๐บ๐ธ
TPI-Abuse
2026-06-30 21:28:20
(4 days ago)
(mod_security) mod_security (id:210730) triggered by 172.69.214.83 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 172.69.214.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 17:28:14.617412 2026] [security2:error] [pid 25008:tid 25008] [client 172.69.214.83:9235] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.viacarduccichicago.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.viacarduccichicago.com"] [uri "/autodiscover/autodiscover.json/v1.0/[email protected] "] [unique_id "akQ07rptqly1YkVegR6Z-QAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-21 02:10:13
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 172.69.214.83 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.214.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 22:10:04.250911 2026] [security2:error] [pid 6476:tid 6476] [client 172.69.214.83:12107] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.checkmyhomevalueca.kunzteam.com"] [uri "/.git/config"] [unique_id "ajdH_OdmxjmWVH8xshoRiQAAAAc"], referer: https://www.google.com/search?q=www.checkmyhomevalueca.kunzteam.com
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-06-03 09:38:10
(1 month ago)
[Wed Jun 03 11:38:09.104133 2026] [authz_core:error] [pid 27237] [client 172.69.214.83:11314] AH0163 ...
show more
[Wed Jun 03 11:38:09.104133 2026] [authz_core:error] [pid 27237] [client 172.69.214.83:11314] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Wed Jun 03 11:38:09.374299 2026] [authz_core:error] [pid 27237] [client 172.69.214.83:11314] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Wed Jun 03 11:38:09.628140 2026] [authz_core:error] [pid 27237] [client 172.69.214.83:11314] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
Anonymous
2026-05-29 19:56:29
(1 month ago)
[Fri May 29 21:56:28.423763 2026] [authz_core:error] [pid 4221] [client 172.69.214.83:13197] AH01630 ...
show more
[Fri May 29 21:56:28.423763 2026] [authz_core:error] [pid 4221] [client 172.69.214.83:13197] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Fri May 29 21:56:28.550987 2026] [authz_core:error] [pid 4221] [client 172.69.214.83:13197] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Fri May 29 21:56:28.670930 2026] [authz_core:error] [pid 4221] [client 172.69.214.83:13197] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
Anonymous
2026-05-28 10:35:07
(1 month ago)
[Thu May 28 12:35:06.986395 2026] [authz_core:error] [pid 9778] [client 172.69.214.83:14065] AH01630 ...
show more
[Thu May 28 12:35:06.986395 2026] [authz_core:error] [pid 9778] [client 172.69.214.83:14065] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Thu May 28 12:35:07.111758 2026] [authz_core:error] [pid 9778] [client 172.69.214.83:14065] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Thu May 28 12:35:07.409461 2026] [authz_core:error] [pid 9778] [client 172.69.214.83:14065] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
Anonymous
2026-05-28 00:32:15
(1 month ago)
[Thu May 28 02:32:13.306135 2026] [authz_core:error] [pid 24390] [client 172.69.214.83:10607] AH0163 ...
show more
[Thu May 28 02:32:13.306135 2026] [authz_core:error] [pid 24390] [client 172.69.214.83:10607] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Thu May 28 02:32:13.804582 2026] [authz_core:error] [pid 24390] [client 172.69.214.83:10607] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Thu May 28 02:32:14.208078 2026] [authz_core:error] [pid 24390] [client 172.69.214.83:10607] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
Anonymous
2026-05-23 20:58:53
(1 month ago)
[Sat May 23 22:58:52.187413 2026] [authz_core:error] [pid 15685] [client 172.69.214.83:13251] AH0163 ...
show more
[Sat May 23 22:58:52.187413 2026] [authz_core:error] [pid 15685] [client 172.69.214.83:13251] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Sat May 23 22:58:52.437372 2026] [authz_core:error] [pid 15685] [client 172.69.214.83:13251] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Sat May 23 22:58:52.683326 2026] [authz_core:error] [pid 15685] [client 172.69.214.83:13251] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
Anonymous
2026-05-06 01:48:10
(1 month ago)
[Wed May 06 03:48:09.311539 2026] [authz_core:error] [pid 8319] [client 172.69.214.83:9803] AH01630: ...
