🇮🇹
Progetto1
2026-02-11 20:42:02
(8 months ago)
Mail - Multiple failed login attempts
Brute-Force
Exploited Host
🇺🇸
NXTwoThou
2026-01-05 01:17:03
(9 months ago)
/wp-json/wp/v2/users
Web App Attack
🇩🇪
F242
2026-01-04 16:06:16
(9 months ago)
Wordpress Login or XMLRPC abuse
Web App Attack
🇺🇸
TPI-Abuse
2026-01-04 12:43:51
(9 months ago)
(mod_security) mod_security (id:225170) triggered by 23.81.230.134 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 23.81.230.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jan 04 07:43:46.124689 2026] [security2:error] [pid 21004:tid 21004] [client 23.81.230.134:49546] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gp-cm.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gp-cm.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aVpgguB97lly8hztaS8YhQAAABU"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
kjaerulff
2025-12-26 02:04:49
(9 months ago)
Failed Wordpress login using xmlrpc.php
Web App Attack
🇵🇱
sefinek.net
2025-12-15 20:36:34
(10 months ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇩🇪
kjaerulff
2025-11-04 02:34:03
(11 months ago)
Failed Wordpress login using xmlrpc.php
Web App Attack
🇺🇸
TPI-Abuse
2025-11-04 01:09:37
(11 months ago)
(mod_security) mod_security (id:225170) triggered by 23.81.230.134 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 23.81.230.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 03 20:09:32.174245 2025] [security2:error] [pid 12804:tid 12804] [client 23.81.230.134:47396] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||rjabramsonfoundation.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "rjabramsonfoundation.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aQlSTCxyRpnTjWjkT_TdWwAAAAk"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-04 00:37:49
(11 months ago)
(mod_security) mod_security (id:225170) triggered by 23.81.230.134 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 23.81.230.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 03 19:37:41.473558 2025] [security2:error] [pid 24504:tid 24576] [client 23.81.230.134:52627] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||penboy7.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "penboy7.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aQlK1Xy7bAXlt1CrnWpbrwAAAYY"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
RodGel
2025-10-30 04:46:00
(11 months ago)
Suspicious pattern detected: /wp-login.php
Web App Attack
🇨🇭
backslash
2025-10-30 01:55:05
(11 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇩🇪
kjaerulff
2025-10-30 01:51:05
(11 months ago)
Failed Wordpress login using wp-login.php
Web App Attack
🇺🇸
TPI-Abuse
2025-10-29 15:02:36
(11 months ago)
(mod_security) mod_security (id:225170) triggered by 23.81.230.134 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 23.81.230.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 29 11:02:29.139848 2025] [security2:error] [pid 20386:tid 20386] [client 23.81.230.134:38078] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gonzalez.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gonzalez.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aQIshUi4AHR_NKr_xTTl7AAAAAY"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-10-06 16:31:37
(1 year ago)
Failed login attempt detected by Fail2Ban in recidive jail
Brute-Force
🇳🇱
exxos
2025-09-27 03:03:01
(1 year ago)
Attacks with Bad user agents
Hacking