🇫🇷
ELYAZ
2026-06-12 02:37:14
(1 day ago)
(y4) Failed scan -byebye- from 45.3.44.220 (ES/Spain/-): (CF_ENABLE)
Hacking
🇫🇷
Octopuce
2026-03-24 00:49:57
(2 months ago)
Aggressive web search of vulnerable pages: /thread.php?lng=fr%27&pg=66&cat=9&id=0 /thread.php?lng=%2 ...
show more
Aggressive web search of vulnerable pages: /thread.php?lng=fr%27&pg=66&cat=9&id=0 /thread.php?lng=%27&pg=66&cat=9&id=0 /thread.php?lng=fr%22&pg ...
show less
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 15:46:29
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.44.220 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.44.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 10:46:23.511494 2025] [security2:error] [pid 21324:tid 21324] [client 45.3.44.220:13969] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "eaglesnestbandb.com"] [uri "/.git/HEAD"] [unique_id "aS8JzzMi6uGPSRK0yEogWgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 07:10:08
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.44.220 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.44.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 02:10:03.025742 2025] [security2:error] [pid 31217:tid 31217] [client 45.3.44.220:50875] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "diveshop-pr.com"] [uri "/.svn/wc.db"] [unique_id "aS6QywfMIk4a251crLBnFwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 03:56:16
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.44.220 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.44.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 01 22:56:11.598628 2025] [security2:error] [pid 20407:tid 20407] [client 45.3.44.220:48617] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arabou.co"] [uri "/.git/HEAD"] [unique_id "aS5jW9JBN5JiuPl3r9FBBwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 09:20:57
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.44.220 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.44.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:20:52.514228 2025] [security2:error] [pid 18220:tid 18220] [client 45.3.44.220:32209] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.unitedwestandent.org"] [uri "/.env"] [unique_id "aSQjdILZsiAspRIVETe-HwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 08:27:23
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.44.220 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.44.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:27:17.430301 2025] [security2:error] [pid 32653:tid 32653] [client 45.3.44.220:14227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.albertawaterjet.com"] [uri "/.env"] [unique_id "aSQW5VsSRLpKaBIh8DtB3wAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 06:01:56
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.44.220 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.44.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:01:42.466862 2025] [security2:error] [pid 4896:tid 4896] [client 45.3.44.220:15859] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.bitcointoolfair.com"] [uri "/.svn/wc.db"] [unique_id "aSP0xrskLUternmR6UIkpQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 04:31:37
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.44.220 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.44.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:31:33.218610 2025] [security2:error] [pid 3965260:tid 3965373] [client 45.3.44.220:30433] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.otemaetk.kylight.com"] [uri "/.svn/wc.db"] [unique_id "aSPfpayiyKH59MCrZuEPOgAAAhU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
sefinek.net
2025-11-08 14:43:46
(7 months ago)
Triggered Cloudflare WAF (firewallCustom) from DE.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show more
Triggered Cloudflare WAF (firewallCustom) from DE.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Xbox; Xbox One) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Edge/44.18363.8131
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
2025-11-02 17:17:02
(7 months ago)
This IP was involved in an brute force and password spray attack on 2025/11/02 06:50:06
Port Scan
Brute-Force
Exploited Host
Web App Attack