Probing for a WordPress login against a web application, blocked at the host firewall.
fail2ban jail ...
show moreProbing for a WordPress login against a web application, blocked at the host firewall.
fail2ban jail: cartt-probe.
Sample requests, with our own hostnames removed:
195.178.110.31 - - [13/Sep/2026:00:53:12 +1000] "POST /wp-json/batch/v1 HTTP/2" 403 568 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
show less
Probing for a WordPress login against a web application, blocked at the host firewall.
fail2ban jail ...
show moreProbing for a WordPress login against a web application, blocked at the host firewall.
fail2ban jail: cartt-probe.
Sample requests, with our own hostnames removed:
52.167.144.157 - - [13/Sep/2026:02:11:07 +1000] "GET /wp-content/themes/bluediamond-v1-08/include/plugin/blog-item.php HTTP/2" 403 1242 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36"
show less
Hammering the XML-RPC endpoint against a web application, blocked at the host firewall.
fail2ban jai ...
show moreHammering the XML-RPC endpoint against a web application, blocked at the host firewall.
fail2ban jail: cartt-probe.
Sample requests, with our own hostnames removed:
149.40.56.25 - - [13/Sep/2026:02:29:50 +1000] "POST /xmlrpc.php HTTP/1.1" 403 1242 "-" "WordPress.com; https://wordpress.com"
show less
Hammering the XML-RPC endpoint against a web application, blocked at the host firewall.
fail2ban jai ...
show moreHammering the XML-RPC endpoint against a web application, blocked at the host firewall.
fail2ban jail: cartt-probe, js-detector.
Sample requests, with our own hostnames removed:
200.195.5.190 - - [13/Sep/2026:01:02:46 +1000] "POST /xmlrpc.php HTTP/1.1" 403 1242 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.3)"
200.195.5.190 - - [13/Sep/2026:01:02:57 +1000] "POST /xmlrpc.php HTTP/1.1" 403 1242 "-" "Jetpack by WordPress.com"
show less
Hammering the XML-RPC endpoint against a web application, blocked at the host firewall.
fail2ban jai ...
show moreHammering the XML-RPC endpoint against a web application, blocked at the host firewall.
fail2ban jail: cartt-probe, js-detector.
Sample requests, with our own hostnames removed:
37.19.221.67 - - [13/Sep/2026:02:34:47 +1000] "POST /xmlrpc.php HTTP/1.1" 403 1242 "-" "Jetpack/12.5; WordPress/6.4; http://site95497366.com"
show less
Hammering the XML-RPC endpoint against a web application, blocked at the host firewall.
fail2ban jai ...
show moreHammering the XML-RPC endpoint against a web application, blocked at the host firewall.
fail2ban jail: cartt-probe, js-detector.
Sample requests, with our own hostnames removed:
149.40.58.5 - - [13/Sep/2026:02:39:47 +1000] "POST /xmlrpc.php HTTP/1.1" 403 1242 "-" "WordPress.com; https://wordpress.com"
show less
Hunting for config files and secrets against a web application, blocked at the host firewall.
fail2b ...
show moreHunting for config files and secrets against a web application, blocked at the host firewall.
fail2ban jail: js-detector.
Sample requests, with our own hostnames removed:
172.86.81.83 - - [13/Sep/2026:01:05:22 +1000] "GET /.git/config HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (X11; Linux x86_64)"
172.86.81.83 - - [13/Sep/2026:01:41:14 +1000] "GET /.git/config HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (X11; Linux x86_64)"
show less
Hammering the XML-RPC endpoint against a web application, blocked at the host firewall.
fail2ban jai ...
show moreHammering the XML-RPC endpoint against a web application, blocked at the host firewall.
fail2ban jail: cartt-probe, js-detector.
Sample requests, with our own hostnames removed:
37.19.221.87 - - [13/Sep/2026:02:44:46 +1000] "POST /xmlrpc.php HTTP/1.1" 403 1242 "-" "WordPress.com; https://wordpress.com"
show less
Hammering the XML-RPC endpoint against a web application, blocked at the host firewall.
fail2ban jai ...
show moreHammering the XML-RPC endpoint against a web application, blocked at the host firewall.
fail2ban jail: cartt-probe, js-detector.
