🇫🇷
Sklurk
2026-07-31 02:46:54
(3 weeks ago)
Web App Attack
Web App Attack
🇫🇷
Sklurk
2026-07-30 01:26:31
(3 weeks ago)
Web App Attack
Web App Attack
🇪🇸
librebit
2026-07-16 04:02:12
(1 month ago)
Brute force
Brute-Force
🇺🇸
lostswordfish.com
2026-05-31 10:28:04
(2 months ago)
Wordfence waf block on jestrellafoundation
Web App Attack
🇨🇴
ingentar
2026-05-29 17:51:27
(2 months ago)
2026-05-29T12:50:03.181642-05:00 web wordpress(ingentar.com)[698602]: Blocked authentication attempt ...
show more
2026-05-29T12:50:03.181642-05:00 web wordpress(ingentar.com)[698602]: Blocked authentication attempt for root from 45.3.32.81
...
show less
Web App Attack
Brute-Force
🇫🇷
mrcrassi
2026-05-28 23:57:48
(2 months ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
Protocol: HTTP/1.1 (POST meth ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
Protocol: HTTP/1.1 (POST method)
Endpoint: /wp-login.php
UA: Mozilla/5.0 (X11; Linux x86_64; rv:118.0) Gecko/20100101 Firefox/118.0
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
lostswordfish.com
2026-05-23 13:46:03
(3 months ago)
Wordfence waf block on parsol
Web App Attack
🇳🇱
Site.eu
2026-03-19 21:05:28
(5 months ago)
Excessive 404/403 errors
Brute-Force
🇦🇺
oncord
2026-03-04 01:17:51
(5 months ago)
Form spam
Web Spam
🇱🇻
garmtech.com
2026-02-16 11:24:29
(6 months ago)
IM360 WAF: Attempt to upload malware
Hacking
🇺🇸
myagent.site
2026-02-15 11:16:29
(6 months ago)
Blocking for trying to access an exploit file: /test/.git/config
Hacking
🇺🇸
TPI-Abuse
2026-02-14 23:34:46
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.32.81 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.32.81 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 18:34:39.166645 2026] [security2:error] [pid 961918:tid 961918] [client 45.3.32.81:62869] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lmv.us"] [uri "/api/.env"] [unique_id "aZEGj-9l_M7EtYzitFYLlQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-14 23:00:27
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.32.81 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.32.81 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 18:00:21.302363 2026] [security2:error] [pid 31018:tid 31044] [client 45.3.32.81:50413] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lisabee.net"] [uri "/api/.env"] [unique_id "aZD-hVgJ4XndBVAcAYIaAgAAARg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-14 22:41:30
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.32.81 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.32.81 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 17:41:23.251532 2026] [security2:error] [pid 31045:tid 31045] [client 45.3.32.81:29203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "limbertree.com"] [uri "/frontend/.env"] [unique_id "aZD6E52dnaF7UxpuhXv8mwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇩
Burayot
2026-02-14 21:38:10
(6 months ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 45.3.32.81 (US/United States/-): 1 ...
show more
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 45.3.32.81 (US/United States/-): 1 in the last 3600 secs
show less
Web App Attack