🇨🇭
chr70
2026-07-01 17:52:00
(1 week ago)
Scanning for vulnerabilities
Web App Attack
🇩🇪
FeG Deutschland
2026-06-30 08:02:03
(1 week ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 12
Exploited Host
Web App Attack
🇨🇭
Origon
2026-05-17 12:31:35
(1 month ago)
http-wordpress_user-enum - IP: 185.213.83.223 - time="2026-05-17T14:31:34+02:00" level=info msg="(5 ...
show more
http-wordpress_user-enum - IP: 185.213.83.223 - time="2026-05-17T14:31:34+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-wordpress_user-enum by ip 185.213.83.223 (ID/147049) : 4h ban on Ip 185.213.83.223" module=db
show less
Web App Attack
🇺🇦
URAN Publishing Service
2026-03-18 14:19:36
(3 months ago)
185.213.83.223 - - [18/Mar/2026:16:19:34 +0200] "GET /wp-admin/evil.php HTTP/1.1" 404 273 "-" "Mozil ...
show more
185.213.83.223 - - [18/Mar/2026:16:19:34 +0200] "GET /wp-admin/evil.php HTTP/1.1" 404 273 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
185.213.83.223 - - [18/Mar/2026:16:19:35 +0200] "GET /wp-admin/ichi.php HTTP/1.1" 404 273 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
...
show less
Web App Attack
🇫🇷
Tilellit.PRO
2026-01-24 22:55:04
(5 months ago)
Fail2Ban banned 185.213.83.223 for security violations in jail nginx-aggressive. Log: 2026/01/24 20: ...
show more
Fail2Ban banned 185.213.83.223 for security violations in jail nginx-aggressive. Log: 2026/01/24 20:23:00 [error] FastCGI sent in stderr: "Primary script unknown" , client: 185.213.83.223, server: [REDACTED], request: "GET /administrator/index.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://www.google.com/"
2026/01/24 22:55:04 [error] FastCGI sent in stderr: "Primary script unknown" , client: 185.213.83.223, server: [REDACTED], request: "GET /administrator/index.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://www.google.com/"
...
show less
Bad Web Bot
Web App Attack
2025-12-21 17:47:38
(6 months ago)
wordpress-trap
Web App Attack
🇨🇦
1gz
2025-12-21 08:19:17
(6 months ago)
Triggered Cloudflare WAF (firewallCustom) from ID.
Action taken: CHALLENGE
Protocol: HTTP/1.1 (GET m ...
show more
Triggered Cloudflare WAF (firewallCustom) from ID.
Action taken: CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /auth/register
UA: Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.5249.60 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇫🇮
[email protected]
2025-10-24 07:53:32
(8 months ago)
Attack attempt against Interwebbi servers; *Port Scan* detected from 185.213.83.223 (ID/Indonesia/-) ...
show more
Attack attempt against Interwebbi servers; *Port Scan* detected from 185.213.83.223 (ID/Indonesia/-). 5 hits in the last 180 seconds; IP: 185.213.83.223; Ports: *; Direction: 0; Trigger: PS_LIMIT;
show less
Brute-Force
🇪🇸
robotstxt
2025-05-27 13:30:13
(1 year ago)
185.213.83.223 - - [27/May/2025:12:09:35 +0000] "POST /wp-login.php/wp-login.php HTTP/1.1" 404 46863 ...
show more
185.213.83.223 - - [27/May/2025:12:09:35 +0000] "POST /wp-login.php/wp-login.php HTTP/1.1" 404 46863 "-" rt="0.448" "Mozilla" "-" h="economipedia.com" sn="economipedia.com" ru="/wp-login.php/wp-login.php" u="/index.php" ucs="-" ua="unix:/var/run/php/economipedia74.sock" us="404" uct="0.000" urt="0.447"
185.213.83.223 - - [27/May/2025:12:09:35 +0000] "POST /wp-login.php/wp-login.php HTTP/1.1" 404 46863 "-" "Mozilla" "-"
185.213.83.223 - - [27/May/2025:12:17:05 +0000] "POST /wp-login.php/wp-login.php HTTP/1.1" 404 46861 "-" rt="0.389" "Mozilla" "-" h="economipedia.com" sn="economipedia.com" ru="/wp-login.php/wp-login.php" u="/index.php" ucs="-" ua="unix:/var/run/php/economipedia74.sock" us="404" uct="0.000" urt="0.388"
185.213.83.223 - - [27/May/2025:12:17:05 +0000] "POST /wp-login.php/wp-login.php HTTP/1.1" 404 46861 "-" "Mozilla" "-"
185.213.83.223 - - [27/May/2025:13:29:58 +0000] "POST /wp-login.php/wp-login.php HTTP/1.1" 404 46861 "-" "Mozilla" "-"
...
show less
Bad Web Bot
2024-08-06 04:38:03
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇨🇭
unifr
2023-10-15 11:57:09
(2 years ago)
Unauthorized IMAP connection attempt
Brute-Force
🇮🇩
hermawan
2023-09-18 11:30:17
(2 years ago)
[Mon Sep 18 18:30:13.745573 2023] [security2:error] [pid 189006:tid 139987588359744] [client 185.213 ...
show more
[Mon Sep 18 18:30:13.745573 2023] [security2:error] [pid 189006:tid 139987588359744] [client 185.213.83.223:17360] [client 185.213.83.223] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-3.3.5/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "151"] [id "913101"] [msg "Found User-Agent associated with scripting/generic HTTP client"] [data "Matched Data: python-requests found within REQUEST_HEADERS:User-Agent: python-requests/2.25.1 request_line = GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scripting"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [tag "paranoia-level/2"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ZQg0xWhzm49YKeDR9r
...
show less
Hacking
Web App Attack
🇮🇩
penjaga BRIN
2023-09-17 11:02:59
(2 years ago)
Suspicious URL access.-111
Brute-Force
2023-09-11 19:10:13
(2 years ago)
Web Spam
Email Spam
Blog Spam
Bad Web Bot
Web App Attack
🇮🇩
penjaga BRIN
2023-08-16 17:12:15
(2 years ago)
Blacklisted user agent (known malicious user agent).-240
Web App Attack