🇱🇻
garmtech.com
2026-05-16 16:59:46
(3 weeks ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 19-59.104.207.37.103.web-spamm ...
show more
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 19-59.104.207.37.103.web-spammers.v2.rbl.imunify.com._v4 succeeded.
show less
Web App Attack
🇱🇻
garmtech.com
2026-05-08 05:27:07
(4 weeks ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 08-27.104.207.37.103.web-spamm ...
show more
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 08-27.104.207.37.103.web-spammers.v2.rbl.imunify.com._v4 succeeded.
show less
Web App Attack
🇵🇱
stareradia.pl
2026-04-25 08:56:52
(1 month ago)
[Sat Apr 25 10:56:19.331799 2026] [php:error] [pid 1486916:tid 1486916] [client 104.207.37.103:0] sc ...
show more
[Sat Apr 25 10:56:19.331799 2026] [php:error] [pid 1486916:tid 1486916] [client 104.207.37.103:0] script '/var/www/html/profile.php' not found or unable to stat, referer: https://forum-trioda.pl/
[Sat Apr 25 10:56:24.435002 2026] [php:error] [pid 1486916:tid 1486916] [client 104.207.37.103:0] script '/var/www/html/profile.php' not found or unable to stat, referer: https://forum-trioda.pl/
[Sat Apr 25 10:56:25.090044 2026] [php:error] [pid 1502446:tid 1502446] [client 104.207.37.103:0] script '/var/www/html/profile.php' not found or unable to stat, referer: https://forum-trioda.pl/ucp.php?mode=register&agreed=true&iscanyesno=yeswecan&step=2&coppa=0
[Sat Apr 25 10:56:51.331617 2026] [php:error] [pid 1477829:tid 1477829] [client 104.207.37.103:0] script '/var/www/html/profile.php' not found or unable to stat, referer: https://forum-trioda.pl/
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-02-20 05:15:44
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 104.207.37.103 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 104.207.37.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 20 00:15:38.856880 2026] [security2:error] [pid 14137:tid 14137] [client 104.207.37.103:29565] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||lozzy.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "lozzy.net"] [uri "/wp-json/wp/v2/users"] [unique_id "aZft-hmvEctmC4oCAa8U2gAAABg"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
sefinek.net
2026-02-10 13:38:03
(3 months ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:114.0) Gecko/20100101 Firefox/114.0
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇬🇧
relianoid.com
2026-02-01 15:55:15
(4 months ago)
POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com
Web Spam
🇺🇸
Dolutech.com
2026-01-02 17:19:29
(5 months ago)
Bruteforce Attack Detected
Brute-Force
🇦🇺
MAGIC
2025-12-18 02:10:22
(5 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2025-12-02 08:29:50
(6 months ago)
(mod_security) mod_security (id:210740) triggered by 104.207.37.103 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210740) triggered by 104.207.37.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 03:29:43.300208 2025] [security2:error] [pid 25685:tid 25685] [client 104.207.37.103:35359] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||studiopilates.net|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "studiopilates.net"] [uri "/contact/scarbook.php"] [unique_id "aS6jd-QblNHy6gDReynVbgAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-11-30 13:33:19
(6 months ago)
botnet
DDoS Attack
🇱🇻
garmtech.com
2025-11-29 05:59:04
(6 months ago)
IM360 WAF: Old style account creation and modification in Joomla! MV:registration
Web App Attack
🇦🇺
oncord
2025-11-24 06:12:41
(6 months ago)
Form spam
Web Spam
🇵🇱
sefinek.net
2025-11-17 09:33:49
(6 months ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /genshin-stella-mod
UA: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:114.0) Gecko/20100101 Firefox/114.0
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
2025-11-14 08:46:40
(6 months ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack
🇸🇪
KIDOS
2025-11-08 21:21:05
(6 months ago)
malicious activity, botnet
Web App Attack