🇺🇸
raymarron.com
2026-06-06 16:50:37
(1 day ago)
http://raymarron.com/.aws/credentials
Web App Attack
🇦🇺
oncord
2026-04-10 00:57:11
(1 month ago)
Form spam
Web Spam
🇺🇸
oncord
2026-03-15 10:47:35
(2 months ago)
Form spam
Web Spam
🇱🇻
garmtech.com
2026-03-01 10:54:45
(3 months ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 12-54.104.207.50.232.web-spamm ...
show more
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 12-54.104.207.50.232.web-spammers.v2.rbl.imunify.com._v4 succeeded.
show less
Web App Attack
🇱🇻
garmtech.com
2026-02-19 10:24:01
(3 months ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 12-24.104.207.50.232.web-spamm ...
show more
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 12-24.104.207.50.232.web-spammers.v2.rbl.imunify.com._v4 succeeded.
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-02-09 21:39:01
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.50.232 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.50.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 16:38:57.075958 2026] [security2:error] [pid 21134:tid 21134] [client 104.207.50.232:16687] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "garretthillary.com"] [uri "/.env.production"] [unique_id "aYpT8ZosU4v9miQDb4MdRgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-09 18:55:27
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.50.232 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.50.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 13:55:15.784312 2026] [security2:error] [pid 19151:tid 19151] [client 104.207.50.232:25317] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fydelity.net"] [uri "/v2/.git/config"] [unique_id "aYotk0N9uka4wuVvaybC9AAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-09 17:59:58
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.50.232 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.50.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 12:59:14.789235 2026] [security2:error] [pid 16402:tid 16402] [client 104.207.50.232:54567] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "furball.global"] [uri "/new/.git/config"] [unique_id "aYogcuZWUFygzH9gCUbyrwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-09 16:44:45
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.50.232 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.50.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 11:44:36.872037 2026] [security2:error] [pid 22142:tid 22142] [client 104.207.50.232:54487] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fuentevictoria.com"] [uri "/.env"] [unique_id "aYoO9FJulcQbqDHuOtp0eAAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-09 11:31:51
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.50.232 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.50.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 06:31:43.861481 2026] [security2:error] [pid 2582:tid 2582] [client 104.207.50.232:36663] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "galeriedorion.com"] [uri "/config/.env"] [unique_id "aYnFn3fF_31JoW-X53e1ggAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
oncord
2026-01-31 02:15:09
(4 months ago)
Form spam
Web Spam
🇺🇸
oncord
2026-01-20 15:56:14
(4 months ago)
Form spam
Web Spam
🇵🇱
sefinek.net
2026-01-13 18:34:14
(4 months ago)
Triggered Cloudflare WAF (firewallCustom) from DE.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show more
Triggered Cloudflare WAF (firewallCustom) from DE.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /genshin-stella-mod
UA: Mozilla/5.0 (Linux x86_64; rv:114.0) Gecko/20100101 Firefox/114.0
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
oncord
2026-01-07 03:51:25
(5 months ago)
Form spam
Web Spam
🇬🇧
oncord
2026-01-05 19:24:00
(5 months ago)
Form spam
Web Spam