🇬🇧
relianoid.com
2026-03-31 06:47:34
(2 months ago)
POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com
Web Spam
🇳🇱
BlueWire Hosting
2026-02-11 04:43:58
(3 months ago)
Probing websites for vulnerabilities
Web App Attack
🇷🇺
OK
2026-02-10 05:43:05
(3 months ago)
HTTP/HTTPS
Hacking
Web App Attack
🇵🇱
sefinek.net
2025-12-12 02:00:58
(5 months ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:114.0) Gecko/20100101 Firefox/114.0
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
2025-12-11 23:42:28
(5 months ago)
botnet
DDoS Attack
🇺🇸
TPI-Abuse
2025-11-25 05:42:45
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.229.128 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.229.128 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 00:42:37.777427 2025] [security2:error] [pid 24004:tid 24004] [client 216.26.229.128:40127] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.dreamscometruefilms.com"] [uri "/.env"] [unique_id "aSVBzY7k2SBSfiXkfpaIxQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 04:21:20
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.229.128 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.229.128 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:21:15.481174 2025] [security2:error] [pid 1817001:tid 1817047] [client 216.26.229.128:54493] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.gelatoconsapevole.it"] [uri "/.git/HEAD"] [unique_id "aSUuu2R1ttxeyDpsCa9TPgAAAYg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 03:38:14
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.229.128 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.229.128 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:38:08.199525 2025] [security2:error] [pid 22152:tid 22152] [client 216.26.229.128:44145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sdf.banis-associates.com"] [uri "/.env"] [unique_id "aSUkoEf4EiVJbvBAcIWFzQAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 03:08:10
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.229.128 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.229.128 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:08:05.673188 2025] [security2:error] [pid 27215:tid 27215] [client 216.26.229.128:34383] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.captpalpreschool.com"] [uri "/.svn/wc.db"] [unique_id "aSUdlfrcxavjnudku7r2MgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 01:09:55
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.229.128 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.229.128 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 20:09:50.498697 2025] [security2:error] [pid 14592:tid 14592] [client 216.26.229.128:59257] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.vitaminpolis.com"] [uri "/.env"] [unique_id "aSUB3j2sL8BXq8OzbSfWEQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 04:23:50
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.229.128 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.229.128 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:23:37.374322 2025] [security2:error] [pid 5969:tid 5969] [client 216.26.229.128:31677] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.ridgecrestconsultinggroup.com"] [uri "/.env"] [unique_id "aSPdyUDhyGqFWWpy36KEpQAAACY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-10-29 12:22:46
(7 months ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack
🇵🇱
sefinek.net
2025-10-14 11:30:22
(7 months ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇨🇦
wil.com
2025-10-14 09:16:44
(7 months ago)
GlobalProtect login attempts with user gdhillon.
VPN IP
Brute-Force
2025-10-06 08:41:19
(7 months ago)
Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.06 is noted in report tim ...
show more
Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.06 is noted in report timestamp
show less
Hacking
Brute-Force