Anonymous
2026-02-09 05:00:20
(4 months ago)
Failed Wordpress Logins
Web App Attack
๐ฉ๐ช
LRob.fr
2026-01-26 18:21:38
(4 months ago)
Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail
Bad Web Bot
Web App Attack
๐ซ๐ท
SpaceHost-Server
2026-01-15 23:33:12
(5 months ago)
Brute-Force
Web App Attack
๐จ๐ฆ
KIsmay
2026-01-15 10:19:56
(5 months ago)
Jan 15 03:21:57 www4 WPAudit[502944]: 68.178.164.130 valhallasafety.com "Mozilla/5.0 (Windows NT 6.1 ...
show more
Jan 15 03:21:57 www4 WPAudit[502944]: 68.178.164.130 valhallasafety.com "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; MDDRJS; rv:11.0) like Gecko" valhalla:valhallasuperman123456 FAIL
Jan 15 04:13:40 www4 WPAudit[511286]: 68.178.164.130 imaginesalmon.com "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/7.0; Swinburne)" imagine:imaginewelcome% FAIL
Jan 15 04:22:26 www4 WPAudit[508851]: 68.178.164.130 valhallasafety.com "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/7.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; Tablet PC 2.0; .NET CLR 1.1.4322; Alexa Toolbar)" valhalla:valhallamichael1234 FAIL
Jan 15 05:00:33 www4 WPAudit[516869]: 68.178.164.130 trilloperelloyates.com "Mozilla/5.0 (Windows NT 6.3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36" trillo:trillomustang# FAIL
Jan 15 05:19:56 www4 WPAudit[514174]: 68.178.164.130 valhallasafety.com "Mozilla/5.0 (Windo
...
show less
Brute-Force
Web App Attack
๐ซ๐ฎ
bittiguru.fi
2026-01-15 09:07:08
(5 months ago)
68.178.164.130 - [15/Jan/2026:10:57:53 +0200] "POST /xmlrpc.php HTTP/2.0" 404 21504 "-" "Mozilla/4.0 ...
show more
68.178.164.130 - [15/Jan/2026:10:57:53 +0200] "POST /xmlrpc.php HTTP/2.0" 404 21504 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/7.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3; Tablet PC 2.0)" "3.67"
68.178.164.130 - [15/Jan/2026:11:07:08 +0200] "POST /xmlrpc.php HTTP/2.0" 404 21504 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36" "3.67"
...
show less
Hacking
Brute-Force
Web App Attack
๐ฉ๐ช
stinpriza
2026-01-15 09:03:27
(5 months ago)
Web App Attack
Web App Attack
๐ฒ๐พ
Rizzy
2026-01-15 07:48:28
(5 months ago)
Multiple WAF Violations
Brute-Force
Web App Attack
๐ฉ๐ช
juutis
2026-01-15 05:45:05
(5 months ago)
68.178.164.130 - - [15/Jan/2026:00:28:46 +0100] "POST /wp-login.php HTTP/1.0" 200 7799 "https://taid ...
show more
68.178.164.130 - - [15/Jan/2026:00:28:46 +0100] "POST /wp-login.php HTTP/1.0" 200 7799 "https://taidesuunnistus.net/wp-login.php" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36 OPR/52.0.2871.99"
68.178.164.130 - - [15/Jan/2026:01:00:31 +0100] "POST /wp-login.php HTTP/1.0" 200 7799 "https://taidesuunnistus.net/wp-login.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; InfoPath.3; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)"
68.178.164.130 - - [15/Jan/2026:06:45:04 +0100] "POST /wp-login.php HTTP/1.0" 200 7799 "https://taidesuunnistus.net/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; MANM; rv:11.0) like Gecko"
show less
Web App Attack
๐จ๐ฟ
ddw
2026-01-15 05:08:56
(5 months ago)
WordPress XMLRPC.PHP Access Attempt.
Hacking
Web App Attack
๐ซ๐ฎ
bittiguru.fi
2026-01-15 05:00:59
(5 months ago)
68.178.164.130 - [15/Jan/2026:07:00:23 +0200] "POST /xmlrpc.php HTTP/2.0" 404 21504 "-" "Mozilla/5.0 ...
show more
68.178.164.130 - [15/Jan/2026:07:00:23 +0200] "POST /xmlrpc.php HTTP/2.0" 404 21504 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; Touch; TBTE; rv:11.0) like Gecko" "3.67"
68.178.164.130 - [15/Jan/2026:07:00:58 +0200] "POST /xmlrpc.php HTTP/2.0" 404 15334 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:60.0) Gecko/20100101 Firefox/60.0" "4.88"
...
show less
Hacking
Brute-Force
Web App Attack
๐ฉ๐ช
Spidrweb.co.uk
2026-01-15 04:05:43
(5 months ago)
Brute-Force WordPress attack (155.98)
Web App Attack
๐จ๐ฆ
1gz
2026-01-15 03:57:04
(5 months ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/2 (POST method ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/2 (POST method)
Endpoint: /xmlrpc.php
UA: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.186 Safari/537.36 OPR/51.0.2830.55
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
Anonymous
2026-01-15 03:40:09
(5 months ago)
IP banned by Fail2Ban in jail nginx-abusive-ips
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
[email protected]
2026-01-15 03:31:58
(5 months ago)
Fail2Ban jail apache-json-scanners detected activity on 2026-01-15T03:31:58Z
Brute-Force
๐บ๐ธ
[email protected]
2026-01-15 03:15:52
(5 months ago)
Fail2Ban jail apache-json-scanners detected activity on 2026-01-15T03:15:52Z
Brute-Force