🇲🇽
octageeks.com
2026-09-17 04:14:33
(3 days ago)
Wordpress malicious attack:[octamissingdomain]
Web App Attack
🇺🇸
rdpguard.com
2026-09-17 00:00:26
(4 days ago)
RdpGuard detected brute-force attempt on HTTP
Brute-Force
2026-09-16 13:56:03
(4 days ago)
Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1
Hacking
Web App Attack
🇫🇮
as211431.net
2026-09-16 13:51:23
(4 days ago)
Triggered Cloudflare WAF (firewallCustom) from BE.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET metho ...
show more
Triggered Cloudflare WAF (firewallCustom) from BE.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: //cms/wp-includes/wlwmanifest.xml
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-16 13:50:09
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 34.79.143.219 (219.143.79.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:225170) triggered by 34.79.143.219 (219.143.79.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 09:50:01.714583 2026] [security2:error] [pid 30273:tid 30273] [client 34.79.143.219:64041] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.riedmannfamily.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.riedmannfamily.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aqqeiSGUXvts3ZWTQC0vngAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
rh24
2026-09-16 13:47:03
(4 days ago)
(wlwmanifest) wlwmanifest.xml scanner (WordPress probe) from 34.79.143.219 (BE/Belgium/219.143.79.34 ...
show more
(wlwmanifest) wlwmanifest.xml scanner (WordPress probe) from 34.79.143.219 (BE/Belgium/219.143.79.34.bc.googleusercontent.com)
show less
Hacking
🇩🇪
FeG Deutschland
2026-09-16 13:32:14
(4 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-09-16 13:26:38
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 34.79.143.219 (219.143.79.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:225170) triggered by 34.79.143.219 (219.143.79.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 09:26:31.217054 2026] [security2:error] [pid 21983:tid 21983] [client 34.79.143.219:61935] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||realdoctorstories.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "realdoctorstories.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aqqZB6YEKBr_HywI-kJFoQAAADk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-16 13:17:21
(4 days ago)
apache vulnerability scan
Web App Attack
🇺🇸
TPI-Abuse
2026-09-16 13:10:25
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 34.79.143.219 (219.143.79.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:225170) triggered by 34.79.143.219 (219.143.79.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 09:10:16.824285 2026] [security2:error] [pid 20093:tid 20109] [client 34.79.143.219:56475] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.quantumgaze.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.quantumgaze.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aqqVODKNR8E3Ggtz7Z6IwgAAAIw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-09-16 13:10:03
(4 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇩🇪
hidemail.app
2026-09-16 13:01:55
(4 days ago)
Automated scan for exposed config/secret files and known web exploits (e.g. /.env, RCE probes); auto ...
show more
Automated scan for exposed config/secret files and known web exploits (e.g. /.env, RCE probes); auto-banned by fail2ban.
show less
Web App Attack
Hacking
🇺🇸
vestibtech
2022-09-21 20:24:33
(3 years ago)
34.79.143.219 - - [21/Sep/2022:18:24:28 -0600] "GET /util/login.aspx HTTP/1.1" 301 513 "-" "Mozilla/ ...
show more
34.79.143.219 - - [21/Sep/2022:18:24:28 -0600] "GET /util/login.aspx HTTP/1.1" 301 513 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:52.0) Gecko/20100101 Firefox/52.0"
...
show less
Web App Attack