🇬🇧
relianoid.com
2026-05-01 16:11:33
(1 month ago)
POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com
Web Spam
🇫🇮
as211431.net
2026-03-28 05:57:45
(2 months ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/89.0.4447.51
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
2026-03-24 17:21:30
(2 months ago)
Forum/form spam
Web Spam
🇺🇸
TPI-Abuse
2026-02-20 07:30:30
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 104.207.32.230 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 104.207.32.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 20 02:30:23.402077 2026] [security2:error] [pid 32100:tid 32100] [client 104.207.32.230:48931] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cobbwebb.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cobbwebb.net"] [uri "/wp-json/wp/v2/users"] [unique_id "aZgNjx9-JWqV5yHokyMpmAAAAAw"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-13 02:52:07
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.32.230 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.32.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 12 21:52:04.164585 2026] [security2:error] [pid 18683:tid 18683] [client 104.207.32.230:60821] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "glidetrubooks.com"] [uri "/.env"] [unique_id "aWWzVJmqnrwX_HseqkMOJwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
MAGIC
2025-12-23 04:00:34
(5 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
2025-11-27 19:10:40
(6 months ago)
Forum/form spam
Web Spam
2025-11-26 12:02:47
(6 months ago)
Sending spam-mails via forms/direct PHP Execution/SQL injection from email:
[email protected]
Email Spam
Bad Web Bot
🇺🇸
TPI-Abuse
2025-11-25 04:21:21
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.32.230 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.32.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:21:17.112724 2025] [security2:error] [pid 6926:tid 6926] [client 104.207.32.230:22147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.virlouise.com"] [uri "/.git/HEAD"] [unique_id "aSUuvZAWbA_RMfVc0LopJwAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 03:43:20
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.32.230 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.32.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:43:13.048390 2025] [security2:error] [pid 28390:tid 28390] [client 104.207.32.230:59941] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.atlanticcitypartybuses.com"] [uri "/.svn/wc.db"] [unique_id "aSUl0aikyjRZjidTBqZuGgAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 03:03:08
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.32.230 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.32.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:03:02.800766 2025] [security2:error] [pid 32700:tid 32713] [client 104.207.32.230:10729] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.casademontemaior.com"] [uri "/.git/HEAD"] [unique_id "aSUcZrcrjRrp2J9TXtyi0QAAAMo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 02:40:15
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.32.230 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.32.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:40:08.064200 2025] [security2:error] [pid 32016:tid 32016] [client 104.207.32.230:30191] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.owlcapone.com"] [uri "/.env"] [unique_id "aSUXCFBtFQfmU74dstTZFgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 02:09:45
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.32.230 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.32.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:09:36.136898 2025] [security2:error] [pid 12562:tid 12562] [client 104.207.32.230:11273] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.ashburnp.us"] [uri "/.git/HEAD"] [unique_id "aSUP4GJ4B0_twhUcAc0a7AAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 00:13:03
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.32.230 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.32.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 19:12:58.481697 2025] [security2:error] [pid 1590769:tid 1590785] [client 104.207.32.230:17393] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.ingeconsultcr.com"] [uri "/.svn/wc.db"] [unique_id "aST0imGwGZE4_DDLbJbQGQAAAI4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 07:12:09
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.32.230 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.32.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:12:02.371600 2025] [security2:error] [pid 28146:tid 28146] [client 104.207.32.230:33807] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.tylercomputing.com"] [uri "/.env"] [unique_id "aSQFQt3ng0hQ8IPt0MuTFQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack