🇪🇸
sshtmp
2026-05-26 12:04:00
(3 weeks ago)
[AbuseIPDB auto-report]
Attack: Unauthorized wp-admin access/probing; WordPress wp-login brute-force ...
show more
[AbuseIPDB auto-report]
Attack: Unauthorized wp-admin access/probing; WordPress wp-login brute-force
Hits: 22 | First: 2026-05-26T13:05:41+02:00 | Last: 2026-05-26T14:04:00+02:00
Samples: GET /wp-admin/css/forms.min.css?ver=6.8.5 [200] | GET /wp-admin/images/wordpress-logo.svg?ver=20131107 [200] | GET /wp-admin/css/l10n.min.css?ver=6.8.5 [200] | GET /wp-admin/js/password-strength-meter.min.js?ver=6.8.5 [200] | GET /wp-admin/css/login.min.css?ver=6.8.5 [200]
show less
Brute-Force
Web App Attack
2026-05-25 08:46:34
(4 weeks ago)
Malicious activity detected
Hacking
Web App Attack
🇫🇮
percocet
2026-05-14 19:05:12
(1 month ago)
Cloudflare blocked 6 requests (HTTP 403) in 1h. Country: NL
DDoS Attack
Web App Attack
🇮🇩
sockominfo
2026-05-08 05:00:39
(1 month ago)
User login to application from malicious IP 51.15.24.226.. Threat Score: 4.3/10 (MEDIUM). Confidence ...
show more
User login to application from malicious IP 51.15.24.226.. Threat Score: 4.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 75%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS
show less
Hacking
Web App Attack
🇮🇩
sockominfo
2026-05-08 04:00:47
(1 month ago)
User login to application from malicious IP 51.15.24.226.. Threat Score: 4.4/10 (MEDIUM). Confidence ...
show more
User login to application from malicious IP 51.15.24.226.. Threat Score: 4.4/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 75%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS
show less
Hacking
Web App Attack
🇮🇩
sockominfo
2026-05-08 03:00:12
(1 month ago)
User login to application from malicious IP 51.15.24.226.. Threat Score: 0/10 (INFORMATIONAL). Repor ...
show more
User login to application from malicious IP 51.15.24.226.. Threat Score: 0/10 (INFORMATIONAL). Reported by TangerangKota-CSIRT
show less
Hacking
Web App Attack
🇫🇮
percocet
2026-05-05 12:05:12
(1 month ago)
Cloudflare blocked 3 requests (HTTP 403) in 1h. Country: NL
DDoS Attack
Web App Attack
🇫🇮
percocet
2026-04-28 09:05:06
(1 month ago)
Cloudflare blocked 8 requests (HTTP 403) in 1h. Country: NL
DDoS Attack
Web App Attack
🇮🇩
David Koswari
2026-04-27 05:11:00
(1 month ago)
REQ_BLOCKED_ACL
DDoS Attack
FTP Brute-Force
Ping of Death
Port Scan
Hacking
SQL Injection
Spoofing
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
SSH
IoT Targeted
🇨🇦
1gz
2026-02-24 13:13:14
(3 months ago)
Triggered Cloudflare WAF (firewallCustom) from NL.
Action taken: CHALLENGE
Protocol: HTTP/2 (GET met ...
show more
Triggered Cloudflare WAF (firewallCustom) from NL.
Action taken: CHALLENGE
Protocol: HTTP/2 (GET method)
Endpoint: /server/6dda2cb2
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇳🇱
crypto i trust, hold i must
2025-12-20 10:15:02
(6 months ago)
Automated vulnerability scanner detected. User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) Appl ...
show more
Automated vulnerability scanner detected. User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36
show less
Bad Web Bot
Web App Attack
2025-12-10 18:50:03
(6 months ago)
| SQL injection attempt.
Hacking
SQL Injection
Web App Attack
2025-12-01 08:00:00
(6 months ago)
"Security violation, excess traffic against library/education infrastructure"
Brute-Force
🇬🇧
Silly Development
2025-08-31 23:27:09
(9 months ago)
Malicious activity detected from 12876 Online SAS towards host panel.sillydev.co.uk (GET HTTP/1.1) @ ...
show more
Malicious activity detected from 12876 Online SAS towards host panel.sillydev.co.uk (GET HTTP/1.1) @ 2025-08-31T23:27:09Z (4 occurrences)
show less
DDoS Attack
Exploited Host
🇨🇴
j458rjqwi348fhjq46
2025-08-13 06:30:52
(10 months ago)
Malicious IP detected by WAF with anomaly score 10.0. Attack types: Timestamp deviates by 1.0 hours, ...
show more
Malicious IP detected by WAF with anomaly score 10.0. Attack types: Timestamp deviates by 1.0 hours, ... and more, Timestamp deviates by 3.3 hours (+8 more). Activity: 94 requests to 23 URLs. Period: 2025-08-08 14:37:18 - 2025-08-08 14:43:52 (America/Bogota). Origin: NL. Source: Automated WAF log analysis.
show less
Web App Attack