🇦🇺
RedBear IT
2026-03-26 10:00:37
(2 months ago)
"DDoS against public endpoint"
DDoS Attack
🇺🇸
nowyouknow
2026-01-04 06:00:19
(5 months ago)
(From [email protected] ) Hello, and Happy New Year,
My name is Charlot ...
show more
(From [email protected] ) Hello, and Happy New Year,
My name is Charlotte Douglas with Coastal Electric Services. We are reaching out to confirm your availability for new projects in Q1 2026 and your interest in receiving project details.
Once confirmed, we will share the project scope for review.
Thank you, and we look forward to your response.
Best regards,
Charlotte Douglas
Project Executive
show less
Phishing
Web Spam
🇬🇧
AvonleaConsulting
2026-01-01 23:58:06
(5 months ago)
Attempts to probe web pages for vulnerable PHP or other applications
Web App Attack
🇬🇧
AvonleaConsulting
2026-01-01 07:07:13
(5 months ago)
Scanning unused Default website or suspicious access to valid sites from IP marked as abusive
Bad Web Bot
Web App Attack
🇫🇮
Shaik Sai Meera
2025-11-25 13:30:14
(6 months ago)
IM360 WAF: Hidden file access
Brute-Force
🇺🇸
TPI-Abuse
2025-11-25 06:23:39
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.164.188 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.164.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:23:32.164845 2025] [security2:error] [pid 4573:tid 4573] [client 209.50.164.188:51809] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mouserart.com"] [uri "/.svn/wc.db"] [unique_id "aSVLZFV24E_6WCncP4GN5QAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 06:01:44
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.164.188 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.164.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:01:39.872022 2025] [security2:error] [pid 22551:tid 22551] [client 209.50.164.188:12507] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.yongmeihu.com"] [uri "/.git/HEAD"] [unique_id "aSVGQya3JkgjAJBDeBlXBgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 05:10:15
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.164.188 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.164.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 00:10:07.326212 2025] [security2:error] [pid 23076:tid 23076] [client 209.50.164.188:52115] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.joukoji.com"] [uri "/.svn/wc.db"] [unique_id "aSU6Lymd2449eFqbg-r7sgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 04:38:57
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.164.188 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.164.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:38:53.200685 2025] [security2:error] [pid 4099:tid 4099] [client 209.50.164.188:9965] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.fletcherdouglas.com"] [uri "/.env"] [unique_id "aSUy3cfXFitl1pPVfgEsVAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 03:53:35
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.164.188 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.164.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:53:31.750900 2025] [security2:error] [pid 24649:tid 24649] [client 209.50.164.188:39799] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dinsbach.net"] [uri "/.svn/wc.db"] [unique_id "aSUoOzb_DgTFDyuDgy3WcwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 02:06:57
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.164.188 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.164.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:06:49.712215 2025] [security2:error] [pid 27861:tid 27861] [client 209.50.164.188:45783] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.compassionfatigue.org"] [uri "/.env"] [unique_id "aSUPOQP7vJLjOVpj-ssWpwAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 00:35:16
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.164.188 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.164.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 19:35:08.408088 2025] [security2:error] [pid 3620:tid 3620] [client 209.50.164.188:10503] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.easyappsbusiness.com"] [uri "/.env"] [unique_id "aST5vFqD4ubIbiV88KDYyAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 00:05:18
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.164.188 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.164.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 19:04:44.933229 2025] [security2:error] [pid 1591:tid 1591] [client 209.50.164.188:19193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "freeanddimesales.com.banis-associates.com"] [uri "/.env"] [unique_id "aSTynPiTnWjD9G-MwMLG4wAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
sefinek.net
2025-11-22 10:53:52
(7 months ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /genshin-stella-mod
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 YaBrowser/22.7.0 Yowser/2.5 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇦🇺
oncord
2025-11-19 02:32:31
(7 months ago)
Form spam
Web Spam