Not really working

  • I have this plugin set to block every country except the United States but I still get hacking attempts from other countries. This is from Wordfence yesterday. Mozlila is a bot. I also have a robots.txt file set to disallow all bots. IDK how they keep getting through.

    Bulgaria was blocked by firewall for WordPress New Install File Probing at https://vincentnastafoundation.org/wp-admin/install.php
    1/22/2025 8:53:29 PM (1 day 10 hours ago)
    IP: 80.76.51.217 Hostname: 80.76.51.217
    Human/Bot: Bot
    Type: Blocked
    Nuremberg, Germany was blocked by firewall for Known malicious User-Agents at https://vincentnastafoundation.org/wp-includes/Requests/Utility/index.php
    1/22/2025 6:09:08 PM (1 day 13 hours ago)
    IP: 212.30.36.203 Hostname: 212.30.36.203
    Human/Bot: Bot
    Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36
    Type: Blocked
    Nuremberg, Germany was blocked by firewall for Known malicious User-Agents at https://vincentnastafoundation.org/wp-includes/Requests/Transport/index.php
    1/22/2025 6:08:59 PM (1 day 13 hours ago)
    IP: 212.30.36.203 Hostname: 212.30.36.203
    Human/Bot: Bot
    Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36
    Type: Blocked
    Nuremberg, Germany was blocked by firewall for Known malicious User-Agents at https://vincentnastafoundation.org/wp-includes/Requests/Response/index.php
    1/22/2025 6:08:56 PM (1 day 13 hours ago)
    IP: 212.30.36.214 Hostname: 212.30.36.214
    Human/Bot: Bot
    Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36
    Type: Blocked
    Nuremberg, Germany was blocked by firewall for Known malicious User-Agents at https://vincentnastafoundation.org/wp-includes/Requests/Exception/Transport/index.php
    1/22/2025 6:08:49 PM (1 day 13 hours ago)
    IP: 212.30.36.210 Hostname: 212.30.36.210
    Human/Bot: Bot
    Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36
    Type: Blocked
    Nuremberg, Germany was blocked by firewall for Known malicious User-Agents at https://vincentnastafoundation.org/wp-includes/Requests/Exception/HTTP/index.php
    1/22/2025 6:08:43 PM (1 day 13 hours ago)
    IP: 212.30.36.188 Hostname: 212.30.36.188
    Human/Bot: Bot
    Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36
    Type: Blocked
    Nuremberg, Germany was blocked by firewall for Known malicious User-Agents at https://vincentnastafoundation.org/wp-includes/Requests/Cookie/index.php
    1/22/2025 6:08:37 PM (1 day 13 hours ago)
    IP: 212.30.36.176 Hostname: 212.30.36.176
    Human/Bot: Bot
    Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36
    Type: Blocked
    Nuremberg, Germany was blocked by firewall for Known malicious User-Agents at https://vincentnastafoundation.org/wp-includes/Requests/Auth/index.php
    1/22/2025 6:08:24 PM (1 day 13 hours ago)
    IP: 212.30.36.170 Hostname: 212.30.36.170
    Human/Bot: Bot
    Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36
    Type: Blocked
    Nuremberg, Germany was blocked by firewall for Known malicious User-Agents at https://vincentnastafoundation.org/wp-includes/Requests/index.php
    1/22/2025 6:08:21 PM (1 day 13 hours ago)
    IP: 212.30.36.234 Hostname: 212.30.36.234
    Human/Bot: Bot
    Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36
    Type: Blocked
    Nuremberg, Germany was blocked by firewall for Known malicious User-Agents at https://vincentnastafoundation.org/wp-content/plugins/index.php
    1/22/2025 6:08:18 PM (1 day 13 hours ago)
    IP: 212.30.36.187 Hostname: 212.30.36.187
    Human/Bot: Bot
    Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36
    Type: Blocked
    Nuremberg, Germany was blocked by firewall for Known malicious User-Agents at https://vincentnastafoundation.org/wp-includes/PHPMailer/index.php
    1/22/2025 6:08:14 PM (1 day 13 hours ago)
    IP: 212.30.36.229 Hostname: 212.30.36.229
    Human/Bot: Bot
    Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36
    Type: Blocked
    Nuremberg, Germany was blocked by firewall for Known malicious User-Agents at https://vincentnastafoundation.org/wp-includes/IXR/index.php
    1/22/2025 6:08:11 PM (1 day 13 hours ago)
    IP: 212.30.36.213 Hostname: 212.30.36.213
    Human/Bot: Bot
    Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36
    Type: Blocked
    Nuremberg, Germany was blocked by firewall for Known malicious User-Agents at https://vincentnastafoundation.org/wp-includes/html-api/index.php
    1/22/2025 6:08:06 PM (1 day 13 hours ago)
    IP: 212.30.36.234 Hostname: 212.30.36.234
    Human/Bot: Bot
    Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36
    Type: Blocked
    Nuremberg, Germany was blocked by firewall for Known malicious User-Agents at https://vincentnastafoundation.org/wp-includes/index.php
    1/22/2025 6:08:04 PM (1 day 13 hours ago)
    IP: 212.30.36.178 Hostname: 212.30.36.178
    Human/Bot: Bot
    Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36
    Type: Blocked
    Nuremberg, Germany was blocked by firewall for Known malicious User-Agents at https://vincentnastafoundation.org/wp-admin/block/index.php
    1/22/2025 6:07:53 PM (1 day 13 hours ago)
    IP: 212.30.36.183 Hostname: 212.30.36.183
    Human/Bot: Bot
    Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36
    Type: Blocked
    Nuremberg, Germany was blocked by firewall for Known malicious User-Agents at https://vincentnastafoundation.org/wp-admin/index.php
    1/22/2025 6:07:47 PM (1 day 13 hours ago)
    IP: 212.30.36.180 Hostname: 212.30.36.180
    Human/Bot: Bot
    Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36
    Type: Blocked
    Nuremberg, Germany was blocked by firewall for Known malicious User-Agents at https://vincentnastafoundation.org/wp-content/IXR/index.php
    1/22/2025 6:07:43 PM (1 day 13 hours ago)
    IP: 212.30.36.232 Hostname: 212.30.36.232
    Human/Bot: Bot
    Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36
    Type: Blocked
    Nuremberg, Germany was blocked by firewall for Known malicious User-Agents at https://vincentnastafoundation.org/wp-content/upgrade/index.php
    1/22/2025 6:07:36 PM (1 day 13 hours ago)
    IP: 212.30.36.203 Hostname: 212.30.36.203
    Human/Bot: Bot
    Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36
    Type: Blocked
    Nuremberg, Germany was blocked by firewall for Known malicious User-Agents at https://vincentnastafoundation.org/wp-content/index.php
    1/22/2025 6:07:32 PM (1 day 13 hours ago)
    IP: 212.30.36.199
    Human/Bot: Bot
    Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36
    Type: Blocked
    Nuremberg, Germany was blocked by firewall for Known malicious User-Agents at https://vincentnastafoundation.org/wp-content/themes/index.php
    1/22/2025 6:07:28 PM (1 day 13 hours ago)
    IP: 212.30.36.194
    Human/Bot: Bot
    Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36
    Type: Blocked
    Nuremberg, Germany was blocked by firewall for Known malicious User-Agents at https://vincentnastafoundation.org/wp-content/languages/index.php
    1/22/2025 6:07:24 PM (1 day 13 hours ago)
    IP: 212.30.36.227
    Human/Bot: Bot
    Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36
Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Author ip2location

    (@ip2location)

    As I checked, your website is successfully blocked and inaccessible.

    Wordfence might run prior IP2Location which causing this.

    Thread Starter Jonas Grumby

    (@ss_minnow)

    Those IPs are blocked now because Wordfence stopped them and I manually blocked them. IDK which plugin runs first. Is there a way to tell?

    • This reply was modified 1 month, 3 weeks ago by Jonas Grumby.
    Plugin Author ip2location

    (@ip2location)

    Please enable the debug log for a while and check the debug log to see the actual action taken for incoming traffics.

Viewing 3 replies - 1 through 3 (of 3 total)
  • You must be logged in to reply to this topic.