๐บ๐ธ
TPI-Abuse
2026-09-22 16:10:48
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 89.46.108.119 (host119-108-46-89.serverdedicati ...
show more
(mod_security) mod_security (id:210492) triggered by 89.46.108.119 (host119-108-46-89.serverdedicati.aruba.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 12:10:41.962301 2026] [security2:error] [pid 17062:tid 17371] [client 89.46.108.119:43192] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ilovemyparrot.com"] [uri "/wp-config.php.bak"] [unique_id "arKogTyh-1Iqe2v8qMwYnQAAAMA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-22 15:33:28
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 89.46.108.119 (host119-108-46-89.serverdedicati ...
show more
(mod_security) mod_security (id:210492) triggered by 89.46.108.119 (host119-108-46-89.serverdedicati.aruba.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 11:33:20.576570 2026] [security2:error] [pid 12380:tid 12380] [client 89.46.108.119:35652] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "avrknives.com"] [uri "/wp-config.php.bak"] [unique_id "arKfwGUlFcds-6khCVXd0gAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-22 14:53:08
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 89.46.108.119 (host119-108-46-89.serverdedicati ...
show more
(mod_security) mod_security (id:210492) triggered by 89.46.108.119 (host119-108-46-89.serverdedicati.aruba.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 10:53:02.767537 2026] [security2:error] [pid 24979:tid 24979] [client 89.46.108.119:37496] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "scala-global.com"] [uri "/wp-config.php.bak"] [unique_id "arKWTk7Grm9J4kO-auE5QQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-22 13:51:52
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 89.46.108.119 (host119-108-46-89.serverdedicati ...
show more
(mod_security) mod_security (id:210492) triggered by 89.46.108.119 (host119-108-46-89.serverdedicati.aruba.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 09:51:45.895284 2026] [security2:error] [pid 24846:tid 24846] [client 89.46.108.119:30556] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "uppermotradingco.com"] [uri "/wp-config.php.bak"] [unique_id "arKH8XZxdkM2x9ihSRt-_AAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-22 13:25:16
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 89.46.108.119 (host119-108-46-89.serverdedicati ...
show more
(mod_security) mod_security (id:210492) triggered by 89.46.108.119 (host119-108-46-89.serverdedicati.aruba.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 09:25:09.996563 2026] [security2:error] [pid 9007:tid 9007] [client 89.46.108.119:41620] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "keystonestandard.com"] [uri "/index.php/wp-config.php.bak"] [unique_id "arKBtWHMm5_RMQxAYvwT4AAAACU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-22 11:13:45
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 89.46.108.119 (host119-108-46-89.serverdedicati ...
show more
(mod_security) mod_security (id:210492) triggered by 89.46.108.119 (host119-108-46-89.serverdedicati.aruba.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 07:13:41.478705 2026] [security2:error] [pid 1656:tid 1656] [client 89.46.108.119:32042] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jazzclubla.com"] [uri "/wp-config.php.bak"] [unique_id "arJi5W_8aToQzrDK7MattAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-22 09:03:32
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 89.46.108.119 (host119-108-46-89.serverdedicati ...
show more
(mod_security) mod_security (id:210492) triggered by 89.46.108.119 (host119-108-46-89.serverdedicati.aruba.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 05:03:25.157179 2026] [security2:error] [pid 25032:tid 25032] [client 89.46.108.119:30020] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jangambleandco.com"] [uri "/wp-config.php.bak"] [unique_id "arJEXTX1IAucRtK9bauJSAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-22 08:43:39
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 89.46.108.119 (host119-108-46-89.serverdedicati ...
show more
(mod_security) mod_security (id:210492) triggered by 89.46.108.119 (host119-108-46-89.serverdedicati.aruba.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 04:43:33.968661 2026] [security2:error] [pid 6014:tid 6014] [client 89.46.108.119:23714] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "radiantmessages.com"] [uri "/wp-config.php.bak"] [unique_id "arI_tXCjuWA29EEJhexnjQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
Zandro
2025-08-30 00:10:00
(1 year ago)
ranged TCP flood attack
DDoS Attack
๐ซ๐ฎ
as211431.net
2025-08-14 10:58:11
(1 year ago)
Triggered Cloudflare WAF (firewallCustom) from IT.
Action taken: BLOCK
Protocol: HTTP/1.1 (HEAD meth ...
show more
Triggered Cloudflare WAF (firewallCustom) from IT.
Action taken: BLOCK
Protocol: HTTP/1.1 (HEAD method)
Endpoint: /as211431.net.zip
UA: Empty string
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐ซ๐ท
geot
2025-08-12 12:27:47
(1 year ago)
HEAD /archive.zip HTTP/1.1
HEAD /Backup.zip HTTP/1.1
HEAD /wordpress.zip HTTP/1.1
HEAD /public_html. ...
show more
HEAD /archive.zip HTTP/1.1
HEAD /Backup.zip HTTP/1.1
HEAD /wordpress.zip HTTP/1.1
HEAD /public_html.zip HTTP/1.1
show less
Hacking
Web App Attack
๐บ๐ธ
octageeks.com
2025-08-11 04:21:19
(1 year ago)
Wordpress malicious attack:[octablocked]
Web App Attack
Anonymous
2025-08-10 14:30:05
(1 year ago)
Backdrop CMS module - malicious activity detected
Bad Web Bot
Web App Attack
๐ฎ๐น
www.tana.it
2025-08-02 03:17:23
(1 year ago)
PHP scan
Web App Attack
๐บ๐ธ
Penny Packer
2025-08-02 02:14:43
(1 year ago)
Fail2Ban apache-tripwires
Web App Attack