๐บ๐ธ
technojoe99
2025-08-26 23:04:22
(9 months ago)
Exploit scan from 5.62.57.29. GET /mail HTTP/1.1.
Web App Attack
๐ฒ๐ฝ
Javier Solis
2025-07-21 19:53:00
(10 months ago)
BOT activity
Hacking
Anonymous
2025-05-30 15:13:24
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
๐ต๐ฑ
sefinek.net
2025-05-30 10:29:37
(1 year ago)
Triggered Cloudflare WAF (firewallCustom) from GB.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show more
Triggered Cloudflare WAF (firewallCustom) from GB.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/89.0.4447.51
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐บ๐ธ
kosada.com
2025-05-19 11:48:35
(1 year ago)
Web bot cloaking
Bad Web Bot
Anonymous
2025-05-17 07:42:00
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
๐บ๐ธ
kosada.com
2025-04-26 16:27:11
(1 year ago)
Web bot cloaking
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2025-04-26 14:57:42
(1 year ago)
(mod_security) mod_security (id:210350) triggered by 5.62.57.29 (r-29-57-62-5.consumer-pool.prcdn.ne ...
show more
(mod_security) mod_security (id:210350) triggered by 5.62.57.29 (r-29-57-62-5.consumer-pool.prcdn.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 26 10:57:34.992725 2025] [security2:error] [pid 21745:tid 21745] [client 5.62.57.29:1452] [client 5.62.57.29] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dutchmaidcoinomaticlaundry.com|F|4"] [data "keep-alive, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dutchmaidcoinomaticlaundry.com"] [uri "/index.html"] [unique_id "aAz0XofQyCYlQjqvweHUBgAAAAk"], referer: http://dutchmaidcoinomaticlaundry.com/index.html
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
mnsf
2025-04-26 14:05:07
(1 year ago)
Too many Status 40X (16)
Request Overload (106)
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-03-24 12:23:42
(1 year ago)
(mod_security) mod_security (id:210350) triggered by 5.62.57.29 (r-29-57-62-5.consumer-pool.prcdn.ne ...
show more
(mod_security) mod_security (id:210350) triggered by 5.62.57.29 (r-29-57-62-5.consumer-pool.prcdn.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 24 08:23:38.003539 2025] [security2:error] [pid 28818:tid 28818] [client 5.62.57.29:2218] [client 5.62.57.29] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.advantagesystemsgroup.com|F|4"] [data "keep-alive, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.advantagesystemsgroup.com"] [uri "/"] [unique_id "Z-FOyeegNRRdpaZjGOUlugAAAAM"], referer: https://www.advantagesystemsgroup.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ต๐ฑ
sefinek.net
2025-03-18 06:00:52
(1 year ago)
Triggered Cloudflare WAF (firewallCustom) from GB.
Action taken: MANAGED_CHALLENGE
ASN: 198605 (AVAS ...
show more
Triggered Cloudflare WAF (firewallCustom) from GB.
Action taken: MANAGED_CHALLENGE
ASN: 198605 (AVAST-AS-DC Gen Digital dba as Avast)
Protocol: HTTP/1.1 (GET method)
Endpoint: /genshin-stella-mod
Timestamp: 2025-03-18T04:32:22Z
Ray ID: 9222017bfe8f15e1
UA: Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:114.0) Gecko/20100101 Firefox/114.0
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2025-03-08 10:43:53
(1 year ago)
(mod_security) mod_security (id:210350) triggered by 5.62.57.29 (r-29-57-62-5.consumer-pool.prcdn.ne ...
show more
(mod_security) mod_security (id:210350) triggered by 5.62.57.29 (r-29-57-62-5.consumer-pool.prcdn.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 08 05:43:50.693505 2025] [security2:error] [pid 14435:tid 14435] [client 5.62.57.29:1526] [client 5.62.57.29] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.nwtree.com|F|4"] [data "keep-alive, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.nwtree.com"] [uri "/"] [unique_id "Z8wfZi4jxhuGH7fe9rEFxAAAAAA"], referer: http://www.nwtree.com
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-03-03 07:40:53
(1 year ago)
(mod_security) mod_security (id:210350) triggered by 5.62.57.29 (r-29-57-62-5.consumer-pool.prcdn.ne ...
show more
(mod_security) mod_security (id:210350) triggered by 5.62.57.29 (r-29-57-62-5.consumer-pool.prcdn.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 03 02:40:49.052564 2025] [security2:error] [pid 20010:tid 20010] [client 5.62.57.29:1436] [client 5.62.57.29] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.fabandco.com|F|4"] [data "keep-alive, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.fabandco.com"] [uri "/"] [unique_id "Z8VdAZ1mA1c-4bBb9MawyAAAAA4"], referer: http://www.fabandco.com
show less
Brute-Force
Bad Web Bot
Web App Attack
๐น๐ท
rtbh.com.tr
2025-02-04 20:50:09
(1 year ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
๐น๐ท
rtbh.com.tr
2025-02-03 20:50:11
(1 year ago)
list.rtbh.com.tr report: tcp/0
Brute-Force