🇦🇺
oncord
2025-10-03 06:53:32
(10 months ago)
Form spam
Web Spam
🇫🇮
as211431.net
2025-09-25 22:04:04
(10 months ago)
Triggered Cloudflare WAF (firewallCustom) from DE.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show more
Triggered Cloudflare WAF (firewallCustom) from DE.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:114.0) Gecko/20100101 Firefox/114.0
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
oncord
2025-09-22 14:43:55
(11 months ago)
Form spam
Web Spam
🇦🇺
oncord
2025-09-19 23:10:58
(11 months ago)
Form spam
Web Spam
🇺🇸
oncord
2025-09-17 11:24:08
(11 months ago)
Form spam
Web Spam
🇺🇸
TPI-Abuse
2025-09-06 15:32:35
(11 months ago)
(mod_security) mod_security (id:210730) triggered by 156.253.171.42 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 156.253.171.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 06 11:32:28.006829 2025] [security2:error] [pid 21006:tid 21006] [client 156.253.171.42:57741] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.fatcavestudios.com|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.fatcavestudios.com"] [uri "/s3cmd.ini"] [unique_id "aLxUC1DPW5vFt0fbmYqnIAAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-06 11:07:18
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 156.253.171.42 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 156.253.171.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 06 07:07:12.492782 2025] [security2:error] [pid 23107:tid 23107] [client 156.253.171.42:30959] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.fiestadj.spyasociados.com"] [uri "/config.php%7C/.env%7Csettings.py"] [unique_id "aLwV4D3R5ZJIk5lqwKbaIgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-05 00:21:29
(11 months ago)
(mod_security) mod_security (id:210730) triggered by 156.253.171.42 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 156.253.171.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 04 20:21:24.601297 2025] [security2:error] [pid 17937:tid 17937] [client 156.253.171.42:53575] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||checkoutnow.io|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "checkoutnow.io"] [uri "/s3cmd.ini"] [unique_id "aLotBH0EPj-xtg9sJ4TEqgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
IRISIO
2025-09-03 07:37:19
(11 months ago)
scans/SQL injection/spam posts : 3 queries
SQL Injection
Web App Attack
🇺🇸
TPI-Abuse
2025-09-01 19:34:18
(11 months ago)
(mod_security) mod_security (id:210730) triggered by 156.253.171.42 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 156.253.171.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 01 15:34:15.191889 2025] [security2:error] [pid 1246287:tid 1246300] [client 156.253.171.42:28223] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.dubarch.com|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.dubarch.com"] [uri "/s3cmd.ini"] [unique_id "aLX1N7gq845zyfcpYRbD4QAAAQs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
i-turnradio.nl
2025-08-28 19:39:55
(11 months ago)
2025-08-28 @ 21:39:55 (CET) ~ Blocked based on risk assessment and prior abuse reports
Web App Attack
🇦🇺
oncord
2025-08-28 18:22:08
(11 months ago)
Form spam
Web Spam
🇦🇺
oncord
2025-08-27 15:03:33
(11 months ago)
Form spam
Web Spam
🇦🇺
oncord
2025-08-15 03:12:24
(1 year ago)
Form spam
Web Spam
2025-08-14 16:22:06
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH