๐ฌ๐ง
Oakley
2026-04-06 03:18:05
(2 months ago)
(mod_security) mod_security (id:900209) triggered by 104.207.45.174 (US/United States/-): 5 in the l ...
show more
(mod_security) mod_security (id:900209) triggered by 104.207.45.174 (US/United States/-): 5 in the last 900 secs
show less
Web App Attack
Hacking
๐บ๐ธ
TPI-Abuse
2026-02-09 21:22:53
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.45.174 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.45.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 16:22:48.881469 2026] [security2:error] [pid 1476298:tid 1476298] [client 104.207.45.174:64461] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "garciadomingo.com"] [uri "/backup/.git/config"] [unique_id "aYpQKHoPHW6RM-HK_E2NeQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-02-09 19:55:29
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.45.174 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.45.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 14:55:08.799528 2026] [security2:error] [pid 7207:tid 7207] [client 104.207.45.174:32603] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gainow.net"] [uri "/frontend/.env"] [unique_id "aYo7nOBtMg9MhnEUeuhaggAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-02-09 18:47:33
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.45.174 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.45.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 13:47:27.161967 2026] [security2:error] [pid 903259:tid 903259] [client 104.207.45.174:48089] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fxbgsanta.com"] [uri "/.env.production"] [unique_id "aYorv19SPcOez6GhRW-sIgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-02-09 10:38:11
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.45.174 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.45.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 05:38:01.928112 2026] [security2:error] [pid 174439:tid 174560] [client 104.207.45.174:25839] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gafmboard.com"] [uri "/app/.env"] [unique_id "aYm5CbBStXOODiSAdTvgCgAAAZI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
Jean Valjean
2026-01-04 17:43:44
(5 months ago)
Fail2ban Caboom : xmlrpc.php Abuse
SQL Injection
Web App Attack
๐ต๐ฑ
sefinek.net
2025-12-23 01:47:00
(5 months ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/89.0.4447.51
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
Anonymous
2025-11-27 05:18:29
(6 months ago)
Fuzzing/Looking for credentials files.
Brute-Force
Web App Attack
๐ต๐ฑ
ketovoila.pl
2025-11-24 06:23:31
(6 months ago)
ketovoila.pl HONEYPOT traffic: count=1, paths=1; sample_path=www.ketovoila.pl/.env; UA=Mozilla/5.0 ( ...
show more
ketovoila.pl HONEYPOT traffic: count=1, paths=1; sample_path=www.ketovoila.pl/.env; UA=Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36; window=2025-11-24T06:05:50Z..2025-11-24T06:05:50Z
show less
Brute-Force
SSH
๐บ๐ธ
TPI-Abuse
2025-11-24 05:27:36
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.45.174 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.45.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:27:22.395946 2025] [security2:error] [pid 6015:tid 6015] [client 104.207.45.174:59553] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.evelowerealtor.com"] [uri "/.env"] [unique_id "aSPsugFDS2h3t9Y66FTBkAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-11-24 04:56:27
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.45.174 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.45.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:56:22.389585 2025] [security2:error] [pid 25549:tid 25549] [client 104.207.45.174:25595] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.charmainecruz.com"] [uri "/.git/HEAD"] [unique_id "aSPldhToHSvK6r6hbvhLqAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-11-24 04:29:57
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.45.174 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.45.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:29:50.538202 2025] [security2:error] [pid 21279:tid 21279] [client 104.207.45.174:28389] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.alaskadreamspublishing.com"] [uri "/.git/HEAD"] [unique_id "aSPfPkFJTQXnCUxGmS_W7QAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฆ๐บ
oncord
2025-11-09 22:42:25
(6 months ago)
Form spam
Web Spam
๐ฆ๐บ
oncord
2025-11-08 16:49:35
(6 months ago)
Form spam
Web Spam
๐ฆ๐บ
oncord
2025-10-26 05:59:06
(7 months ago)
Form spam
Web Spam