2026-03-23 20:15:35
(2 months ago)
Forum/form spam
Web Spam
🇬🇧
relianoid.com
2026-02-11 03:32:51
(3 months ago)
POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com
Web Spam
🇨🇭
backslash
2026-01-24 21:55:03
(4 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇦🇺
MAGIC
2026-01-19 03:06:52
(4 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
2026-01-13 03:24:34
(4 months ago)
Forum/form spam
Web Spam
🇺🇸
fbarela
2025-12-29 00:00:22
(5 months ago)
FortiGate SSL VPN login failures.
Hacking
Brute-Force
2025-12-12 13:46:05
(5 months ago)
botnet
DDoS Attack
🇦🇺
MAGIC
2025-12-07 00:01:07
(6 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
2025-12-03 11:20:57
(6 months ago)
botnet
DDoS Attack
🇮🇳
Mcshield.org
2025-12-01 09:10:10
(6 months ago)
POST /HNAP1/ or /shell login attempt - Hajime
Port Scan
Web App Attack
SSH
🇺🇸
TPI-Abuse
2025-11-25 05:25:17
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.44.97 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.44.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 00:25:13.000685 2025] [security2:error] [pid 1484:tid 1484] [client 104.207.44.97:29661] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "linuxforpoets.cygnetsilks.com"] [uri "/.git/HEAD"] [unique_id "aSU9uYoEGB4Sa8JI-u0hHAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 04:15:36
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.44.97 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.44.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:15:32.624293 2025] [security2:error] [pid 13853:tid 13853] [client 104.207.44.97:14137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbrooketaylor.ingberinteriors.com"] [uri "/.git/HEAD"] [unique_id "aSUtZOHAT1D7eFHucVo1TwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
sefinek.net
2025-11-25 03:53:36
(6 months ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2025-11-25 03:46:03
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.44.97 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.44.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:45:55.201863 2025] [security2:error] [pid 17561:tid 17561] [client 104.207.44.97:47357] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.robertseyewear.com"] [uri "/.git/HEAD"] [unique_id "aSUmc4tWcHQq10XuQlu1NgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 08:20:24
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.44.97 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.44.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:20:18.290198 2025] [security2:error] [pid 13513:tid 13513] [client 104.207.44.97:36421] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.trhs70.com"] [uri "/.svn/wc.db"] [unique_id "aSQVQs6qY38j4mHMCtCqSQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack