🇳🇱
homeshowdomain.nl
2025-12-08 22:59:45
(9 months ago)
Auto-ban: 14 malicious requests on 2025-12-07 (e.g., env/backup probes, brute-force, or error bursts ...
show more
Auto-ban: 14 malicious requests on 2025-12-07 (e.g., env/backup probes, brute-force, or error bursts).
show less
Hacking
Web App Attack
SSH
2025-12-07 22:00:13
(9 months ago)
/kickstart.php trap
Port Scan
Hacking
Web App Attack
🇺🇸
mnsf
2025-12-07 21:05:17
(9 months ago)
Request Overload (104)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-12-07 19:07:13
(9 months ago)
(mod_security) mod_security (id:210730) triggered by 2002:90ac:6b7c::90ac:6b7c (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:210730) triggered by 2002:90ac:6b7c::90ac:6b7c (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 14:07:08.678101 2025] [security2:error] [pid 28382:tid 28382] [client 2002:90ac:6b7c::90ac:6b7c:58973] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||new-bethel-baptist-church.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "new-bethel-baptist-church.com"] [uri "/home/tancedi1/new-bethel-baptist-church.com"] [unique_id "aTXQXCm6PQDqNvnZlSKEAQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
KitsuneTech
2025-12-07 18:41:53
(9 months ago)
144.172.107.124 - - [07/Dec/2025:12:41:52 -0600] "GET /wp/wp-admin/install.php HTTP/1.1" 301 255 "-" ...
show more
144.172.107.124 - - [07/Dec/2025:12:41:52 -0600] "GET /wp/wp-admin/install.php HTTP/1.1" 301 255 "-" "Python-urllib/2.7"
...
show less
Web App Attack
2025-12-07 17:30:58
(9 months ago)
wordpress-trap
Web App Attack
🇬🇧
pinguin
2025-12-07 11:51:05
(9 months ago)
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: LOG
Protocol: HTTP/1.1 (GET method ...
show more
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: LOG
Protocol: HTTP/1.1 (GET method)
Endpoint: /installer.php
UA: Python-urllib/2.7
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
cassidycamp.work
2025-12-07 03:26:58
(9 months ago)
Requested /(?:[a-z0-9]{1,12})\.(?:php|phtml)$
Web App Attack
🇺🇸
TPI-Abuse
2025-12-07 00:57:52
(9 months ago)
(mod_security) mod_security (id:210730) triggered by 144.172.107.124 (124.107.172.144.static.cloudzy ...
show more
(mod_security) mod_security (id:210730) triggered by 144.172.107.124 (124.107.172.144.static.cloudzy.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 06 19:57:45.645479 2025] [security2:error] [pid 7486:tid 7486] [client 144.172.107.124:61582] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||new-bethel-baptist-church.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "new-bethel-baptist-church.com"] [uri "/home/tancedi1/new-bethel-baptist-church.com"] [unique_id "aTTRCZM0ciVRUYzZ_8mE8QAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
myagent.site
2025-12-07 00:09:14
(9 months ago)
Blocking for trying to access an exploit file: /installer.php
Hacking