|
🇩🇪
MusicLibrary
|
|
Attempted access to non existent wordpress urls
|
Bad Web Bot
|
|
|
🇩🇪
MusicLibrary
|
|
Attempted access to non existent wordpress urls
|
Bad Web Bot
|
|
|
🇪🇸
el-brujo
|
|
[Sat May 23 02:54:14.897058 2026] [proxy_fcgi:error] [pid 2283584:tid 2283685] [remote 45.80.106.223 ...
show more
[Sat May 23 02:54:14.897058 2026] [proxy_fcgi:error] [pid 2283584:tid 2283685] [remote 45.80.106.223:0] AH01071: Got error 'Primary script unknown\n', referer: https://www.google.com
[Sat May 23 02:54:17.231584 2026] [proxy_fcgi:error] [pid 2273999:tid 2274034] [remote 45.80.106.223:0] AH01071: Got error 'Primary script unknown\n', referer: https://www.google.com
...
show less
|
Hacking
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:225170) triggered by 45.80.106.223 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 45.80.106.223 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 28 00:36:33.479680 2026] [security2:error] [pid 27407:tid 27407] [client 45.80.106.223:50195] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||towlesilvapsychotherapy.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "towlesilvapsychotherapy.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aaJ-4UjLnbJgHMYhHtme2AAAAAE"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:225170) triggered by 45.80.106.223 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 45.80.106.223 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 26 17:04:32.462965 2026] [security2:error] [pid 3267:tid 3267] [client 45.80.106.223:45659] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||internetnameregistration.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "internetnameregistration.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aaDDcAak4Ep2rDe_WdIpXAAAAAI"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:225170) triggered by 45.80.106.223 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 45.80.106.223 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 26 14:07:22.309828 2026] [security2:error] [pid 6064:tid 6064] [client 45.80.106.223:41731] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hischurchatwork.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hischurchatwork.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aaCZ6g3xES-k3UIk-XWytwAAAAw"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇫🇷
mrcrassi
|
|
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
Protocol: HTTP/2 (POST method ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
Protocol: HTTP/2 (POST method)
Endpoint: /wp-login.php
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
|
Bad Web Bot
|
|
|
Anonymous
|
|
"Security violation, excess traffic against library/education infrastructure"
|
Brute-Force
|
|
|
🇩🇪
stinpriza
|
|
Web App Attack
|
Web App Attack
|
|
|
🇳🇱
WeCloudit-Anti-Abuse
|
|
WAF: Old style account creation and modification in Joomla! 2- wsit
|
Email Spam
Brute-Force
|
|
|
🇳🇱
WeCloudit-Anti-Abuse
|
|
WAF: Block Joomla registration spam 2- wsit
|
Email Spam
Brute-Force
|
|
|
🇳🇱
WeCloudit-Anti-Abuse
|
|
WAF: Block Joomla registration spam 2- wsit
|
Email Spam
Brute-Force
|
|
|
🇳🇱
WeCloudit-Anti-Abuse
|
|
WAF: Old style account creation and modification in Joomla! 2- wsit
|
Email Spam
Brute-Force
|
|
|
🇪🇸
10dencehispahard SL
|
|
WP probing for vulnerabilities
|
Hacking
Exploited Host
|
|
|
🇳🇱
WeCloudit-Anti-Abuse
|
|
WAF: Old style account creation and modification in Joomla! 2- wsit
|
Email Spam
Brute-Force
|
|