🇧🇪
madeit
2026-10-25 10:17:54
(3 days ago)
Web App Attack
🇧🇪
madeit
2026-09-18 07:20:17
(1 month ago)
Web App Attack
🇫🇷
dynamix
2026-09-12 20:57:11
(1 month ago)
Multiple WAF Violations
Web App Attack
🇧🇪
madeit
2026-09-08 05:38:47
(1 month ago)
Web App Attack
🇧🇪
madeit
2026-08-09 09:15:40
(2 months ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-05-15 08:12:49
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.78.80 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.78.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 04:11:14.892088 2026] [security2:error] [pid 4392:tid 4392] [client 162.158.78.80:13831] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/parameters.yml" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aurumcraft.com.38floorsupply.com"] [uri "/app/config/parameters.yml"] [unique_id "agbVIulaDhSrCUF5v-85fQAAAAA"], referer: https://www.google.com/search?q=www.aurumcraft.com.38floorsupply.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
pinguin
2026-05-14 08:47:01
(5 months ago)
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: LOG
Protocol: HTTP/2 (GET method)
...
show more
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: LOG
Protocol: HTTP/2 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇮🇩
sockominfo
2026-04-15 12:00:29
(6 months ago)
Access to sensitive configuration files detected.. Threat Score: 7.1/10 (HIGH). Reported by Tangeran ...
show more
Access to sensitive configuration files detected.. Threat Score: 7.1/10 (HIGH). Reported by TangerangKota-CSIRT. Status: MALICIOUS
show less
Hacking
Web App Attack
🇮🇩
sockominfo
2026-04-15 11:00:15
(6 months ago)
Access to sensitive configuration files detected.. Threat Score: 7.2/10 (HIGH). Reported by Tangeran ...
show more
Access to sensitive configuration files detected.. Threat Score: 7.2/10 (HIGH). Reported by TangerangKota-CSIRT. Status: MALICIOUS
show less
Hacking
Web App Attack
🇺🇸
mnsf
2026-04-07 01:05:21
(6 months ago)
Scanning/Probing (19)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-03-27 02:34:55
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.78.80 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.78.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 26 22:34:42.480518 2026] [security2:error] [pid 30805:tid 30805] [client 162.158.78.80:11799] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.avanticaffe.com"] [uri "/.env.dev"] [unique_id "acXswoJJmxvYAp_LOA9f_gAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-26 23:26:53
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.78.80 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.78.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 26 19:26:45.766452 2026] [security2:error] [pid 4957:tid 4957] [client 162.158.78.80:13200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stage.cormanleigh.com"] [uri "/.env.production"] [unique_id "acXAtd3QofNYUhJKPRKvsAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-26 18:33:58
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.78.80 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.78.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 26 14:33:50.061208 2026] [security2:error] [pid 25189:tid 25189] [client 162.158.78.80:12829] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bluespringssports.com.johnandramonadunn.com"] [uri "/var/www/.env"] [unique_id "acV8DlROzXb5S06s0ZNmFwAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-26 07:19:48
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.78.80 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.78.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 26 03:19:21.124931 2026] [security2:error] [pid 3345:tid 3368] [client 162.158.78.80:11795] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.baronlongford.com"] [uri "/.env.old"] [unique_id "acTd-Xxj3tJfjJVhvtduuAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
webanyone
2026-03-21 03:15:50
(7 months ago)
Apache web server attack detected by Fail2Ban in plesk-apache jail
Web App Attack
