🇫🇷
SpaceHost-Server
2026-05-13 22:33:27
(1 month ago)
Brute-Force
Web App Attack
2026-05-13 21:45:28
(1 month ago)
Fail2Ban triggered
Web App Attack
2026-04-22 15:14:10
(1 month ago)
Attempt to scan vulnerabilities
Hacking
2026-04-12 06:33:47
(2 months ago)
Attempt to scan vulnerabilities
Hacking
2025-12-30 15:04:05
(5 months ago)
IP & Port Scan.
Port Scan
Brute-Force
SSH
🇺🇸
TPI-Abuse
2025-12-29 06:03:14
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.12.205 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.12.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 01:03:10.819313 2025] [security2:error] [pid 24006:tid 24006] [client 65.111.12.205:21971] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hydrusdetergents.com"] [uri "/.svn/wc.db"] [unique_id "aVIZntYWM2qNXeTOhnKYyQAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-29 04:27:30
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.12.205 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.12.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 23:27:23.179098 2025] [security2:error] [pid 22044:tid 22126] [client 65.111.12.205:30375] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kd9uri.com"] [uri "/.svn/wc.db"] [unique_id "aVIDKw2dUHoRkDjmH6S7CgAAAZc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-29 03:44:37
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.12.205 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.12.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 22:44:34.124652 2025] [security2:error] [pid 27136:tid 27136] [client 65.111.12.205:27553] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "17thstreetrealty.com"] [uri "/.svn/wc.db"] [unique_id "aVH5Ikop1c9VWI_bBtRxtAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
sefinek.net
2025-12-26 19:27:53
(5 months ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /genshin-stella-mod
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 YaBrowser/22.7.0 Yowser/2.5 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇮🇹
VHosting
2025-12-23 18:40:10
(5 months ago)
Detected attack and reported by a human
DDoS Attack
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
SSH
🇨🇭
backslash
2025-12-16 08:00:16
(6 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇺🇸
TPI-Abuse
2025-11-26 08:51:50
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.12.205 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.12.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 03:51:46.546997 2025] [security2:error] [pid 9606:tid 9655] [client 65.111.12.205:28471] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tomithai.plumeraproductions.com"] [uri "/.svn/wc.db"] [unique_id "aSa_oiFyBWeOsnO3zv5q3wAAAIo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 07:00:40
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.12.205 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.12.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 02:00:33.603730 2025] [security2:error] [pid 15280:tid 15280] [client 65.111.12.205:46127] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.greensandbeans.us"] [uri "/.svn/wc.db"] [unique_id "aSalkf6NTorRMUTgqailBAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 02:27:46
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.12.205 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.12.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:27:39.014279 2025] [security2:error] [pid 1647141:tid 1647205] [client 65.111.12.205:25937] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "georgementz.aafm.us"] [uri "/.svn/wc.db"] [unique_id "aSUUG9ffCdpZ5cNrCNduFwAAAUA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 07:17:21
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.12.205 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.12.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:17:12.905347 2025] [security2:error] [pid 3459969:tid 3459969] [client 65.111.12.205:41983] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.farmersmutualcallaway.com"] [uri "/.svn/wc.db"] [unique_id "aSQGeL3FO5TAK9jawwx-2gAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack