🇦🇺
RedBear IT
2026-03-26 10:00:37
(2 months ago)
"DDoS against public endpoint"
DDoS Attack
🇺🇸
TPI-Abuse
2026-01-08 15:02:06
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.51.76 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.51.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 08 10:02:01.590985 2026] [security2:error] [pid 10421:tid 10421] [client 104.207.51.76:20091] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "azcrittergetter.com"] [uri "/.env"] [unique_id "aV_G6VvpB6bAQndJs4lulwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Swiptly
2026-01-07 16:24:28
(4 months ago)
Bot scanning for environment files .env .env/\*
...
Web App Attack
🇩🇪
Packets-Decreaser.NET
2025-12-29 14:01:53
(5 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
🇺🇸
TPI-Abuse
2025-12-29 05:48:17
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.51.76 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.51.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 00:48:10.457605 2025] [security2:error] [pid 8201:tid 8201] [client 104.207.51.76:48479] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "eye7graphics.com"] [uri "/.git/HEAD"] [unique_id "aVIWGtkL9xb0DsfSHAppXwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-29 04:31:43
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.51.76 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.51.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 23:31:38.797813 2025] [security2:error] [pid 20999:tid 20999] [client 104.207.51.76:18291] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "harintonmechanical.com"] [uri "/.git/HEAD"] [unique_id "aVIEKrxbfmRxP38cl4Uh3wAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-29 04:10:20
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.51.76 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.51.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 23:10:13.894040 2025] [security2:error] [pid 2394807:tid 2394828] [client 104.207.51.76:37241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aapmglobal.com"] [uri "/.git/HEAD"] [unique_id "aVH_JWGDJzrVc7i7t_57kAAAAJI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
sefinek.net
2025-12-15 13:09:58
(5 months ago)
Triggered Cloudflare WAF (firewallCustom) from DE.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show more
Triggered Cloudflare WAF (firewallCustom) from DE.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /genshin-stella-mod
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇦🇺
MAGIC
2025-12-09 00:04:56
(5 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇧🇪
madeit
2025-11-04 16:07:47
(7 months ago)
Web App Attack
2025-10-30 14:31:03
(7 months ago)
WordPress Brute Force
Brute-Force
2025-10-27 07:27:37
(7 months ago)
wordpress-trap
Web App Attack
🇮🇩
BPS-StatisticsIndonesia
2025-10-26 16:49:41
(7 months ago)
WP Admin Scan Activities
Web App Attack
2025-10-25 05:41:51
(7 months ago)
wordpress-trap
Web App Attack
🇮🇩
BPS-StatisticsIndonesia
2025-10-22 06:26:19
(7 months ago)
WP Login Scan Activities
Web App Attack