🇫🇮
inlink.ltd
2026-05-24 09:53:32
(1 week ago)
Known malicious PHP file or CMS probe
Web App Attack
🇺🇸
TPI-Abuse
2026-02-26 15:00:16
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.60.185 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.60.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 26 10:00:12.670905 2026] [security2:error] [pid 1256:tid 1345] [client 104.207.60.185:52255] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.125"] [uri "/.git/config"] [unique_id "aaBf_Lc55RETYWv-E_2SsQAAAdc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
tilellit.pro
2026-01-25 10:13:18
(4 months ago)
Fail2Ban banned 104.207.60.185 for security violations in jail wp-armour. Log: 2026/01/25 10:13:18 [ ...
show more
Fail2Ban banned 104.207.60.185 for security violations in jail wp-armour. Log: 2026/01/25 10:13:18 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 104.207.60.185 | Target: wplogin" , client: 104.207.60.185, server: [REDACTED], request: "POST /wp-login.php HTTP/2.0", upstream: [REDACTED], host: [REDACTED], referrer: "https://espsformacion.com/wp-login.php"
...
show less
Web Spam
🇩🇪
Packets-Decreaser.NET
2025-12-29 14:01:28
(5 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
🇺🇸
TPI-Abuse
2025-11-26 06:09:47
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.60.185 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.60.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 01:09:40.189699 2025] [security2:error] [pid 19012:tid 19012] [client 104.207.60.185:46163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.fingershrine.com"] [uri "/.env"] [unique_id "aSaZpLqy7Impgdfx1LpXlQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 01:52:31
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.60.185 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.60.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 20:52:27.572465 2025] [security2:error] [pid 20309:tid 20309] [client 104.207.60.185:60965] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pulsepowermeter.rotarymagnetics.com"] [uri "/.git/HEAD"] [unique_id "aSZdWz0Vwpin1yvCrxHyzQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
sefinek.net
2025-11-26 01:30:23
(6 months ago)
Triggered Cloudflare WAF (firewallCustom) from CA.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show more
Triggered Cloudflare WAF (firewallCustom) from CA.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 12.5; rv:114.0) Gecko/20100101 Firefox/114.0
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2025-11-26 01:15:36
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.60.185 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.60.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 20:15:33.152481 2025] [security2:error] [pid 28583:tid 28583] [client 104.207.60.185:25107] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.specialtycomputer.com"] [uri "/.git/HEAD"] [unique_id "aSZUtXfCuhqRbqVZfSmCYQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 00:33:58
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.60.185 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.60.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 19:33:52.585947 2025] [security2:error] [pid 27902:tid 27902] [client 104.207.60.185:41123] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.slusarczyk.com"] [uri "/.svn/wc.db"] [unique_id "aSZK8OCtUpeVXaEXt4nq8AAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 00:06:14
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.60.185 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.60.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 19:06:08.663556 2025] [security2:error] [pid 9484:tid 9484] [client 104.207.60.185:15963] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.brianknudsen.com"] [uri "/.git/HEAD"] [unique_id "aSZEcIIumcCwsMdVFh2SnAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 08:43:30
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.60.185 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.60.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:43:20.345734 2025] [security2:error] [pid 17859:tid 17859] [client 104.207.60.185:38895] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.moonstonenightclub.com"] [uri "/.git/HEAD"] [unique_id "aSQaqJdu9o8tNWHkCSBHjwAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 07:50:32
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.60.185 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.60.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:50:24.937186 2025] [security2:error] [pid 10862:tid 10862] [client 104.207.60.185:31355] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brpradosdeleste.turedinmobiliaria.com"] [uri "/.git/HEAD"] [unique_id "aSQOQAYpe-Col_DOfhczpwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 07:10:43
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.60.185 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.60.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:10:36.187464 2025] [security2:error] [pid 4684:tid 4684] [client 104.207.60.185:33491] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.corporatepresentation.net"] [uri "/.svn/wc.db"] [unique_id "aSQE7PMjn5H5964rMsEg4QAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇱🇻
garmtech.com
2025-11-24 05:54:34
(6 months ago)
Attempted access to sensitive endpoint (/.svn/wc.db) detected. Automated scan or unauthorized probin ...
show more
Attempted access to sensitive endpoint (/.svn/wc.db) detected. Automated scan or unauthorized probing.
show less
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 04:51:27
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.60.185 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.60.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:51:21.639057 2025] [security2:error] [pid 26347:tid 26347] [client 104.207.60.185:45795] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.baysidechiropractic.net"] [uri "/.svn/wc.db"] [unique_id "aSPkSRnISfKtAR_gn14JpwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack