🇺🇸
myagent.site
2026-02-05 06:12:18
UTC ·
(9 months ago)
Blocking for trying to access an exploit file: /SiteMap.aspx
Hacking
🇺🇸
TPI-Abuse
2026-02-05 04:37:03
UTC ·
(9 months ago)
(mod_security) mod_security (id:225080) triggered by 2a03:2880:f800:3d:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 04 23:36:59.790555 2026] [security2:error] [pid 17695:tid 17695] [client 2a03:2880: ...
show more
(mod_security) mod_security (id:225080) triggered by 2a03:2880:f800:3d:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 04 23:36:59.790555 2026] [security2:error] [pid 17695:tid 17695] [client 2a03:2880:f800:3d:::56510] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^[\\\\d\\\\.ab]+$" against "ARGS_GET:C" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "143"] [id "225080"] [rev "1"] [msg "COMODO WAF: XSS vulnerability in Plupload before 2.1.9 or MediaElement.js before 2.21.0, as used in WordPress before 4.5.2 (CVE-2016-4566 & CVE-2016-4567)||arsenalfordemocracy.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "arsenalfordemocracy.com"] [uri "/wp-includes/js/plupload/"] [unique_id "aYQea5iNOWVhlD9U_HGNxQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Skyrider
2026-02-03 23:25:39
UTC ·
(9 months ago)
2a03:2880:f800:3d:: - - [04/Feb/2026:00:20:37 +0100] "GET /cron.php?rand=1492791256 HTTP/2.0" 404 36 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)"
2a03:2880:f800:3d:: - - [04/Feb/2026:00:21:39 +0100] ...
show more
2a03:2880:f800:3d:: - - [04/Feb/2026:00:20:37 +0100] "GET /cron.php?rand=1492791256 HTTP/2.0" 404 36 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)"
2a03:2880:f800:3d:: - - [04/Feb/2026:00:21:39 +0100] "GET /newreply.php?do=newreply&p=575512 HTTP/2.0" 404 36 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)"
2a03:2880:f800:3d:: - - [04/Feb/2026:00:22:16 +0100] "GET /sendmessage.php?do=sendtofriend&t=90397 HTTP/2.0" 404 36 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)"
2a03:2880:f800:3d:: - - [04/Feb/2026:00:24:22 +0100] "GET /blog.php?u=8019 HTTP/2.0" 404 36 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)"
2a03:2880:f800:3d:: - - [04/Feb/2026:00:25:38 +0100] "GET /printthread.php?t=42002&pp=10&page=9 HTTP/2.0" 404 36 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)"
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-03 05:32:33
UTC ·
(9 months ago)
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f800:3d:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 03 00:32:28.916905 2026] [security2:error] [pid 18432:tid 18432] [client 2a03:2880: ...
show more
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f800:3d:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 03 00:32:28.916905 2026] [security2:error] [pid 18432:tid 18432] [client 2a03:2880:f800:3d:::35306] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||independentmusicconference.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "independentmusicconference.com"] [uri "/independentmusicconference.com"] [unique_id "aYGIbHpJpfiaGAX4F6yZggAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Roderic
2026-02-02 16:39:48
UTC ·
(9 months ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted])
Bad Web Bot
🇳🇱
Roderic
2026-01-31 16:39:01
UTC ·
(9 months ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted])
Bad Web Bot
🇩🇪
Skyrider
2026-01-31 03:51:53
UTC ·
(9 months ago)
2a03:2880:f800:3d:: - - [31/Jan/2026:04:48:17 +0100] "GET /newreply.php?do=newreply&p=1018750 HTTP/2.0" 404 36 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)"
2a03:2880:f800:3d:: - - [31/Jan/2026:04:49: ...
show more
2a03:2880:f800:3d:: - - [31/Jan/2026:04:48:17 +0100] "GET /newreply.php?do=newreply&p=1018750 HTTP/2.0" 404 36 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)"
2a03:2880:f800:3d:: - - [31/Jan/2026:04:49:49 +0100] "GET /cron.php?rand=1493784436 HTTP/2.0" 404 36 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)"
2a03:2880:f800:3d:: - - [31/Jan/2026:04:50:59 +0100] "GET /newreply.php?do=newreply&p=822369 HTTP/2.0" 404 36 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)"
2a03:2880:f800:3d:: - - [31/Jan/2026:04:51:38 +0100] "GET /newreply.php?do=newreply&p=926567 HTTP/2.0" 404 36 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)"
2a03:2880:f800:3d:: - - [31/Jan/2026:04:51:53 +0100] "GET /newreply.php?do=newreply&p=251031 HTTP/2.0" 404 36 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)"
show less
Bad Web Bot
Web App Attack
🇫🇷
conseilgouz
2026-01-30 21:26:21
UTC ·
(9 months ago)
sae-Security key failure(meta-external)
Hacking
🇺🇸
TPI-Abuse
2026-01-30 10:22:54
UTC ·
(9 months ago)
(mod_security) mod_security (id:225170) triggered by 2a03:2880:f800:3d:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 30 05:22:50.774749 2026] [security2:error] [pid 32307:tid 32307] [client 2a03:2880: ...
show more
(mod_security) mod_security (id:225170) triggered by 2a03:2880:f800:3d:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 30 05:22:50.774749 2026] [security2:error] [pid 32307:tid 32307] [client 2a03:2880:f800:3d:::50360] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||bamedica.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bamedica.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "aXyGehETOmBWdQ2IWH7RmwAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
mrcrassi
2026-01-28 18:26:02
UTC ·
(9 months ago)
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /produto/anti-queda-para-porta-de-enrolar/
UA: meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)
...
show more
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /produto/anti-queda-para-porta-de-enrolar/
UA: meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇳🇱
Roderic
2026-01-26 02:47:09
UTC ·
(9 months ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted])
Bad Web Bot
🇧🇪
cmbplf
2026-01-25 10:00:59
UTC ·
(9 months ago)
460.880 requests in 3 hours (4mos5d11h)
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2026-01-25 03:00:08
UTC ·
(9 months ago)
(mod_security) mod_security (id:225170) triggered by 2a03:2880:f800:3d:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 24 22:00:01.455958 2026] [security2:error] [pid 1843:tid 1843] [client 2a03:2880:f8 ...
show more
(mod_security) mod_security (id:225170) triggered by 2a03:2880:f800:3d:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 24 22:00:01.455958 2026] [security2:error] [pid 1843:tid 1843] [client 2a03:2880:f800:3d:::45490] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.vangentholding.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.vangentholding.com"] [uri "/wp-json/wp/v2/users/26455"] [unique_id "aXWHMeTm9P37ydPEuP7MvwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Skyrider
2026-01-16 01:36:27
UTC ·
(9 months ago)
2a03:2880:f800:3d:: - - [16/Jan/2026:02:27:46 +0100] "GET /newreply.php?do=newreply&p=837152 HTTP/2.0" 404 36 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)"
2a03:2880:f800:3d:: - - [16/Jan/2026:02:28:1 ...
show more
2a03:2880:f800:3d:: - - [16/Jan/2026:02:27:46 +0100] "GET /newreply.php?do=newreply&p=837152 HTTP/2.0" 404 36 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)"
2a03:2880:f800:3d:: - - [16/Jan/2026:02:28:10 +0100] "GET /cron.php?rand=1492354310 HTTP/2.0" 404 36 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)"
2a03:2880:f800:3d:: - - [16/Jan/2026:02:29:08 +0100] "GET /cron.php?rand=1492421869 HTTP/2.0" 404 36 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)"
2a03:2880:f800:3d:: - - [16/Jan/2026:02:35:57 +0100] "GET /newreply.php?do=newreply&p=1625537 HTTP/2.0" 404 36 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)"
2a03:2880:f800:3d:: - - [16/Jan/2026:02:36:27 +0100] "GET /printthread.php?t=123099&pp=10&page=1 HTTP/2.0" 404 36 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)"
show less
Bad Web Bot
Web App Attack
🇩🇪
conseilgouz
2026-01-16 01:32:08
UTC ·
(9 months ago)
lae-88 : Bloc AI bots=>/sitemap.xml(meta-external)
Hacking