🇬🇧
spamverify.com
2026-06-03 15:18:30
(2 days ago)
Honeypot Hit: WordPress Login
Web Spam
Blog Spam
Bad Web Bot
Web App Attack
2026-05-31 13:02:13
(5 days ago)
wordpress authentication brute force
Brute-Force
Web App Attack
2026-05-29 01:29:08
(1 week ago)
[ns65.kdns.gr] httpd-login-spray-site: sites=villafleria.gr; logs=/var/log/httpd/domains/villafleria ...
show more
[ns65.kdns.gr] httpd-login-spray-site: sites=villafleria.gr; logs=/var/log/httpd/domains/villafleria.gr.log; samples=site_wide=true | distinct_ips=14 | /wp-login.php
show less
Hacking
Web App Attack
🇩🇪
FeG Deutschland
2026-05-23 05:24:17
(2 weeks ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇬🇧
pinguin
2026-05-15 02:43:23
(3 weeks ago)
Triggered Cloudflare WAF (firewallManaged) from DE.
Action taken: LOG
Protocol: HTTP/2 (GET method)
...
show more
Triggered Cloudflare WAF (firewallManaged) from DE.
Action taken: LOG
Protocol: HTTP/2 (GET method)
Endpoint: /wp-json/gravitysmtp/v1/tests/mock-data
UA: curl/8.7.1
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇨🇭
4server
2026-04-19 00:17:48
(1 month ago)
[SunApr1902:17:40.6452162026][security2:error][pid1098657:tid1098760][client65.111.29.244:0]ModSecur ...
show more
[SunApr1902:17:40.6452162026][security2:error][pid1098657:tid1098760][client65.111.29.244:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"367\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"www.giuristifriburgo.ch\"][uri\"/xmlrpc.php\"][unique_id\"aeQfJHuRPG25d86Y_FzimAAAAI4\"]
show less
Hacking
Web App Attack
🇺🇸
TRoden
2026-03-31 10:30:44
(2 months ago)
Geo Block Plugin: Escalation flag(s): rce_attempt
Hacking
🇧🇪
voormedia
2026-03-05 16:09:02
(3 months ago)
Accessed trap at '/.git/config'
Web App Attack
🇺🇸
TPI-Abuse
2026-03-05 08:19:25
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.29.244 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.29.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 05 03:19:21.696707 2026] [security2:error] [pid 5955:tid 6064] [client 65.111.29.244:16597] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.howardhallis.com"] [uri "/.git/objects/c1/e29b74070475712a65e8a14cfa015edbd7e43c"] [unique_id "aak8iWjT4P6a9iFdA2bGbAAAAg0"], referer: http://www.howardhallis.com/.git/objects/c1/e29b74070475712a65e8a14cfa015edbd7e43c
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
www.winos.me
2026-01-30 19:57:47
(4 months ago)
Banned due to high error rate on HTTP/1.1 protocol
Brute-Force
Web App Attack
🇨🇭
backslash
2026-01-05 01:45:07
(5 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇺🇸
TPI-Abuse
2025-11-24 03:27:36
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.29.244 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.29.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 22:27:25.957594 2025] [security2:error] [pid 29094:tid 29094] [client 65.111.29.244:56367] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.wickedworks.net"] [uri "/.svn/wc.db"] [unique_id "aSPQnQYwVaaLceExYDWVVQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-10 18:15:24
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 65.111.29.244 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 65.111.29.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 10 14:15:17.587820 2025] [security2:error] [pid 10404:tid 10404] [client 65.111.29.244:60077] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||eagrant.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "eagrant.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aOlNNTuALNm-TaX4kE6QSQAAABA"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Packets-Decreaser.NET
2025-10-07 17:14:01
(7 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
🇺🇸
TPI-Abuse
2025-02-02 10:15:29
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 65.111.29.244 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 65.111.29.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 02 05:15:26.121026 2025] [security2:error] [pid 4948:tid 4948] [client 65.111.29.244:9211] [client 65.111.29.244] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||bohk.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bohk.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z59Fvru6ZIEpwT7Wl_h3RQAAAAU"], referer: https://bohk.com
show less
Brute-Force
Bad Web Bot
Web App Attack