🇩🇪
big-cloud.nl
2026-11-06 23:48:44
UTC ·
(5 hours ago)
Try to access /de-ideale-stookmix//.git/config
Web App Attack
🇳🇱
Site.eu
2026-11-06 22:56:48
UTC ·
(6 hours ago)
Scanning for secret files (.env, .git, credentials, config backups)
Bad Web Bot
Web App Attack
Anonymous
2026-11-06 22:26:41
UTC ·
(6 hours ago)
2026/11/06 22:26:39 [error] 3197032#3197032: *77223 [client 142.86.6.9] ModSecurity: Access denied with code 403 (phase 2). Matched "Operator `Ge' with parameter `5' against variable `TX:BLOCKING_INBOUND_ANOMALY_SCORE' (Value: `50' ) [file "/usr/loca ...
show more
2026/11/06 22:26:39 [error] 3197032#3197032: *77223 [client 142.86.6.9] ModSecurity: Access denied with code 403 (phase 2). Matched "Operator `Ge' with parameter `5' against variable `TX:BLOCKING_INBOUND_ANOMALY_SCORE' (Value: `50' ) [file "/usr/local/owasp-modsecurity-crs-4.11.0/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "222"] [id "949110"] [rev ""] [msg "Inbound Anomaly Score Exceeded (Total Score: 50)"] [data ""] [severity "0"] [ver "OWASP_CRS/4.30.0"] [maturity "0"] [accuracy "0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "idealcollegeonline.org"] [uri "/"] [unique_id "179400399983.777864"] [ref ""], client: 142.86.6.9, server: idealcollegeonline.org, request: "POST / HTTP/1.1", host: "idealcollegeonline.org"
2026/11/06 22:26:39 [error] 3197032#3197032: *77223 [client 142.86.6.9] ModSecurity: Access denied with code 403 (phase 2). Matched "Operator `Ge' with parameter `5' against variable `TX:BLOCKING_INBOUND_ANOMALY_SCORE' (Value: `50' ) [file "/usr/local/owasp-mod
...
show less
Brute-Force
🇺🇸
TPI-Abuse
2026-11-06 22:07:50
UTC ·
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 142.86.6.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 17:07:43.523262 2026] [security2:error] [pid 26032:tid 26042] [client 142.86.6.9:50414] ModSecu ...
show more
(mod_security) mod_security (id:210492) triggered by 142.86.6.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 17:07:43.523262 2026] [security2:error] [pid 26032:tid 26042] [client 142.86.6.9:50414] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "idealcentralvac.com"] [uri "/.git/config"] [unique_id "au5Pr1I-FIRwymxmFgYyUAAAAEg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
NewGastroline
2026-11-06 16:58:45
UTC ·
(12 hours ago)
Malicious request blocked by CrowdSec on gastro-prod1.boreus.de
Bad Web Bot
Web App Attack
🇸🇪
vaia.cloud
2026-11-06 12:05:01
UTC ·
(17 hours ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
🇿🇦
Megasurf
2026-11-06 11:43:24
UTC ·
(17 hours ago)
web application attack (blocked by the web application firewall). Blocked automatically by our firewall (LF_MODSEC).
Web App Attack
🇩🇪
Bedios GmbH
2026-11-06 04:44:24
UTC ·
(1 day ago)
Scanning for exposed credentials and private keys
Hacking
🇳🇱
homeshowdomain.nl
2026-11-05 22:59:31
UTC ·
(1 day ago)
Auto-ban: >3000 req/min op 2026-11-05
Web App Attack
SSH
Hacking
🇳🇱
Alt255
2026-11-05 20:58:42
UTC ·
(1 day ago)
[ti-22al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 142.86.6.9 - - [05/Nov/2026:21:58:25 +0100] "GET /.git/config HTTP/1.1" 404 2105 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, ...
show more
[ti-22al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 142.86.6.9 - - [05/Nov/2026:21:58:25 +0100] "GET /.git/config HTTP/1.1" 404 2105 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇫🇮
as211431.net
2026-11-05 17:52:14
UTC ·
(1 day ago)
Triggered Cloudflare WAF (firewallCustom) from CN.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /server-status.php
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safa ...
show more
Triggered Cloudflare WAF (firewallCustom) from CN.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /server-status.php
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
Anonymous
2026-11-05 17:02:15
UTC ·
(1 day ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇳🇱
Site.eu
2026-11-05 14:56:54
UTC ·
(1 day ago)
Scanning for secret files (.env, .git, credentials, config backups)
Bad Web Bot
Web App Attack
🇩🇪
33three
2026-11-05 14:01:01
UTC ·
(1 day ago)
Fail2Ban jail WebAttack triggered
Brute-Force
Anonymous
2026-11-05 11:00:16
UTC ·
(1 day ago)
| [Dangerous/China] Aggressive IP 142.86.6.9 (~30 hits). Type: DoS Defender- Web server 400 error code
Web App Attack
Hacking
SQL Injection