🇺🇸
TPI-Abuse
2026-06-08 17:40:15
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 216.24.219.192 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.24.219.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 13:40:02.770060 2026] [security2:error] [pid 10794:tid 10794] [client 216.24.219.192:29475] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "f4fbbs.com"] [uri "/wp-includes/images/wp-config.php"] [unique_id "aib-clw5rxdAOMN1b3QomAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-08 14:48:49
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 216.24.219.192 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.24.219.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 10:48:45.539517 2026] [security2:error] [pid 10587:tid 10587] [client 216.24.219.192:20409] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.f40ph.org"] [uri "/wp-content/wp-config.php"] [unique_id "aibWTeQmUp2eb3XgKRGPtgAAAAY"], referer: http://f40ph.org/wp-content/wp-config.php
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-07 20:07:23
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 216.24.219.192 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.24.219.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 16:07:16.128956 2026] [security2:error] [pid 8020:tid 8020] [client 216.24.219.192:43679] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ezsmiledental.com"] [uri "/wp-content/uploads/wp-config.php"] [unique_id "aiXPdPIVkJIlUIDBxS8pIwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
Asimar
2026-06-07 18:06:20
(1 week ago)
(apache-scanners) Failed apache-scanners trigger with match [redacted] from 216.24.219.192 (US/Unite ...
show more
(apache-scanners) Failed apache-scanners trigger with match [redacted] from 216.24.219.192 (US/United States/-): (CF_ENABLE)
show less
Port Scan
🇩🇪
excill
2026-06-06 03:02:04
(1 week ago)
Honeypot mesh observed 2445 attack events in 24h — cowrie/dionaea/heralding/suricata
Port Scan
Hacking
Brute-Force
SSH
🇩🇪
Bedios GmbH
2026-05-12 05:04:17
(1 month ago)
Wordpress hacking attempt
Web App Attack
2026-04-29 21:28:02
(1 month ago)
Malicious activity detected
Hacking
Web App Attack
🇩🇪
LRob.fr
2026-02-02 16:20:08
(4 months ago)
Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail
Bad Web Bot
Web App Attack
🇫🇮
as211431.net
2026-02-02 13:33:26
(4 months ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET metho ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /wp-admin/txets.php
UA: Go-http-client/1.1
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇦🇺
screwlooseit.com.au
2026-02-01 21:44:23
(4 months ago)
Blocked by CSF 13 firewall - Rule: XMLRPC
US/United States/-
Web App Attack
🇮🇩
BPS-StatisticsIndonesia
2026-02-01 17:59:23
(4 months ago)
WP Login Scan Activities
Web App Attack
🇮🇩
BPS-StatisticsIndonesia
2026-01-26 20:26:15
(4 months ago)
WP Admin Scan Activities
Web App Attack
2026-01-21 01:40:02
(4 months ago)
wordpress-trap
Web App Attack
🇺🇸
Epimetheus
2026-01-19 14:00:42
(4 months ago)
Unauthorized access attempts:
From:
216.24.219.192
Method:
HTTP GET
URI Path:
/wp-admin/txets. ...
show more
Unauthorized access attempts:
From:
216.24.219.192
Method:
HTTP GET
URI Path:
/wp-admin/txets.php
UA:
"Go-http-client/1.1"
show less
Web App Attack
🇩🇪
ghostwarriors
2026-01-18 23:20:36
(4 months ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack