🇫🇷
Sklurk
2026-08-01 03:01:39
(3 weeks ago)
Web App Attack
Web App Attack
🇲🇽
octageeks.com
2026-06-18 04:23:39
(2 months ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇵🇱
sefinek.net
2026-01-24 17:14:28
(6 months ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/89.0.4447.51
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
2025-12-22 18:10:36
(8 months ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack
🇱🇻
garmtech.com
2025-12-14 03:52:56
(8 months ago)
IM360 WAF: Old style account creation and modification in Joomla! MV:registration
Web App Attack
🇵🇱
sefinek.net
2025-12-06 11:45:16
(8 months ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 12.5; rv:114.0) Gecko/20100101 Firefox/114.0
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2025-12-03 04:41:01
(8 months ago)
(mod_security) mod_security (id:210740) triggered by 45.3.62.51 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210740) triggered by 45.3.62.51 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 23:40:56.448638 2025] [security2:error] [pid 7150:tid 7173] [client 45.3.62.51:41221] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||vtweaversguild.org|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "vtweaversguild.org"] [uri "/jax_guestbook.php"] [unique_id "aS-_WN0TcU9gkzjkLBws_wAAARM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 21:00:57
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.62.51 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.62.51 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 16:00:54.215354 2025] [security2:error] [pid 29993:tid 29993] [client 45.3.62.51:55935] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "twccsolutions.com"] [uri "/.git/HEAD"] [unique_id "aSdqhkBn9fnReKrFUozELgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 06:36:01
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.62.51 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.62.51 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:35:45.506444 2025] [security2:error] [pid 2836:tid 2836] [client 45.3.62.51:36319] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.yanchuk.org"] [uri "/.env"] [unique_id "aSVOQa1Wu0c_L00LSDYFzQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 05:31:48
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.62.51 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.62.51 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 00:31:45.505856 2025] [security2:error] [pid 22897:tid 22897] [client 45.3.62.51:11243] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "efhgtc.org"] [uri "/.svn/wc.db"] [unique_id "aSU_QSo3bQCI-66NyexnOwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 01:27:48
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.62.51 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.62.51 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 20:27:40.204336 2025] [security2:error] [pid 18365:tid 18365] [client 45.3.62.51:38371] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "companysympathycards.com"] [uri "/.env"] [unique_id "aSUGDBoePQLnZcLE4wzgBwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 09:59:09
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.62.51 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.62.51 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:59:00.082798 2025] [security2:error] [pid 243844:tid 243893] [client 45.3.62.51:18461] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.certificationwiki.com"] [uri "/.svn/wc.db"] [unique_id "aSQsZDXOrmUtG4L3PF5iVgAAANM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 08:39:26
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.62.51 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.62.51 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:39:21.196468 2025] [security2:error] [pid 17251:tid 17251] [client 45.3.62.51:19715] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "beechleafdesign.com"] [uri "/.env"] [unique_id "aSQZuelm0qjRsRhueQ92aQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-17 04:51:49
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.62.51 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.62.51 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 16 23:51:43.762614 2025] [security2:error] [pid 3450:tid 3450] [client 45.3.62.51:44681] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.sagebrush.us"] [uri "/.env"] [unique_id "aRqp31ueDrw75KI-9nc86QAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-11-14 07:28:33
(9 months ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack