|
🇫🇷
pcouy
|
|
Obvious bot patterns with spoofed User-agent : Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:147.0) Gecko/20100101 Firefox/147.0
...
|
Bad Web Bot
|
|
🇦🇺
aranguren.org
|
|
104.207.35.11 - - [13/Oct/2026:12:36:37 +1100] "GET /openapi.json HTTP/1.1" 404 993 "-" "-"
104.207.35.11 - - [13/Oct/2026:12:36:38 +1100] "GET /actuator HTTP/1.1" 404 993 "-" "-"
104.207.35.11 - - [13/Oct/2026:12:36:39 +1100] "GET /api/v1 HTTP/1.1" ...
show more
104.207.35.11 - - [13/Oct/2026:12:36:37 +1100] "GET /openapi.json HTTP/1.1" 404 993 "-" "-"
104.207.35.11 - - [13/Oct/2026:12:36:38 +1100] "GET /actuator HTTP/1.1" 404 993 "-" "-"
104.207.35.11 - - [13/Oct/2026:12:36:39 +1100] "GET /api/v1 HTTP/1.1" 404 993 "-" "-"
...
show less
|
Bad Web Bot
|
|
🇺🇸
boombies
|
|
garlanda
|
Brute-Force
|
|
🇫🇷
Sklurk
|
|
Web App Attack
|
Web App Attack
|
|
Anonymous
|
|
IM360 WAF: Attempt to upload malware
|
Hacking
|
|
🇩🇪
Packets-Decreaser.NET
|
|
Incoming Layer 7 Flood Detected
|
DDoS Attack
Web Spam
|
|
🇵🇱
sefinek.net
|
|
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:114.0) Gecko/20100101 Firefox/114.0
This report was generated by:
https://git ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:114.0) Gecko/20100101 Firefox/114.0
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
|
Bad Web Bot
|
|
Anonymous
|
|
botnet
|
DDoS Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 104.207.35.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 07:03:11.696814 2025] [security2:error] [pid 10722:tid 10722] [client 104.207.35.11:50473] M ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.35.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 07:03:11.696814 2025] [security2:error] [pid 10722:tid 10722] [client 104.207.35.11:50473] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.stpny.com"] [uri "/.svn/wc.db"] [unique_id "aSbsf_JTEQD0bw4X5YDNtQAAAA8"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 104.207.35.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 06:34:30.206950 2025] [security2:error] [pid 9480:tid 9480] [client 104.207.35.11:49991] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.35.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 06:34:30.206950 2025] [security2:error] [pid 9480:tid 9480] [client 104.207.35.11:49991] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.stoneageartifacts.com"] [uri "/.svn/wc.db"] [unique_id "aSblxvv4a7Twv081hCYL4gAAABA"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 104.207.35.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 03:41:24.621075 2025] [security2:error] [pid 9541:tid 9578] [client 104.207.35.11:53127] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.35.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 03:41:24.621075 2025] [security2:error] [pid 9541:tid 9578] [client 104.207.35.11:53127] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.barnetts.us"] [uri "/.env"] [unique_id "aSa9NGMy3HNq1n2SMlt7vwAAAQU"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 104.207.35.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 02:06:27.647587 2025] [security2:error] [pid 3599211:tid 3599231] [client 104.207.35.11:4396 ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.35.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 02:06:27.647587 2025] [security2:error] [pid 3599211:tid 3599231] [client 104.207.35.11:43963] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.emmaryan.net"] [uri "/.git/HEAD"] [unique_id "aSam8yWBb6LubLi-gSEs3QAAAFI"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 104.207.35.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 00:16:31.128174 2025] [security2:error] [pid 12717:tid 12717] [client 104.207.35.11:48287] M ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.35.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 00:16:31.128174 2025] [security2:error] [pid 12717:tid 12717] [client 104.207.35.11:48287] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.roadtosalvation.org"] [uri "/.svn/wc.db"] [unique_id "aSaNL7okAsvFL06uMlU1bwAAABY"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 104.207.35.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 19:36:25.486401 2025] [security2:error] [pid 5318:tid 5337] [client 104.207.35.11:24589] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.35.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 19:36:25.486401 2025] [security2:error] [pid 5318:tid 5337] [client 104.207.35.11:24589] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southtampaprints.com"] [uri "/.env"] [unique_id "aSZLiYtQIEBqnJukf2K-4gAAAJE"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 104.207.35.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 19:47:23.755482 2025] [security2:error] [pid 28815:tid 28815] [client 104.207.35.11:19955] M ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.35.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 19:47:23.755482 2025] [security2:error] [pid 28815:tid 28815] [client 104.207.35.11:19955] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.memotronic.com"] [uri "/.git/HEAD"] [unique_id "aST8m0gGp36XhwrvmHuYJQAAABY"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
