🇪🇸
librebit
2026-05-26 01:04:45
(1 week ago)
Brute force
Brute-Force
🇱🇻
garmtech.com
2026-05-24 23:33:00
(1 week ago)
IM360 WAF: Old style account creation and modification in Joomla! MV:registration
Web App Attack
2026-04-07 14:37:57
(1 month ago)
Banned by SPAMHAUS ASN-DROP list (ASN: 200373)
DDoS Attack
Hacking
Bad Web Bot
Web App Attack
🇦🇺
RedBear IT
2026-03-26 10:00:37
(2 months ago)
"DDoS against public endpoint"
DDoS Attack
🇱🇻
garmtech.com
2026-03-21 17:28:10
(2 months ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 19-28.65.111.1.130.web-spammer ...
show more
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 19-28.65.111.1.130.web-spammers.v2.rbl.imunify.com._v4 succeeded.
show less
Web App Attack
🇬🇧
Mendip_Defender
2026-02-02 08:34:45
(4 months ago)
65.111.1.130 - - [02/Feb/2026:08:34:28 +0000] "GET /index.php/4x4-response-uk-coverage/ HTTP/1.1" 30 ...
show more
65.111.1.130 - - [02/Feb/2026:08:34:28 +0000] "GET /index.php/4x4-response-uk-coverage/ HTTP/1.1" 301 162 "http://4x4response.uk/" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Vivaldi/5.3.2679.68"
65.111.1.130 - - [02/Feb/2026:08:34:40 +0000] "GET /wp-admin/admin-ajax.php HTTP/1.0" 400 4125 "https://4x4response.uk/index.php/4x4-response-uk-coverage/" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36"
65.111.1.130 - - [02/Feb/2026:08:34:41 +0000] "GET /wp-admin/admin-ajax.php?action=register HTTP/1.0" 400 4287 "https://4x4response.uk/wp-admin/admin-ajax.php" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36"
...
show less
Hacking
Web App Attack
🇧🇪
taivas.nl
2026-01-30 05:02:12
(4 months ago)
Wordpress_xmlrpc_attack
Bad Web Bot
2025-12-11 20:45:23
(5 months ago)
botnet
DDoS Attack
🇱🇻
garmtech.com
2025-12-09 11:35:35
(5 months ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 13-35.65.111.1.130.web-spammer ...
show more
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 13-35.65.111.1.130.web-spammers.v2.rbl.imunify.com._v4 succeeded.
show less
Web App Attack
🇵🇱
sefinek.net
2025-12-04 01:46:42
(6 months ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Vivaldi/5.3.2679.68
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇪🇸
10dencehispahard SL
2025-12-03 08:04:49
(6 months ago)
Wordpress probing for vulnerabilities
Hacking
Exploited Host
🇺🇸
TPI-Abuse
2025-11-27 19:50:33
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.1.130 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.1.130 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 27 14:50:25.989973 2025] [security2:error] [pid 9951:tid 9951] [client 65.111.1.130:21815] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "blacksheepoffroad.com"] [uri "/.svn/wc.db"] [unique_id "aSirgThH32CSspVPtZxuZQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 03:22:29
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.1.130 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.1.130 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 22:22:22.401664 2025] [security2:error] [pid 26220:tid 26220] [client 65.111.1.130:44409] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bamedica.com"] [uri "/.git/HEAD"] [unique_id "aSZybhYaGk2JxupiGeqyAQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 09:47:15
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.1.130 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.1.130 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:47:08.277136 2025] [security2:error] [pid 27433:tid 27433] [client 65.111.1.130:32611] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.cosmicmaster.com"] [uri "/.git/HEAD"] [unique_id "aSQpnHzqp8w_nDnv6man8QAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 08:31:16
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.1.130 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.1.130 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:31:09.788886 2025] [security2:error] [pid 593:tid 593] [client 65.111.1.130:35417] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bayareahiphopforever.org"] [uri "/.git/HEAD"] [unique_id "aSQXzcGDiy4ovhMV98NlZQAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack