🇪🇸
librebit
2026-09-13 10:14:53
(2 hours ago)
Brute force
Brute-Force
🇸🇪
OnTheEdge
2026-09-03 18:18:54
(1 week ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
🇸🇪
OnTheEdge
2026-09-03 02:31:55
(1 week ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
🇧🇪
voormedia
2026-08-15 07:27:28
(4 weeks ago)
Accessed trap at '/wp-login.php'
Web App Attack
🇫🇷
IRISIO
2026-07-27 07:12:00
(1 month ago)
scans/SQL injection/spam posts : 2 queries
Web App Attack
SQL Injection
🇨🇴
adalbertoreyes.org
2026-07-10 21:27:36
(2 months ago)
CategoryPortScan
Port Scan
🇺🇸
webgobe
2026-07-10 07:32:40
(2 months ago)
wew-Joomla User : try to access forms...
Hacking
🇩🇪
Bedios GmbH
2026-07-08 07:38:52
(2 months ago)
Wordpress hacking attempt
Web App Attack
🇫🇷
Sklurk
2026-07-07 17:29:07
(2 months ago)
Web App Attack
Web App Attack
🇫🇷
Sklurk
2026-06-23 05:42:52
(2 months ago)
Web App Attack
Web App Attack
🇵🇱
sefinek.net
2026-06-10 18:34:01
(3 months ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action: BLOCK | Protocol: HTTP/1.1 (GET) | Endpoi ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action: BLOCK | Protocol: HTTP/1.1 (GET) | Endpoint: /.env | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2025-12-31 02:26:26
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.36.25 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.36.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 30 21:26:17.132602 2025] [security2:error] [pid 21050:tid 21050] [client 45.3.36.25:50267] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.osmanhc.com"] [uri "/.env"] [unique_id "aVSJyaDKny7kCPCxF1_hCwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-30 12:22:35
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.36.25 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.36.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 30 07:21:57.969263 2025] [security2:error] [pid 12946:tid 12946] [client 45.3.36.25:10585] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.trafficstopper.com"] [uri "/.env"] [unique_id "aVPD5Vp5j9J7HmgUhhYIGQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-29 09:21:34
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.36.25 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.36.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 04:21:25.061529 2025] [security2:error] [pid 1452511:tid 1452511] [client 45.3.36.25:60439] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rivercityacct.com"] [uri "/.env"] [unique_id "aVJIFfHXuCUFcKEh0oXIXwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-29 08:04:14
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.36.25 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.36.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 03:04:09.458835 2025] [security2:error] [pid 16991:tid 16991] [client 45.3.36.25:34851] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ridorsa.com"] [uri "/.git/HEAD"] [unique_id "aVI1-dxzIygcygzoba2wEgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
