๐ฉ๐ช
big-cloud.nl
2026-08-22 18:07:47
(2 days ago)
Try to access /xmlrpc.php
Web App Attack
๐ฎ๐น
VHosting
2026-08-22 17:50:09
(2 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
๐ซ๐ท
Sklurk
2026-08-03 02:00:36
(3 weeks ago)
Web App Attack
Web App Attack
๐ซ๐ท
Sklurk
2026-07-29 00:41:25
(3 weeks ago)
Web App Attack
Web App Attack
๐บ๐ธ
cwytech
2026-07-05 11:11:41
(1 month ago)
Fleet-wide ban from the Ghostfleet ๐ป. Triggered by scenario: cwy/wp-us-login-only-high.
Bad Web Bot
Web App Attack
๐จ๐ญ
jebla.ch
2026-06-29 11:12:42
(1 month ago)
Busted by the WatchPost edge sentinel: this host was probing web-app endpoints for a way in. Blocked ...
show more
Busted by the WatchPost edge sentinel: this host was probing web-app endpoints for a way in. Blocked at the edge, logged, and shared with the community. Last seen 2026-06-29 11:12 UTC.
show less
Web App Attack
๐บ๐ธ
lostswordfish.com
2026-06-24 16:36:03
(2 months ago)
Wordfence waf block on 1105merrystreet
Web App Attack
๐จ๐ด
ingentar
2026-06-24 13:41:00
(2 months ago)
2026-06-24T08:40:28.661286-05:00 web wordpress(industriasgenio.co)[2385729]: Blocked authentication ...
show more
2026-06-24T08:40:28.661286-05:00 web wordpress(industriasgenio.co)[2385729]: Blocked authentication attempt for root from 45.3.46.106
...
show less
Web App Attack
Brute-Force
๐บ๐ธ
oncord
2026-02-16 06:31:20
(6 months ago)
Form spam
Web Spam
๐บ๐ธ
TPI-Abuse
2026-02-12 05:15:43
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.46.106 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.46.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 00:15:36.298383 2026] [security2:error] [pid 8473:tid 8473] [client 45.3.46.106:9543] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "artisticaphotography.com"] [uri "/.env"] [unique_id "aY1h-PSuDqrc8pYhWP4RgAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-02-12 00:20:24
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.46.106 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.46.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 19:20:14.254095 2026] [security2:error] [pid 32216:tid 32216] [client 45.3.46.106:58001] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "armandselmwoodpark.com"] [uri "/wp/.git/config"] [unique_id "aY0cvvkuue1SON6HM9epXgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-02-10 04:38:35
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.46.106 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.46.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 23:38:30.465428 2026] [security2:error] [pid 5633:tid 5633] [client 45.3.46.106:55513] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "idahostem.org"] [uri "/.env.production"] [unique_id "aYq2RjGf1MNFXeGmusmDJwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-02-10 00:47:39
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.46.106 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.46.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 19:47:34.020263 2026] [security2:error] [pid 22172:tid 22172] [client 45.3.46.106:12213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "keyspring-niseko.com"] [uri "/.env"] [unique_id "aYqAJlEGa9SjoKUgogDRcwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-02-09 23:42:54
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.46.106 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.46.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 18:42:45.626151 2026] [security2:error] [pid 22428:tid 22428] [client 45.3.46.106:21769] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kelticdreamsranch.com"] [uri "/app/.env"] [unique_id "aYpw9RkIh3Zz3TRc-1Jy8gAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ต๐ฑ
sefinek.net
2025-12-22 19:59:03
(8 months ago)
Triggered Cloudflare WAF (firewallCustom) from CA.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show more
Triggered Cloudflare WAF (firewallCustom) from CA.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /genshin-stella-mod
UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot