🇹🇷
Jova
2026-11-08 01:45:30
UTC ·
(7 hours ago)
WordPress login brute force with a forged browser User-Agent: 1 attempts.
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-11-07 18:56:09
UTC ·
(14 hours ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇫🇷
dynamix
2026-10-27 01:26:44
UTC ·
(1 week ago)
Multiple WAF Violations
Web App Attack
🇳🇱
Site.eu
2026-10-26 20:35:43
UTC ·
(1 week ago)
Excessive multi-domain requests
Brute-Force
🇳🇱
WeCloudit-Anti-Abuse
2026-10-26 07:47:34
UTC ·
(1 week ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
🇸🇪
KIDOS
2026-10-25 22:05:54
UTC ·
(1 week ago)
CrowdSec detected malicious activity
DDoS Attack
🇳🇱
Site.eu
2026-10-25 20:35:28
UTC ·
(1 week ago)
Excessive 404/403 errors
Brute-Force
🇮🇹
CoreTech srl
2026-10-25 05:43:56
UTC ·
(2 weeks ago)
cloudlinux2 fail2ban: 2026-10-25 06:39:03,630 fail2ban.filter [1922]: INFO [plesk-wordpress] Found 45.132.227.190 - 2026-10-25 06:39:02cloudlinux2 fail2ban: 2026-10-25 06:39:46,973 fail2ban.filter [1922]: INFO [plesk-modsecurity ...
show more
cloudlinux2 fail2ban: 2026-10-25 06:39:03,630 fail2ban.filter [1922]: INFO [plesk-wordpress] Found 45.132.227.190 - 2026-10-25 06:39:02cloudlinux2 fail2ban: 2026-10-25 06:39:46,973 fail2ban.filter [1922]: INFO [plesk-modsecurity] Found 212.70.99.198 - 2026-10-25 06:39:46cloudlinux2 fail2ban: 2026-10-25 06:40:24,892 fail2ban.filter [1922]: INFO [plesk-wordpress] Found 45.132.227.82 - 2026-10-25 06:40:24cloudlinux2 fail2ban: 2026-10-25 06:40:21,291 fail2ban.filter [1922]: INFO [plesk-wordpress] Found 45.132.227.82 - 2026-10-25 06:40:19cloudlinux2 fail2ban: 2026-10-25 06:40:24,798 fail2ban.filter [1922]: INFO [plesk-wordpress] Found 136.144.42.91 - 2026-10-25 06:40:24cloudlinux2 fail2ban: 2026-10-25 06:40:21,288 fail2ban.filter [1922]: INFO [plesk-wordpress] Found 136.144.42.91 - 2026-10-25 06:40:19cloudlinux2 fail2ban: 2026-10-25 06:41:49,340 fail2ban.filter [1922]: INFO [plesk-wordpress] Found 217.199.144.40 - 2026-10-25 06:41:48cloud
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-10-22 10:33:36
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:240000) triggered by 45.132.227.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 06:33:29.622696 2026] [security2:error] [pid 31331:tid 31362] [client 45.132.227.82:53907] M ...
show more
(mod_security) mod_security (id:240000) triggered by 45.132.227.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 06:33:29.622696 2026] [security2:error] [pid 31331:tid 31362] [client 45.132.227.82:53907] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||vote4joegardner.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "vote4joegardner.com"] [uri "/images/stories/themes.php"] [unique_id "atnmecZZ9MfClagcWrHbgwAAAQM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
neckaralb-admin.de
2026-10-22 08:13:08
UTC ·
(2 weeks ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇫🇷
masterguru
2026-10-21 19:19:12
UTC ·
(2 weeks ago)
wp-login request blocked, no referer. Pattern match "wp-login.php" at REQUEST_URI. (88020-193)
Hacking
🇫🇷
mrcrassi
2026-10-21 18:48:32
UTC ·
(2 weeks ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
Protocol: HTTP/1.1 (POST method)
Endpoint: /wp-login.php
UA: Mozilla/5.0 (Windows NT 10.0; Win64; rv:143.0) Gecko/20100101 Firefox/143.0
This report was generated by:
https://git ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
Protocol: HTTP/1.1 (POST method)
Endpoint: /wp-login.php
UA: Mozilla/5.0 (Windows NT 10.0; Win64; rv:143.0) Gecko/20100101 Firefox/143.0
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
Ben Schoolland
2026-10-21 16:11:55
UTC ·
(2 weeks ago)
Requested known WordPress backdoor/scanner-only paths. No legitimate use.
Bad Web Bot
Web App Attack
🇮🇹
CoreTech srl
2026-10-18 06:38:56
UTC ·
(3 weeks ago)
cloudlinux2 fail2ban: 2026-10-18 08:33:51,513 fail2ban.filter [2057]: INFO [plesk-wordpress] Found 45.132.227.82 - 2026-10-18 08:33:51cloudlinux2 fail2ban: 2026-10-18 08:34:28,633 fail2ban.actions [2057]: NOTICE [plesk-modsecurity] ...
show more
cloudlinux2 fail2ban: 2026-10-18 08:33:51,513 fail2ban.filter [2057]: INFO [plesk-wordpress] Found 45.132.227.82 - 2026-10-18 08:33:51cloudlinux2 fail2ban: 2026-10-18 08:34:28,633 fail2ban.actions [2057]: NOTICE [plesk-modsecurity] Unban 103.224.152.124cloudlinux2 fail2ban: 2026-10-18 08:34:51,735 fail2ban.filter [2057]: INFO [plesk-wordpress] Found 45.132.227.77 - 2026-10-18 08:34:51cloudlinux2 fail2ban: 2026-10-18 08:34:54,550 fail2ban.filter [2057]: INFO [plesk-wordpress] Found 193.56.116.223 - 2026-10-18 08:34:54cloudlinux2 fail2ban: 2026-10-18 08:35:33,757 fail2ban.filter [2057]: INFO [plesk-wordpress] Found 193.56.116.220 - 2026-10-18 08:35:32cloudlinux2 fail2ban: 2026-10-18 08:35:33,760 fail2ban.filter [2057]: INFO [plesk-wordpress] Found 193.56.116.234 - 2026-10-18 08:35:32cloudlinux2 fail2ban: 2026-10-18 08:35:33,475 fail2ban.filter [2057]: INFO [plesk-wordpress] Found 193.56.116.239 - 2026-10-18 08:35:32cloudlinux2 fail2ban: 2
show less
Web App Attack
🇺🇦
URAN Publishing Service
2026-10-17 21:46:05
UTC ·
(3 weeks ago)
[18/Oct/2026:00:46:05 +0300] -- 45.132.227.82 Ban reason: Scanner [CMS_GENERIC] | Request: GET /wp-admin/images/ HTTP/1.1
Bad Web Bot
Web App Attack