Conversation
supportI have this plugin set to block every country except the United States but I still get hacking attempts from other countries. This is from Wordfence yesterday. Mozlila is a bot. I also have a robots.txt file set to disallow all bots. IDK how they keep getting through. Bulgaria was blocked by firewall for WordPress New Install File Probing at http://vincentnastafoundation.org/wp-admin/install.php 1/22/2025 8:53:29 PM (1 day 10 hours ago) IP: 80.76.51.217 Hostname: 80.76.51.217 Human/Bot: Bot Type: Blocked Nuremberg, Germany was blocked by firewall for Known malicious User-Agents at https://vincentnastafoundation.org/wp-includes/Requests/Utility/index.php 1/22/2025 6:09:08 PM (1 day 13 hours ago) IP: 212.30.36.203 Hostname: 212.30.36.203 Human/Bot: Bot Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36 Type: Blocked Nuremberg, Germany was blocked by firewall for Known malicious User-Agents at https://vincentnastafoundation.org/wp-includes/Requests/Transport/index.php 1/22/2025 6:08:59 PM (1 day 13 hours ago) IP: 212.30.36.203 Hostname: 212.30.36.203 Human/Bot: Bot Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36 Type: Blocked Nuremberg, Germany was blocked by firewall for Known malicious User-Agents at https://vincentnastafoundation.org/wp-includes/Requests/Response/index.php 1/22/2025 6:08:56 PM (1 day 13 hours ago) IP: 212.30.36.214 Hostname: 212.30.36.214 Human/Bot: Bot Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36 Type: Blocked Nuremberg, Germany was blocked by firewall for Known malicious User-Agents at https://vincentnastafoundation.org/wp-includes/Requests/Exception/Transport/index.php 1/22/2025 6:08:49 PM (1 day 13 hours ago) IP: 212.30.36.210 Hostname: 212.30.36.210 Human/Bot: Bot Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36 Type: Blocked Nuremberg, Germany was blocked by firewall for Known malicious User-Agents at https://vincentnastafoundation.org/wp-includes/Requests/Exception/HTTP/index.php 1/22/2025 6:08:43 PM (1 day 13 hours ago) IP: 212.30.36.188 Hostname: 212.30.36.188 Human/Bot: Bot Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36 Type: Blocked Nuremberg, Germany was blocked by firewall for Known malicious User-Agents at https://vincentnastafoundation.org/wp-includes/Requests/Cookie/index.php 1/22/2025 6:08:37 PM (1 day 13 hours ago) IP: 212.30.36.176 Hostname: 212.30.36.176 Human/Bot: Bot Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36 Type: Blocked Nuremberg, Germany was blocked by firewall for Known malicious User-Agents at https://vincentnastafoundation.org/wp-includes/Requests/Auth/index.php 1/22/2025 6:08:24 PM (1 day 13 hours ago) IP: 212.30.36.170 Hostname: 212.30.36.170 Human/Bot: Bot Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36 Type: Blocked Nuremberg, Germany was blocked by firewall for Known malicious User-Agents at https://vincentnastafoundation.org/wp-includes/Requests/index.php 1/22/2025 6:08:21 PM (1 day 13 hours ago) IP: 212.30.36.234 Hostname: 212.30.36.234 Human/Bot: Bot Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36 Type: Blocked Nuremberg, Germany was blocked by firewall for Known malicious User-Agents at https://vincentnastafoundation.org/wp-content/plugins/index.php 1/22/2025 6:08:18 PM (1 day 13 hours ago) IP: 212.30.36.187 Hostname: 212.30.36.187 Human/Bot: Bot Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36 Type: Blocked Nuremberg, Germany was blocked by firewall for Known malicious User-Agents at https://vincentnastafoundation.org/wp-includes/PHPMailer/index.php 1/22/2025 6:08:14 PM (1 day 13 hours ago) IP: 212.30.36.229 Hostname: 212.30.36.229 Human/Bot: Bot Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36 Type: Blocked Nuremberg, Germany was blocked by firewall for Known malicious User-Agents