Sample requests, with our own hostnames removed:
149.40.56.18 - - [13/Sep/2026:02:49:50 +1000] "POST /xmlrpc.php HTTP/1.1" 403 1242 "-" "Jetpack/12.1; WordPress/6.3; http://site43270298.com"
149.40.56.18 - - [13/Sep/2026:02:50:11 +1000] "POST /xmlrpc.php HTTP/1.1" 403 1242 "-" "Jetpack by WordPress.com"
show less
Hammering the XML-RPC endpoint against a web application, blocked at the host firewall.
fail2ban jai ...
show moreHammering the XML-RPC endpoint against a web application, blocked at the host firewall.
fail2ban jail: cartt-probe.
Sample requests, with our own hostnames removed:
177.39.130.228 - - [13/Sep/2026:03:00:46 +1000] "POST /xmlrpc.php HTTP/1.1" 403 1242 "-" "WordPress.com; https://wordpress.com"
show less
Hammering the XML-RPC endpoint against a web application, blocked at the host firewall.
fail2ban jai ...
show moreHammering the XML-RPC endpoint against a web application, blocked at the host firewall.
fail2ban jail: cartt-probe.
Sample requests, with our own hostnames removed:
146.70.194.254 - - [13/Sep/2026:04:02:42 +1000] "GET //xmlrpc.php?rsd HTTP/2" 403 63 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
show less
Hunting for config files and secrets against a web application, blocked at the host firewall.
fail2b ...
show moreHunting for config files and secrets against a web application, blocked at the host firewall.
fail2ban jail: js-detector.
Sample requests, with our own hostnames removed:
172.86.81.81 - - [13/Sep/2026:04:41:57 +1000] "GET /.git/config HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (X11; Linux x86_64)"
172.86.81.81 - - [13/Sep/2026:04:40:26 +1000] "GET /.git/config HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (X11; Linux x86_64)"
show less
Hunting for config files and secrets against a web application, blocked at the host firewall.
fail2b ...
show moreHunting for config files and secrets against a web application, blocked at the host firewall.
fail2ban jail: js-detector.
Sample requests, with our own hostnames removed:
172.86.81.82 - - [13/Sep/2026:01:18:03 +1000] "GET /.git/config HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (X11; Linux x86_64)"
172.86.81.82 - - [13/Sep/2026:01:54:36 +1000] "GET /.git/config HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (X11; Linux x86_64)"
show less
Probing for a WordPress login against a web application, blocked at the host firewall.
Sample reques ...
show moreProbing for a WordPress login against a web application, blocked at the host firewall.
Sample requests, with our own hostnames removed:
216.40.74.133 - 2026-09-13 04:53:07 - Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 - - - /wp-login.php
show less
Probing for a WordPress login against a web application, blocked at the host firewall.
fail2ban jail ...
show moreProbing for a WordPress login against a web application, blocked at the host firewall.
fail2ban jail: cartt-probe.
Sample requests, with our own hostnames removed:
45.148.10.246 - - [13/Sep/2026:05:58:34 +1000] "POST /wp/wp-json/batch/v1 HTTP/2" 403 568 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
show less
Probing for a WordPress login against a web application, blocked at the host firewall.
fail2ban jail ...
show moreProbing for a WordPress login against a web application, blocked at the host firewall.
fail2ban jail: cartt-probe.
Sample requests, with our own hostnames removed:
2600:3c00::2000:2bff:fec5:cd28 - - [13/Sep/2026:05:59:34 +1000] "POST /wordpress/wordpress/wp-json/batch/v1 HTTP/2" 403 568 "-" "WordPress/6.4.3"
show less
Probing for a WordPress login against a web application, blocked at the host firewall.
fail2ban jail ...
show moreProbing for a WordPress login against a web application, blocked at the host firewall.
fail2ban jail: cartt-probe.
Sample requests, with our own hostnames removed:
2600:3c00::2000:3fff:fef2:4374 - - [13/Sep/2026:05:59:32 +1000] "POST /wordpress/blog/wp-json/batch/v1 HTTP/2" 403 568 "-" "WordPress/6.4.3"
show less
Hunting for config files and secrets against a web application, blocked at the host firewall.
fail2b ...
show moreHunting for config files and secrets against a web application, blocked at the host firewall.
fail2ban jail: js-detector.
Sample requests, with our own hostnames removed:
35.199.168.16 - - [13/Sep/2026:06:10:34 +1000] "GET /.git/config HTTP/1.1" 403 1242 "-" "-"
35.199.168.16 - - [13/Sep/2026:06:20:49 +1000] "GET /.git/config HTTP/1.1" 403 1242 "-" "-"
show less
Probing for a WordPress login against a web application, blocked at the host firewall.
fail2ban jail ...
show moreProbing for a WordPress login against a web application, blocked at the host firewall.
fail2ban jail: cartt-probe.
Sample requests, with our own hostnames removed:
62.60.130.230 - - [13/Sep/2026:06:15:06 +1000] "GET /wp-json/ HTTP/2" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
62.60.130.230 - - [11/Sep/2026:18:43:16 +1000] "GET /xmlrpc.php HTTP/2" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
show less
Hammering the XML-RPC endpoint against a web application, blocked at the host firewall.
Sample reque ...
show moreHammering the XML-RPC endpoint against a web application, blocked at the host firewall.
Sample requests, with our own hostnames removed:
84.15.177.94 - 2026-09-13 06:02:02 - WordPress.com; https://wordpress.com - - - /xmlrpc.php
show less
Hunting for config files and secrets against a web application, blocked at the host firewall.
fail2b ...
show moreHunting for config files and secrets against a web application, blocked at the host firewall.
fail2ban jail: js-detector.
Sample requests, with our own hostnames removed:
34.7.67.17 - - [13/Sep/2026:06:47:22 +1000] "GET /.git/config HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.7.67.17 - - [13/Sep/2026:06:47:37 +1000] "GET /api/.env HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
show less
Hunting for config files and secrets against a web application, blocked at the host firewall.
fail2b ...
show moreHunting for config files and secrets against a web application, blocked at the host firewall.
fail2ban jail: js-detector.
Sample requests, with our own hostnames removed:
34.174.220.6 - - [13/Sep/2026:08:14:06 +1000] "GET /.git/config HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.174.220.6 - - [13/Sep/2026:08:14:54 +1000] "GET /.git/config HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
show less
Probing for a WordPress login against a web application, blocked at the host firewall.
Sample reques ...
show moreProbing for a WordPress login against a web application, blocked at the host firewall.
Sample requests, with our own hostnames removed:
65.111.23.203 - 2026-09-13 08:04:51 - Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0 - - - /wp-login.php
show less
Attempting SQL injection against a web application, blocked at the host firewall.
fail2ban jail: sql ...
show moreAttempting SQL injection against a web application, blocked at the host firewall.
fail2ban jail: sqli.
Sample requests, with our own hostnames removed:
193.34.214.59 - - [13/Sep/2026:08:06:01 +1000] "POST /shopping/plastic-closures-misters-pumps/9/1/1?ts=20260913075209%29%3BseleCt%2F%2A%2A%2FSLEep%285%29%23 HTTP/1.1" 500 926 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
show less
Hunting for config files and secrets against a web application, blocked at the host firewall.
fail2b ...
show moreHunting for config files and secrets against a web application, blocked at the host firewall.
fail2ban jail: js-detector.
Sample requests, with our own hostnames removed:
34.50.39.221 - - [13/Sep/2026:09:44:55 +1000] "GET /.git/config HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.50.39.221 - - [13/Sep/2026:09:44:55 +1000] "GET /.env HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
show less
Web App AttackBad Web Bot
By clicking โAccept allโ, you agree to the storing of cookies on your device to remember preferences and
analyze site usage.
Read more
- Required to log into your AbuseIPDB account, and store these cookie preferences.