🇮🇹
CoreTech srl
2026-11-10 20:33:55
UTC ·
(1 day ago)
cloudlinux2 fail2ban: 2026-11-10 21:29:18,492 fail2ban.filter [1667]: INFO [plesk-modsecurity] Found 168.144.135.40 - 2026-11-10 21:29:18cloudlinux2 fail2ban: 2026-11-10 21:29:19,316 fail2ban.filter [1667]: INFO [plesk-modsecuri ...
show more
cloudlinux2 fail2ban: 2026-11-10 21:29:18,492 fail2ban.filter [1667]: INFO [plesk-modsecurity] Found 168.144.135.40 - 2026-11-10 21:29:18cloudlinux2 fail2ban: 2026-11-10 21:29:19,316 fail2ban.filter [1667]: INFO [plesk-modsecurity] Found 168.144.135.40 - 2026-11-10 21:29:19cloudlinux2 fail2ban: 2026-11-10 21:29:45,092 fail2ban.actions [1667]: NOTICE [plesk-modsecurity] Unban 172.71.144.4cloudlinux2 fail2ban: 2026-11-10 21:29:49,155 fail2ban.filter [1667]: INFO [plesk-wordpress] Found 168.144.135.40 - 2026-11-10 21:29:48cloudlinux2 fail2ban: 2026-11-10 21:29:48,306 fail2ban.actions [1667]: NOTICE [plesk-modsecurity] Unban 172.71.144.5cloudlinux2 fail2ban: 2026-11-10 21:29:45,814 fail2ban.filter [1667]: INFO [plesk-wordpress] Found 168.144.135.40 - 2026-11-10 21:29:44cloudlinux2 fail2ban: 2026-11-10 21:29:46,942 fail2ban.filter [1667]: INFO [plesk-wordpress] Found 168.144.135.40 - 2026-11-10 21:29:46cloudlinux2 fail2ban: 2026-11-10 21:29:49,
show less
Web App Attack
🇦🇺
A.i.D.A.N.N
2026-11-10 18:02:28
UTC ·
(1 day ago)
A.i.D.A.N.N: Anomaly Detected - Signature match Web Service - Web vulnerability scanning detected
Web App Attack
🇧🇷
radardatelecom
2026-11-10 16:55:03
UTC ·
(1 day ago)
Blocked by Radar da Telecom firewall — abuseipdb
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-11-10 15:53:58
UTC ·
(1 day ago)
Web attack/malicious scanning detected
Web App Attack
🇩🇪
conseilgouz
2026-11-10 15:10:23
UTC ·
(1 day ago)
lae-7 : Trying access unauthorized files/dir=>/wp-includes/js/json2.js
Hacking
Anonymous
2026-11-10 12:50:10
UTC ·
(1 day ago)
IP banned by Fail2Ban in jail nginx-abusive-ips
Web App Attack
Brute-Force
Bad Web Bot
Anonymous
2026-11-10 12:05:10
UTC ·
(1 day ago)
Scanner hitting /wp/wp-includes/js/json2.js on osef.cloud (NET-168-144-0-0-1) — aaguard
Brute-Force
Port Scan
🇺🇸
lavnet.net
2026-11-10 12:03:05
UTC ·
(1 day ago)
168.144.135.40 - - [10/Nov/2026:12:02:17 +0000] "GET /wp-includes/js/json2.js HTTP/1.1" 404 2110 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.6167.85 Safari/537.36"
168.144.135.40 - - [10/Nov/2026:1 ...
show more
168.144.135.40 - - [10/Nov/2026:12:02:17 +0000] "GET /wp-includes/js/json2.js HTTP/1.1" 404 2110 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.6167.85 Safari/537.36"
168.144.135.40 - - [10/Nov/2026:12:02:25 +0000] "GET /wp/wp-includes/js/json2.js HTTP/1.1" 404 2110 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.2277.83"
168.144.135.40 - - [10/Nov/2026:12:02:34 +0000] "GET /wordpress/wp-includes/js/json2.js HTTP/1.1" 404 2110 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.2210.133"
168.144.135.40 - - [10/Nov/2026:12:02:44 +0000] "GET /blog/wp-includes/js/json2.js HTTP/1.1" 404 2110 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Gecko/20100101 Firefox/119.0.1"
168.144.135.40 - - [10/Nov/2026:12:02:49 +0000] "GET /new/wp-includes/js/json2.js HTTP/1.1" 404 2110 "-" "Mozilla/5.0 (Mac
...
show less
Brute-Force
Anonymous
2026-11-10 11:33:03
UTC ·
(1 day ago)
Bot / scanning and/or hacking attempts: GET /author/subblicious/ HTTP/1.1, GET /?author=0 HTTP/1.1, POST /xmlrpc.php HTTP/1.1
Hacking
Web App Attack
Anonymous
2026-11-10 11:04:51
UTC ·
(1 day ago)
2026-11-10T06:04:51.248759-05:00 instance-20260804-1025 wordpress(expensas.co)[221511]: XML-RPC authentication attempt for unknown user admin from 168.144.135.40
...
Web App Attack
🇩🇪
MarkGGN
2026-11-10 10:39:45
UTC ·
(1 day ago)
Web attack. 168.144.135.40 - - [10/Nov/2026:11:39:41 +0100] "GET /wp/wp-includes/js/[HOST] HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.2151.97" 168.1 ...
show more
Web attack. 168.144.135.40 - - [10/Nov/2026:11:39:41 +0100] "GET /wp/wp-includes/js/[HOST] HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.2151.97" 168.144.135.40 - - [10/Nov/2026:11:39:44 +0100] "GET /wp/wp-includes/js/[HOST] HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.2151.97"
show less
Web App Attack
🇨🇦
Sakusen
2026-11-10 10:02:49
UTC ·
(1 day ago)
Automated web scanning: 5 reqs, 5 paths probed, 5 returned 404; probed: 5 other
Bad Web Bot
🇩🇪
bsoft.de
2026-11-10 09:36:41
UTC ·
(1 day ago)
168.144.135.40 - - [10/Nov/2026:10:36:28 +0100] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.2277.83"
168.144.135.40 - - [10/Nov/202 ...
show more
168.144.135.40 - - [10/Nov/2026:10:36:28 +0100] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.2277.83"
168.144.135.40 - - [10/Nov/2026:10:36:36 +0100] "GET /wp-json/wp/v2/users HTTP/1.1" 404 148 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15"
168.144.135.40 - - [10/Nov/2026:10:36:40 +0100] "GET /index.php/wp-json/wp/v2/users HTTP/1.1" 404 148 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.6167.85 Safari/537.36"
show less
Web App Attack
Anonymous
2026-11-10 07:46:20
UTC ·
(1 day ago)
Failed Wordpress Logins
Web App Attack
🇫🇮
as211431.net
2026-11-10 06:00:29
UTC ·
(1 day ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /test/wp-includes/js/json2.js
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chro ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /test/wp-includes/js/json2.js
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.57 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot