🇫🇷
Sklurk
2026-06-20 04:47:15
(1 day ago)
Web App Attack
Web App Attack
🇫🇷
GoodOldTOS
2026-04-27 04:27:24
(1 month ago)
Bad keywords detected in request: /.aws/credentials
Web App Attack
🇪🇸
10dencehispahard SL
2026-01-21 07:36:35
(5 months ago)
Wordpress probing for vulnerabilities
Hacking
Exploited Host
🇨🇭
backslash
2026-01-04 20:25:05
(5 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇫🇷
dynamix
2026-01-03 04:08:47
(5 months ago)
Multiple WAF Violations
Web App Attack
2026-01-03 00:28:09
(5 months ago)
wordpress-trap
Web App Attack
🇩🇪
Packets-Decreaser.NET
2025-12-29 14:01:38
(5 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
🇺🇸
TPI-Abuse
2025-11-26 11:28:53
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.50.207 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.50.207 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 06:28:50.158185 2025] [security2:error] [pid 31019:tid 31019] [client 104.207.50.207:53969] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.lynnejewson.com"] [uri "/.svn/wc.db"] [unique_id "aSbkcoByn-oAliRcD_bMLwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 06:18:38
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.50.207 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.50.207 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 01:18:35.302869 2025] [security2:error] [pid 3538474:tid 3538633] [client 104.207.50.207:25595] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.killasgarage.bike"] [uri "/.svn/wc.db"] [unique_id "aSabu13wcnJA0sU4fUsvkAAAAkk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 05:24:11
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.50.207 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.50.207 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 00:24:05.029548 2025] [security2:error] [pid 1579:tid 1579] [client 104.207.50.207:44911] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.froemel.biz"] [uri "/.env"] [unique_id "aSaO9SoKUl74swnJzu-M3QAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 01:07:48
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.50.207 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.50.207 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 20:07:43.623398 2025] [security2:error] [pid 9187:tid 9187] [client 104.207.50.207:45461] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.kirklandplumbing.ca"] [uri "/.git/HEAD"] [unique_id "aSZS3xv8vB8mD7_vRqTuegAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 08:14:18
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.50.207 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.50.207 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:12:12.728533 2025] [security2:error] [pid 15944:tid 15944] [client 104.207.50.207:28627] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vandermeerlab.org"] [uri "/.env"] [unique_id "aSQTXKZx7iQdOO5IbCJonwAAADU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
10dencehispahard SL
2025-11-11 08:02:29
(7 months ago)
WP probing for vulnerabilities
Hacking
Exploited Host
🇵🇱
sefinek.net
2025-11-03 08:18:51
(7 months ago)
Triggered Cloudflare WAF (firewallCustom) from DE.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show more
Triggered Cloudflare WAF (firewallCustom) from DE.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /genshin-stella-mod
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/89.0.4447.51
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇫🇷
applemooz
2025-11-01 11:15:56
(7 months ago)
WordPress XMLRPC Brute Force Attacks
...
Brute-Force
Web App Attack