🇫🇷
masterguru
2026-11-15 21:16:46
UTC ·
(2 hours ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-201)
Hacking
Web App Attack
🇳🇱
e.fierstra
2026-11-15 05:16:20
UTC ·
(18 hours ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇩🇪
Nevermind
2026-11-13 21:59:31
UTC ·
(2 days ago)
161.120.223.9 - - [13/Nov/2026:22:59:30 +0100] "GET /.git/config HTTP/1.1" 403 6234 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
161.120.223.9 - - [13/Nov/2026:22:59:30 +0100] " ...
show more
161.120.223.9 - - [13/Nov/2026:22:59:30 +0100] "GET /.git/config HTTP/1.1" 403 6234 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
161.120.223.9 - - [13/Nov/2026:22:59:30 +0100] "GET /.env HTTP/1.1" 403 6234 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
161.120.223.9 - - [13/Nov/2026:22:59:31 +0100] "GET /.env.local HTTP/1.1" 403 6234 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
161.120.223.9 - - [13/Nov/2026:22:59:31 +0100] "GET /.env.production HTTP/1.1" 403 6234 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Web App Attack
Anonymous
2026-11-12 22:50:24
UTC ·
(3 days ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇬🇧
consul.to
2026-11-12 21:39:16
UTC ·
(3 days ago)
Web attack/malicious scanning detected
Web App Attack
🇵🇱
MatStef132
2026-11-12 20:07:29
UTC ·
(3 days ago)
MatShield L7: blocked on a protected site (secret-path-probe)
DDoS Attack
Anonymous
2026-11-11 21:00:04
UTC ·
(4 days ago)
| [Dangerous/China] Aggressive IP 161.120.223.9 (~30 hits). Type: DoS Defender- Web server 400 error code
Web App Attack
Hacking
SQL Injection
🇨🇦
1gz
2026-11-10 12:53:52
UTC ·
(5 days ago)
Triggered Cloudflare WAF (firewallManaged) from DE.
Action taken: BLOCK
Protocol: HTTP/1.1 (POST method)
Endpoint: /
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
This report was ...
show more
Triggered Cloudflare WAF (firewallManaged) from DE.
Action taken: BLOCK
Protocol: HTTP/1.1 (POST method)
Endpoint: /
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇧🇪
cmbplf
2026-11-10 06:35:38
UTC ·
(5 days ago)
110 requests with url.path *.env
Brute-Force
Bad Web Bot
🇸🇪
vaia.cloud
2026-11-10 01:40:02
UTC ·
(5 days ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
🇳🇱
Alt255
2026-11-09 12:56:55
UTC ·
(6 days ago)
[ti-24al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 161.120.223.9 - - [09/Nov/2026:13:56:45 +0100] "GET /.git/config HTTP/1.1" 301 624 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebK ...
show more
[ti-24al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 161.120.223.9 - - [09/Nov/2026:13:56:45 +0100] "GET /.git/config HTTP/1.1" 301 624 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇩🇰
HostingGroup
2026-11-09 11:51:53
UTC ·
(6 days ago)
Automated malicious activity (Honeypot Trap) detected and blocked at the CDN edge by NordicCDN Shield. Offenses: 12. First blocked: 2026-11-09.
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-11-09 08:55:21
UTC ·
(6 days ago)
Web attack/malicious scanning detected
Web App Attack
🇳🇱
Alt255
2026-11-08 20:04:32
UTC ·
(1 week ago)
[ti-02ov] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 161.120.223.9 - - [08/Nov/2026:21:04:29 +0100] "GET /.git/config HTTP/1.1" 404 2162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Ap ...
show more
[ti-02ov] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 161.120.223.9 - - [08/Nov/2026:21:04:29 +0100] "GET /.git/config HTTP/1.1" 404 2162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
161.120.223.9 - - [08/Nov/2026:21:04:29 +0100] "GET /.env HTTP/1.1" 404 2162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
161.120.223.9 - - [08/Nov/2026:21:04:29 +0100] "GET /.env.local HTTP/1.1" 404 2162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
161.120.223.9 - - [08/Nov/2026:21:04:29 +0100] "GET /.env.production HTTP/1.1" 404 2162 "-" "Mozilla/5.0 (Windows NT 1
...
show less
Bad Web Bot
Web App Attack
🇮🇱
spd.co.il
2026-11-08 12:01:49
UTC ·
(1 week ago)
Web application attack detected
Hacking
Web App Attack