🇫🇷
Stara
2026-10-23 17:59:04
UTC ·
(3 weeks ago)
Port scan detected - multiple connection attempts to various ports
Port Scan
Brute-Force
SSH
2026-10-19 21:00:10
UTC ·
(3 weeks ago)
suspicious request in access.log
Web App Attack
🇫🇷
ELYAZ
2026-10-02 11:52:04
UTC ·
(1 month ago)
(wordpress) Failed wordpress login from 209.50.166.71 (US/United States/-): (CF_ENABLE)
Brute-Force
🇬🇧
Steve
2026-09-12 15:26:34
UTC ·
(2 months ago)
Repeated attempts against wordpress site
Brute-Force
Web App Attack
2026-09-08 11:41:00
UTC ·
(2 months ago)
Web scanner: GET /wp-login.php
Web App Attack
Hacking
🇨🇿
Countryman
2026-09-04 00:10:01
UTC ·
(2 months ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇸🇪
OnTheEdge
2026-09-03 04:54:24
UTC ·
(2 months ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
🇸🇪
OnTheEdge
2026-09-03 04:54:24
UTC ·
(2 months ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
🇫🇷
Sklurk
2026-08-03 03:25:00
UTC ·
(3 months ago)
Web App Attack
Web App Attack
🇫🇷
Sklurk
2026-08-02 01:37:43
UTC ·
(3 months ago)
Web App Attack
Web App Attack
🇦🇺
RedBear IT
2026-03-26 10:00:37
UTC ·
(7 months ago)
"DDoS against public endpoint"
DDoS Attack
🇵🇱
sefinek.net
2025-12-22 21:49:10
UTC ·
(10 months ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 12.5; rv:114.0) Gecko/20100101 Firefox/114.0
This report was generated by:
http ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 12.5; rv:114.0) Gecko/20100101 Firefox/114.0
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2025-11-24 06:29:25
UTC ·
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.166.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:29:12.928396 2025] [security2:error] [pid 24513:tid 24513] [client 209.50.166.71:14629] M ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.166.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:29:12.928396 2025] [security2:error] [pid 24513:tid 24513] [client 209.50.166.71:14629] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.accredo.net"] [uri "/.git/HEAD"] [unique_id "aSP7OIBySLipD8vhEx63KgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 05:40:27
UTC ·
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.166.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:40:21.703842 2025] [security2:error] [pid 11872:tid 11872] [client 209.50.166.71:19373] M ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.166.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:40:21.703842 2025] [security2:error] [pid 11872:tid 11872] [client 209.50.166.71:19373] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.intrinsicreef.com"] [uri "/.git/HEAD"] [unique_id "aSPvxaw7aBtw5retOIjOvAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 04:50:58
UTC ·
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.166.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:49:27.561537 2025] [security2:error] [pid 28340:tid 28340] [client 209.50.166.71:56543] M ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.166.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:49:27.561537 2025] [security2:error] [pid 28340:tid 28340] [client 209.50.166.71:56543] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.internationalseniortravel.com"] [uri "/.svn/wc.db"] [unique_id "aSPj1xfowTrVsoIE0KSkLwAAACM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
