Anonymous
2025-09-13 23:02:13
(9 months ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
๐บ๐ธ
TPI-Abuse
2025-08-27 14:41:22
(9 months ago)
(mod_security) mod_security (id:225170) triggered by 154.94.14.84 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 154.94.14.84 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 27 10:41:18.715515 2025] [security2:error] [pid 9715:tid 9715] [client 154.94.14.84:22807] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gonzalez.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gonzalez.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aK8ZDovBXzsp1NzUi_vIbgAAACk"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
maxxsense
2025-08-14 12:16:27
(10 months ago)
(wordpress) Failed wordpress login from 154.94.14.84 (-)
Brute-Force
Anonymous
2025-08-13 08:48:03
(10 months ago)
Malicious activity detected
Hacking
Web App Attack
Anonymous
2025-08-02 01:07:32
(10 months ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
๐ฉ๐ช
uhlhosting
2025-07-16 10:19:36
(11 months ago)
conscioussoldiers.com 154.94.14.84 - - [16/Jul/2025:12:19:34.546279 +0200] "GET /wp-admin/plugin-ins ...
show more
conscioussoldiers.com 154.94.14.84 - - [16/Jul/2025:12:19:34.546279 +0200] "GET /wp-admin/plugin-install.php HTTP/2.0" 403 2491 "-" "-" aHd8tv9ecr0X6VQrfjt8JQABRg4 "-" /apache/20250716/20250716-1219/20250716-121934-aHd8tv9ecr0X6VQrfjt8JQABRg4 0 2130 md5:27628d6b0b066b59686cf67399862f8d
conscioussoldiers.com 154.94.14.84 - - [16/Jul/2025:12:19:34.717450 +0200] "GET /wp-admin/plugin-install.php HTTP/2.0" 403 2491 "-" "-" aHd8tv9ecr0X6VQrfjt8JgABUxc "-" /apache/20250716/20250716-1219/20250716-121934-aHd8tv9ecr0X6VQrfjt8JgABUxc 0 2130 md5:9de6de32a63fa927102a525c99b0ca43
conscioussoldiers.com 154.94.14.84 - - [16/Jul/2025:12:19:34.859359 +0200] "GET /wp-admin/plugin-install.php HTTP/2.0" 403 2491 "-" "-" aHd8tv9ecr0X6VQrfjt8JwABSxk "-" /apache/20250716/20250716-1219/20250716-121934-aHd8tv9ecr0X6VQrfjt8JwABSxk 0 2130 md5:19ae723e951d11f8513e3ae0daf9d5d8
conscioussoldiers.com 154.94.14.84 - - [16/Jul/2025:12:19:34.991571 +0200] "GET /wp-admin/plugin-install.php HTTP/2.0" 403 2491 "-" "-"
...
show less
DDoS Attack
Brute-Force
Anonymous
2025-07-16 06:42:08
(11 months ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
๐ต๐ฑ
sefinek.net
2025-07-04 09:38:45
(11 months ago)
Triggered Cloudflare WAF (firewallCustom) from DE.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show more
Triggered Cloudflare WAF (firewallCustom) from DE.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 YaBrowser/22.7.0 Yowser/2.5 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐บ๐ธ
nationaleventpros.com
2025-06-23 19:04:42
(11 months ago)
WordPress login attempt
Brute-Force
Anonymous
2025-06-19 09:19:28
(11 months ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
๐ต๐ฑ
sefinek.net
2025-06-12 04:15:37
(1 year ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Vivaldi/5.3.2679.68
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐ฆ๐บ
MAGIC
2025-06-12 03:08:11
(1 year ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
๐ป๐ณ
Xuan Can
2025-06-07 05:04:02
(1 year ago)
(mod_security) mod_security (id:6) triggered by 154.94.14.84 (-): 1 in the last 3600 secs; Ports: 80 ...
show more
(mod_security) mod_security (id:6) triggered by 154.94.14.84 (-): 1 in the last 3600 secs; Ports: 80,443; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 07 12:03:54.396399 2025] [security2:error] [pid 10973:tid 11001] [client 154.94.14.84:0] ModSecurity: Access denied with connection close (phase 2). Pattern match "wp-login.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "62"] [id "6"] [severity "CRITICAL"] [hostname "kb.pavietnam.vn"] [uri "/wp-login.php"] [unique_id "aEPIOnljATv7p-NFfd1WjwAAAME"], referer: https://kb.pavietnam.vn/pingback-va-trackback-trong-wordpress-la-gi.html
show less
Brute-Force
SSH
๐ต๐ฑ
sefinek.net
2025-06-01 06:54:57
(1 year ago)
Triggered Cloudflare WAF (firewallCustom) from ES.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show more
Triggered Cloudflare WAF (firewallCustom) from ES.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /genshin-stella-mod
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:114.0) Gecko/20100101 Firefox/114.0
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
Anonymous
2025-05-30 09:09:48
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH