Triggered Cloudflare WAF (firewallCustom) from DE.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show moreTriggered Cloudflare WAF (firewallCustom) from DE.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /index.php
UA: Mozilla/5.0 (X11; Linux x86_64; rv:147.0) Gecko/20100101 Firefox/147.0
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Triggered Cloudflare WAF (firewallCustom) from DE.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show moreTriggered Cloudflare WAF (firewallCustom) from DE.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /index.php
UA: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:109.0) Gecko/20100101 Firefox/115.0
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
2026-05-16T11:01:48.867040+12:00 southern wordpress(poetryinhell.org)[903897]: Authentication attemp ...
show more2026-05-16T11:01:48.867040+12:00 southern wordpress(poetryinhell.org)[903897]: Authentication attempt for unknown user [email protected] from 65.111.24.100
...
show less
(mod_security) mod_security (id:210492) triggered by 65.111.24.100 (-): 1 in the last 300 secs; Port ...
show more(mod_security) mod_security (id:210492) triggered by 65.111.24.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jan 11 04:13:59.164299 2026] [security2:error] [pid 21509:tid 21509] [client 65.111.24.100:45789] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "birascreekresort.com"] [uri "/.git/HEAD"] [unique_id "aWNp1wxCHbwSfucH6agrWQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.05 is noted in report tim ...
show moreAttempted brute force login to web vpn 1 time(s); last attempt for 2026.01.05 is noted in report timestamp
show less