🇦🇺
RedBear IT
2026-03-26 10:00:37
(2 months ago)
"DDoS against public endpoint"
DDoS Attack
2026-03-08 00:58:32
(2 months ago)
Forum/form spam
Web Spam
🇺🇸
TPI-Abuse
2026-02-12 04:02:21
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.40.88 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.40.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 23:02:15.056177 2026] [security2:error] [pid 16388:tid 16388] [client 104.207.40.88:38249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arteseros.com"] [uri "/.env"] [unique_id "aY1Qx7CgwXY1tAY_VCeEmQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-12 00:50:53
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.40.88 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.40.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 19:50:47.448977 2026] [security2:error] [pid 21056:tid 21056] [client 104.207.40.88:61309] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "armstrongpartnersllc.com"] [uri "/.env.staging"] [unique_id "aY0j50JWMRKsvIGOFHSrCwAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-11 21:18:05
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.40.88 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.40.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 16:18:00.727268 2026] [security2:error] [pid 11881:tid 11881] [client 104.207.40.88:55313] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "areaware-archive.com"] [uri "/dev/.git/config"] [unique_id "aYzyCKX4undwhWVJLFHFRQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-10 06:30:59
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.40.88 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.40.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 10 01:30:51.491755 2026] [security2:error] [pid 25852:tid 25852] [client 104.207.40.88:42381] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ilandman.com"] [uri "/config/.env"] [unique_id "aYrQm-ErvWIQ1Obu4ziJxgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Rocky Mountain Bioengineering Symposium
2026-02-10 03:51:45
(3 months ago)
104.207.40.88 - - [09/Feb/2026:20:51:45 -0700] "GET /dev/.git/config HTTP/1.1" 404 8556 "-" "Mozilla ...
show more
104.207.40.88 - - [09/Feb/2026:20:51:45 -0700] "GET /dev/.git/config HTTP/1.1" 404 8556 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-02-10 03:17:05
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.40.88 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.40.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 22:16:58.560490 2026] [security2:error] [pid 28858:tid 28858] [client 104.207.40.88:21087] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ialenti.com"] [uri "/.env.local"] [unique_id "aYqjKjT1hMwGuVJPzDaEbwAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-09 22:02:41
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.40.88 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.40.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 17:02:37.444924 2026] [security2:error] [pid 2431:tid 2431] [client 104.207.40.88:10401] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "katherinehowell.us"] [uri "/dev/.git/config"] [unique_id "aYpZfZh4Tib3PqDO8wFRBQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-09 21:08:06
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.40.88 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.40.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 16:07:56.483178 2026] [security2:error] [pid 19528:tid 19528] [client 104.207.40.88:49141] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "karenbernsteinlaw.net"] [uri "/.env.staging"] [unique_id "aYpMrL7iSWF24cVmr3xg-AAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-09 20:48:34
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.40.88 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.40.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 15:48:25.198054 2026] [security2:error] [pid 238011:tid 238011] [client 104.207.40.88:35369] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "honweneedthis.com"] [uri "/.git/config"] [unique_id "aYpIGXNWZdvvvRoxxrGKoAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
nowyouknow
2026-01-16 06:31:41
(4 months ago)
(From [email protected] ) Upgrade your rankings, grow your search appearance and build powerfu ...
show more
(From [email protected] ) Upgrade your rankings, grow your search appearance and build powerful backlinks!
BonusBacklinks.com - we deliver daily backlinks and bring website visits to your website EVERY DAY:
+ Use 85% DISCOUNT
+ Trusted daily seo backlinks
+ Real website traffic
+ Price only from $1
+ Bonus discount codes:
https://BonusBacklinks.com/85Save
BonusBacklinks.com - daily backlinks and website traffic to grow your site everyday
show less
Phishing
Web Spam
🇬🇧
relianoid.com
2025-11-14 23:56:11
(6 months ago)
POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com
Web Spam
2025-11-14 01:42:34
(6 months ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack
🇵🇱
sefinek.net
2025-11-03 06:56:15
(7 months ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot