๐น๐ท
neron
2026-07-27 08:19:38
(1 hour ago)
CrowdSec blocked: http:exploit detected via OPNsense firewall
Hacking
Web App Attack
๐ฉ๐ช
ghostwarriors
2026-07-27 01:50:12
(7 hours ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ฆ
KIsmay
2026-07-27 01:27:37
(8 hours ago)
Jul 26 21:26:43 www4 WPAudit[2009035]: 185.198.240.61 imaginesalmon.com "Mozilla/5.0 (Macintosh; Int ...
show more
Jul 26 21:26:43 www4 WPAudit[2009035]: 185.198.240.61 imaginesalmon.com "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" imagine:passimagine FAIL
Jul 26 21:26:47 www4 WPAudit[2009035]: 185.198.240.61 imaginesalmon.com "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" imagine:imagine2026 FAIL
Jul 26 21:26:51 www4 WPAudit[2009035]: 185.198.240.61 imaginesalmon.com "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1; rv:121.0) Gecko/20100101 Firefox/121.0" imagine:imaginepass FAIL
Jul 26 21:27:30 www4 WPAudit[2009035]: 185.198.240.61 imaginesalmon.com "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" imagine:imagine1 FAIL
Jul 26 21:27:36 www4 WPAudit[2009035]: 185.198.240.61 imaginesalmon.com "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:120.0) Gecko/20100101 Firefox/120.0" imagine:imagine@ FAIL
...
show less
Brute-Force
Web App Attack
๐น๐ท
neron
2026-07-24 15:30:03
(2 days ago)
CrowdSec blocked: http:exploit detected via OPNsense firewall
Hacking
Web App Attack
๐ซ๐ฎ
as211431.net
2026-07-23 12:32:13
(3 days ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /wp-login.php
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/17.0 Safari/605.1.15
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐บ๐ธ
nyt
2026-07-19 19:00:46
(1 week ago)
Repeated WordPress login POSTs blocked by WAF (3 in 6h)
Brute-Force
Web App Attack
Anonymous
2026-07-19 17:19:39
(1 week ago)
Web attack blocked by Wordfence on helenehoenjet.nl (31 hits). Reported by CRMON.
Web App Attack
๐ฉ๐ช
FeG Deutschland
2026-07-19 01:37:15
(1 week ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247
Exploited Host
Web App Attack
๐ฉ๐ช
neckaralb-admin.de
2026-07-14 11:31:42
(1 week ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
๐ณ๐ฑ
Site.eu
2026-07-14 01:26:58
(1 week ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
๐ฎ๐น
CoreTech srl
2026-07-13 14:28:56
(1 week ago)
cloudlinux2 fail2ban: 2026-07-13 16:24:03,550 fail2ban.filter [1878]: INFO [plesk-wordpre ...
show more
cloudlinux2 fail2ban: 2026-07-13 16:24:03,550 fail2ban.filter [1878]: INFO [plesk-wordpress] Found 185.198.240.61 - 2026-07-13 16:24:01cloudlinux2 fail2ban: 2026-07-13 16:26:10,788 fail2ban.filter [1878]: INFO [plesk-modsecurity] Found 103.121.7.129 - 2026-07-13 16:26:10cloudlinux2 fail2ban: 2026-07-13 16:26:23,690 fail2ban.filter [1878]: INFO [plesk-modsecurity] Found 103.184.87.88 - 2026-07-13 16:26:23cloudlinux2 fail2ban: 2026-07-13 16:26:55,623 fail2ban.filter [1878]: INFO [plesk-modsecurity] Found 103.184.87.88 - 2026-07-13 16:26:55cloudlinux2 fail2ban: 2026-07-13 16:27:38,098 fail2ban.actions [1878]: NOTICE [plesk-modsecurity] Ban 103.184.87.88cloudlinux2 fail2ban: 2026-07-13 16:27:37,991 fail2ban.filter [1878]: INFO [plesk-modsecurity] Found 103.184.87.88 - 2026-07-13 16:27:37cloudlinux2 fail2ban: 2026-07-13 16:27:38,106 fail2ban.filter [1878]: INFO [recidive] Found 103.184.87.88 - 2026-07-13 16:27:38cloudlinux2 fail2ban: 2026-07
show less
Web App Attack
๐ฉ๐ช
F242
2026-07-13 10:11:59
(1 week ago)
Wordpress Login or XMLRPC abuse
Web App Attack
๐ฆ๐บ
screwlooseit.com.au
2026-07-12 20:53:23
(2 weeks ago)
Blocked by CSF 13 firewall - Rule: WPLOGIN
FR/France/-
Web App Attack
Anonymous
2026-07-11 22:37:16
(2 weeks ago)
185.198.240.61 - - [12/Jul/2026:00:32:44 +0200] "POST /wp-login.php HTTP/1.1" 302 - "https://carsten ...
show more
185.198.240.61 - - [12/Jul/2026:00:32:44 +0200] "POST /wp-login.php HTTP/1.1" 302 - "https://carstenfertig.de/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64; rv:119.0) Gecko/20100101 Firefox/119.0"
185.198.240.61 - - [12/Jul/2026:00:32:50 +0200] "POST /wp-login.php HTTP/1.1" 302 - "https://carstenfertig.de/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"
185.198.240.61 - - [12/Jul/2026:00:37:07 +0200] "POST /wp-login.php HTTP/1.1" 302 - "https://carstenfertig.de/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:118.0) Gecko/20100101 Firefox/118.0"
185.198.240.61 - - [12/Jul/2026:00:37:11 +0200] "POST /wp-login.php HTTP/1.1" 302 - "https://carstenfertig.de/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:120.0) Gecko/20100101 Firefox/120.0"
185.198.240.61 - - [12/Jul/2026:00:37:15 +0200] "POST /wp-login.php HTTP/1.1" 302 - "https://carstenfertig.de/wp-login.php" "Mozi
...
show less
Web App Attack
๐ณ๐ฑ
GabrielJST
2026-07-11 19:29:41
(2 weeks ago)
(wordpress) Failed wordpress login from 185.198.240.61 (US/United States/-)
Brute-Force