🇧🇪
voormedia
2026-09-17 02:47:14
(8 hours ago)
Accessed trap at '/.bashrc'
Web App Attack
🇺🇸
TPI-Abuse
2026-09-17 02:27:09
(8 hours ago)
(mod_security) mod_security (id:210730) triggered by 44.203.43.180 (ec2-44-203-43-180.compute-1.amaz ...
show more
(mod_security) mod_security (id:210730) triggered by 44.203.43.180 (ec2-44-203-43-180.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 22:27:05.575054 2026] [security2:error] [pid 24743:tid 24743] [client 44.203.43.180:37448] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||nnrentacar.com|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "nnrentacar.com"] [uri "/rclone.conf"] [unique_id "aqtP-UO3hOj5qNeWsHh5uwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
sefinek.net
2026-09-17 02:14:44
(9 hours ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action: MANAGED_CHALLENGE | Protocol: HTTP/2 (POS ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action: MANAGED_CHALLENGE | Protocol: HTTP/2 (POST) | Endpoint: /lib/terminal-xhr.php | UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot) • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇳🇱
Savvii
2026-09-17 01:23:33
(10 hours ago)
20 attempts against mh-misbehave-ban on choy
Brute-Force
Bad Web Bot
Web App Attack
🇧🇷
Halux
2026-09-17 01:08:32
(10 hours ago)
44.203.43.180 Web Application Firewall multiple violations
Hacking
Web App Attack
🇺🇸
Mundo Bueno
2026-09-17 00:57:15
(10 hours ago)
[ISILIA Protection v2.1] Tentative d'accès: /api/.env | Pays: US | UA: Mozilla/5.0 AppleWebKit/537.3 ...
show more
[ISILIA Protection v2.1] Tentative d'accès: /api/.env | Pays: US | UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.0; +https://openai.co
show less
Hacking
Web App Attack
🇩🇪
LRob
2026-09-17 00:49:03
(10 hours ago)
Declared crawler ignoring robots.txt and the refusals it is given | ua: Mozilla/5.0 AppleWebKit/537. ...
show more
Declared crawler ignoring robots.txt and the refusals it is given | ua: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot) | path: /agents/.env (+8 more) | 2026-09-17 00:49 UTC
show less
Bad Web Bot
🇺🇸
helios.live
2026-09-16 23:54:41
(11 hours ago)
2026/09/16 23:54:39 [error] 1090539#1090539: *3444903 access forbidden by rule, client: 44.203.43.18 ...
show more
2026/09/16 23:54:39 [error] 1090539#1090539: *3444903 access forbidden by rule, client: 44.203.43.180, server: kocerroxy.com, request: "GET /.ssh/known_hosts HTTP/1.1", host: "kocerroxy.com"
2026/09/16 23:54:39 [error] 1090539#1090539: *3444903 access forbidden by rule, client: 44.203.43.180, server: kocerroxy.com, request: "GET /.ssh/config HTTP/1.1", host: "kocerroxy.com"
2026/09/16 23:54:39 [error] 1090539#1090539: *3444903 access forbidden by rule, client: 44.203.43.180, server: kocerroxy.com, request: "GET /dist/.vite/manifest.json HTTP/1.1", host: "kocerroxy.com"
2026/09/16 23:54:39 [error] 1090539#1090539: *3444915 access forbidden by rule, client: 44.203.43.180, server: kocerroxy.com, request: "GET /.vite/manifest.json HTTP/1.1", host: "kocerroxy.com"
2026/09/16 23:54:40 [error] 1090540#1090540: *3444979 access forbidden by rule, client: 44.203.43.180, server: kocerroxy.com, request: "GET /.zshrc HTTP/1.1", host: "kocerroxy.com"
...
show less
Web App Attack
🇲🇾
Rizzy
2026-09-16 23:17:48
(12 hours ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇺🇸
H24
2026-09-16 22:25:06
(12 hours ago)
/store/.env /shop/.env /static/.env /private/.env //.env /pkg/.env /utils/.env /llm/.env /shared/.en ...
show more
/store/.env /shop/.env /static/.env /private/.env //.env /pkg/.env /utils/.env /llm/.env /shared/.env /ai/.env
show less
Web App Attack
🇫🇷
SpaceHost-Server
2026-09-16 22:22:05
(13 hours ago)
Brute-Force
Web App Attack
🇫🇮
JimArchon72
2026-09-16 22:20:01
(13 hours ago)
2026/09/16 22:17:14 "GET /wp-admin/ HTTP/2.0"
Web App Attack
🇩🇪
bazter.pro
2026-09-16 21:25:39
(13 hours ago)
Fail2Ban: plesk-bot-aggressive - 15 failures
Port Scan
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-09-16 21:25:07
(13 hours ago)
20 attempts against mh-misbehave-ban on onion
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
mrcrassi
2026-09-16 21:19:50
(14 hours ago)
Triggered Cloudflare WAF (botFight) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/2 (GET m ...
show more
Triggered Cloudflare WAF (botFight) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/2 (GET method)
Endpoint: /private-key
UA: Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot