Anonymous
2026-10-11 19:34:05
(17 hours ago)
Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1
Hacking
Web App Attack
Anonymous
2026-10-03 04:16:16
(1 week ago)
RUPLDE WEBFORM SPAM 37.0.12.237 (37.0.12.237)
Web Spam
๐บ๐ธ
TPI-Abuse
2026-10-03 03:26:07
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 37.0.12.237 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210730) triggered by 37.0.12.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 23:26:00.512018 2026] [security2:error] [pid 6313:tid 6313] [client 37.0.12.237:45704] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gamepart.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gamepart.com"] [uri "/home/tancedi1/gamepart.com"] [unique_id "asB1yFGq5Axe6vuxMfgeKgAAABY"], referer: http://gamepart.com/home/tancedi1/gamepart.com
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
xmission.com
2026-10-03 03:09:36
(1 week ago)
37.0.12.237 - - [02/Oct/2026:21:09:36 -0600] "POST /xmlrpc.php HTTP/1.1" 200 415 "-" "Mozilla/5.0 (W ...
show more
37.0.12.237 - - [02/Oct/2026:21:09:36 -0600] "POST /xmlrpc.php HTTP/1.1" 200 415 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
...
show less
Web App Attack
๐บ๐ธ
Jason Howell
2026-10-03 02:54:43
(1 week ago)
37.0.12.237 - - [02/Oct/2026:21:50:42 -0500] "GET /wp-login.php HTTP/1.1" 200 5754 "-" "Mozilla/5.0 ...
show more
37.0.12.237 - - [02/Oct/2026:21:50:42 -0500] "GET /wp-login.php HTTP/1.1" 200 5754 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/154.0.0.0 Safari/537.36"
37.0.12.237 - - [02/Oct/2026:21:50:43 -0500] "GET /wp-login.php HTTP/1.1" 200 1801 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/154.0.0.0 Safari/537.36"
37.0.12.237 - - [02/Oct/2026:21:50:45 -0500] "GET /favicon.ico HTTP/1.1" 200 224 "https://bigdogqc.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/154.0.0.0 Safari/537.36"
37.0.12.237 - - [02/Oct/2026:21:50:45 -0500] "GET /favicon.ico HTTP/1.1" 200 224 "https://bigdogqc.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/154.0.0.0 Safari/537.36"
37.0.12.237 - - [02/Oct/2026:21:54:42 -0500] "POST /wp-login.php HTTP/1.1" 200 2230 "https://bigdogqc.com/" "Mozilla/5.0 (Windows NT 10.
...
show less
Web App Attack
๐ฉ๐ช
Hazzard
2026-10-03 02:53:48
(1 week ago)
(wordpress) Failed wordpress login from 37.0.12.237 (MY/Malaysia/Johor/Johor Bahru/-/-): (CF_ENABLE ...
show more
(wordpress) Failed wordpress login from 37.0.12.237 (MY/Malaysia/Johor/Johor Bahru/-/-): (CF_ENABLE)
show less
Brute-Force
๐จ๐ฟ
plzenskypruvodce.cz
2026-10-03 02:51:33
(1 week ago)
[Sat Oct 03 04:51:32.123785 2026] [access_compat:error] [pid 2966185:tid 2966312] [client 37.0.12.23 ...
show more
[Sat Oct 03 04:51:32.123785 2026] [access_compat:error] [pid 2966185:tid 2966312] [client 37.0.12.237:28609] AH01797: client denied by server configuration: /var/www/buchtic.net/blog/xmlrpc.php
[Sat Oct 03 04:51:32.136123 2026] [access_compat:error] [pid 2966185:tid 2966302] [client 37.0.12.237:58905] AH01797: client denied by server configuration: /var/www/buchtic.net/blog/xmlrpc.php
...
show less
Web App Attack
๐ฉ๐ช
FD-IX
2026-10-03 02:49:21
(1 week ago)
Fail2Ban: WordPress XML-RPC brute-force attack detected.
Bad Web Bot
Web App Attack
๐บ๐ธ
Jason Howell
2026-10-03 02:39:37
(1 week ago)
37.0.12.237 - - [02/Oct/2026:21:39:35 -0500] "GET /wp-login.php HTTP/1.1" 200 2846 "-" "Mozilla/5.0 ...
show more
37.0.12.237 - - [02/Oct/2026:21:39:35 -0500] "GET /wp-login.php HTTP/1.1" 200 2846 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/154.0.0.0 Safari/537.36"
37.0.12.237 - - [02/Oct/2026:21:39:36 -0500] "GET /wp-content/plugins/cookie-notice/js/front.min.js?ver=2.5.5 HTTP/1.1" 200 2474 "http://sitemaps.gannonpool.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/154.0.0.0 Safari/537.36"
37.0.12.237 - - [02/Oct/2026:21:39:36 -0500] "GET /wp-includes/css/dashicons.min.css?ver=6.2.13 HTTP/1.1" 200 36068 "http://sitemaps.gannonpool.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/154.0.0.0 Safari/537.36"
37.0.12.237 - - [02/Oct/2026:21:39:36 -0500] "GET /wp-includes/css/buttons.min.css?ver=6.2.13 HTTP/1.1" 200 1791 "http://sitemaps.gannonpool.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like
...
show less
Web App Attack
๐ฎ๐น
VHosting
2026-10-03 02:35:05
(1 week ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
๐ฆ๐บ
oncord
2026-10-03 01:18:14
(1 week ago)
Form spam
Web Spam
๐ซ๐ท
debaba
2026-10-02 01:54:08
(1 week ago)
aktiv
37.0.12.237 - - [02/Oct/2026:01:54:06 +0000] "POST /wp-login.php HTTP/1.1" 200 17327 "-" "Mozi ...
show more
aktiv
37.0.12.237 - - [02/Oct/2026:01:54:06 +0000] "POST /wp-login.php HTTP/1.1" 200 17327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36
...
show less
Brute-Force
Web App Attack
๐ซ๐ท
matthieul.dev
2026-07-05 15:40:26
(3 months ago)
Blocked by os-abuseipdb; 7 hits, proto=tcp, ports=51248
Port Scan
Brute-Force
๐บ๐ธ
xmission.com
2026-06-24 21:59:39
(3 months ago)
Blocked by UFW (TCP on 60660)
Source port: 44262
TTL: 59
Packet length: 60
TOS: 0x00
This report (f ...
show more
Blocked by UFW (TCP on 60660)
Source port: 44262
TTL: 59
Packet length: 60
TOS: 0x00
This report (for 37.0.12.237) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
๐บ๐ธ
xmission.com
2026-06-23 00:04:39
(3 months ago)
Blocked by UFW (TCP on 60660)
Source port: 64586
TTL: 59
Packet length: 60
TOS: 0x00
This report (f ...
show more
Blocked by UFW (TCP on 60660)
Source port: 64586
TTL: 59
Packet length: 60
TOS: 0x00
This report (for 37.0.12.237) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan