🇲🇾
Rizzy
2026-05-21 09:13:11
(3 months ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇫🇷
Octopuce
2026-03-23 17:03:27
(5 months ago)
Aggressive web search of vulnerable pages: /wp-content/plugins/init-help/init.php /wp-content/plugin ...
show more
Aggressive web search of vulnerable pages: /wp-content/plugins/init-help/init.php /wp-content/plugins/seoplugins/mar.php /wp-content/plugins/pr ...
show less
Web App Attack
🇮🇳
dineshskt4all
2026-03-20 21:11:07
(5 months ago)
[Fri Mar 20 21:11:00.434579 2026] [proxy_fcgi:error] [pid 657841:tid 136439031396032] [client 85.203 ...
show more
[Fri Mar 20 21:11:00.434579 2026] [proxy_fcgi:error] [pid 657841:tid 136439031396032] [client 85.203.44.77:0] AH01071: Got error 'Primary script unknown'
...
show less
Brute-Force
🇬🇧
pinguin
2026-03-10 19:15:01
(6 months ago)
Triggered Cloudflare WAF (firewallManaged) from SE.
Action taken: LOG
Protocol: HTTP/1.1 (GET method ...
show more
Triggered Cloudflare WAF (firewallManaged) from SE.
Action taken: LOG
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Empty string
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-03-10 13:14:11
(6 months ago)
(mod_security) mod_security (id:210730) triggered by 85.203.44.77 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 85.203.44.77 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 10 09:14:04.319109 2026] [security2:error] [pid 26990:tid 27036] [client 85.203.44.77:52513] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||siestakeybch.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "siestakeybch.com"] [uri "/bak/dump.sql"] [unique_id "abAZHC9-N60FAzSnaO4E8wAAAMg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
bescared
2026-03-09 02:23:51
(6 months ago)
F2B - Malicious activity detected. URL Probing.
Hacking
Bad Web Bot
Web App Attack
🇺🇸
Penny Packer
2026-03-05 08:35:30
(6 months ago)
Fail2Ban apache-tripwires
Web App Attack
🇵🇾
armandosaucedo.me
2026-03-05 05:42:13
(6 months ago)
85.203.44.77 - - [05/Mar/2026:05:41:58 +0000] "HEAD /restore/config.json HTTP/1.1" 404 - "-" "-"
Web App Attack
🇩🇪
bescared
2026-02-23 16:16:38
(6 months ago)
F2B - Malicious activity detected. URL Probing.
Hacking
Bad Web Bot
Web App Attack
🇨🇭
Origon
2026-02-09 13:44:14
(7 months ago)
http-crawl-non_statics - IP: 85.203.44.77 - time="2026-02-09T14:44:14+01:00" level=info msg="(555f6 ...
show more
http-crawl-non_statics - IP: 85.203.44.77 - time="2026-02-09T14:44:14+01:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-crawl-non_statics by ip 85.203.44.77 (SE/42708) : 4h ban on Ip 85.203.44.77" module=db
show less
Bad Web Bot
🇩🇪
ghostwarriors
2026-02-09 13:20:24
(7 months ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-02-06 06:53:16
(7 months ago)
(mod_security) mod_security (id:210730) triggered by 85.203.44.77 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 85.203.44.77 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 06 01:53:11.901452 2026] [security2:error] [pid 20926:tid 20926] [client 85.203.44.77:27033] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||bitcointoolshop.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bitcointoolshop.com"] [uri "/restore/www.sql"] [unique_id "aYWP11O6azOHqUx-gtkpNAAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Penny Packer
2026-02-01 19:03:06
(7 months ago)
Fail2Ban apache-tripwires
Web App Attack
🇺🇦
URAN Publishing Service
2026-01-30 13:30:30
(7 months ago)
85.203.44.77 - - [30/Jan/2026:15:30:26 +0200] "GET //wp-admin/js/index.php HTTP/1.1" 404 274 "-" "Go ...
show more
85.203.44.77 - - [30/Jan/2026:15:30:26 +0200] "GET //wp-admin/js/index.php HTTP/1.1" 404 274 "-" "Go-http-client/1.1"
85.203.44.77 - - [30/Jan/2026:15:30:29 +0200] "GET //wp-content/plugins/so-pinyin-slugs/inc/js-inc.php HTTP/1.1" 404 274 "-" "Go-http-client/1.1"
...
show less
Web App Attack
🇮🇹
Rosh
2026-01-30 09:11:08
(7 months ago)
[01/30/26 10:11:08] 1 attack: /wp-content/plugins/hello.php (severity 6);
Web App Attack