🇵🇱
sefinek.net
2025-08-27 02:48:31
(9 months ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /genshin-stella-mod
UA: Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:114.0) Gecko/20100101 Firefox/114.0
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇨🇿
lp
2025-03-25 02:50:17
(1 year ago)
Unauthorized VPN login attempts: 6 attempts were recorded from 217.145.227.216
2025-03-25T03:09:39+0 ...
show more
Unauthorized VPN login attempts: 6 attempts were recorded from 217.145.227.216
2025-03-25T03:09:39+01:00 vpn Access-Reject 'roosevelt' station: 217.145.227.216 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2025-03-25T03:18:08+01:00 vpn Access-Reject 'sexton' station: 217.145.227.216 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2025-03-25T03:29:46+01:00 vpn Access-Reject 'participation' station: 217.145.227.216 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2025-03-25T03:29:48+01:00 vpn Access-Reject 'smoke' station: 217.145.227.216 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2025-03-25T03:40:05+01:00 vpn Access-Reject 'confusing' station: 217.145.227.216 auth-type: - realm
show less
Brute-Force
Web App Attack
🇦🇺
oncord
2025-03-17 23:04:05
(1 year ago)
Form spam
Web Spam
🇩🇪
dot.mg
2025-03-17 15:28:44
(1 year ago)
Spam comment
Web Spam
Blog Spam
🇺🇸
TPI-Abuse
2025-03-09 01:34:53
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 217.145.227.216 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210730) triggered by 217.145.227.216 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 08 20:34:50.174895 2025] [security2:error] [pid 27752:tid 27778] [client 217.145.227.216:10737] [client 217.145.227.216] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.adventuresdotcom.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.adventuresdotcom.com"] [uri "/mailto:[email protected] "] [unique_id "Z8zwOkzs8eHyW3MegwcdwQAAAJU"], referer: https://www.adventuresdotcom.com/contact.html
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-02-09 10:50:58
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 217.145.227.216 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 217.145.227.216 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 09 05:50:53.761255 2025] [security2:error] [pid 3273153:tid 3273153] [client 217.145.227.216:37515] [client 217.145.227.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "adamsclothiers.com"] [uri "/.env"] [unique_id "Z6iIjfNzuHfXMFV7IjcOtAAAABI"], referer: https://a00018.tiiny.site/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇹
Malta
2025-01-26 20:33:58
(1 year ago)
217.145.227.216 - - [26/Jan/2025:21:33:58 +0100] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Li ...
show more
217.145.227.216 - - [26/Jan/2025:21:33:58 +0100] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.115 Safari/537.36"
show less
VPN IP
Hacking
Web App Attack
2024-11-22 02:57:32
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
2024-11-16 00:49:49
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
2024-11-10 08:58:49
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇬🇷
Staging
2024-11-03 14:11:00
(1 year ago)
top crap
Hacking
SQL Injection
2024-10-16 12:49:38
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
2024-10-11 08:26:43
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
2023-07-31 14:04:25
(2 years ago)
DDoS attack
DDoS Attack
🇬🇧
Keratin
2023-05-18 08:56:31
(3 years ago)
Possible web app exploitation
Brute-Force
Web App Attack