🇦🇺
MAGIC
2026-06-24 04:07:06
(3 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇷🇺
DZBOT
2026-06-02 01:25:31
(4 months ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇩🇪
FeG Deutschland
2026-05-28 08:36:07
(4 months ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 27
Exploited Host
Web App Attack
🇫🇷
masterguru
2026-05-28 08:23:09
(4 months ago)
SQL Injection Attack Detected via libinjection. detected SQLi using libinjection with fingerprint 'n ...
show more
SQL Injection Attack Detected via libinjection. detected SQLi using libinjection with fingerprint 'n&1' (942100-195)
show less
SQL Injection
2026-04-30 15:00:19
(5 months ago)
Malicious activity detected
Hacking
Web App Attack
🇦🇺
MAGIC
2026-04-05 03:18:30
(6 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇺🇸
lostswordfish.com
2026-03-31 12:32:03
(6 months ago)
Wordfence waf block on fairregistry
Web App Attack
🇺🇸
cybsecaoccol
2026-03-28 02:10:02
(6 months ago)
Brute Force SASL Attack
Hacking
Brute-Force
Web App Attack
🇺🇸
threatintelligence_bvc
2026-03-28 00:51:46
(6 months ago)
Brute-Force
🇪🇸
10dencehispahard SL
2026-03-22 02:00:34
(6 months ago)
Unauthorized login attempts [ accesslogs]
Brute-Force
🇬🇧
pinguin
2026-03-15 13:06:35
(6 months ago)
Triggered Cloudflare WAF (firewallManaged) from UA.
Action taken: LOG
Protocol: HTTP/1.1 (GET method ...
show more
Triggered Cloudflare WAF (firewallManaged) from UA.
Action taken: LOG
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Empty string
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-03-05 00:34:42
(7 months ago)
(mod_security) mod_security (id:210730) triggered by 45.130.81.19 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 45.130.81.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 04 19:34:36.593933 2026] [security2:error] [pid 16895:tid 16895] [client 45.130.81.19:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||kryptonome.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "kryptonome.com"] [uri "/restore/sql.sql"] [unique_id "aajPnBLM5th0F6i7PIcjNgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-25 23:53:50
(7 months ago)
(mod_security) mod_security (id:210730) triggered by 45.130.81.19 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 45.130.81.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 25 18:53:45.206702 2026] [security2:error] [pid 3485:tid 3485] [client 45.130.81.19:38455] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||lusocleaningservice.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "lusocleaningservice.com"] [uri "/backup/backup.sql"] [unique_id "aZ-LiSHz-kvnvomWQ2mUGwAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
polycoda
2026-02-23 14:23:42
(7 months ago)
AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based) - 📊 Admin Panel Scanning (Decay-Based) - ❌ Exce ...
show more
AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based) - 📊 Admin Panel Scanning (Decay-Based) - ❌ Excessive 40X Errors (Decay-Based)
show less
Hacking
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-12 00:04:31
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 45.130.81.19 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 45.130.81.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 19:04:23.086428 2026] [security2:error] [pid 27981:tid 27981] [client 45.130.81.19:61611] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hodlmoser.com"] [uri "/back/sftp-config.json"] [unique_id "aY0ZBzQ8qc0hnJoyfE1S7gAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack