2026-09-26 19:45:33
(3 weeks ago)
"Packet Flood; Triggered WAF; Persistent 404 Attempts"
DDoS Attack
2026-09-21 06:20:01
(3 weeks ago)
"Packet Flood; Triggered WAF; Persistent 404 Attempts"
DDoS Attack
🇮🇹
Francesco Ippoliti
2026-07-05 06:38:38
(3 months ago)
[Jul 5 08:38:37] NOTICE[64812] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:99999@1 ...
show more
[Jul 5 08:38:37] NOTICE[64812] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected] >' failed for '65.111.6.10:52052' (callid: 6fbe5fcf82482b86d00ec89ec59d2fa6) - No matching endpoint found
...
show less
Brute-Force
Port Scan
🇮🇹
Francesco Ippoliti
2026-07-05 04:38:15
(3 months ago)
[Jul 5 06:38:14] NOTICE[65023] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:800@154 ...
show more
[Jul 5 06:38:14] NOTICE[65023] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected] >' failed for '65.111.6.10:18019' (callid: b656d40d28bc7f99c3684d4638b01602) - No matching endpoint found
[Jul 5 06:38:14] NOTICE[64812] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected] >' failed for '65.111.6.10:18019' (callid: b656d40d28bc7f99c3684d4638b01602) - No matching endpoint found
...
show less
Brute-Force
Port Scan
🇫🇮
sgofferj
2026-07-04 01:18:04
(3 months ago)
Attack attempt on SIP server
Fraud VoIP
Hacking
Brute-Force
🇩🇪
tinect
2026-05-25 05:06:03
(4 months ago)
This IP was detected by CrowdSec triggering tinect/http-sensitive-file-probe
Web App Attack
🇵🇱
sefinek.net
2026-02-25 22:24:36
(7 months ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action: MANAGED_CHALLENGE | Protocol: HTTP/1.1 (G ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action: MANAGED_CHALLENGE | Protocol: HTTP/1.1 (GET) | Endpoint: / | UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Vivaldi/5.3.2679.68 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇮🇹
VHosting
2026-02-18 22:16:50
(7 months ago)
Detected attack and reported by a human
Brute-Force
Web App Attack
SSH
DDoS Attack
Exploited Host
Bad Web Bot
🇵🇱
sefinek.net
2026-01-03 08:08:52
(9 months ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /genshin-stella-mod
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Edg/114.0.1264.71
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇩🇪
rh24
2025-12-24 12:49:38
(9 months ago)
(wordpress) Failed wordpress login from 65.111.6.10 (US/United States/-): (CF_ENABLE)
Brute-Force
🇮🇹
VHosting
2025-12-24 00:10:15
(9 months ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇨🇭
backslash
2025-12-19 08:25:04
(9 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇺🇸
TPI-Abuse
2025-12-09 18:41:54
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.6.10 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.6.10 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 09 13:41:51.067623 2025] [security2:error] [pid 24032:tid 24077] [client 65.111.6.10:15855] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "briteh.com"] [uri "/.svn/wc.db"] [unique_id "aThtb94VWqAWQEriKvzM7AAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-09 05:33:11
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.6.10 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.6.10 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 09 00:33:06.298275 2025] [security2:error] [pid 2104:tid 2104] [client 65.111.6.10:41379] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lapapevip.com"] [uri "/.git/HEAD"] [unique_id "aTe0ktI3q5W-rtUXFHhexQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-08 03:49:54
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.6.10 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.6.10 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 22:49:50.298150 2025] [security2:error] [pid 12271:tid 12271] [client 65.111.6.10:35755] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mypensees.com"] [uri "/.svn/wc.db"] [unique_id "aTZK3ulmFhTr4fs2hgtTGgAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
