🇫🇷
dynamix
2026-10-20 16:12:01
(18 hours ago)
Multiple WAF Violations
Web App Attack
🇧🇪
madeit
2026-10-09 16:24:45
(1 week ago)
Web App Attack
🇧🇪
madeit
2026-09-30 14:16:50
(2 weeks ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-09-28 23:21:23
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 162.158.158.219 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.158.219 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 19:21:18.537469 2026] [security2:error] [pid 19646:tid 19646] [client 162.158.158.219:12797] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "labcomputers.com"] [uri "/.htaccess"] [unique_id "arr2blqMiKRYjbd2utXUogAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-28 07:54:27
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 162.158.158.219 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.158.219 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 03:54:19.748454 2026] [security2:error] [pid 28221:tid 28221] [client 162.158.158.219:10703] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cabrynpoodles.com"] [uri "/.htaccess"] [unique_id "arodK0RFF1ewSOqU2BL5_QAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇩
securejdprop
2026-08-21 07:16:25
(2 months ago)
This IP was detected by CrowdSec triggering custom/vpatch-bad-cloudflare.
Hacking
🇬🇧
pinguin
2026-05-13 16:34:28
(5 months ago)
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: LOG
Protocol: HTTP/2 (GET method)
...
show more
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: LOG
Protocol: HTTP/2 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-03-21 05:25:43
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.158.219 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.158.219 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 21 01:25:38.116333 2026] [security2:error] [pid 32303:tid 32303] [client 162.158.158.219:13228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.manueltoren.com"] [uri "/admin/.env"] [unique_id "ab4r0pC-FYMETl_PCa60_wAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-21 03:28:10
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.158.219 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.158.219 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 23:28:04.128646 2026] [security2:error] [pid 6257:tid 6257] [client 162.158.158.219:13829] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.dailybeautysupply.com"] [uri "/public/.env"] [unique_id "ab4QRK2XMVivAa4DFbLMYwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-21 00:55:31
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.158.219 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.158.219 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 20:55:26.284205 2026] [security2:error] [pid 2785:tid 2785] [client 162.158.158.219:13456] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.metaluz.com.sv.mpservice.com.sv"] [uri "/.env.dev"] [unique_id "ab3sfqq0LGwyKXkeVRNN3QAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 02:37:20
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.158.219 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.158.219 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 22:37:13.766704 2026] [security2:error] [pid 5956:tid 5956] [client 162.158.158.219:11102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.fatcaverecords.com"] [uri "/.env~"] [unique_id "abyy2bdnM0U9W5jjlEmnfQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 02:06:04
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.158.219 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.158.219 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 22:05:55.813805 2026] [security2:error] [pid 5549:tid 5549] [client 162.158.158.219:10037] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.johnrobinsonconsulting.com"] [uri "/docker/.env"] [unique_id "abyrg2Y_dqhaJ3xbdtPj1wAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 01:24:26
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.158.219 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.158.219 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 21:24:18.544113 2026] [security2:error] [pid 27659:tid 27659] [client 162.158.158.219:10681] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.zmnc.tr"] [uri "/.env.save"] [unique_id "abyhwn9gG5l1iWIYthtgLAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 11:07:07
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.158.219 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.158.219 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 07:07:00.686609 2026] [security2:error] [pid 11113:tid 11113] [client 162.158.158.219:14208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.tankercontrol.com"] [uri "/.env.backup"] [unique_id "abvY1CKgPBFij_Q7ldXT6QAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-19 10:23:41
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.158.219 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.158.219 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 06:23:36.907635 2026] [security2:error] [pid 6438:tid 6438] [client 162.158.158.219:14005] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.michalovic.org"] [uri "/root/.env"] [unique_id "abvOqBTzgNTHeNJlvc9BBwAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
