🇱🇻
garmtech.com
2026-03-09 20:36:39
(3 months ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 22-36.45.3.38.222.web-spammers ...
show more
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 22-36.45.3.38.222.web-spammers.v2.rbl.imunify.com._v4 succeeded.
show less
Web App Attack
🇩🇪
HandyTreff.de
2026-03-05 21:05:07
(3 months ago)
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -33.261 (Bad < -10 / Very Bad < -20 ...
show more
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -33.261 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:114.0) Gecko/20100101 Firefox/114.0
show less
Web App Attack
Bad Web Bot
🇦🇺
oncord
2026-03-05 19:26:18
(3 months ago)
Form spam
Web Spam
🇦🇺
MAGIC
2026-01-19 03:07:18
(4 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇺🇸
nowyouknow
2025-12-28 17:58:48
(5 months ago)
(From [email protected] ) Hello,
My name is Charlotte Douglas, and I re ...
show more
(From [email protected] ) Hello,
My name is Charlotte Douglas, and I represent Coastal Electric Services. We are currently evaluating potential partners for an upcoming opportunity and would like to confirm the following:
• Your availability to support new projects in Q1 2026
• Your interest in receiving additional project details
Once we have confirmed both availability and interest, we will provide the project scope and further information.
Thank you for your time. We look forward to hearing from you.
Best regards,
Charlotte Douglas
Project Executive
show less
Phishing
Web Spam
🇫🇷
dynamix
2025-12-25 14:25:01
(5 months ago)
Multiple WAF Violations
Web App Attack
🇮🇹
VHosting
2025-12-16 15:45:03
(5 months ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇱🇻
garmtech.com
2025-12-07 13:55:39
(6 months ago)
IM360 WAF: Attempt to upload malware
Hacking
🇫🇮
as211431.net
2025-12-03 02:15:41
(6 months ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /administrator
UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇳🇱
homeshowdomain.nl
2025-11-24 23:03:54
(6 months ago)
Auto-ban: >3000 req/min op 2025-11-24
Hacking
Web App Attack
SSH
🇺🇸
TPI-Abuse
2025-11-24 07:24:26
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.38.222 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.38.222 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:22:52.038310 2025] [security2:error] [pid 32425:tid 32425] [client 45.3.38.222:25593] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.daterapebooks.com"] [uri "/.env"] [unique_id "aSQHzGUmmWghNSzcxmPwNgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 06:02:42
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.38.222 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.38.222 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:02:34.730532 2025] [security2:error] [pid 23915:tid 23915] [client 45.3.38.222:33721] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.wardellbrown.com"] [uri "/.env"] [unique_id "aSP0-qh2WnK8TysreFsdbAAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 04:14:48
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.38.222 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.38.222 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:14:35.782385 2025] [security2:error] [pid 6295:tid 6295] [client 45.3.38.222:37839] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.dogandponyband.com"] [uri "/.git/HEAD"] [unique_id "aSPbq5SsPxPYCyjRMjQ6nQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 03:46:49
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.38.222 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.38.222 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 22:46:35.595581 2025] [security2:error] [pid 5445:tid 5445] [client 45.3.38.222:9481] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.soviaenterprises.com"] [uri "/.git/HEAD"] [unique_id "aSPVG2fshfetTj44YaII9gAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇷
hostseries
2025-10-25 05:48:25
(7 months ago)
Trigger: LF_DISTATTACK
Brute-Force