🇱🇻
garmtech.com
2026-02-16 08:34:39
(3 months ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 10-34.104.207.45.82.web-spamme ...
show more
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 10-34.104.207.45.82.web-spammers.v2.rbl.imunify.com._v4 succeeded.
show less
Web App Attack
🇬🇧
relianoid.com
2026-02-01 19:46:31
(4 months ago)
POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com
Web Spam
🇺🇸
nowyouknow
2026-01-05 05:43:51
(5 months ago)
(From [email protected] ) Hi Aberdeenfamilychiropractic Com,
We recently v ...
show more
(From [email protected] ) Hi Aberdeenfamilychiropractic Com,
We recently visited your website and are very interested in your products.
Could you kindly provide us with your current price catalogue?
We appreciate your assistance and look forward to your prompt response.
Thank you and best regards,
Best regards,
Paul Timothy
Business development/ General Counselor
https://www.sourcingforaustralia.com
show less
Phishing
Web Spam
🇩🇪
Packets-Decreaser.NET
2025-12-29 14:01:21
(5 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
🇵🇱
sefinek.net
2025-12-28 02:08:22
(5 months ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:114.0) Gecko/20100101 Firefox/114.0
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
2025-12-12 20:46:02
(5 months ago)
botnet
DDoS Attack
🇺🇸
TPI-Abuse
2025-11-26 08:34:17
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.45.82 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.45.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 03:34:15.400358 2025] [security2:error] [pid 9606:tid 9646] [client 104.207.45.82:35923] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.metastrata.com"] [uri "/.env"] [unique_id "aSa7hyFyBWeOsnO3zv5oKwAAAIE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 08:14:06
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.45.82 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.45.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 03:14:00.891088 2025] [security2:error] [pid 7908:tid 7908] [client 104.207.45.82:31339] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.jsolanogranite.com"] [uri "/.git/HEAD"] [unique_id "aSa2yCZioSCKV7wg4SkZmAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 05:39:21
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.45.82 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.45.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 00:39:14.843537 2025] [security2:error] [pid 16934:tid 16968] [client 104.207.45.82:31723] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.boracayboats.com"] [uri "/.git/HEAD"] [unique_id "aSaSghKESCEx-WKRVnsmhwAAAYQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
IROK
2025-11-26 03:53:27
(6 months ago)
26/Nov/2025:04:53:17.921816 +0100Apache-Error: [file "apache2_util.c"] [line 273] [level 3] [client ...
show more
26/Nov/2025:04:53:17.921816 +0100Apache-Error: [file "apache2_util.c"] [line 273] [level 3] [client 104.207.45.82] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [tag "MEWAF"] [hostname "mail.fildom.pl"] [uri "/.env"] [unique_id "aSZ5rQAe6WZ@0V8hbTTytgAAAAA"]
...
show less
Hacking
🇺🇸
TPI-Abuse
2025-11-26 02:30:21
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.45.82 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.45.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 21:30:13.799384 2025] [security2:error] [pid 3365543:tid 3365673] [client 104.207.45.82:19581] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.opticaldesignconcepts.com"] [uri "/.env"] [unique_id "aSZmNWzJ-U6IElkF6xNyrgAAAdg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 01:15:15
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.45.82 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.45.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 20:15:03.638802 2025] [security2:error] [pid 5683:tid 5683] [client 104.207.45.82:49459] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.virginians.com"] [uri "/.git/HEAD"] [unique_id "aSZUlxAZM5qGvavKHV-FPAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 00:41:38
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.45.82 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.45.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 19:41:32.125559 2025] [security2:error] [pid 23187:tid 23187] [client 104.207.45.82:37829] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.nautanet.info"] [uri "/.env"] [unique_id "aSZMvJecuivNkvZCGYxFSQAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 06:34:16
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.45.82 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.45.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:34:08.811356 2025] [security2:error] [pid 1632:tid 1632] [client 104.207.45.82:57629] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.pontiacpalace.com"] [uri "/.env"] [unique_id "aSVN4AChKynXvcXXYRaHwgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-11-24 09:56:14
(6 months ago)
Try to connect to Port_Scan_80_stealth
Port Scan