๐บ๐ธ
oncord
2026-06-12 17:48:26
(4 days ago)
Form spam
Web Spam
๐ณ๐ฑ
Savvii
2026-03-29 19:20:10
(2 months ago)
20 attempts against mh_ha-misbehave-ban on ethyl
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
Packets-Decreaser.NET
2025-12-29 14:01:13
(5 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
๐ต๐ฑ
sefinek.net
2025-12-11 17:08:53
(6 months ago)
Triggered Cloudflare WAF (firewallCustom) from DE.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show more
Triggered Cloudflare WAF (firewallCustom) from DE.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /genshin-stella-mod
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2025-11-24 07:39:45
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.183.8 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.183.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:39:34.792185 2025] [security2:error] [pid 8701:tid 8701] [client 209.50.183.8:47547] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.2mpr.com"] [uri "/.env"] [unique_id "aSQLtkzxUC2uOUBO1ovrvgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-11-24 07:12:35
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.183.8 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.183.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:12:26.831830 2025] [security2:error] [pid 7352:tid 7352] [client 209.50.183.8:56195] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ergocorrect.com"] [uri "/.svn/wc.db"] [unique_id "aSQFWq91nCDpKTraQrOe8AAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-11-24 05:04:30
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.183.8 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.183.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:04:22.432885 2025] [security2:error] [pid 16156:tid 16156] [client 209.50.183.8:53729] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.myhomeflyer.com"] [uri "/.svn/wc.db"] [unique_id "aSPnVt1NLIr99sMMKbh2_AAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-11-14 05:31:26
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.183.8 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.183.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 14 00:31:22.450382 2025] [security2:error] [pid 2527:tid 2527] [client 209.50.183.8:30765] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.ceezees.com"] [uri "/config.php%7C/.env%7Csettings.py"] [unique_id "aRa-qrzCpRhEDkplkWA3HQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฎ๐ฉ
fazar
2025-09-30 20:55:02
(8 months ago)
IP address filtered by [ssh-iptables] for suspicious activities (ckg02).
Brute-Force
SSH