🇧🇪
taivas.nl
2026-07-15 04:32:22
(5 hours ago)
Many_bad_calls
Web App Attack
🇫🇷
SpaceHost-Server
2026-07-14 22:28:52
(11 hours ago)
Brute-Force
Web App Attack
🇧🇪
cmbplf
2026-07-14 09:05:02
(1 day ago)
252.863 requests in 3 hours (3mos3w2d)
Brute-Force
Bad Web Bot
🇩🇪
macrob
2026-07-14 08:02:34
(1 day ago)
2026/07/14 08:02:32 [error] 3379136#3379136: *374993067 access forbidden by rule, client: 34.12.15.5 ...
show more
2026/07/14 08:02:32 [error] 3379136#3379136: *374993067 access forbidden by rule, client: 34.12.15.50, server: antzfund.com, request: "GET /wp-includes/ID3/license.txt HTTP/1.1", host: "antzfund.com"
2026/07/14 08:02:32 [error] 3379136#3379136: *374993062 access forbidden by rule, client: 34.12.15.50, server: antzfund.com, request: "GET /xmlrpc.php?rsd HTTP/1.1", host: "antzfund.com"
2026/07/14 08:02:32 [error] 3379136#3379136: *374993067 access forbidden by rule, client: 34.12.15.50, server: antzfund.com, request: "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1", host: "antzfund.com"
...
show less
Web App Attack
🇧🇪
taivas.nl
2026-07-14 08:02:11
(1 day ago)
Bad_requests
Bad Web Bot
🇺🇸
oralunal
2026-07-14 07:54:26
(1 day ago)
IP banned by Fail2Ban in jail ah-suss access.log mvfnds
...
Bad Web Bot
Web App Attack
🇫🇮
as211431.net
2026-07-14 07:53:15
(1 day ago)
Triggered Cloudflare WAF (firewallCustom) from NL.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET metho ...
show more
Triggered Cloudflare WAF (firewallCustom) from NL.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: //2021/wp-includes/wlwmanifest.xml
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇧🇾
lns.bz
2026-07-14 07:52:36
(1 day ago)
Too many 404 requests [BY]
Web App Attack
🇨🇭
backslash
2026-07-14 07:51:00
(1 day ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇺🇸
TPI-Abuse
2026-07-14 07:50:08
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 34.12.15.50 (50.15.12.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:225170) triggered by 34.12.15.50 (50.15.12.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 03:50:03.319545 2026] [security2:error] [pid 15956:tid 15956] [client 34.12.15.50:58346] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||amywoodruff.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "amywoodruff.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "alXqKwx40zGHdNVOtYnoPQAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇿
Antinson
2026-07-14 07:47:03
(1 day ago)
Scraping with a high error ratio and request rate
Bad Web Bot
🇧🇷
dominioz
2026-07-14 07:43:31
(1 day ago)
2026-07-14 07:42:28 GET /wp-includes/ID3/license.txt - - 34.12.15.50 HTTP/1.1 Mozilla/5.0+(Windows+N ...
show more
2026-07-14 07:42:28 GET /wp-includes/ID3/license.txt - - 34.12.15.50 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/95.0.4638.69+Safari/537.36 - 404 1987
2026-07-14 07:42:29 GET /feed/ - - 34.12.15.50 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/95.0.4638.69+Safari/537.36 - 404 1987
2026-07-14 07:42:29 GET /xmlrpc.php rsd - 34.12.15.50 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/95.0.4638.69+Safari/537.36 - 404 5137
2026-07-14 07:42:30 GET /blog/wp-includes/wlwmanifest.xml - - 34.12.15.50 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/95.0.4638.69+Safari/537.36 - 404 1987
...
show less
Web App Attack
🇮🇹
🐷🐷🐷
2026-07-14 07:41:14
(1 day ago)
Multiple WordPress unauthorized access attempts
...
Brute-Force
Bad Web Bot
🇦🇺
2000cn.com.au
2026-07-14 07:40:33
(1 day ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
🇩🇪
Melle
2026-07-14 07:40:23
(1 day ago)
Blocked by CrowdSec | Scenario: crowdsecurity/http-probing | 34.12.15.50 triggered 11 events | Detec ...
show more
Blocked by CrowdSec | Scenario: crowdsecurity/http-probing | 34.12.15.50 triggered 11 events | Detected: 2026-07-14T07:40:21.830091729Z
show less
Web App Attack
Hacking