๐ซ๐ท
dynamix
2026-10-11 09:57:12
(3 days ago)
Multiple WAF Violations
Web App Attack
๐ซ๐ท
dynamix
2026-10-09 03:20:58
(5 days ago)
Multiple WAF Violations
Web App Attack
๐ซ๐ท
dynamix
2026-09-30 04:35:42
(2 weeks ago)
Multiple WAF Violations
Web App Attack
Anonymous
2026-09-16 20:59:40
(3 weeks ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
๐ณ๐ฑ
middelkoopcc
2026-08-29 23:10:01
(1 month ago)
2026-08-30 01:03:36 GET /&heker!.php [404] && 2026-08-30 01:03:37 GET /shellv3.php [404] && 2026-08- ...
show more
2026-08-30 01:03:36 GET /&heker!.php [404] && 2026-08-30 01:03:37 GET /shellv3.php [404] && 2026-08-30 01:03:38 GET /UnknownSec.php [404] && 492 more within 20 minutes
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-25 21:37:09
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 108.162.241.234 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 108.162.241.234 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 17:37:03.139787 2026] [security2:error] [pid 29379:tid 29379] [client 108.162.241.234:11833] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.napkinsforweddings.com"] [uri "/.git/config"] [unique_id "ao4K_6Z5k6CYRUYjlcK_ZAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-25 15:28:56
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 108.162.241.234 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 108.162.241.234 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 11:28:52.425731 2026] [security2:error] [pid 16339:tid 16364] [client 108.162.241.234:9973] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "live.brucejoell.com"] [uri "/.git/config"] [unique_id "ao20tPXbs8x6BRuE7LcPygAAAIQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-25 14:39:27
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 108.162.241.234 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 108.162.241.234 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 10:39:20.806470 2026] [security2:error] [pid 28352:tid 28352] [client 108.162.241.234:14199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.craftcare.net"] [uri "/.git/HEAD"] [unique_id "ao2pGBNGFhmtJVkVIf7UvQAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-25 08:34:37
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 108.162.241.234 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 108.162.241.234 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 04:34:30.143163 2026] [security2:error] [pid 21891:tid 21891] [client 108.162.241.234:12994] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "willmarksynthetics.cosentient.com"] [uri "/.git/config"] [unique_id "ao1Tlt5yz4q6i68b3SHSFgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ง๐ช
madeit
2026-08-14 04:06:00
(2 months ago)
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-31 03:15:10
(2 months ago)
(mod_security) mod_security (id:210730) triggered by 108.162.241.234 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210730) triggered by 108.162.241.234 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 30 23:15:03.182552 2026] [security2:error] [pid 3978092:tid 3978092] [client 108.162.241.234:9932] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.lakewoodranchhairsalon.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.lakewoodranchhairsalon.com"] [uri "/autodiscover/autodiscover.json/v1.0/[email protected] "] [unique_id "amwTNxP1nrQSQFwzQHMozQAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ช๐ธ
antivoid.xyz
2026-07-23 03:34:24
(2 months ago)
Brute-Force
Web App Attack
๐ฏ๐ต
S.O.B.A. Dev.
2026-07-07 22:08:40
(3 months ago)
Persistent port scanning or vulnerability scanning
Port Scan
๐ฌ๐ง
pinguin
2026-06-28 09:06:15
(3 months ago)
Triggered Cloudflare WAF (firewallManaged) from CA.
Action taken: LOG
Protocol: HTTP/2 (GET method)
...
show more
Triggered Cloudflare WAF (firewallManaged) from CA.
Action taken: LOG
Protocol: HTTP/2 (GET method)
Endpoint: /telescope/requests
UA: Mozilla/5.0 (l9scan/2.0.8393e27323e28313e2430313; +https://leakix.net)
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-06-22 07:03:28
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 108.162.241.234 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 108.162.241.234 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 03:03:20.062704 2026] [security2:error] [pid 31035:tid 31035] [client 108.162.241.234:9427] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thorndikestudio.com"] [uri "/.env.local"] [unique_id "ajjeOAZbp0OUqqpdQ8poqwAAAA8"], referer: https://www.google.com/search?q=thorndikestudio.com
show less
Brute-Force
Bad Web Bot
Web App Attack