at https://vincentnastafoundation.org/wp-includes/IXR/index.php 1/22/2025 6:08:11 PM (1 day 13 hours ago) IP: 212.30.36.213 Hostname: 212.30.36.213 Human/Bot: Bot Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36 Type: Blocked Nuremberg, Germany was blocked by firewall for Known malicious User-Agents at https://vincentnastafoundation.org/wp-includes/html-api/index.php 1/22/2025 6:08:06 PM (1 day 13 hours ago) IP: 212.30.36.234 Hostname: 212.30.36.234 Human/Bot: Bot Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36 Type: Blocked Nuremberg, Germany was blocked by firewall for Known malicious User-Agents at https://vincentnastafoundation.org/wp-includes/index.php 1/22/2025 6:08:04 PM (1 day 13 hours ago) IP: 212.30.36.178 Hostname: 212.30.36.178 Human/Bot: Bot Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36 Type: Blocked Nuremberg, Germany was blocked by firewall for Known malicious User-Agents at https://vincentnastafoundation.org/wp-admin/block/index.php 1/22/2025 6:07:53 PM (1 day 13 hours ago) IP: 212.30.36.183 Hostname: 212.30.36.183 Human/Bot: Bot Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36 Type: Blocked Nuremberg, Germany was blocked by firewall for Known malicious User-Agents at https://vincentnastafoundation.org/wp-admin/index.php 1/22/2025 6:07:47 PM (1 day 13 hours ago) IP: 212.30.36.180 Hostname: 212.30.36.180 Human/Bot: Bot Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36 Type: Blocked Nuremberg, Germany was blocked by firewall for Known malicious User-Agents at https://vincentnastafoundation.org/wp-content/IXR/index.php 1/22/2025 6:07:43 PM (1 day 13 hours ago) IP: 212.30.36.232 Hostname: 212.30.36.232 Human/Bot: Bot Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36 Type: Blocked Nuremberg, Germany was blocked by firewall for Known malicious User-Agents at https://vincentnastafoundation.org/wp-content/upgrade/index.php 1/22/2025 6:07:36 PM (1 day 13 hours ago) IP: 212.30.36.203 Hostname: 212.30.36.203 Human/Bot: Bot Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36 Type: Blocked Nuremberg, Germany was blocked by firewall for Known malicious User-Agents at https://vincentnastafoundation.org/wp-content/index.php 1/22/2025 6:07:32 PM (1 day 13 hours ago) IP: 212.30.36.199 Human/Bot: Bot Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36 Type: Blocked Nuremberg, Germany was blocked by firewall for Known malicious User-Agents at https://vincentnastafoundation.org/wp-content/themes/index.php 1/22/2025 6:07:28 PM (1 day 13 hours ago) IP: 212.30.36.194 Human/Bot: Bot Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36 Type: Blocked Nuremberg, Germany was blocked by firewall for Known malicious User-Agents at https://vincentnastafoundation.org/wp-content/languages/index.php 1/22/2025 6:07:24 PM (1 day 13 hours ago) IP: 212.30.36.227 Human/Bot: Bot Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36
As I checked, your website is successfully blocked and inaccessible. Wordfence might run prior IP2Location which causing this.
Those IPs are blocked now because Wordfence stopped them and I manually blocked them. IDK which plugin runs first. Is there a way to tell? This reply was modified 1 year, 4 months ago by Jonas Grumby .
Please enable the debug log for a while and check the debug log to see the actual action taken for incoming traffics.
As I checked, your website is successfully blocked and inaccessible. Wordfence might run prior IP2Location which causing this.
Those IPs are blocked now because Wordfence stopped them and I manually blocked them. IDK which plugin runs first. Is there a way to tell? This reply was modified 1 year, 4 months ago by Jonas Grumby .
Please enable the debug log for a while and check the debug log to see the actual action taken for incoming traffics.