2026-03-31 10:34:51
(2 months ago)
Forum/form spam
Web Spam
🇦🇺
RedBear IT
2026-03-26 10:00:37
(2 months ago)
"DDoS against public endpoint"
DDoS Attack
🇫🇷
dynamix
2026-03-16 04:15:50
(2 months ago)
Multiple WAF Violations
Web App Attack
🇺🇸
oncord
2026-03-03 10:29:30
(3 months ago)
Form spam
Web Spam
🇫🇷
tilellit.pro
2026-02-20 16:28:11
(3 months ago)
Fail2Ban banned 104.207.47.167 for security violations in jail wp-armour. Log: 2026/02/20 16:28:11 [ ...
show more
Fail2Ban banned 104.207.47.167 for security violations in jail wp-armour. Log: 2026/02/20 16:28:11 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 104.207.47.167 | Target: wplogin" , client: 104.207.47.167, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇺🇸
TPI-Abuse
2026-02-18 03:45:48
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.47.167 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.47.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 17 22:45:41.085475 2026] [security2:error] [pid 1394:tid 1394] [client 104.207.47.167:32669] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "robcruickshank.net"] [uri "/api/.env"] [unique_id "aZU15R4nvZ4rHpBvgm0HGwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-18 02:23:35
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.47.167 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.47.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 17 21:23:32.723157 2026] [security2:error] [pid 26611:tid 26611] [client 104.207.47.167:11215] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "reneehill.net"] [uri "/frontend/.env"] [unique_id "aZUipN_PzMDGNyFaXM7rjwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
sefinek.net
2026-01-02 19:04:07
(5 months ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Vivaldi/5.3.2679.68
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇦🇺
MAGIC
2025-12-20 01:10:29
(5 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇬🇧
relianoid.com
2025-12-14 10:23:14
(5 months ago)
POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com
Web Spam
2025-12-10 22:32:18
(6 months ago)
botnet
DDoS Attack
🇩🇪
big-cloud.nl
2025-12-05 00:17:03
(6 months ago)
Try to access /xmlrpc.php
Web App Attack
🇺🇸
TPI-Abuse
2025-11-29 02:57:18
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.47.167 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.47.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 28 21:57:12.983659 2025] [security2:error] [pid 2236997:tid 2236997] [client 104.207.47.167:29167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "accentcorporatemedia.com"] [uri "/wp-config.php.bak"] [unique_id "aSphCF1T7TQnEkN05-inigAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2025-11-28 22:59:51
(6 months ago)
Auto-ban: >3000 req/min op 2025-11-28
Hacking
Web App Attack
SSH
🇺🇸
TPI-Abuse
2025-11-28 16:47:34
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.47.167 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.47.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 28 11:47:27.141350 2025] [security2:error] [pid 4917:tid 4917] [client 104.207.47.167:16913] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "a2thdoc.com"] [uri "/.env.production"] [unique_id "aSnSHy8_FHJuFKEaNemNWQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack