🇫🇮
as211431.net
2026-06-22 13:33:57
(2 months ago)
Triggered Cloudflare WAF (firewallCustom) from UA.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show more
Triggered Cloudflare WAF (firewallCustom) from UA.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /archivarix.cms.php
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇯🇵
demonsword
2026-06-03 10:39:09
(2 months ago)
Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ...
show more
Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: www.expressapisv2.net:443
show less
Open Proxy
Port Scan
🇫🇷
SpaceHost-Server
2026-06-01 22:34:24
(2 months ago)
Brute-Force
Web App Attack
2026-06-01 17:37:26
(2 months ago)
Fail2Ban triggered
Web App Attack
🇦🇺
screwlooseit.com.au
2026-05-28 10:28:31
(2 months ago)
Blocked by CSF 13 firewall - Rule: XMLRPC
NL/Netherlands/-
Web App Attack
🇦🇺
oncord
2026-04-03 23:31:10
(4 months ago)
Form spam
Web Spam
🇱🇻
garmtech.com
2026-04-02 22:20:01
(4 months ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 01-20.45.130.81.13.web-spammer ...
show more
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 01-20.45.130.81.13.web-spammers.v2.rbl.imunify.com._v4 succeeded.
show less
Web App Attack
🇺🇸
wordpresshosting.solutions
2026-03-12 11:26:54
(5 months ago)
Web app vulnerability scanning detected. Evidence: 45.130.81.13 - - [12/Mar/2026:11:26:50 +0000] "HE ...
show more
Web app vulnerability scanning detected. Evidence: 45.130.81.13 - - [12/Mar/2026:11:26:50 +0000] "HEAD /bak/backup.sql HTTP/1.1" 404 4280 "-" "-"
45.130.81.13 - - [12/Mar/2026:11:26:53 +0000] "GET /back/backup.sql.gz HTTP/1.1" 404 39982 "-" "-"
show less
Web App Attack
🇺🇸
Penny Packer
2026-03-08 17:49:09
(5 months ago)
Fail2Ban apache-tripwires
Web App Attack
🇺🇸
TPI-Abuse
2026-02-25 23:53:56
(5 months ago)
(mod_security) mod_security (id:210730) triggered by 45.130.81.13 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 45.130.81.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 25 18:53:48.448845 2026] [security2:error] [pid 27641:tid 27641] [client 45.130.81.13:36351] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||lusocleaningservice.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "lusocleaningservice.com"] [uri "/old/dump.sql"] [unique_id "aZ-LjLBaxK2QTA3WT3FABwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
myagent.site
2026-02-23 20:11:09
(5 months ago)
Blocking for trying to access an exploit file: /files/index.php
Hacking
🇨🇦
polycoda
2026-02-23 14:24:54
(5 months ago)
AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based)
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-02-01 05:12:34
(6 months ago)
(mod_security) mod_security (id:210730) triggered by 45.130.81.13 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 45.130.81.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 01 00:12:30.086398 2026] [security2:error] [pid 3100649:tid 3100674] [client 45.130.81.13:48141] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||magazineofwallstreet.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "magazineofwallstreet.com"] [uri "/back/dump.sql"] [unique_id "aX7gvjbjqpinYUfZG7QYJAAAAFQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-29 10:02:17
(6 months ago)
(mod_security) mod_security (id:210730) triggered by 45.130.81.13 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 45.130.81.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 29 05:02:11.906144 2026] [security2:error] [pid 29944:tid 29944] [client 45.130.81.13:38417] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||bitcoinsquaretrader.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bitcoinsquaretrader.com"] [uri "/old/backup.sql"] [unique_id "aXswIw2R3d3ZidPFSoLFQAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-19 13:34:17
(7 months ago)
(mod_security) mod_security (id:210730) triggered by 45.130.81.13 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 45.130.81.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 19 08:34:13.829964 2026] [security2:error] [pid 18493:tid 18595] [client 45.130.81.13:40175] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||peapage.productions|F|2"] [data ".dat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "peapage.productions"] [uri "/old/wallet.dat"] [unique_id "aW4y1VPQkpaoip1chn8PDAAAARE"]
show less
Brute-Force
Bad Web Bot
Web App Attack