🇨🇦
zXero
2026-06-03 12:35:37
(5 days ago)
Fail2Ban automatic report - jail: no-wordpress
Brute-Force
SSH
DDoS Attack
🇨🇦
zXero
2026-05-29 12:29:35
(1 week ago)
Fail2Ban automatic report - jail: no-wordpress
Brute-Force
SSH
DDoS Attack
🇨🇭
backslash
2026-05-22 20:12:01
(2 weeks ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇺🇸
TPI-Abuse
2026-05-22 14:58:38
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 31.134.3.143 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 31.134.3.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 22 10:58:28.528621 2026] [security2:error] [pid 29923:tid 29923] [client 31.134.3.143:49857] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.bak" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "adlc18.org"] [uri "/wp-config.bak"] [unique_id "ahBvFEeHV-Rfauw4CoSO7gAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-22 11:07:14
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 31.134.3.143 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 31.134.3.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 22 07:07:08.360074 2026] [security2:error] [pid 15688:tid 15688] [client 31.134.3.143:48837] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.txt" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "blublk.com"] [uri "/wp-config.txt"] [unique_id "ahA43Dtb5SgFfMB2gjWP-wAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
zXero
2026-05-21 19:07:46
(2 weeks ago)
Fail2Ban automatic report - jail: no-wordpress
Brute-Force
SSH
DDoS Attack
🇺🇸
mnsf
2026-05-21 07:06:16
(2 weeks ago)
Scanning/Probing (24)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-05-20 12:50:11
(2 weeks ago)
(mod_security) mod_security (id:210730) triggered by 31.134.3.143 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 31.134.3.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 08:50:06.072575 2026] [security2:error] [pid 5106:tid 5106] [client 31.134.3.143:47105] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||theyoungstrategist.com|F|2"] [data ".inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "theyoungstrategist.com"] [uri "/wp-config.inc"] [unique_id "ag2t_nmoCGUgmUSmaEq81wAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-20 03:12:11
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 31.134.3.143 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 31.134.3.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 19 23:12:04.590898 2026] [security2:error] [pid 5232:tid 5232] [client 31.134.3.143:53679] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.bak" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "palumbodesigns.com"] [uri "/wp-config.bak"] [unique_id "ag0mhIT5WndM2ujKgV2oyAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-19 12:57:58
(2 weeks ago)
(mod_security) mod_security (id:210730) triggered by 31.134.3.143 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 31.134.3.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 19 08:57:52.884056 2026] [security2:error] [pid 1743:tid 1743] [client 31.134.3.143:47485] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||mail.iconbizpromo.com|F|2"] [data ".inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mail.iconbizpromo.com"] [uri "/wp-config.inc"] [unique_id "agxeUPADnnD0nwBpS7t3bwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
mrcrassi
2026-05-18 06:42:24
(3 weeks ago)
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET meth ...
show more
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /wp-config.php.bak
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.2 Safari/605.1.15
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇱🇻
garmtech.com
2026-05-10 10:30:33
(4 weeks ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 13-30.31.134.3.143.web-spammer ...
show more
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 13-30.31.134.3.143.web-spammers.v2.rbl.imunify.com._v4 succeeded.
show less
Web App Attack
🇩🇪
Lino Project
2026-04-16 22:17:39
(1 month ago)
31.134.3.143 - - [17/Apr/2026:00:17:38 +0200] "GET /wp-config.php HTTP/1.1" 403 3907 "-" "Mozilla/5. ...
show more
31.134.3.143 - - [17/Apr/2026:00:17:38 +0200] "GET /wp-config.php HTTP/1.1" 403 3907 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-04-15 17:20:14
(1 month ago)
| [Dangerous/Russia] Aggressive IP 31.134.3.143 (~30 hits). Type: DoS Defender- Web server 400 error ...
show more
| [Dangerous/Russia] Aggressive IP 31.134.3.143 (~30 hits). Type: DoS Defender- Web server 400 error code
show less
Web App Attack
Hacking
SQL Injection
🇮🇹
sssrit
2026-04-15 11:08:32
(1 month ago)
31.134.3.143 - - [15/Apr/2026:13:08:31 +0200] "GET /wp-sitemap.xml HTTP/1.1" 404 18675 "-" "Mozilla/ ...
show more
31.134.3.143 - - [15/Apr/2026:13:08:31 +0200] "GET /wp-sitemap.xml HTTP/1.1" 404 18675 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36"
...
show less
Web App Attack