show more
[Wed May 06 03:48:09.311539 2026] [authz_core:error] [pid 8319] [client 172.69.214.83:9803] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Wed May 06 03:48:09.452856 2026] [authz_core:error] [pid 8319] [client 172.69.214.83:9803] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Wed May 06 03:48:09.600703 2026] [authz_core:error] [pid 8319] [client 172.69.214.83:9803] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
Anonymous
2026-05-05 09:37:55
(1 month ago)
[Tue May 05 11:37:54.024582 2026] [authz_core:error] [pid 19011] [client 172.69.214.83:10216] AH0163 ...
show more
[Tue May 05 11:37:54.024582 2026] [authz_core:error] [pid 19011] [client 172.69.214.83:10216] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Tue May 05 11:37:54.156806 2026] [authz_core:error] [pid 19011] [client 172.69.214.83:10216] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Tue May 05 11:37:54.312353 2026] [authz_core:error] [pid 19011] [client 172.69.214.83:10216] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
Anonymous
2026-05-03 21:20:31
(2 months ago)
[Sun May 03 23:20:30.469685 2026] [authz_core:error] [pid 6461] [client 172.69.214.83:13611] AH01630 ...
show more
[Sun May 03 23:20:30.469685 2026] [authz_core:error] [pid 6461] [client 172.69.214.83:13611] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Sun May 03 23:20:30.605588 2026] [authz_core:error] [pid 6461] [client 172.69.214.83:13611] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Sun May 03 23:20:30.725448 2026] [authz_core:error] [pid 6461] [client 172.69.214.83:13611] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
Anonymous
2026-05-01 23:55:43
(2 months ago)
[Sat May 02 01:55:42.744405 2026] [authz_core:error] [pid 25606] [client 172.69.214.83:12926] AH0163 ...
show more
[Sat May 02 01:55:42.744405 2026] [authz_core:error] [pid 25606] [client 172.69.214.83:12926] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Sat May 02 01:55:42.866432 2026] [authz_core:error] [pid 25606] [client 172.69.214.83:12926] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Sat May 02 01:55:43.004863 2026] [authz_core:error] [pid 25606] [client 172.69.214.83:12926] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
๐ฌ๐ง
pinguin
2026-04-27 02:12:57
(2 months ago)
Triggered Cloudflare WAF (firewallManaged) from CA.
Action taken: LOG
Protocol: HTTP/2 (GET method)
...
show more
Triggered Cloudflare WAF (firewallManaged) from CA.
Action taken: LOG
Protocol: HTTP/2 (GET method)
Endpoint: /.aws/config
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Safari/605.1.15
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐ฉ๐ช
Starburst SysOp Team
2026-04-24 12:44:51
(2 months ago)
(CT) IP 172.69.214.83 (CA/Canada/Ontario/Toronto/-/[AS13335 Cloudflare, Inc.]) found to have 102 con ...
show more
(CT) IP 172.69.214.83 (CA/Canada/Ontario/Toronto/-/[AS13335 Cloudflare, Inc.]) found to have 102 connections (0-nue6-2)
show less
Hacking
๐บ๐ธ
TPI-Abuse
2026-04-05 08:56:39
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.69.214.83 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.214.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 04:56:35.684657 2026] [security2:error] [pid 22379:tid 22379] [client 172.69.214.83:12479] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.darrow.biz"] [uri "/core/.env"] [unique_id "adIjw2r36KWR9RASpZWXJQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-05 07:42:49
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.69.214.83 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.214.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 03:42:35.246049 2026] [security2:error] [pid 25912:tid 25912] [client 172.69.214.83:12861] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.zmgmt.com"] [uri "/.env.old"] [unique_id "adISa6iQVIwJ5kTERMJz8AAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack