🇫🇮
as211431.net
2026-05-14 03:36:20
(3 weeks ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /index.php
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36; Manus-User/1.0
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
2026-04-01 22:49:58
(2 months ago)
Forum/form spam
Web Spam
🇵🇱
sefinek.net
2025-12-31 16:01:45
(5 months ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 12.5; rv:114.0) Gecko/20100101 Firefox/114.0
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2025-12-27 20:54:11
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.47.149 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.47.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 27 15:54:04.166668 2025] [security2:error] [pid 6798:tid 6798] [client 104.207.47.149:36063] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ashwoodsecurity.com"] [uri "/.git/HEAD"] [unique_id "aVBHbLVZPYlS2mc65eC21QAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
librebit
2025-12-26 15:23:51
(5 months ago)
Brute force
Brute-Force
🇺🇸
TPI-Abuse
2025-12-26 03:57:02
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.47.149 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.47.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 25 22:56:48.518178 2025] [security2:error] [pid 30455:tid 30455] [client 104.207.47.149:52307] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.lazymanvegan.com"] [uri "/.svn/wc.db"] [unique_id "aU4HgDVOwN2Ub5sF0El0KgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-12-07 21:38:44
(5 months ago)
botnet
DDoS Attack
🇺🇸
TPI-Abuse
2025-11-26 06:45:07
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.47.149 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.47.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 01:45:01.051390 2025] [security2:error] [pid 27510:tid 27510] [client 104.207.47.149:46575] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.politicallycorrectbooks.banis-associates.com"] [uri "/.git/HEAD"] [unique_id "aSah7Q0cn_ZJe06HN2VE7AAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 05:52:04
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.47.149 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.47.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 00:51:59.351450 2025] [security2:error] [pid 10563:tid 10563] [client 104.207.47.149:19673] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.michaelthompson.biz"] [uri "/.git/HEAD"] [unique_id "aSaVf0AeBp0L_79SxCmvhAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 05:35:25
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.47.149 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.47.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 00:35:21.830684 2025] [security2:error] [pid 2428265:tid 2428265] [client 104.207.47.149:33457] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.jellisonrepair.com"] [uri "/.svn/wc.db"] [unique_id "aSaRmfvmhKDEZuc-EFSpCwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 02:50:20
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.47.149 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.47.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 21:50:15.790354 2025] [security2:error] [pid 10905:tid 10905] [client 104.207.47.149:59071] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.advmach.com"] [uri "/.svn/wc.db"] [unique_id "aSZq55WXCTOoycHWl-O3mAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 02:00:35
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.47.149 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.47.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 21:00:22.356736 2025] [security2:error] [pid 17466:tid 17471] [client 104.207.47.149:58315] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.justwondering.net"] [uri "/.git/HEAD"] [unique_id "aSZfNpvX96wK2APxLO1BqgAAAMM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
technojoe99
2025-11-26 00:27:21
(6 months ago)
Exploit scan from 104.207.47.149. GET /.git/HEAD HTTP/1.1.
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 04:41:19
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.47.149 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.47.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:41:11.074507 2025] [security2:error] [pid 3703:tid 3703] [client 104.207.47.149:34605] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.box903.com"] [uri "/.git/HEAD"] [unique_id "aSPh5x_yLzKB5mUs9aGtcgAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇳
Shaik Sai Meera
2025-10-26 15:58:22
(7 months ago)
SensorIncident name=Login failed on the cpanel service
Brute-Force