🇨🇭
backslash
2026-07-11 03:27:00
(3 days ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇫🇷
mrcrassi
2026-07-05 20:04:20
(1 week ago)
Triggered Cloudflare WAF (firewallCustom) from DE.
Action taken: BLOCK
Protocol: HTTP/2 (POST method ...
show more
Triggered Cloudflare WAF (firewallCustom) from DE.
Action taken: BLOCK
Protocol: HTTP/2 (POST method)
Endpoint: /wp-login.php
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
2025-12-16 03:39:24
(6 months ago)
2025-12-16T05:39:24.242673+02:00 zanati wp(www.sahpa.co.za)[1159864]: Blocked authentication attempt ...
show more
2025-12-16T05:39:24.242673+02:00 zanati wp(www.sahpa.co.za)[1159864]: Blocked authentication attempt for [email protected] from 45.3.55.156
...
show less
Web App Attack
2025-12-09 16:05:00
(7 months ago)
Ports: 2077,2078,2082,2083,2086,2087,2095,2096; Direction: 0; Trigger: LF_DISTATTACK
Brute-Force
SSH
🇬🇧
D3monite
2025-12-07 20:48:17
(7 months ago)
Attempted Brute Force (cpaneld)
Brute-Force
🇺🇸
TPI-Abuse
2025-11-26 10:41:59
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.55.156 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.55.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 05:41:51.627543 2025] [security2:error] [pid 24438:tid 24438] [client 45.3.55.156:22611] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.truecontrarian.royal-barbershop.com"] [uri "/.env"] [unique_id "aSbZb8A37bTU5QfVAEpL4QAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 08:48:10
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.55.156 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.55.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 03:48:01.367819 2025] [security2:error] [pid 25581:tid 25581] [client 45.3.55.156:19431] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.daviddenotaris.com"] [uri "/.git/HEAD"] [unique_id "aSa-weZmaf5bNPzqIsPXbwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 06:28:32
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.55.156 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.55.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 01:28:25.040388 2025] [security2:error] [pid 9082:tid 9082] [client 45.3.55.156:9919] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.shannonmatter.com"] [uri "/.svn/wc.db"] [unique_id "aSaeCQLoJVjsUCwgvCIL5AAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 06:10:14
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.55.156 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.55.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 01:10:06.370355 2025] [security2:error] [pid 26060:tid 26060] [client 45.3.55.156:13461] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.joepeters.org"] [uri "/.git/HEAD"] [unique_id "aSaZvuitxw73gnK-4rsV-gAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 07:00:23
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.55.156 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.55.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 02:00:09.603433 2025] [security2:error] [pid 15490:tid 15490] [client 45.3.55.156:40939] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fadcometal.com"] [uri "/.git/HEAD"] [unique_id "aSVT-dfW6atL8s_7DruwNQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 03:50:13
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.55.156 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.55.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:49:48.145858 2025] [security2:error] [pid 4231:tid 4231] [client 45.3.55.156:56607] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "digitalservices.xyz"] [uri "/.env"] [unique_id "aSUnXJkO6hilWLTWHPGsdQAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 08:49:23
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.55.156 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.55.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:49:18.127213 2025] [security2:error] [pid 31341:tid 31341] [client 45.3.55.156:9461] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.jeromesupick.com"] [uri "/.svn/wc.db"] [unique_id "aSQcDseUTlUlNMM7HxqpAwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
10dencehispahard SL
2025-11-19 08:34:57
(7 months ago)
WP probing for vulnerabilities
Hacking
Exploited Host
🇩🇪
Ad Ministrator
2025-10-21 02:36:21
(8 months ago)
RdpGuard detected brute-force attempt on RD-WEB
Brute-Force
🇩🇪
Ad Ministrator
2025-10-17 10:28:19
(8 months ago)
RdpGuard detected brute-force attempt on RD-WEB
Brute-Force