🇺🇸
integrantservices.com
2026-07-03 21:29:07
(1 week ago)
(PERMBLOCK) 104.207.39.119 (US/United States/-) has had more than 4 temp blocks
Hacking
🇺🇸
integrantservices.com
2026-07-03 20:26:20
(1 week ago)
(wordpress) Failed wordpress login from 104.207.39.119 (US/United States/-)
Brute-Force
🇫🇷
✨
2026-06-29 01:00:16
(1 week ago)
Domain : musicdna.info
Rule : env
2026-06-29 00:38:08 W3SVC385 PLESK72 79.171.34.85 GET /blog/wp-inc ...
show more
Domain : musicdna.info
Rule : env
2026-06-29 00:38:08 W3SVC385 PLESK72 79.171.34.85 GET /blog/wp-includes/wlwmanifest.xml - 80 - 104.207.39.119 HTTP/1.1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36 - - www.musicdna.info:80 404 0 2 1529 387 291 - -
show less
Hacking
SQL Injection
🇧🇪
cmbplf
2026-06-09 22:41:19
(1 month ago)
2.516 requests with url.path //xmlrpc.php
Brute-Force
Bad Web Bot
🇫🇷
tecnicorioja
2026-04-22 22:00:04
(2 months ago)
POST /xmlrpc.php [22/Apr/2026:05:05:44
Brute-Force
Web App Attack
🇦🇺
MAGIC
2026-04-16 00:26:04
(2 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇦🇺
RedBear IT
2026-03-26 10:00:37
(3 months ago)
"DDoS against public endpoint"
DDoS Attack
🇨🇦
1gz
2026-03-19 08:20:48
(3 months ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: CHALLENGE
Protocol: HTTP/1.1 (GET m ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /admin
UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
Psycho Solutions LLC
2026-03-16 06:24:43
(3 months ago)
Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-login.php - User Agent: N ...
show more
Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-login.php - User Agent: N/A - Timestamp: 3/16/2026 6:24 am (UTC-6)
show less
Web App Attack
Bad Web Bot
Web Spam
Hacking
2026-01-26 09:11:12
(5 months ago)
Forum/form spam
Web Spam
2025-12-07 02:08:25
(7 months ago)
botnet
DDoS Attack
🇺🇸
TPI-Abuse
2025-12-02 20:03:31
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.39.119 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.39.119 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 15:03:27.860792 2025] [security2:error] [pid 2393:tid 2396] [client 104.207.39.119:49949] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nickkonstantinidis.com"] [uri "/.git/HEAD"] [unique_id "aS9GD1_5OfrN-Iwwy8SDjgAAAIE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 05:19:26
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.39.119 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.39.119 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 00:19:22.170947 2025] [security2:error] [pid 19994:tid 19994] [client 104.207.39.119:21955] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "yourbrandhere.com"] [uri "/.env"] [unique_id "aS522rhKd-3ALkWKgKvqBwAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 04:45:49
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.39.119 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.39.119 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 01 23:45:43.231708 2025] [security2:error] [pid 18060:tid 18060] [client 104.207.39.119:37673] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "assheton.com"] [uri "/.git/HEAD"] [unique_id "aS5u93dyS_9x5N5A-nkuhQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 04:14:14
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.39.119 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.39.119 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 01 23:14:06.192132 2025] [security2:error] [pid 10343:tid 10343] [client 104.207.39.119:41585] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "collectorcarconsultants.com"] [uri "/.svn/wc.db"] [unique_id "aS5njnHFUPsSSvg4nhiOQAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack