2026-07-29 07:00:00
(1 month ago)
Apache probe; attempts=23; exact paths: /xmlrpc.php
Web App Attack
🇫🇷
Sklurk
2026-06-20 03:31:29
(2 months ago)
Web App Attack
Web App Attack
🇩🇰
donkzquixote
2026-04-21 21:19:00
(4 months ago)
Form submission spam detected
Web Spam
🇱🇻
garmtech.com
2026-03-27 00:16:39
(5 months ago)
IM360 WAF: Laravel .env file access
Web App Attack
🇦🇺
RedBear IT
2026-03-26 10:00:37
(5 months ago)
"DDoS against public endpoint"
DDoS Attack
🇨🇿
lp
2026-03-07 17:54:03
(6 months ago)
Unauthorized VPN login attempts: 2 attempts were recorded from 45.3.62.36
2026-03-07T18:32:27+01:00 ...
show more
Unauthorized VPN login attempts: 2 attempts were recorded from 45.3.62.36
2026-03-07T18:32:27+01:00 vpn Access-Reject '[email protected] ' station: 45.3.62.36 auth-type: - realm: DEFAULT nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-03-07T18:32:27+01:00 vpn Access-Reject 'xcutp00' station: 45.3.62.36 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇦🇺
oncord
2026-01-12 00:58:10
(8 months ago)
Form spam
Web Spam
🇬🇧
relianoid.com
2026-01-09 11:58:55
(8 months ago)
POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com
Web Spam
🇵🇱
sefinek.net
2025-12-22 00:07:11
(8 months ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /genshin-stella-mod
UA: Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/89.0.4447.51
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇪🇸
10dencehispahard SL
2025-12-03 07:38:12
(9 months ago)
Wordpress probing for vulnerabilities
Hacking
Exploited Host
2025-12-03 04:04:17
(9 months ago)
botnet
DDoS Attack
🇺🇸
TPI-Abuse
2025-11-25 07:24:26
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.62.36 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.62.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 02:24:21.684265 2025] [security2:error] [pid 20752:tid 20752] [client 45.3.62.36:17233] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.edgecombe.net"] [uri "/.git/HEAD"] [unique_id "aSVZpavnp9NlMdPcBIGsuAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 06:58:51
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.62.36 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.62.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:58:47.161810 2025] [security2:error] [pid 10632:tid 10632] [client 45.3.62.36:9927] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cemesur-vision21.com"] [uri "/.svn/wc.db"] [unique_id "aSVTp8DZRicV5mH82xtBTgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 06:23:46
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.62.36 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.62.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:23:37.316751 2025] [security2:error] [pid 4573:tid 4573] [client 45.3.62.36:40009] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "files.lmffl.com"] [uri "/.svn/wc.db"] [unique_id "aSVLaVV24E_6WCncP4GN6AAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 03:09:27
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.62.36 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.62.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:09:20.856681 2025] [security2:error] [pid 32548:tid 32548] [client 45.3.62.36:56999] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.mdhi-etq-mail.com"] [uri "/.env"] [unique_id "aSUd4Ee5QlUQ304kEgIjigAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
