🇩🇪
iNetWorker
2026-04-13 17:46:32
(2 months ago)
trolling for resource vulnerabilities
Web App Attack
🇩🇪
big-cloud.nl
2026-04-04 13:17:48
(2 months ago)
Try to access /xmlrpc.php
Web App Attack
2026-04-03 06:42:33
(2 months ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇦🇺
RedBear IT
2026-03-26 10:00:37
(2 months ago)
"DDoS against public endpoint"
DDoS Attack
🇵🇱
sefinek.net
2026-03-25 08:56:31
(2 months ago)
Triggered Cloudflare WAF (firewallCustom) from DE.
Action: MANAGED_CHALLENGE | Protocol: HTTP/1.1 (G ...
show more
Triggered Cloudflare WAF (firewallCustom) from DE.
Action: MANAGED_CHALLENGE | Protocol: HTTP/1.1 (GET) | Endpoint: / | UA: Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/89.0.4447.51 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
nationaleventpros.com
2026-02-09 23:33:02
(4 months ago)
WordPress login attempt
Brute-Force
🇺🇸
TPI-Abuse
2025-12-03 04:41:16
(6 months ago)
(mod_security) mod_security (id:210740) triggered by 65.111.23.227 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210740) triggered by 65.111.23.227 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 23:41:08.450022 2025] [security2:error] [pid 7150:tid 7161] [client 65.111.23.227:42169] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||vtweaversguild.org|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "vtweaversguild.org"] [uri "/gb.php"] [unique_id "aS-_ZN0TcU9gkzjkLBwtDAAAAQc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-03 02:52:26
(6 months ago)
(mod_security) mod_security (id:210740) triggered by 65.111.23.227 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210740) triggered by 65.111.23.227 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 21:52:17.315989 2025] [security2:error] [pid 11316:tid 11316] [client 65.111.23.227:13337] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||freddyspizza.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "freddyspizza.com"] [uri "/member/"] [unique_id "aS-l4fBWHPSFC7QOX7_gIwAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2025-10-16 10:10:33
(7 months ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
2025-10-05 21:46:26
(8 months ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇦🇺
oncord
2025-10-05 01:13:08
(8 months ago)
Form spam
Web Spam
2025-01-14 10:17:25
(1 year ago)
Attempted brute force login to web vpn 1 time(s); last attempt for 2025.01.14 is noted in report tim ...
show more
Attempted brute force login to web vpn 1 time(s); last attempt for 2025.01.14 is noted in report timestamp
show less
Hacking
Brute-Force
🇺🇸
TPI-Abuse
2025-01-08 15:32:28
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 65.111.23.227 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 65.111.23.227 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jan 08 10:32:25.583055 2025] [security2:error] [pid 899189:tid 899189] [client 65.111.23.227:37109] [client 65.111.23.227] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||arriagarealestate.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "arriagarealestate.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z36aiXwCCiJC17-D9LMazQAAAB8"], referer: https://arriagarealestate.com
show less
Brute-Force
Bad Web Bot
Web App Attack
2024-11-18 07:06:24
(1 year ago)
Automatic report - Vulnerability scan
/RDWeb/Pages/en-US/login.aspx
Web App Attack
2024-10-28 03:51:50
(1 year ago)
Automatic report - Vulnerability scan
/RDWeb/Pages/en-US/login.aspx
Web App Attack