🇱🇻
garmtech.com
2026-03-24 13:26:58
(2 months ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 15-26.209.50.167.25.web-spamme ...
show more
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 15-26.209.50.167.25.web-spammers.v2.rbl.imunify.com._v4 succeeded.
show less
Web App Attack
🇦🇺
oncord
2026-01-04 12:26:53
(5 months ago)
Form spam
Web Spam
🇺🇸
fbarela
2026-01-02 08:00:31
(5 months ago)
FortiGate SSL VPN login failures.
Hacking
Brute-Force
🇵🇱
sefinek.net
2025-12-22 00:16:11
(5 months ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Vivaldi/5.3.2679.68
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇵🇱
sefinek.net
2025-12-11 21:41:16
(5 months ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Linux x86_64; rv:114.0) Gecko/20100101 Firefox/114.0
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇯🇵
ki3
2025-12-11 10:52:00
(5 months ago)
Fail2Ban: Web App Attacks and Forum Spam 209.50.167.25 1765450319.0(JST)
Web Spam
Bad Web Bot
Web App Attack
🇩🇪
LRob.fr
2025-12-05 03:36:22
(6 months ago)
Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2025-11-28 15:23:00
(6 months ago)
Multiple WAF Violations
Web App Attack
🇵🇱
sefinek.net
2025-11-27 10:58:59
(6 months ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /genshin-stella-mod
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 YaBrowser/22.7.0 Yowser/2.5 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2025-11-26 07:09:36
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.167.25 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.167.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 02:09:30.387900 2025] [security2:error] [pid 2509:tid 2509] [client 209.50.167.25:14003] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.alessiaalessandra.com"] [uri "/.git/HEAD"] [unique_id "aSanquK37-VyVRlzhNzckQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 06:04:13
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.167.25 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.167.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 01:04:04.149781 2025] [security2:error] [pid 13114:tid 13210] [client 209.50.167.25:18545] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.ellicottville.net"] [uri "/.git/HEAD"] [unique_id "aSaYVEBb733MoacrZ7_kcwAAAcs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 02:52:34
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.167.25 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.167.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 21:52:29.223709 2025] [security2:error] [pid 6678:tid 6678] [client 209.50.167.25:20103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.megaandina.com"] [uri "/.git/HEAD"] [unique_id "aSZrbeTFrcQBCRXH9NfrRgAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2025-11-24 23:03:56
(6 months ago)
Auto-ban: >3000 req/min op 2025-11-24
Hacking
Web App Attack
SSH
🇺🇸
TPI-Abuse
2025-11-24 07:46:08
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.167.25 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.167.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:46:01.040151 2025] [security2:error] [pid 22652:tid 22652] [client 209.50.167.25:56435] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.melsjukeboxes.com"] [uri "/.svn/wc.db"] [unique_id "aSQNOSAmXg987HAxD18wlwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-10-28 23:36:36
(7 months ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack