2026-01-05 20:06:20
(5 months ago)
Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.05 is noted in report tim ...
show more
Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.05 is noted in report timestamp
show less
Hacking
Brute-Force
🇩🇪
Packets-Decreaser.NET
2025-12-29 14:00:53
(5 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
🇵🇱
sefinek.net
2025-12-28 05:34:16
(5 months ago)
Triggered Cloudflare WAF (firewallCustom) from CA.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show more
Triggered Cloudflare WAF (firewallCustom) from CA.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/89.0.4447.51
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2025-11-24 08:06:12
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.251.187 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.251.187 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:06:04.377254 2025] [security2:error] [pid 23846:tid 23846] [client 216.26.251.187:53309] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "graythebruce.vccemail.net"] [uri "/.svn/wc.db"] [unique_id "aSQR7FQBW4JNuV_jdzQ4nQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 06:22:08
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.251.187 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.251.187 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:22:03.789142 2025] [security2:error] [pid 16733:tid 16733] [client 216.26.251.187:27445] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.flyc2c.com"] [uri "/.svn/wc.db"] [unique_id "aSP5i45m4QAImjGCIPVajwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 05:24:31
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.251.187 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.251.187 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:24:16.928907 2025] [security2:error] [pid 22868:tid 22868] [client 216.26.251.187:40845] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.carboncreekwood.com"] [uri "/.svn/wc.db"] [unique_id "aSPsAGqoyl-wGGU23gsYzQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 04:59:49
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.251.187 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.251.187 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:59:21.341847 2025] [security2:error] [pid 19161:tid 19161] [client 216.26.251.187:41607] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.rhythmofthesea.net"] [uri "/.env"] [unique_id "aSPmKV0Efea1q3danaZFUwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 04:32:33
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.251.187 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.251.187 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:32:25.725725 2025] [security2:error] [pid 13553:tid 13553] [client 216.26.251.187:28549] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.fabrikaz.com"] [uri "/.git/HEAD"] [unique_id "aSPf2cTiVSN-lcSOgdHQOwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-10-27 11:30:09
(7 months ago)
wordpress-trap
Web App Attack
2025-10-27 06:59:24
(7 months ago)
wordpress-trap
Web App Attack
2025-10-25 14:58:46
(7 months ago)
wordpress-trap
Web App Attack
2025-10-24 19:02:34
(7 months ago)
wordpress-trap
Web App Attack
2025-10-19 12:54:43
(8 months ago)
wordpress-trap
Web App Attack
2025-10-18 17:34:43
(8 months ago)
wordpress-trap
Web App Attack
2025-10-18 00:57:17
(8 months ago)
wordpress-trap
Web App Attack