2026-06-04 02:44:03
(7 hours ago)
Bot / scanning and/or hacking attempts: GET /wp-login.php HTTP/1.1, GET /administrator/ HTTP/1.1
Hacking
Web App Attack
🇧🇪
taivas.nl
2026-06-03 22:32:10
(11 hours ago)
Wordpress_login_attempts
Bad Web Bot
🇪🇸
alferez
2026-06-03 19:29:31
(14 hours ago)
Searching hacked php files
Hacking
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-06-03 19:20:53
(14 hours ago)
(mod_security) mod_security (id:225170) triggered by 178.128.59.184 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 178.128.59.184 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 15:20:48.045181 2026] [security2:error] [pid 15621:tid 15621] [client 178.128.59.184:54304] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||talentstar.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "talentstar.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiB-kFxdn10kR4FfZLAfWAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-06-03 17:25:38
(16 hours ago)
(wordpress) Apache: Failed WordPress login from 178.128.59.184 (SG/Singapore/-): 10 in the last 3600 ...
show more
(wordpress) Apache: Failed WordPress login from 178.128.59.184 (SG/Singapore/-): 10 in the last 3600 secs (0-196)
show less
Hacking
🇩🇪
konseptit
2026-06-03 16:01:51
(18 hours ago)
(wordpress) Failed wordpress login from 178.128.59.184 (SG/Singapore/-)
Brute-Force
🇦🇺
paulshipley.com.au
2026-06-03 15:58:15
(18 hours ago)
talentaymerch.com.au:443 178.128.59.184 - - [04/Jun/2026:01:58:13 +1000] "GET /?author=1 HTTP/1.1" 4 ...
show more
talentaymerch.com.au:443 178.128.59.184 - - [04/Jun/2026:01:58:13 +1000] "GET /?author=1 HTTP/1.1" 404 375842 "https://www.facebook.com/" "Mozilla/5.0 (Windows NT 11.0; Win64; x64; rv:118.0) Gecko/20100101 Firefox/118.0"
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-06-03 15:32:58
(18 hours ago)
(mod_security) mod_security (id:225170) triggered by 178.128.59.184 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 178.128.59.184 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 11:32:50.298992 2026] [security2:error] [pid 20801:tid 20801] [client 178.128.59.184:59092] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||takeapawsboston.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "takeapawsboston.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiBJIkiiJb5DaYiq1F7m0gAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
wlt-blocker
2026-06-03 15:15:30
(18 hours ago)
Unauthorized access to webpage admin
Web App Attack
🇺🇸
mnsf
2026-06-03 15:05:52
(19 hours ago)
Login Too Frequent (7)
Brute-Force
Web App Attack
🇳🇱
ConsulHosting
2026-06-03 14:44:24
(19 hours ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
🇺🇸
TPI-Abuse
2026-06-03 14:39:48
(19 hours ago)
(mod_security) mod_security (id:225170) triggered by 178.128.59.184 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 178.128.59.184 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 10:39:42.025824 2026] [security2:error] [pid 27668:tid 27668] [client 178.128.59.184:63024] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||talkingmess.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "talkingmess.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiA8rjFPBJ7FdDhQpXKM2wAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-06-03 14:39:36
(19 hours ago)
(wordpress) Apache: Failed WordPress login from 178.128.59.184 (SG/Singapore/-): 10 in the last 3600 ...
show more
(wordpress) Apache: Failed WordPress login from 178.128.59.184 (SG/Singapore/-): 10 in the last 3600 secs (0-193)
show less
Hacking
🇨🇭
Sophie Nina
2026-06-03 11:10:01
(22 hours ago)
Automatically blocked by server
Fraud Orders
🇨🇦
1gz
2026-06-03 00:46:00
(1 day ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET metho ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /administrator/
UA: Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.130 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot