๐ฉ๐ช
wlt-blocker
2026-10-10 00:11:19
(2 days ago)
Unauthorized access to webpage admin
Web App Attack
๐บ๐ธ
้ฌผๅฝฑ233
2026-09-21 21:00:46
(2 weeks ago)
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0. ...
show more
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36
show less
Bad Web Bot
๐ฉ๐ช
nyuuzyou
2026-09-08 13:46:00
(1 month ago)
Client failed challenge verification, marked as suspicious. HTTP request received over TCP on applic ...
show more
Client failed challenge verification, marked as suspicious. HTTP request received over TCP on application ports 80/443. Observed 2026-09-08T13:46:00Z.
show less
Bad Web Bot
๐ณ๐ด
jad-abuse
2026-08-17 21:02:18
(1 month ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: xmlrpc. O ...
show more
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: xmlrpc. Observed by 1 sensor(s); 1 hits.
show less
Brute-Force
Web App Attack
Anonymous
2026-08-06 02:00:36
(2 months ago)
Large-scale coordinated botnet (1M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/S ...
show more
Large-scale coordinated botnet (1M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky); Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan) employed by Angara Technologies Group | Attack Signature Blocked: /wishlist/index/add/product/10971/form_key/jXzXSvGLVX3FoLP7/ | UA: Mozilla/5.0 (Windows NT 5.1; ps-AF; rv:1.9.0.20) Gecko/4608-09-12 06:46:31.270874 Firefox/15.0 | (Magento Site)
show less
Hacking
Bad Web Bot
Web App Attack
๐บ๐ธ
kosada.com
2026-07-27 21:42:08
(2 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
๐บ๐ธ
kosada.com
2026-07-03 13:58:55
(3 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
๐จ๐ฆ
1gz
2026-06-14 04:52:39
(3 months ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET metho ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /maqedoni/kjo-sht-deklarata-e-ali-ahmetit-pasi-votoi-n-zajaz/275592/
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-06-03 16:18:16
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 149.50.211.157 (unn-149-50-211-157.datapacket.c ...
show more
(mod_security) mod_security (id:225170) triggered by 149.50.211.157 (unn-149-50-211-157.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 12:18:11.486194 2026] [security2:error] [pid 8518:tid 8540] [client 149.50.211.157:61744] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mysticscon.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mysticscon.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiBTwzG851-ijmor7gKmWgAAAJM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-03 15:03:40
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 149.50.211.157 (unn-149-50-211-157.datapacket.c ...
show more
(mod_security) mod_security (id:225170) triggered by 149.50.211.157 (unn-149-50-211-157.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 11:03:37.280580 2026] [security2:error] [pid 9933:tid 9997] [client 149.50.211.157:33905] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||managementlaw.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "managementlaw.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiBCSVr_YRjuCcDHeqNRZgAAAYU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ฆ
1gz
2026-03-30 00:38:03
(6 months ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET metho ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /lajme/bota/papa-leo-xiv-kritikon-ata-qe-jane-perfshire-ne-lufte-zoti-i-refuzon-lutjet-e-udheheqesve/868579/
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.3713.147 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
Anonymous
2025-11-26 17:44:53
(10 months ago)
This IP was involved in an authentication attack on 2025-11-26T17:39:48.955213+00:00
Brute-Force
Exploited Host
Anonymous
2025-11-22 15:15:11
(10 months ago)
scanning http requests from known botnet
Web App Attack
๐ฆ๐บ
oncord
2025-10-29 05:37:16
(11 months ago)
Form spam
Web Spam
๐ฉ๐ช
FeG Deutschland
2025-10-13 03:32:54
(11 months ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 28
Exploited Host
Web App Attack