2026-06-06 20:17:41
(2 days ago)
Fuzzing/Looking for credentials files.
Brute-Force
Web App Attack
2026-06-06 19:22:04
(2 days ago)
automatically banned
Brute-Force
Web App Attack
🇩🇪
iNetWorker
2026-05-28 10:55:14
(1 week ago)
trolling for resource vulnerabilities
Web App Attack
2026-05-17 23:20:24
(3 weeks ago)
Banned by SPAMHAUS ASN-DROP list (ASN: 200373)
DDoS Attack
Hacking
Bad Web Bot
Web App Attack
🇪🇸
librebit
2026-05-17 08:15:18
(3 weeks ago)
Brute force
Brute-Force
🇦🇺
oncord
2025-12-31 11:18:43
(5 months ago)
Form spam
Web Spam
🇩🇪
HandyTreff.de
2025-12-23 05:46:01
(5 months ago)
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -17.154 (Bad < -10 / Very Bad < -20 ...
show more
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -17.154 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Sa
show less
Bad Web Bot
Web App Attack
🇵🇱
sefinek.net
2025-12-23 04:11:09
(5 months ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Edg/114.0.1264.71
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
2025-12-16 03:41:56
(5 months ago)
2025-12-16T05:41:56.015166+02:00 zanati wp(www.sahpa.co.za)[978041]: Blocked authentication attempt ...
show more
2025-12-16T05:41:56.015166+02:00 zanati wp(www.sahpa.co.za)[978041]: Blocked authentication attempt for [email protected] from 45.3.48.157
...
show less
Web App Attack
🇦🇺
MAGIC
2025-12-09 00:06:42
(6 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2025-12-02 22:10:21
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.48.157 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.48.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 17:10:14.957496 2025] [security2:error] [pid 5703:tid 5703] [client 45.3.48.157:45745] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "amyrussell.com"] [uri "/.git/HEAD"] [unique_id "aS9jxuPdX4efPP0KhFbmxQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 21:19:52
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.48.157 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.48.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 16:19:49.332993 2025] [security2:error] [pid 5770:tid 5770] [client 45.3.48.157:43149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ashotofcoffee.com"] [uri "/.git/HEAD"] [unique_id "aS9X9dON--NTZRDOIUbvWwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 19:33:14
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.48.157 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.48.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 14:33:10.192410 2025] [security2:error] [pid 18215:tid 18215] [client 45.3.48.157:17045] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ndezrojo.com"] [uri "/.svn/wc.db"] [unique_id "aS8-9oL9QivbLOjYSSUi1wAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 19:07:25
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.48.157 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.48.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 14:07:18.230395 2025] [security2:error] [pid 30005:tid 30005] [client 45.3.48.157:42621] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "todotex.com"] [uri "/.env"] [unique_id "aS845ii-bf3gtuxo6S7qUQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 08:03:28
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.48.157 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.48.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 03:03:24.785299 2025] [security2:error] [pid 11760:tid 11783] [client 45.3.48.157:58639] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mateo-abogados.com"] [uri "/.svn/wc.db"] [unique_id "aS6dTBRTHxJ9yOS6yRvaOgAAAM8"]
show less
Brute-Force
Bad Web Bot
Web App Attack