🇫🇷
Sklurk
2026-07-09 00:05:28
(1 week ago)
Web App Attack
Web App Attack
🇵🇱
sefinek.net
2026-07-08 23:24:41
(1 week ago)
Triggered Cloudflare WAF (firewallCustom) from DE.
Action: MANAGED_CHALLENGE | Protocol: HTTP/1.1 (G ...
show more
Triggered Cloudflare WAF (firewallCustom) from DE.
Action: MANAGED_CHALLENGE | Protocol: HTTP/1.1 (GET) | Endpoint: /genshin-stella-mod | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.1 Safari/605.1.15 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇩🇪
HandyTreff.de
2026-07-01 06:36:09
(2 weeks ago)
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -121.822 (Bad < -10 / Very Bad < -20 ...
show more
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -121.822 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: curl/8.7.1
show less
Web App Attack
Bad Web Bot
🇱🇻
garmtech.com
2026-05-07 02:12:36
(2 months ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 05-12.104.207.50.140.web-spamm ...
show more
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 05-12.104.207.50.140.web-spammers.v2.rbl.imunify.com._v4 succeeded.
show less
Web App Attack
🇦🇺
RedBear IT
2026-03-26 10:00:37
(3 months ago)
"DDoS against public endpoint"
DDoS Attack
🇺🇸
TPI-Abuse
2026-02-19 01:26:44
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.50.140 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.50.140 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 20:26:38.349720 2026] [security2:error] [pid 23031:tid 23031] [client 104.207.50.140:22025] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kampinenlaw.com"] [uri "/backup/.git/config"] [unique_id "aZZmzgpjBDK9k_6zpHTtbQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-18 19:55:29
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.50.140 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.50.140 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 14:55:25.394743 2026] [security2:error] [pid 1288110:tid 1288117] [client 104.207.50.140:61957] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "totalbodycare753.com"] [uri "/backup/.git/config"] [unique_id "aZYZLe9F_c7x5Ag_cn9XvwAAAUM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-18 18:47:07
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.50.140 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.50.140 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 13:46:55.716616 2026] [security2:error] [pid 1391:tid 1391] [client 104.207.50.140:20101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thommesen.net"] [uri "/dev/.git/config"] [unique_id "aZYJH11qHoGYLfgJKZ4tlgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-18 18:29:25
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.50.140 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.50.140 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 13:29:20.101486 2026] [security2:error] [pid 26205:tid 26205] [client 104.207.50.140:16205] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "theurbanlogger.com"] [uri "/new/.git/config"] [unique_id "aZYFAI0wEITUeEEgMJbEtQAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-18 17:27:41
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.50.140 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.50.140 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 12:27:37.133568 2026] [security2:error] [pid 1561:tid 1561] [client 104.207.50.140:9861] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "zodiacwin.com"] [uri "/.env.production"] [unique_id "aZX2iWFdRiXjyGNtphlB4gAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-18 11:56:37
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.50.140 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.50.140 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 06:56:29.806316 2026] [security2:error] [pid 19484:tid 19484] [client 104.207.50.140:36617] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "warshaw1.com"] [uri "/.env.production"] [unique_id "aZWo7T5Gvznl-8EY3aAxrgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇱🇻
garmtech.com
2026-02-03 23:38:11
(5 months ago)
IM360 WAF: Attempt to upload malware
Hacking
🇩🇪
stinpriza
2026-02-03 01:03:44
(5 months ago)
Web App Attack
Web App Attack
🇪🇸
10dencehispahard SL
2026-01-26 07:38:46
(5 months ago)
Wordpress probing for vulnerabilities
Hacking
Exploited Host
🇩🇪
stinpriza
2026-01-25 22:03:23
(5 months ago)
Web App Attack
Web App Attack