🇺🇸
TPI-Abuse
2025-10-14 00:48:37
(8 months ago)
(mod_security) mod_security (id:210730) triggered by 51.79.231.174 (ns5009403.ip-51-79-231.net): 1 i ...
show more
(mod_security) mod_security (id:210730) triggered by 51.79.231.174 (ns5009403.ip-51-79-231.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 13 20:48:34.308531 2025] [security2:error] [pid 13256:tid 13256] [client 51.79.231.174:61879] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||cnprcertificationreviews.org|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "cnprcertificationreviews.org"] [uri "/instagram.com"] [unique_id "aO2d4hs12nCOdRqXL_wsWwAAAAI"], referer: https://cnprcertificationreviews.org/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
nitrix
2025-09-06 00:24:09
(9 months ago)
ZMap scanning detected
Port Scan
Hacking
🇩🇪
LRob.fr
2025-08-10 00:45:03
(10 months ago)
Repeated 403 errors, blocked by Fail2ban in custom-403 jail
Bad Web Bot
2025-08-07 14:45:35
(10 months ago)
Ports: 80,443; Direction: 0; Trigger: LF_MODSEC
Brute-Force
SSH
2025-08-03 19:54:38
(10 months ago)
(mod_security) mod_security triggered on hostname [redacted] 51.79.231.174 (SG/Singapore/ns5009403.i ...
show more
(mod_security) mod_security triggered on hostname [redacted] 51.79.231.174 (SG/Singapore/ns5009403.ip-51-79-231.net)
show less
SQL Injection
🇺🇸
masterguru
2025-07-18 11:55:10
(10 months ago)
BAD BOT - Detected and Blocked.. Matched phrase "python-requests" at REQUEST_HEADERS:User-Agent. (11 ...
show more
BAD BOT - Detected and Blocked.. Matched phrase "python-requests" at REQUEST_HEADERS:User-Agent. (1100000-124)
show less
Bad Web Bot
🇳🇱
Savvii
2025-07-17 09:35:35
(10 months ago)
20 attempts against mh_ha-misbehave-ban on tofu
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
as211431.net
2025-07-10 05:07:34
(11 months ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET metho ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /.git/HEAD
UA: Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇫🇷
N3ilawx
2025-07-06 22:08:34
(11 months ago)
Fail2Ban detect something wrong with this ip 51.79.231.174 - GET - 404 - [06/Jul/2025:22:08:29 +0000 ...
show more
Fail2Ban detect something wrong with this ip 51.79.231.174 - GET - 404 - [06/Jul/2025:22:08:29 +0000]
51.79.231.174 - GET - 404 - [06/Jul/2025:22:08:30 +0000]
51.79.231.174 - GET - 404 - [06/Jul/2025:22:08:30 +0000]
51.79.231.174 - GET - 404 - [06/Jul/2025:22:08:31 +0000]
51.79.231.174 - GET - 404 - [06/Jul/2025:22:08:31 +0000]
51.79.231.174 - GET - 404 - [06/Jul/2025:22:08:31 +0000]
51.79.231.174 - GET - 404 - [06/Jul/2025:22:08:32 +0000]
51.79.231.174 - GET - 404 - [06/Jul/2025:22:08:32 +0000]
51.79.231.174 - GET - 404 - [06/Jul/2025:22:08:32 +0000]
51.79.231.174 - GET - 404 - [06/Jul/2025:22:08:33 +0000]
...
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-07-04 19:55:26
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 51.79.231.174 (ns5009403.ip-51-79-231.net): 1 i ...
show more
(mod_security) mod_security (id:210492) triggered by 51.79.231.174 (ns5009403.ip-51-79-231.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 04 15:55:18.990545 2025] [security2:error] [pid 23574:tid 23574] [client 51.79.231.174:63241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "balmedia.com"] [uri "/.env"] [unique_id "aGgxporHDz99TYmdqKEgQQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-07-04 15:11:27
(11 months ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇮🇹
VHosting
2025-07-04 13:35:07
(11 months ago)
Detected attack by Imunify360
Brute-Force
Web App Attack
🇯🇵
S.O.B.A. Dev.
2025-07-04 12:20:54
(11 months ago)
Web vulnerability scanning
Web Spam
Brute-Force
Web App Attack
🇩🇪
Vegascosmetics
2025-06-30 21:50:41
(11 months ago)
Kingcopy(AI-IDS):IP is Probing for Wordpress vulnerabilities WTF:Banned
Hacking
Bad Web Bot
Web App Attack
🇫🇮
000rosiu
2025-06-30 03:52:06
(11 months ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: MANAGED_CHALLENGE
ASN: 16276 (OVH)
...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: MANAGED_CHALLENGE
ASN: 16276 (OVH)
Protocol: HTTP/1.1 (GET method)
Endpoint: /wp-admin/install.php
Timestamp: 2025-06-30T03:48:14Z
Ray ID: 957aafd52c21a24f
UA: Mozilla/5.0 (Linux; Android 11; vivo 1904 Build/RP1A.200720.012;) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/104.0.5112.97 Mobile Safari/537.36
Report generated by Cloudflare-WAF-To-AbuseIPDB:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot