Fwp-admin%2Findex.php&reauth=1 HTTP/1.1" 200 6228 "https://devilsglenstorage.com/wp-login.
...
show less
Web App Attack
🇺🇸
Jason Howell
2026-03-19 19:27:32
UTC ·
(7 months ago)
167.172.78.58 - - [19/Mar/2026:14:26:53 -0500] "GET /wp-login.php HTTP/1.1" 200 5190 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
167.172.78.58 - - [19/Mar/2026:14:27:18 -0500] ...
show more
167.172.78.58 - - [19/Mar/2026:14:26:53 -0500] "GET /wp-login.php HTTP/1.1" 200 5190 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
167.172.78.58 - - [19/Mar/2026:14:27:18 -0500] "POST /wp-login.php HTTP/1.1" 503 19618 "https://earthworksdesign.org/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15"
167.172.78.58 - - [19/Mar/2026:14:27:23 -0500] "GET /wp-admin/index.php HTTP/1.1" 503 22067 "https://earthworksdesign.org/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15"
167.172.78.58 - - [19/Mar/2026:14:27:27 -0500] "GET /wp-admin/profile.php HTTP/1.1" 503 22067 "https://earthworksdesign.org/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15"
167.172.78.58 - - [19/Mar/2026:14:2
...
show less
Web App Attack
🇧🇪
cmbplf
2026-03-19 18:02:32
UTC ·
(7 months ago)
3.072 requests from abuseipdb.com blacklisted IP (1yr4mos3d)
Brute-Force
Bad Web Bot
🇩🇪
FeG Deutschland
2026-03-19 17:20:02
UTC ·
(7 months ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack