🇵🇱
sefinek.net
2026-02-14 17:57:06
(3 months ago)
Triggered Cloudflare WAF (firewallCustom) from CA.
Action: MANAGED_CHALLENGE | Protocol: HTTP/1.1 (G ...
show more
Triggered Cloudflare WAF (firewallCustom) from CA.
Action: MANAGED_CHALLENGE | Protocol: HTTP/1.1 (GET) | Endpoint: / | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇦🇺
MAGIC
2025-12-20 02:14:29
(5 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇧🇪
cmbplf
2025-12-14 02:27:06
(6 months ago)
2.254 requests with url.path */xmlrpc.php
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2025-12-07 15:42:29
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.233.129 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.233.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 10:42:23.453681 2025] [security2:error] [pid 24138:tid 24138] [client 216.26.233.129:14417] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wildimaginings.org"] [uri "/.svn/wc.db"] [unique_id "aTWgXzgwCRgB0W9PueWRIQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 06:25:00
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.233.129 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.233.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 01:24:54.015661 2025] [security2:error] [pid 16435:tid 16435] [client 216.26.233.129:50971] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "iliketoruntoo.com"] [uri "/.env"] [unique_id "aTJ6tnuNyB4EwC3BjWu8kwAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 01:14:21
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.233.129 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.233.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 20:14:14.932632 2025] [security2:error] [pid 12489:tid 12489] [client 216.26.233.129:30777] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "weddingmusicguitar.com"] [uri "/.svn/wc.db"] [unique_id "aTIx5uQw77oMl6DUl7WxoQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
Mediashaker
2025-11-29 00:00:46
(6 months ago)
(apache-scanners) Failed apache-scanners trigger with match [redacted] from 216.26.233.129 (US/Unite ...
show more
(apache-scanners) Failed apache-scanners trigger with match [redacted] from 216.26.233.129 (US/United States/-)
show less
Port Scan
🇺🇸
TPI-Abuse
2025-11-26 09:25:18
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.233.129 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.233.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 04:25:12.023114 2025] [security2:error] [pid 519:tid 519] [client 216.26.233.129:39685] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "shop.kleens-uk.com"] [uri "/.svn/wc.db"] [unique_id "aSbHeA3LClrbVgv-o8xUoAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 06:27:24
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.233.129 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.233.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 01:27:16.866262 2025] [security2:error] [pid 24352:tid 24352] [client 216.26.233.129:29573] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.puduspoems.com"] [uri "/.git/HEAD"] [unique_id "aSadxLwFtc-e_QzQgn-SPQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 03:58:29
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.233.129 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.233.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 22:58:26.113946 2025] [security2:error] [pid 8751:tid 8751] [client 216.26.233.129:49027] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ols.e-zschedule.com"] [uri "/.env"] [unique_id "aSZ64gv69FNreej4kghl9gAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 01:29:55
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.233.129 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.233.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 20:29:47.774087 2025] [security2:error] [pid 28681:tid 28681] [client 216.26.233.129:35273] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.veracurnow.com"] [uri "/.env"] [unique_id "aSZYC7LQvtuFI7xcn8WDTQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 05:44:33
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.233.129 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.233.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:44:27.541083 2025] [security2:error] [pid 15692:tid 15692] [client 216.26.233.129:36949] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vendor21.com"] [uri "/.svn/wc.db"] [unique_id "aSPwu7em3xb5kPurpN18ugAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 05:27:07
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.233.129 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.233.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:26:56.842605 2025] [security2:error] [pid 3965136:tid 3965153] [client 216.26.233.129:43643] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.icecc.com"] [uri "/.svn/wc.db"] [unique_id "aSPsoDGAQlEvBxWyTv_J9QAAAY8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-11-24 04:44:00
(6 months ago)
216.26.233.129 - - [24/Nov/2025:04:43:59 +0000] "GET /.env HTTP/1.1" 302 412 "-" "Mozilla/5.0 (Macin ...
show more
216.26.233.129 - - [24/Nov/2025:04:43:59 +0000] "GET /.env HTTP/1.1" 302 412 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 03:51:55
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.233.129 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.233.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 22:51:47.940117 2025] [security2:error] [pid 715:tid 715] [client 216.26.233.129:58523] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.birdchristmascards.com"] [uri "/.env"] [unique_id "aSPWU4fuNlc7L9U45auwiQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack