🇪🇸
librebit
2026-06-24 03:26:39
(3 days ago)
Brute force
Brute-Force
2026-02-18 21:15:09
(4 months ago)
wordpress-trap
Web App Attack
🇩🇪
LRob.fr
2026-02-12 14:53:51
(4 months ago)
Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-12 23:15:54
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.251.195 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.251.195 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 12 18:15:50.882816 2026] [security2:error] [pid 12580:tid 12580] [client 216.26.251.195:16283] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "5starfluffandfold.com"] [uri "/.svn/wc.db"] [unique_id "aWWApmjhb88an0xpMcayogAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇱🇻
garmtech.com
2026-01-10 22:40:18
(5 months ago)
IM360 WAF: Old style account creation and modification in Joomla! MV:registration
Web App Attack
🇵🇱
sefinek.net
2025-12-21 22:08:29
(6 months ago)
Triggered Cloudflare WAF (firewallCustom) from CA.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show more
Triggered Cloudflare WAF (firewallCustom) from CA.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (X11; Linux i686; rv:114.0) Gecko/20100101 Firefox/114.0
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2025-11-25 04:45:31
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.251.195 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.251.195 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:45:24.854733 2025] [security2:error] [pid 7055:tid 7055] [client 216.26.251.195:17629] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.timbrazier.com"] [uri "/.svn/wc.db"] [unique_id "aSU0ZM6vEYU_So3VwAyr7wAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 03:37:47
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.251.195 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.251.195 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:37:36.679669 2025] [security2:error] [pid 17094:tid 17094] [client 216.26.251.195:56037] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.journalofcommonsenseeconomics.org"] [uri "/.git/HEAD"] [unique_id "aSUkgCRbes5aJWjiKduibAAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 02:53:33
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.251.195 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.251.195 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:53:26.723904 2025] [security2:error] [pid 15101:tid 15103] [client 216.26.251.195:47809] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.maryschalkdesign.com"] [uri "/.svn/wc.db"] [unique_id "aSUaJqNKS2jdjfTVKRdWmQAAAQA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 07:40:59
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.251.195 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.251.195 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:40:53.067898 2025] [security2:error] [pid 27421:tid 27421] [client 216.26.251.195:20837] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.wooferhound.com"] [uri "/.git/HEAD"] [unique_id "aSQMBZYPqjhGJ00eVXweTgAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 04:54:48
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.251.195 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.251.195 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:54:43.396393 2025] [security2:error] [pid 17163:tid 17163] [client 216.26.251.195:53595] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.powerastronomy.powerastronomy.com"] [uri "/.git/HEAD"] [unique_id "aSPlE3IgXUCcnfCWsR7rggAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
Rosh
2025-10-19 00:14:12
(8 months ago)
[10/19/25 02:14:12] SSH: authentication failure
Brute-Force
SSH