|
🇩🇪
Erpelstolz
|
|
external host: 188.166.29.155 - - [05/Nov/2026:21:03:36 +0100] "GET /wp-login.php HTTP/1.1" 301 313 "-" "Mozilla/5.0" CF-Ray:- CF-IP:-
|
Web App Attack
|
|
Anonymous
|
|
DNS AXFR Attempt
|
DNS Compromise
|
|
🇩🇪
www.Examensfragen.de
|
|
|
Web Spam
Bad Web Bot
|
|
🇺🇸
Charlesiv
|
|
Triggered Cloudflare WAF (firewallCustom) from NL.
Action taken: BLOCK
ASN: 14061 (DIGITALOCEAN-ASN - DigitalOcean, LLC)
Protocol: HTTP/1.1 (GET method)
Endpoint: /wp-includes/rest-api/fields/cache/
Timestamp: 2026-02-21T23:40:28Z
Ray ID: 9d1a16c619c ...
show more
Triggered Cloudflare WAF (firewallCustom) from NL.
Action taken: BLOCK
ASN: 14061 (DIGITALOCEAN-ASN - DigitalOcean, LLC)
Protocol: HTTP/1.1 (GET method)
Endpoint: /wp-includes/rest-api/fields/cache/
Timestamp: 2026-02-21T23:40:28Z
Ray ID: 9d1a16c619c4f5eb
UA: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36Team Anon Force
show less
|
Bad Web Bot
|
|
Anonymous
|
|
Blocked: Reason='Vulnerability probing — PHP scan detected (14/60 min)'; Requests=14
|
Port Scan
|
|
🇺🇸
Charlesiv
|
|
Triggered Cloudflare WAF (firewallCustom) from NL.
Action taken: BLOCK
ASN: 14061 (DIGITALOCEAN-ASN - DigitalOcean, LLC)
Protocol: HTTP/1.1 (GET method)
Endpoint: /dropdown.php
Timestamp: 2026-02-21T17:10:29Z
Ray ID: 9d17db807c53d7a1
UA: Mozilla/5.0 ...
show more
Triggered Cloudflare WAF (firewallCustom) from NL.
Action taken: BLOCK
ASN: 14061 (DIGITALOCEAN-ASN - DigitalOcean, LLC)
Protocol: HTTP/1.1 (GET method)
Endpoint: /dropdown.php
Timestamp: 2026-02-21T17:10:29Z
Ray ID: 9d17db807c53d7a1
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36
show less
|
Bad Web Bot
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 188.166.29.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 20 23:26:31.327932 2026] [security2:error] [pid 4029:tid 4029] [client 188.166.29.155:58445] M ...
show more
(mod_security) mod_security (id:210492) triggered by 188.166.29.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 20 23:26:31.327932 2026] [security2:error] [pid 4029:tid 4029] [client 188.166.29.155:58445] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.voodooshop.com"] [uri "/wp-config.php"] [unique_id "aZkz936tcrtYuGEGcWe5igAAAAk"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 188.166.29.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 20 18:25:04.433431 2026] [security2:error] [pid 22830:tid 22830] [client 188.166.29.155:51616] ...
show more
(mod_security) mod_security (id:210492) triggered by 188.166.29.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 20 18:25:04.433431 2026] [security2:error] [pid 22830:tid 22830] [client 188.166.29.155:51616] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bernsteinip.com"] [uri "/wp-config.php"] [unique_id "aZjtUJFWLIa8Gk3adWbbjAAAAAo"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
Charlesiv
|
|
Triggered Cloudflare WAF (firewallCustom) from NL.
Action taken: BLOCK
ASN: 14061 (DIGITALOCEAN-ASN - DigitalOcean, LLC)
Protocol: HTTP/1.1 (GET method)
Endpoint: /lib/fileman/index.html
Timestamp: 2026-02-20T20:44:21Z
Ray ID: 9d10d7695fe829d3
UA: Mo ...
show more
Triggered Cloudflare WAF (firewallCustom) from NL.
Action taken: BLOCK
ASN: 14061 (DIGITALOCEAN-ASN - DigitalOcean, LLC)
Protocol: HTTP/1.1 (GET method)
Endpoint: /lib/fileman/index.html
Timestamp: 2026-02-20T20:44:21Z
Ray ID: 9d10d7695fe829d3
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36
show less
|
Bad Web Bot
|
|
Anonymous
|
|
Multiple web server 400 error codes from same source ip
|
Web App Attack
|
|
🇫🇷
Stylottica
|
|
PrestaShop Security Module: Calls WordPress paths probing known vulnerabilities
|
Web App Attack
|
|
🇺🇸
Charlesiv
|
|
Triggered Cloudflare WAF (firewallCustom) from NL.
Action taken: BLOCK
ASN: 14061 (DIGITALOCEAN-ASN - DigitalOcean, LLC)
Protocol: HTTP/1.1 (GET method)
Endpoint: /dropdown.php
Timestamp: 2026-02-20T12:05:14Z
Ray ID: 9d0ddefc7d04339e
UA: Mozilla/5.0 ...
show more
Triggered Cloudflare WAF (firewallCustom) from NL.
Action taken: BLOCK
ASN: 14061 (DIGITALOCEAN-ASN - DigitalOcean, LLC)
Protocol: HTTP/1.1 (GET method)
Endpoint: /dropdown.php
Timestamp: 2026-02-20T12:05:14Z
Ray ID: 9d0ddefc7d04339e
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36
show less
|
Bad Web Bot
|
|
🇧🇪
cmbplf
|
|
342 requests with url.path *.alfa
|
Brute-Force
Bad Web Bot
|
|
🇳🇱
EGP Abuse Dept
|
|
Unauthorized connection to MySQL port 3306
|
Port Scan
Hacking
|
|
🇩🇪
Admins@FBN
|
|
FW-PortScan: Traffic Blocked srcport=61009 dstport=22
|
Port Scan
Hacking
SSH
|
