🇩🇪
stinpriza
2026-10-27 07:55:59
(14 hours ago)
Web App Attack
Web App Attack
🇺🇸
lostswordfish.com
2026-10-27 07:30:08
(14 hours ago)
Wordfence waf block on fairregistry
Web App Attack
🇺🇸
1gz
2026-10-27 07:16:57
(14 hours ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET metho ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /wp-login.php
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-27 07:03:21
(15 hours ago)
(mod_security) mod_security (id:225170) triggered by 129.212.230.126 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 129.212.230.126 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 03:03:17.219328 2026] [security2:error] [pid 27921:tid 28000] [client 129.212.230.126:63815] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.certifiedebusinessconsultant.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.certifiedebusinessconsultant.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "auBMtTi9q0WUW-2u4OJajAAAAgk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-10-27 07:01:33
(15 hours ago)
Web attack/malicious scanning detected
Web App Attack
2026-10-26 20:46:26
(1 day ago)
(plesk-panel) Failed plesk-panel login with username [redacted]): (CF_ENABLE)
Brute-Force
🇨🇦
Carl
2026-10-25 11:22:42
(2 days ago)
Aggressive web scan
Hacking
Web App Attack
2026-10-25 10:20:20
(2 days ago)
(plesk-panel) Failed plesk-panel login with username [redacted]): (CF_ENABLE)
Brute-Force
2026-10-24 07:06:43
(3 days ago)
(plesk-panel) Failed plesk-panel login with username [redacted]): (CF_ENABLE)
Brute-Force
🇧🇷
Host One
2026-10-23 21:35:03
(4 days ago)
Attack blocked by firewall: hosting control panel login brute-force; WordPress xmlrpc.php abuse. Blo ...
show more
Attack blocked by firewall: hosting control panel login brute-force; WordPress xmlrpc.php abuse. Blocked by firewall on 5 different hosting servers. Protocol TCP, port 80, 443, 2222 (HTTP/HTTPS/DirectAdmin). Automated report.
show less
Brute-Force
Web App Attack
🇬🇧
consul.to
2026-10-23 01:02:49
(4 days ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
TPI-Abuse
2026-10-23 00:22:08
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 129.212.230.126 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 129.212.230.126 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 20:22:00.399504 2026] [security2:error] [pid 3473:tid 3473] [client 129.212.230.126:57635] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||geckoturner.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "geckoturner.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atqoqHlylhaO86z7-UF_0AAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-22 23:37:47
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 129.212.230.126 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 129.212.230.126 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 19:37:42.074575 2026] [security2:error] [pid 32484:tid 32484] [client 129.212.230.126:61642] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||emelecsrl.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "emelecsrl.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atqeRiUlDf7DEb5iGBb5vQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
Saec
2026-10-22 23:36:02
(4 days ago)
Jarvis auto-ban: CF honeypot path /wp-login.php (6× on saec.me)
Port Scan
Web App Attack
🇫🇷
ELYAZ
2026-10-22 23:11:24
(4 days ago)
(wordpress) Failed wordpress login from 129.212.230.126 (SG/Singapore/-): (CF_ENABLE)
Brute-Force
