🇫🇷
Sklurk
2026-06-16 03:13:30
(1 day ago)
Web App Attack
Web App Attack
🇩🇪
Lino Project
2026-06-15 19:22:15
(1 day ago)
45.3.42.1 - - [15/Jun/2026:21:22:14 +0200] "GET /wp-admin/post-new.php HTTP/1.1" 403 6488 "https://w ...
show more
45.3.42.1 - - [15/Jun/2026:21:22:14 +0200] "GET /wp-admin/post-new.php HTTP/1.1" 403 6488 "https://www.primobio.it/mio-account/?action=register" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
as211431.net
2026-06-02 12:56:23
(2 weeks ago)
Triggered Cloudflare WAF (firewallCustom) from DE.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show more
Triggered Cloudflare WAF (firewallCustom) from DE.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /index.php
UA: Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇧🇷
hostseries
2026-02-23 18:32:31
(3 months ago)
Trigger: LF_DISTATTACK
Brute-Force
2026-01-05 20:21:28
(5 months ago)
Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.05 is noted in report tim ...
show more
Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.05 is noted in report timestamp
show less
Hacking
Brute-Force
🇺🇸
COMPLEX
2025-12-14 23:07:46
(6 months ago)
Triggered Cloudflare WAF (l7ddos) from DE.
Action taken: BLOCK
ASN: 200373 (DREI-K-TECH-GMBH)
Protoc ...
show more
Triggered Cloudflare WAF (l7ddos) from DE.
Action taken: BLOCK
ASN: 200373 (DREI-K-TECH-GMBH)
Protocol: HTTP/2 (GET method)
Endpoint: /
show less
DDoS Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2025-11-25 06:27:02
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.42.1 (-): 1 in the last 300 secs; Ports: * ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.42.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:26:59.258983 2025] [security2:error] [pid 13755:tid 13807] [client 45.3.42.1:33637] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.wheezer.org"] [uri "/.git/HEAD"] [unique_id "aSVMM_PKifHcHLquJ66NTQAAARM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 04:38:54
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.42.1 (-): 1 in the last 300 secs; Ports: * ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.42.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:38:47.967027 2025] [security2:error] [pid 26451:tid 26451] [client 45.3.42.1:20491] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.endriss.info"] [uri "/.svn/wc.db"] [unique_id "aSUy19SsZmv7p-1atPpF1wAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 04:09:16
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.42.1 (-): 1 in the last 300 secs; Ports: * ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.42.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:08:59.611949 2025] [security2:error] [pid 9868:tid 9868] [client 45.3.42.1:52827] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.knowbuddy.org"] [uri "/.git/HEAD"] [unique_id "aSUr22MQyA1jbyP4T_ubHQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 03:39:43
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.42.1 (-): 1 in the last 300 secs; Ports: * ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.42.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:39:39.821396 2025] [security2:error] [pid 741810:tid 741810] [client 45.3.42.1:54395] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.interculturaldimensions.org"] [uri "/.env"] [unique_id "aSUk-5aP_n_h3EezCftdMQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 01:13:52
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.42.1 (-): 1 in the last 300 secs; Ports: * ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.42.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 20:13:44.260406 2025] [security2:error] [pid 29316:tid 29316] [client 45.3.42.1:35701] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.clearlakelots.com"] [uri "/.env"] [unique_id "aSUCyFtuNoAVqAaJioOF5AAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 00:09:18
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.42.1 (-): 1 in the last 300 secs; Ports: * ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.42.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 19:09:11.133603 2025] [security2:error] [pid 19224:tid 19224] [client 45.3.42.1:58173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aangfl.com"] [uri "/.svn/wc.db"] [unique_id "aSTzp1iAZ2K_f2lHGbN-jwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 09:52:34
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.42.1 (-): 1 in the last 300 secs; Ports: * ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.42.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:52:25.825287 2025] [security2:error] [pid 25105:tid 25124] [client 45.3.42.1:37057] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "boxwoodgarden.com"] [uri "/.env"] [unique_id "aSQq2cn5O4wpUvSPLAul-QAAAEY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 06:41:55
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.42.1 (-): 1 in the last 300 secs; Ports: * ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.42.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:41:49.769881 2025] [security2:error] [pid 24601:tid 24601] [client 45.3.42.1:19407] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.sonoranwaterworks.com"] [uri "/.svn/wc.db"] [unique_id "aSP-LXq8RMvYxndhS7yJ3QAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 03:24:55
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.42.1 (-): 1 in the last 300 secs; Ports: * ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.42.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 22:24:39.003218 2025] [security2:error] [pid 15071:tid 15071] [client 45.3.42.1:9929] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.kathrynsaunders.com"] [uri "/.git/HEAD"] [unique_id "aSPP98NUWa83uEMeZ1bHoAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack