🇫🇮
as211431.net
2026-04-05 12:41:58
(2 months ago)
Triggered Cloudflare WAF (firewallCustom) from DE.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show more
Triggered Cloudflare WAF (firewallCustom) from DE.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /user/register/
UA: Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Vivaldi/5.3.2679.68
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇦🇺
RedBear IT
2026-03-26 10:00:37
(2 months ago)
"DDoS against public endpoint"
DDoS Attack
🇦🇺
oncord
2026-02-05 21:54:47
(4 months ago)
Form spam
Web Spam
🇦🇺
oncord
2026-02-01 01:06:40
(4 months ago)
Form spam
Web Spam
🇦🇺
oncord
2026-01-27 15:09:59
(4 months ago)
Form spam
Web Spam
2026-01-20 20:07:14
(4 months ago)
VELIEDE WEBFORM SPAM 45.3.42.235 (45.3.42.235)
Web Spam
🇨🇭
backslash
2026-01-16 14:45:07
(4 months ago)
block ruleset 6A1105329D233F6F53B9B61CE056BD4DAAE75AB4
Web Spam
🇬🇧
oncord
2026-01-04 13:44:32
(5 months ago)
Form spam
Web Spam
🇵🇱
IROK
2025-12-24 06:57:51
(5 months ago)
Malware/WebShell Scan blocked by ModSecurity
...
Hacking
🇺🇸
TPI-Abuse
2025-11-25 06:53:51
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.42.235 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.42.235 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:53:46.904330 2025] [security2:error] [pid 3772:tid 3772] [client 45.3.42.235:10993] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.simia.com"] [uri "/.git/HEAD"] [unique_id "aSVSeqxmsMW7kZ0TLR0ADwAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 04:19:48
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.42.235 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.42.235 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:19:43.911370 2025] [security2:error] [pid 32700:tid 32726] [client 45.3.42.235:33173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.rosendalsateri.com"] [uri "/.git/HEAD"] [unique_id "aSUuX7crjRrp2J9TXtynBwAAANc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 03:08:32
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.42.235 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.42.235 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:08:25.952980 2025] [security2:error] [pid 7488:tid 7488] [client 45.3.42.235:40773] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pelicancovecondo.com"] [uri "/.env"] [unique_id "aSUdqdjgQgSD2OqjsgHMsQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 02:19:50
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.42.235 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.42.235 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:19:43.883621 2025] [security2:error] [pid 664938:tid 664938] [client 45.3.42.235:22393] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.individualhealth.com"] [uri "/.svn/wc.db"] [unique_id "aSUSPzMvjnSOH6QCe5nHcQAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 01:57:20
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.42.235 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.42.235 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 20:57:17.318816 2025] [security2:error] [pid 11182:tid 11182] [client 45.3.42.235:20483] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.thepotteriesmesilla.com"] [uri "/.env"] [unique_id "aSUM_YD3-Ge0IP9_XApQxAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
MAGIC
2025-11-21 01:31:08
(6 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot