🇦🇺
oncord
2026-02-22 01:58:49
(3 months ago)
Form spam
Web Spam
🇦🇺
oncord
2026-02-19 14:15:10
(3 months ago)
Form spam
Web Spam
🇦🇺
oncord
2026-02-14 22:33:32
(3 months ago)
Form spam
Web Spam
🇦🇺
oncord
2026-02-11 07:02:01
(3 months ago)
Form spam
Web Spam
🇫🇷
Little Iguana
2026-01-31 13:06:41
(4 months ago)
Attempt to hack Wordpress Login, XMLRPC or other login
Hacking
🇺🇸
myagent.site
2026-01-20 21:45:01
(4 months ago)
Blocking for trying to access an exploit file: /.env
Hacking
🇫🇷
Little Iguana
2026-01-20 20:24:45
(4 months ago)
Attempt to hack Wordpress Login, XMLRPC or other login
Hacking
🇳🇱
i-turnradio.nl
2025-12-16 22:33:02
(5 months ago)
2025-12-16 @ 23:33:02 (CET) ~ Blocked based on risk assessment and prior abuse reports
Web App Attack
🇧🇪
voormedia
2025-12-10 21:57:51
(5 months ago)
Accessed trap at '/wp-login.php'
Web App Attack
🇫🇷
mrcrassi
2025-12-03 16:15:29
(6 months ago)
Triggered Cloudflare WAF (firewallCustom) from CA.
Action taken: BLOCK
Protocol: HTTP/1.1 (POST meth ...
show more
Triggered Cloudflare WAF (firewallCustom) from CA.
Action taken: BLOCK
Protocol: HTTP/1.1 (POST method)
Endpoint: /wp-login.php
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2025-12-02 18:38:16
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.46.128 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.46.128 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 13:38:10.787479 2025] [security2:error] [pid 8920:tid 8920] [client 45.3.46.128:49615] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mindbodyrestored.com"] [uri "/.svn/wc.db"] [unique_id "aS8yEuwaFqDnrk3Ry1OWxQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 15:38:10
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.46.128 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.46.128 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 10:38:06.253676 2025] [security2:error] [pid 14161:tid 14161] [client 45.3.46.128:30433] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mesaparaseis.com"] [uri "/.git/HEAD"] [unique_id "aS8H3mkGxO9zyRM7_F1KgAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 14:40:52
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.46.128 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.46.128 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 09:40:44.484232 2025] [security2:error] [pid 1299:tid 1299] [client 45.3.46.128:55847] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aquanauticsige.com"] [uri "/.env"] [unique_id "aS76bOV4e1ugyBgG5OexqQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
kumiko
2025-12-02 11:06:53
(6 months ago)
[2025-12-02 13:06:52] Probing for dotfiles
"GET /.svn/wc.db HTTP/1.1" 301
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 10:05:38
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.46.128 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.46.128 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 05:05:30.631284 2025] [security2:error] [pid 424358:tid 424448] [client 45.3.46.128:28369] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "abundancebible.com"] [uri "/.svn/wc.db"] [unique_id "aS656vp__Pmf5kEIOQBpswAAAQA"]
show less
Brute-Force
Bad Web Bot
Web App Attack