🇦🇺
HJ5Ss4Ju
2026-06-20 10:10:25
(19 minutes ago)
Blocked by Wordfence (SID 6)
Web App Attack
🇫🇷
tilellit.pro
2026-06-19 11:09:54
(23 hours ago)
Fail2Ban banned 65.111.8.206 for security violations in jail wp-armour. Log: 2026/06/19 11:09:53 [er ...
show more
Fail2Ban banned 65.111.8.206 for security violations in jail wp-armour. Log: 2026/06/19 11:09:53 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 65.111.8.206 | Target: wplogin" , client: 65.111.8.206, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇩🇪
iNetWorker
2026-06-18 14:12:43
(1 day ago)
trolling for resource vulnerabilities
Web App Attack
🇫🇷
ELYAZ
2026-06-18 10:04:58
(2 days ago)
(y4) Failed scan -byebye- from 65.111.8.206 (US/United States/-): (CF_ENABLE)
Hacking
🇱🇻
garmtech.com
2026-06-17 09:19:55
(3 days ago)
IM360 WAF: Prohibited WordPress username login/registration
Web App Attack
🇩🇪
georgengelmann
2026-06-15 18:21:45
(4 days ago)
Failed login attempt for root
Brute-Force
Web App Attack
🇦🇺
paulshipley.com.au
2026-06-15 16:54:03
(4 days ago)
dlcarterauthor.com:443 65.111.8.206 - - [16/Jun/2026:02:54:02 +1000] "GET /?author=5 HTTP/1.1" 404 5 ...
show more
dlcarterauthor.com:443 65.111.8.206 - - [16/Jun/2026:02:54:02 +1000] "GET /?author=5 HTTP/1.1" 404 5094 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36"
...
show less
Web App Attack
🇨🇳
ThreatBook.io
2026-05-12 22:36:41
(1 month ago)
ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/65.111.8.206
2026-05-12 16: ...
show more
ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/65.111.8.206
2026-05-12 16:27:19 /
2026-05-12 16:57:25 /
2026-05-12 16:35:07 /
show less
Web App Attack
🇫🇮
JimArchon72
2026-02-26 02:15:06
(3 months ago)
2026/02/26 02:14:50 "GET /wp-login.php HTTP/2.0"
Web App Attack
🇺🇸
TPI-Abuse
2026-02-24 04:45:08
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.8.206 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.8.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 23 23:45:05.528597 2026] [security2:error] [pid 8868:tid 8888] [client 65.111.8.206:58457] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "isa-logistics.oplconnect.com"] [uri "/.git/config"] [unique_id "aZ0s0QGQeVnp-SPQFFO7dgAAAIw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-24 03:06:06
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.8.206 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.8.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 23 22:06:00.870430 2026] [security2:error] [pid 28286:tid 28286] [client 65.111.8.206:53297] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dev.ericadamsdesign.com"] [uri "/.git/config"] [unique_id "aZ0VmOI6lqJ0OfqBVeNyFwAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-23 15:25:49
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.8.206 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.8.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 23 10:25:42.821414 2026] [security2:error] [pid 5901:tid 5924] [client 65.111.8.206:12217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aafmglobal.aafm.us"] [uri "/.git/config"] [unique_id "aZxxdnCmkvqGhvj-vH80KAAAAJQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-23 11:38:22
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.8.206 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.8.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 23 06:38:18.685195 2026] [security2:error] [pid 17448:tid 17448] [client 65.111.8.206:47035] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paolagallardo.ipostsocialmedia.com"] [uri "/.git/config"] [unique_id "aZw8Kkst91sjlQRXIAmCHwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
sefinek.net
2026-01-02 13:22:22
(5 months ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 12.5; rv:114.0) Gecko/20100101 Firefox/114.0
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
2025-12-30 11:10:37
(5 months ago)
wordpress-trap
Web App Attack