|
🇸🇬
volcaryx
|
|
Cloudflare detected an L7 DDoS attack (l7ddos) from US.
Action: BLOCK | Protocol: HTTP/2 (GET) | End ...
show more
Cloudflare detected an L7 DDoS attack (l7ddos) from US.
Action: BLOCK | Protocol: HTTP/2 (GET) | Endpoint: / | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
|
DDoS Attack
Bad Web Bot
|
|
|
🇨🇦
leithzz
|
|
Report by Cloudflare.Time: 2026-05-25T11:49:46Z
|
DDoS Attack
|
|
|
🇫🇷
MatStef132
|
|
MatShield L7: blocked on mathost.eu (ua-quarantined)
|
Bad Web Bot
|
|
|
🇳🇱
MatStef132
|
|
MatShield L7: blocked on dstat.selify.io (ua-quarantined)
|
Bad Web Bot
|
|
|
🇫🇷
MatStef132
|
|
[mathost.eu] ua-q
|
DDoS Attack
Bad Web Bot
Web App Attack
|
|
|
🇪🇸
el-brujo
|
|
Cloudflare WAF: Request Path: /123456 Request Query: ?utm_content=8OSij2It-dzFL-Xh72-ntKM2wkaTbXD Ho ...
show more
Cloudflare WAF: Request Path: /123456 Request Query: ?utm_content=8OSij2It-dzFL-Xh72-ntKM2wkaTbXD Host: elhacker.net userAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.130 Safari/537.36 Action: block Source: ratelimit ASN Description: 3xK Tech GmbH Country: US Method: GET Timestamp: 2026-04-28T15:44:20Z ruleId: 11a71ad4659e48b29b5173e3bcc61b4a. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB).
show less
|
Hacking
SQL Injection
Web App Attack
|
|
|
🇸🇬
pusathosting.com
|
|
24ds22 bruteforce
|
Brute-Force
Web App Attack
|
|
|
🇦🇺
MAGIC
|
|
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
|
DDoS Attack
Bad Web Bot
|
|
|
🇳🇱
homeshowdomain.nl
|
|
Auto-ban: >3000 req/min op 2026-01-17
|
Hacking
Web App Attack
SSH
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 45.3.32.53 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.32.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 16 22:30:42.248975 2026] [security2:error] [pid 13784:tid 13784] [client 45.3.32.53:21069] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.graftandcorruption.net"] [uri "/.env"] [unique_id "aWsCYmmDRN48eyW0fpFJ-wAAAA4"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 45.3.32.53 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.32.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 04:41:54.145165 2025] [security2:error] [pid 10282:tid 10282] [client 45.3.32.53:10955] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.forwarders.com"] [uri "/.git/HEAD"] [unique_id "aSbLYuG_yZ348TVM-rblKgAAAAE"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 45.3.32.53 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.32.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 02:41:26.172341 2025] [security2:error] [pid 13551:tid 13551] [client 45.3.32.53:37735] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.blountmuseum.org"] [uri "/.git/HEAD"] [unique_id "aSVdpqEXIve7bmnZRz6iDwAAAAs"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 45.3.32.53 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.32.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 02:02:07.060031 2025] [security2:error] [pid 31748:tid 31748] [client 45.3.32.53:51089] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.puckerbottombikinis.com"] [uri "/.git/HEAD"] [unique_id "aSVUb1X2AxwzAdJRK3ToTwAAAAE"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇱🇻
garmtech.com
|
|
Attempted access to sensitive endpoint (/.env) detected. Automated scan or unauthorized probing.
|
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 45.3.32.53 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.32.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:01:53.226977 2025] [security2:error] [pid 22587:tid 22587] [client 45.3.32.53:22653] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.mainstreetofficesuites.com"] [uri "/.svn/wc.db"] [unique_id "aSVGUbv0WwFbeqfjJATjwAAAAC0"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|