π©πͺ
stinpriza
2026-08-23 13:33:00
(1 day ago)
Web App Attack
Web App Attack
πΊπΈ
nationaleventpros.com
2026-08-20 16:44:05
(4 days ago)
WordPress login attempt
Brute-Force
πΊπΈ
TPI-Abuse
2026-08-15 04:57:43
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 5.183.254.75 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 5.183.254.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 15 00:57:26.160177 2026] [security2:error] [pid 28532:tid 28532] [client 5.183.254.75:17373] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||megapct.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "megapct.com"] [uri "/wp-json/wp/v2/users"] [unique_id "an_xtoTPfdRehgZcWtoPSQAAABc"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-08-13 13:23:04
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 5.183.254.75 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 5.183.254.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 13 09:22:48.909993 2026] [security2:error] [pid 331664:tid 331664] [client 5.183.254.75:17207] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||kayelynn.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kayelynn.com"] [uri "/wp-json/wp/v2/users"] [unique_id "an3FKFcwlu-Ib0wvTZ-oNQAAAAQ"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-07-30 12:05:07
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 5.183.254.75 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 5.183.254.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 30 08:04:53.552334 2026] [security2:error] [pid 2086520:tid 2086520] [client 5.183.254.75:29189] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||monopolimusic.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "monopolimusic.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ams95UnGHgLyuCwoobgx9wAAAAo"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
WeekendWeb
2026-06-20 02:42:05
(2 months ago)
Wordpress Vunerability attack
Web App Attack
π«π·
Tilellit.PRO
2026-05-07 20:09:16
(3 months ago)
Fail2Ban banned 5.183.254.75 for security violations in jail wp-armour. Log: 2026/05/07 20:09:15 [er ...
show more
Fail2Ban banned 5.183.254.75 for security violations in jail wp-armour. Log: 2026/05/07 20:09:15 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 5.183.254.75 | Target: wplogin" , client: 5.183.254.75, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
π«π·
Tilellit.PRO
2026-05-02 19:04:21
(3 months ago)
Fail2Ban banned 5.183.254.75 for security violations in jail wp-armour. Log: 2026/05/02 19:04:21 [er ...
show more
Fail2Ban banned 5.183.254.75 for security violations in jail wp-armour. Log: 2026/05/02 19:04:21 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 5.183.254.75 | Target: wplogin" , client: 5.183.254.75, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
π΅π±
sefinek.net
2026-03-30 23:22:55
(4 months ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action: MANAGED_CHALLENGE | Protocol: HTTP/1.1 (G ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action: MANAGED_CHALLENGE | Protocol: HTTP/1.1 (GET) | Endpoint: /genshin-stella-mod | UA: Mozilla/5.0 (Linux x86_64; rv:114.0) Gecko/20100101 Firefox/114.0 β’ Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
π΅π±
sefinek.net
2026-02-13 18:09:10
(6 months ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action: MANAGED_CHALLENGE | Protocol: HTTP/1.1 (G ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action: MANAGED_CHALLENGE | Protocol: HTTP/1.1 (GET) | Endpoint: /genshin-stella-mod | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Edg/114.0.1264.71 β’ Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
π±π»
garmtech.com
2026-01-06 18:13:57
(7 months ago)
IM360 WAF: Old style account creation and modification in Joomla! MV:registration
Web App Attack
π΅π±
sefinek.net
2025-12-22 18:32:43
(8 months ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 YaBrowser/22.7.0 Yowser/2.5 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
π΅π±
sefinek.net
2025-12-16 09:38:54
(8 months ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Vivaldi/5.3.2679.68
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
π΅π±
sefinek.net
2025-12-11 12:39:45
(8 months ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /genshin-stella-mod
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Vivaldi/5.3.2679.68
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
π±π»
garmtech.com
2025-09-21 06:07:50
(11 months ago)
IM360 WAF: Information Disclosure Attempt in WordPress MV:/wp-config.php~
Web App Attack