🇳🇱
Site.eu
2026-06-18 19:37:32
(1 day ago)
Excessive multi-domain requests
Brute-Force
🇬🇧
NotCool
2026-06-18 01:09:39
(2 days ago)
(ABUSIVEBOT) Abusive Bot User-Agent 193.37.32.134 (SG/Singapore/-): 50 in the last 3600 secs
Bad Web Bot
2026-06-17 10:32:52
(2 days ago)
193.37.32.134 - - [17/Jun/2026:18:32:52 +0800] "GET /wp-content/plugins/shell/ HTTP/1.1" 301 - "http ...
show more
193.37.32.134 - - [17/Jun/2026:18:32:52 +0800] "GET /wp-content/plugins/shell/ HTTP/1.1" 301 - "http://outfieldasia.com/wp-content/plugins/shell/" "Go-http-client/1.1"
...
show less
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-06-17 02:02:07
(2 days ago)
Excessive multi-domain requests
Brute-Force
🇩🇪
ghostwarriors
2026-06-16 19:50:43
(3 days ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Admin-Gito
2026-06-16 14:49:59
(3 days ago)
193.37.32.134 - - [16/Jun/2026:16:41:13 +0200] "GET /wp-includes/wp_class_datlib.php HTTP/1.1" 404 2 ...
show more
193.37.32.134 - - [16/Jun/2026:16:41:13 +0200] "GET /wp-includes/wp_class_datlib.php HTTP/1.1" 404 290706 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
193.37.32.134 - - [16/Jun/2026:16:41:14 +0200] "GET /wp-includes/js/tinymce/langs/about.php HTTP/1.1" 404 290720 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
193.37.32.134 - - [16/Jun/2026:16:41:26 +0200] "GET /wp-includes/SimplePie/Registry-private.php HTTP/1.1" 404 290717 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
193.37.32.134 - - [16/Jun/2026:16:41:30 +0200] "GET /wp-includes/assets/script-modules-packages.min-meta.php HTTP/1.1" 404 290737 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
193.37.32.134 - - [16/Jun/2026:16:41:3
...
show less
Web App Attack
🇩🇪
FeG Deutschland
2026-06-16 13:52:44
(3 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇩🇪
paissangroup
2026-06-16 07:56:19
(3 days ago)
Multiple WAF Violations
Web App Attack
🇩🇪
LRob.fr
2026-06-16 04:15:13
(3 days ago)
Repeated 403 errors, blocked by Fail2ban in custom-403 jail
Bad Web Bot
🇬🇷
setupgr
2026-06-15 20:46:32
(4 days ago)
(mod_security) mod_security (id:1000001) triggered by 193.37.32.134: 1 in the last 86400 secs; Ports ...
show more
(mod_security) mod_security (id:1000001) triggered by 193.37.32.134: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Mon Jun 15 23:46:30.149256 2026] [security2:error] [pid 1965768:tid 1965812] [client 193.37.32.134:51161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/about.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "92"] [id "1000001"] [msg "Bad file blocked: /wp-includes/js/tinymce/themes/about.php"] [severity "CRITICAL"] [tag "security"] [hostname "mail.adoro.gr"] [uri "/wp-includes/js/tinymce/themes/about.php"] [unique_id "ajBkpphSggell5vQAURZiwAAAVE"]
show less
Port Scan
🇺🇸
KitsuneTech
2026-06-15 02:14:28
(4 days ago)
193.37.32.134 - - [14/Jun/2026:21:14:27 -0500] "GET /wp-content/hello.php HTTP/1.1" 301 252 "-" "Moz ...
show more
193.37.32.134 - - [14/Jun/2026:21:14:27 -0500] "GET /wp-content/hello.php HTTP/1.1" 301 252 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
...
show less
Web App Attack
🇺🇦
URAN Publishing Service
2026-06-15 01:25:13
(4 days ago)
193.37.32.134 - - [15/Jun/2026:04:25:13 +0300] "GET /wp-admin/maint/ HTTP/1.1" 404 711 "-" "Mozilla/ ...
show more
193.37.32.134 - - [15/Jun/2026:04:25:13 +0300] "GET /wp-admin/maint/ HTTP/1.1" 404 711 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
...
show less
Web App Attack
🇫🇮
as211431.net
2026-06-14 16:43:11
(5 days ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /mah/function.php
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇩🇪
barbarella
2026-06-14 02:07:59
(5 days ago)
Multiple (98) times attack on https port 443: Hacking attempt of vulnerable PHP Script (GET /include ...
show more
Multiple (98) times attack on https port 443: Hacking attempt of vulnerable PHP Script (GET /includes.php)
04:07:59 Hacking attempt of Wordpress (GET /wp-includes/sitemaps/admin.php)
04:08:01 Tried to access Wordpress files (GET /wp-includes/assets/config.php)
04:08:02 unauthorized access to Wordpress files (GET /wp-content/includes.php)
04:08:05 Tried to access Wordpress files (GET /wp-includes/block-patterns/config.php)
04:08:06 Tried to access Wordpress files (GET /wp-includes/sitemaps/providers/config.php)
04:08:07 Tried to access Wordpress files (GET /wp-includes/style-engine/config.php)
04:08:09 Tried to access Wordpress files (GET /wp-content/uploads/wp-sync-db/config.php)
04:08:10 Hacking attempt of Wordpress (GET /wp-includes/customize/abilities-api/)
show less
Hacking
Web App Attack
🇩🇪
barbarella
2026-06-13 17:24:50
(6 days ago)
Multiple (15) times attack on https port 443: Hacking attempt of vulnerable PHP Script (GET /3PJcpMF ...
show more
Multiple (15) times attack on https port 443: Hacking attempt of vulnerable PHP Script (GET /3PJcpMFsD8B.php)
17:24:51 Hacking attempt (GET /admin.php)
17:24:52 Hacking attempt of vulnerable PHP Script (GET /edit-tags.php)
17:24:52 Hacking attempt of vulnerable PHP Script (GET /goods.php)
17:24:53 Hacking attempt of Wordpress (GET /wp-admin/css/)
17:24:54 Hacking attempt of vulnerable PHP Script (GET /filemanager.php)
17:24:54 unauthorized access to Wordpress files (GET /wp-content/plugins/enhanced-text-widget/analyst/src/403.php)
17:24:55 unauthorized access to Wordpress files (GET /wp-content/uploads/)
17:24:55 Hacking attempt of vulnerable PHP Script (GET /adminfuns.php)
show less
Hacking
Web App Attack