🇺🇸
Rip
2025-08-19 13:55:28
UTC ·
(1 year ago)
Excessive 404 errors - maxretry exceeded.
...
Web App Attack
🇺🇸
mnsf
2025-07-28 17:05:08
UTC ·
(1 year ago)
Too many Status 40X (12)
Brute-Force
Web App Attack
🇬🇧
Shadymint
2025-07-24 03:39:52
UTC ·
(1 year ago)
url probing from IP marked as abusive
Web App Attack
🇬🇧
Shadymint
2025-07-21 20:55:56
UTC ·
(1 year ago)
url probing from IP marked as abusive
Web App Attack
🇺🇸
TPI-Abuse
2025-07-18 22:10:54
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 89.46.110.166 (host166-110-46-89.serverdedicati.aruba.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 18 18:10:49.888316 2025] [security2:error] [pid 29568:t ...
show more
(mod_security) mod_security (id:210492) triggered by 89.46.110.166 (host166-110-46-89.serverdedicati.aruba.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 18 18:10:49.888316 2025] [security2:error] [pid 29568:tid 29568] [client 89.46.110.166:23116] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lakesideshelving.com"] [uri "/wp-config.php_old"] [unique_id "aHrGaYwzOcqdCoHz6sf2RwAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-18 05:19:54
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 89.46.110.166 (host166-110-46-89.serverdedicati.aruba.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 18 01:19:49.096511 2025] [security2:error] [pid 30352:t ...
show more
(mod_security) mod_security (id:210492) triggered by 89.46.110.166 (host166-110-46-89.serverdedicati.aruba.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 18 01:19:49.096511 2025] [security2:error] [pid 30352:tid 30402] [client 89.46.110.166:39278] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paylessformedicine.com"] [uri "/wp-config.php.old"] [unique_id "aHnZdcmYyQfWEq8Xq3qdtAAAAQ0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-18 04:34:07
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 89.46.110.166 (host166-110-46-89.serverdedicati.aruba.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 18 00:33:59.981372 2025] [security2:error] [pid 10142:t ...
show more
(mod_security) mod_security (id:210492) triggered by 89.46.110.166 (host166-110-46-89.serverdedicati.aruba.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 18 00:33:59.981372 2025] [security2:error] [pid 10142:tid 10142] [client 89.46.110.166:29532] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "oss-in-atm.info"] [uri "/wp-config.php1"] [unique_id "aHnOtxrTVxFayiM0EI446gAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-16 20:01:41
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 89.46.110.166 (host166-110-46-89.serverdedicati.aruba.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 16 16:01:36.161942 2025] [security2:error] [pid 26248:t ...
show more
(mod_security) mod_security (id:210492) triggered by 89.46.110.166 (host166-110-46-89.serverdedicati.aruba.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 16 16:01:36.161942 2025] [security2:error] [pid 26248:tid 26248] [client 89.46.110.166:23744] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "amzsci.com"] [uri "/wp-config.php1"] [unique_id "aHgFIF9vchw3sETrnC6lgwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
pinguin
2025-07-16 19:04:39
UTC ·
(1 year ago)
Triggered Cloudflare WAF (firewallManaged) from IT.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /wp-config.php.org
UA: Empty string
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
Bad Web Bot
🇺🇸
TPI-Abuse
2025-07-16 17:37:13
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 89.46.110.166 (host166-110-46-89.serverdedicati.aruba.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 16 13:37:09.020745 2025] [security2:error] [pid 10629:t ...
show more
(mod_security) mod_security (id:210492) triggered by 89.46.110.166 (host166-110-46-89.serverdedicati.aruba.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 16 13:37:09.020745 2025] [security2:error] [pid 10629:tid 10629] [client 89.46.110.166:37140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cactusstarvineyard.com"] [uri "/wp-config.php1"] [unique_id "aHfjRXMjGRECJmlCJfGZGwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-16 06:56:36
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 89.46.110.166 (host166-110-46-89.serverdedicati.aruba.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 16 02:56:30.866272 2025] [security2:error] [pid 12778:t ...
show more
(mod_security) mod_security (id:210492) triggered by 89.46.110.166 (host166-110-46-89.serverdedicati.aruba.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 16 02:56:30.866272 2025] [security2:error] [pid 12778:tid 12778] [client 89.46.110.166:27222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "accordionfactory.com"] [uri "/wp-config.php.old"] [unique_id "aHdNHoHYkIIQJiQHsPA3zgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-15 18:08:51
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 89.46.110.166 (host166-110-46-89.serverdedicati.aruba.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 15 14:08:44.651908 2025] [security2:error] [pid 14315:t ...
show more
(mod_security) mod_security (id:210492) triggered by 89.46.110.166 (host166-110-46-89.serverdedicati.aruba.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 15 14:08:44.651908 2025] [security2:error] [pid 14315:tid 14363] [client 89.46.110.166:27496] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "coloradosellers.com"] [uri "/wp-config.php1"] [unique_id "aHaZLFRH45FMWCNjVs-6JwAAAZA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2025-07-15 11:00:25
UTC ·
(1 year ago)
Repeated 403 errors, blocked by Fail2ban in custom-403 jail
Bad Web Bot
🇺🇸
TPI-Abuse
2025-07-15 06:08:04
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 89.46.110.166 (host166-110-46-89.serverdedicati.aruba.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 15 02:07:57.831850 2025] [security2:error] [pid 15624:t ...
show more
(mod_security) mod_security (id:210492) triggered by 89.46.110.166 (host166-110-46-89.serverdedicati.aruba.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 15 02:07:57.831850 2025] [security2:error] [pid 15624:tid 15624] [client 89.46.110.166:32410] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "marisetravel.com"] [uri "/wp-config.php.old"] [unique_id "aHXwPQ0Y_G0xIi_lFDdDKwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-15 03:34:38
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 89.46.110.166 (host166-110-46-89.serverdedicati.aruba.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 14 23:34:35.299334 2025] [security2:error] [pid 28741:t ...
show more
(mod_security) mod_security (id:210492) triggered by 89.46.110.166 (host166-110-46-89.serverdedicati.aruba.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 14 23:34:35.299334 2025] [security2:error] [pid 28741:tid 28741] [client 89.46.110.166:32636] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "marat.info"] [uri "/wp-config.php.old"] [unique_id "aHXMS1o6a1rZizoCaHQFSwAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack