🇨🇭
4server
2026-04-08 01:15:17
(1 month ago)
[WedApr0803:15:13.0542532026][security2:error][pid3324648:tid3324662][client45.3.41.69:0]ModSecurity ...
show more
[WedApr0803:15:13.0542532026][security2:error][pid3324648:tid3324662][client45.3.41.69:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\[\?\(url\|link\)\?=\?\\\\\"\?\?https\?://.\*\\\\\\\\[\?\(url\|link\)\?=\?\\\\\"\?\?https\?://.\*\\\\\\\\[\?\(url\|link\)\?=\?\\\\\"\?\?https\?://.\*\\\\\\\\[\?\(url\|link\)\?=\?\\\\\"\?\?https\?:/\|\(\\\\\\\\[\?\(url\|link\)\?\\\\\\\\]https\?://.\*\\\\\\\\[\?/\?\(url\|link\)\?\\\\\\\\].\*\){4\,}\)\"atARGS:comments.[file\"/etc/apache2/conf.d/modsec_rules/30_asl_antispam.conf\"][line\"126\"][id\"300079\"][rev\"18\"][msg\"Atomicorp.comWAFAntiSpamRules:PossibleSpam:Multipleembeddedurlsinargument\(Disableifyouwishtoallow4ormoreURLsinapost\)\"][data\"2166foundwithinARGS:comments:[url=https://www.grepmed.com/comprar_anastrozol_en_linea]https://www.grepmed.com/comprar_anastrozol_en_linea[/url][url=https://www.grepmed.com/comprar_meclizine]https://www.grepmed.com/comprar_meclizine[/url][url=https://www.grepmed.com/clonidina_comprar]https://www.grepmed.com/clo
show less
Hacking
Web App Attack
🇩🇪
F242
2026-01-30 05:09:27
(4 months ago)
Wordpress Login or XMLRPC abuse
Web App Attack
🇺🇸
TPI-Abuse
2025-12-29 05:31:43
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.41.69 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.41.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 00:31:38.508793 2025] [security2:error] [pid 32557:tid 32557] [client 45.3.41.69:32731] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "avanyupublishing.com"] [uri "/.git/HEAD"] [unique_id "aVISOjnaSN11143mM7_gqQAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
sefinek.net
2025-12-12 10:52:03
(5 months ago)
Triggered Cloudflare WAF (firewallCustom) from CA.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show more
Triggered Cloudflare WAF (firewallCustom) from CA.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /genshin-stella-mod
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2025-12-10 14:52:11
(5 months ago)
"Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized ac ...
show more
"Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized access"
show less
DDoS Attack
SQL Injection
Exploited Host
🇺🇸
TPI-Abuse
2025-12-09 23:45:25
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.41.69 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.41.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 09 18:45:19.129418 2025] [security2:error] [pid 7053:tid 7053] [client 45.3.41.69:50049] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "coveyhillenterprises.com"] [uri "/.svn/wc.db"] [unique_id "aTi0j7kIFI8LXxqplpReeQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-09 20:56:22
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.41.69 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.41.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 09 15:56:15.645599 2025] [security2:error] [pid 15187:tid 15187] [client 45.3.41.69:43925] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ssl-grp.com"] [uri "/.git/HEAD"] [unique_id "aTiM7yFfgTD1H6hOkDPqlwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-06 19:15:58
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.41.69 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.41.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 06 14:15:50.314475 2025] [security2:error] [pid 29505:tid 29505] [client 45.3.41.69:36751] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "btsdigital.net"] [uri "/.env"] [unique_id "aTSA5uWgkH0Rhrn7XUjLZwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 21:14:27
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.41.69 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.41.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 16:14:20.582084 2025] [security2:error] [pid 4768:tid 4768] [client 45.3.41.69:57127] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "greed.ee"] [uri "/.svn/wc.db"] [unique_id "aTNLLBBWIJjy_c-p4EIAFQAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 11:34:59
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.41.69 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.41.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 06:34:54.587145 2025] [security2:error] [pid 8155:tid 8160] [client 45.3.41.69:26461] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "poeticdialogues.com"] [uri "/.svn/wc.db"] [unique_id "aTLDXnxqsRXvxcFMc1B5HwAAAIE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 10:58:33
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.41.69 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.41.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 05:58:26.683872 2025] [security2:error] [pid 17455:tid 17455] [client 45.3.41.69:24573] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dcsteven.com"] [uri "/.git/HEAD"] [unique_id "aTK60iytDnD-D5zQ6r02JQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 08:04:14
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.41.69 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.41.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 03:04:05.943674 2025] [security2:error] [pid 24541:tid 24541] [client 45.3.41.69:9615] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kmashburn.com"] [uri "/.git/HEAD"] [unique_id "aTKR9c5O-yum8ZTsmGV2IgAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 12:06:32
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.41.69 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.41.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 07:06:24.252018 2025] [security2:error] [pid 17256:tid 17256] [client 45.3.41.69:32273] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "redweddingnapkins.com"] [uri "/.svn/wc.db"] [unique_id "aS7WQIfPMi91nnQTvi2sbgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 05:20:33
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.41.69 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.41.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 00:20:26.613075 2025] [security2:error] [pid 7682:tid 7682] [client 45.3.41.69:10983] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "robcruickshank.com"] [uri "/.env"] [unique_id "aS53Gnmu0TbXncrPczAzmAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 04:33:54
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.41.69 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.41.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 01 23:33:51.724389 2025] [security2:error] [pid 22343:tid 22343] [client 45.3.41.69:14281] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "reciprodyne.com"] [uri "/.git/HEAD"] [unique_id "aS5sLz3eGa37HDcD9IGgsgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack