|
ππ°
Mehmet_The_Script_Kiddie
|
|
AUTOMATED REPORT: Suspicous request: /wp-content/themes/blogpoet/style.css
|
Bad Web Bot
Web App Attack
|
|
π΅π±
sefinek.net
|
|
Triggered Cloudflare WAF (firewallCustom) from CN.
Action: MANAGED_CHALLENGE | Protocol: HTTP/1.1 (GET) | Endpoint: /logins.php | UA: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.97 Safari/537.11 β’ Gener ...
show more
Triggered Cloudflare WAF (firewallCustom) from CN.
Action: MANAGED_CHALLENGE | Protocol: HTTP/1.1 (GET) | Endpoint: /logins.php | UA: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.97 Safari/537.11 β’ Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
|
Bad Web Bot
|
|
πΊπΈ
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 42.49.82.141 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 01:32:09.421767 2026] [security2:error] [pid 988:tid 988] [client 42.49.82.141:54210] ModSecu ...
show more
(mod_security) mod_security (id:210730) triggered by 42.49.82.141 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 01:32:09.421767 2026] [security2:error] [pid 988:tid 988] [client 42.49.82.141:54210] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gamepart.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gamepart.com"] [uri "/home/tancedi1/gamepart.com"] [unique_id "asnN2ZwFJNbgTczM-_qNKwAAAAc"], referer: http://www.gamepart.com/newfile.php
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
ππ°
Mehmet_The_Script_Kiddie
|
|
AUTOMATED REPORT: Vulnerability scan: /indexback.php
|
Bad Web Bot
Web App Attack
|
|
π«π·
SpaceHost-Server
|
|
|
Brute-Force
Web App Attack
|
|
π²π½
octageeks.com
|
|
Wordpress malicious attack:[octablocked]
|
Web App Attack
|
|
π«π·
SpaceHost-Server
|
|
|
Brute-Force
Web App Attack
|
|
Anonymous
|
|
IP matched detection query 20 more in short time bad rqs.
|
Brute-Force
Web App Attack
Hacking
|
|
πΊπΈ
IndigoRidge
|
|
42.49.82.141 - - [05/Oct/2026:09:39:39 -0400] "GET /wp-content/plugins/wp-socializer/readme.txt HTTP/1.1" 404 58830 "http://www.lctusa.com/wp-content/plugins/wp-socializer/readme.txt" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.11 (KHTML, li ...
show more
42.49.82.141 - - [05/Oct/2026:09:39:39 -0400] "GET /wp-content/plugins/wp-socializer/readme.txt HTTP/1.1" 404 58830 "http://www.lctusa.com/wp-content/plugins/wp-socializer/readme.txt" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.97 Safari/537.11"
42.49.82.141 - - [05/Oct/2026:09:39:44 -0400] "GET /wp-content/plugins/lastudio-element-kit/readme.txt HTTP/1.1" 404 58833 "http://www.lctusa.com/wp-content/plugins/lastudio-element-kit/readme.txt" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.97 Safari/537.11"
42.49.82.141 - - [05/Oct/2026:09:39:50 -0400] "GET /wp-content/plugins/restricted-site-access/readme.txt HTTP/1.1" 404 58839 "http://www.lctusa.com/wp-content/plugins/restricted-site-access/readme.txt" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.97 Safari/537.11"
42.49.82.141 - - [05/Oct/2026:09:39:53 -0400] "GET /wp-content/plugins/rss-includes
...
show less
|
Web App Attack
|
|
π«π·
dynamix
|
|
Automated web vulnerability and path enumeration scan with excessive 404 requests
|
Bad Web Bot
Web App Attack
|
|
πΊπΈ
IndigoRidge
|
|
42.49.82.141 - - [02/Oct/2026:19:35:08 -0400] "GET /wp-content/plugins/meks-smart-social-widget/readme.txt HTTP/1.1" 404 40477 "http://www.topnotchclemson.com/wp-content/plugins/meks-smart-social-widget/readme.txt" "Mozilla/5.0 (Windows NT 6.1; WOW64 ...
show more
42.49.82.141 - - [02/Oct/2026:19:35:08 -0400] "GET /wp-content/plugins/meks-smart-social-widget/readme.txt HTTP/1.1" 404 40477 "http://www.topnotchclemson.com/wp-content/plugins/meks-smart-social-widget/readme.txt" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.97 Safari/537.11"
42.49.82.141 - - [02/Oct/2026:19:35:09 -0400] "GET /wp-content/plugins/plugin-organizer/readme.txt HTTP/1.1" 404 40477 "http://www.topnotchclemson.com/wp-content/plugins/plugin-organizer/readme.txt" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.97 Safari/537.11"
42.49.82.141 - - [02/Oct/2026:19:35:10 -0400] "GET /wp-content/plugins/powerkit/README.txt HTTP/1.1" 404 40477 "http://www.topnotchclemson.com/wp-content/plugins/powerkit/README.txt" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.97 Safari/537.11"
42.49.82.141 - - [02/Oct/2026:19:35:10 -0400] "GET /wp-content/plugins
...
show less
|
Web App Attack
|
|
π¬π§
Swiptly
|
|
Excessive 403/404/405 PHP/CMS errors from scanning or broken bots
...
|
Web App Attack
|
|
π¬π§
Comberton
|
|
Ban via by F2B apache-wordfence jail
|
Brute-Force
|
|
π«π·
dynamix
|
|
Automated web vulnerability and path enumeration scan with excessive 404 requests
|
Bad Web Bot
Web App Attack
|
|
πΊπΈ
IndigoRidge
|
|
42.49.82.141 - - [02/Oct/2026:04:07:55 -0400] "GET /wp-content/plugins/ip2location-country-blocker/readme.txt HTTP/1.1" 404 76414 "http://www.thedowninggroup.com/wp-content/plugins/ip2location-country-blocker/readme.txt" "Mozilla/5.0 (Windows NT 6.1; ...
show more
42.49.82.141 - - [02/Oct/2026:04:07:55 -0400] "GET /wp-content/plugins/ip2location-country-blocker/readme.txt HTTP/1.1" 404 76414 "http://www.thedowninggroup.com/wp-content/plugins/ip2location-country-blocker/readme.txt" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.97 Safari/537.11"
42.49.82.141 - - [02/Oct/2026:04:08:07 -0400] "GET /wp-content/plugins/poptin/readme.txt HTTP/1.1" 404 76346 "http://www.thedowninggroup.com/wp-content/plugins/poptin/readme.txt" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.97 Safari/537.11"
42.49.82.141 - - [02/Oct/2026:04:08:26 -0400] "GET /wp-content/plugins/wp-custom-admin-interface/readme.txt HTTP/1.1" 404 36076 "http://www.buyersinspectiongroup.com/wp-content/plugins/wp-custom-admin-interface/readme.txt" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.97 Safari/537.11"
42.49.82.141 - - [02/Oct/2026:04:08:27 -0400
...
show less
|
Web App Attack
|