2026-05-05 04:49:17
(1 month ago)
Banned by SPAMHAUS DROP list
DDoS Attack
Hacking
Bad Web Bot
Web App Attack
2026-04-30 16:14:57
(1 month ago)
Forum/form spam
Web Spam
🇩🇪
LRob.fr
2026-03-31 21:00:09
(2 months ago)
Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail
Bad Web Bot
Web App Attack
🇺🇸
cyfordtechnologies.com
2026-03-29 23:03:10
(2 months ago)
High-abuse ASN prefix: 216.26. : Reported by Cyford API
Web App Attack
🇱🇻
garmtech.com
2026-03-04 02:43:25
(3 months ago)
IM360 WAF: Attempt to upload malware
Hacking
🇱🇻
garmtech.com
2026-03-04 02:43:17
(3 months ago)
IM360 WAF: WordPress plugin/theme auto install block
Web App Attack
2026-02-23 14:46:23
(3 months ago)
wordpress-trap
Web App Attack
🇺🇸
fbarela
2026-01-25 04:00:18
(4 months ago)
FortiGate SSL VPN login failures.
Hacking
Brute-Force
2026-01-15 13:20:00
(4 months ago)
Brute force attempts
Brute-Force
🇵🇱
sefinek.net
2026-01-13 02:09:49
(4 months ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 YaBrowser/22.7.0 Yowser/2.5 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2025-12-28 00:59:32
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.231.239 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.231.239 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 27 19:59:29.534045 2025] [security2:error] [pid 15357:tid 15357] [client 216.26.231.239:34135] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "circle-h-growers.com"] [uri "/.git/HEAD"] [unique_id "aVCA8cVSjpnOlKqllS8HMwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-27 20:56:43
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.231.239 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.231.239 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 27 15:56:36.759341 2025] [security2:error] [pid 25551:tid 25551] [client 216.26.231.239:12627] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bikinipageone.com"] [uri "/.env"] [unique_id "aVBIBHqzKgn8JD_K8nDYGQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
jkhorvath.com
2025-12-27 20:24:35
(5 months ago)
Request for URL /.git/HEAD
Phishing
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-12-27 20:22:15
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.231.239 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.231.239 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 27 15:22:08.587111 2025] [security2:error] [pid 26797:tid 26797] [client 216.26.231.239:24969] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "boardingatthewedge.com"] [uri "/.git/HEAD"] [unique_id "aVA_8Lpe2v-aMIxmqpGs7gAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-27 19:40:14
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.231.239 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.231.239 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 27 14:40:09.823428 2025] [security2:error] [pid 17585:tid 17585] [client 216.26.231.239:54297] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tractiondrive.com"] [uri "/.env"] [unique_id "aVA2Gbc5P0Z6ksIgQYg2jgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack