🇱🇻
garmtech.com
2026-05-15 22:56:37
(3 weeks ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 01-56.104.207.43.43.web-spamme ...
show more
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 01-56.104.207.43.43.web-spammers.v2.rbl.imunify.com._v4 succeeded.
show less
Web App Attack
🇫🇮
as211431.net
2026-05-13 04:45:03
(3 weeks ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET metho ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /wp-json/gravitysmtp/v1/tests/mock-data
UA: curl/8.7.1
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇪🇸
librebit
2026-04-18 17:56:40
(1 month ago)
Brute force
Brute-Force
2026-03-29 18:54:35
(2 months ago)
Forum/form spam
Web Spam
🇮🇹
Progetto1
2026-03-11 22:10:02
(2 months ago)
Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇦🇺
nzhost.co.nz
2026-02-19 12:32:41
(3 months ago)
$f2bV_matches
Hacking
Brute-Force
🇳🇱
homeshowdomain.nl
2026-02-15 22:59:04
(3 months ago)
Auto-ban: >3000 req/min op 2026-02-15
Hacking
Web App Attack
SSH
🇦🇺
nzhost.co.nz
2026-02-15 12:26:18
(3 months ago)
$f2bV_matches
Hacking
Brute-Force
🇺🇸
TPI-Abuse
2026-02-15 06:06:50
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.43.43 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.43.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 01:06:44.574542 2026] [security2:error] [pid 4262:tid 4262] [client 104.207.43.43:15139] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sylversheers.com"] [uri "/app/.git/config"] [unique_id "aZFidJjv3wEV7gWF6VZPcgAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 04:58:37
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.43.43 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.43.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 23:58:30.994071 2026] [security2:error] [pid 21869:tid 21869] [client 104.207.43.43:61199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sullico.com"] [uri "/dev/.git/config"] [unique_id "aZFSdvZBYOK1INvcd4WmIAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 04:14:35
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.43.43 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.43.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 23:14:25.445294 2026] [security2:error] [pid 26652:tid 26652] [client 104.207.43.43:39113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stpetersplayers.co.uk"] [uri "/v2/.git/config"] [unique_id "aZFIIdAO8PKDabcmoLehAAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 03:58:19
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.43.43 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.43.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 22:58:15.271081 2026] [security2:error] [pid 996:tid 996] [client 104.207.43.43:20653] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stlouisdave.com"] [uri "/.env"] [unique_id "aZFEVwSdnZFCJIKLjto89QAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 03:17:32
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.43.43 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.43.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 22:17:25.839764 2026] [security2:error] [pid 4756:tid 4756] [client 104.207.43.43:40903] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "starfateofficial.com"] [uri "/frontend/.env"] [unique_id "aZE6xctTFAAc5gUV6Ir0yQAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 02:46:23
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.43.43 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.43.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 21:46:17.424827 2026] [security2:error] [pid 24402:tid 24402] [client 104.207.43.43:10441] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "springfieldtileexpert.com"] [uri "/.env.production"] [unique_id "aZEzedVosC45nxyot80m6gAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
Origon
2026-02-15 02:35:09
(3 months ago)
http-sensitive-files - IP: 104.207.43.43 - time="2026-02-15T03:35:09+01:00" level=info msg="(555f66 ...
show more
http-sensitive-files - IP: 104.207.43.43 - time="2026-02-15T03:35:09+01:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-sensitive-files by ip 104.207.43.43 (US/200373) : 4h ban on Ip 104.207.43.43" module=db
show less
Web App Attack