🇲🇽
octageeks.com
2026-05-26 04:17:45
(1 week ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇫🇷
pm33
2026-05-25 23:05:23
(1 week ago)
Wordpress login attempts
Brute-Force
🇲🇽
octageeks.com
2026-05-24 04:09:54
(1 week ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇩🇪
FeG Deutschland
2026-05-22 23:32:33
(1 week ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇵🇱
sefinek.net
2026-03-29 03:46:16
(2 months ago)
Triggered Cloudflare WAF (firewallCustom) from DE.
Action: MANAGED_CHALLENGE | Protocol: HTTP/1.1 (G ...
show more
Triggered Cloudflare WAF (firewallCustom) from DE.
Action: MANAGED_CHALLENGE | Protocol: HTTP/1.1 (GET) | Endpoint: /genshin-stella-mod | UA: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇱🇻
garmtech.com
2026-02-27 00:44:01
(3 months ago)
IM360 WAF: Old style account creation and modification in Joomla! MV:registration
Web App Attack
🇺🇸
myagent.site
2025-12-29 04:57:00
(5 months ago)
Blocking for trying to access an exploit file: /.env
Hacking
🇺🇸
TPI-Abuse
2025-12-29 04:38:54
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.52.181 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.52.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 23:38:46.527226 2025] [security2:error] [pid 9562:tid 9562] [client 104.207.52.181:23773] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "directcch.com"] [uri "/.svn/wc.db"] [unique_id "aVIF1hePjfLarsITIAaKYwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Swiptly
2025-11-24 13:29:10
(6 months ago)
Bot scanning for environment files .env .env/\*
...
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 06:33:30
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.52.181 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.52.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:33:24.556443 2025] [security2:error] [pid 17479:tid 17479] [client 104.207.52.181:21303] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.thn.bz"] [uri "/.env"] [unique_id "aSP8NNwQT8pyL_54u77aEQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 04:52:53
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.52.181 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.52.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:52:50.635365 2025] [security2:error] [pid 11230:tid 11230] [client 104.207.52.181:19147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.homecheckinmaine.com"] [uri "/.git/HEAD"] [unique_id "aSPkotele8LuR2M7qQ-JyAAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
oncord
2025-10-22 01:37:00
(7 months ago)
Form spam
Web Spam
🇫🇷
mrcrassi
2025-10-18 10:34:43
(7 months ago)
Triggered Cloudflare WAF (firewallCustom) from DE.
Action taken: BLOCK
Protocol: HTTP/1.1 (POST meth ...
show more
Triggered Cloudflare WAF (firewallCustom) from DE.
Action taken: BLOCK
Protocol: HTTP/1.1 (POST method)
Endpoint: /wp-login.php
UA: Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇫🇷
tecnicorioja
2025-10-17 22:01:34
(7 months ago)
wp-login attack [17/Oct/2025:19:02:18
Brute-Force
Web App Attack
🇺🇸
oncord
2025-10-16 15:38:40
(7 months ago)
Form spam
Web Spam