๐ฉ๐ช
acadeova
2026-07-27 07:27:57
(2 days ago)
๐จ Recon detected (nft drop)
SRC=162.158.108.148
Observed=TCP dpt=80 in=enp0s6 ttl=56
Time=recent(jou ...
show more
๐จ Recon detected (nft drop)
SRC=162.158.108.148
Observed=TCP dpt=80 in=enp0s6 ttl=56
Time=recent(journalctl: 10 minutes ago)
Assessment=Generic scanning / reconnaissance (PORT_SCAN)
show less
Port Scan
Anonymous
2026-07-25 19:45:22
(4 days ago)
[Sat Jul 25 21:45:19.659023 2026] [authz_core:error] [pid 20853] [client 162.158.108.148:9401] AH016 ...
show more
[Sat Jul 25 21:45:19.659023 2026] [authz_core:error] [pid 20853] [client 162.158.108.148:9401] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Sat Jul 25 21:45:20.754951 2026] [authz_core:error] [pid 20853] [client 162.158.108.148:9401] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Sat Jul 25 21:45:21.116469 2026] [authz_core:error] [pid 20853] [client 162.158.108.148:9401] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
Anonymous
2026-07-23 08:44:04
(6 days ago)
[Thu Jul 23 10:44:02.617395 2026] [authz_core:error] [pid 32435] [client 162.158.108.148:9976] AH016 ...
show more
[Thu Jul 23 10:44:02.617395 2026] [authz_core:error] [pid 32435] [client 162.158.108.148:9976] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Thu Jul 23 10:44:02.803415 2026] [authz_core:error] [pid 32435] [client 162.158.108.148:9976] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Thu Jul 23 10:44:04.182603 2026] [authz_core:error] [pid 32435] [client 162.158.108.148:9976] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
Anonymous
2026-07-19 22:41:43
(1 week ago)
[Mon Jul 20 00:41:40.984425 2026] [authz_core:error] [pid 4234] [client 162.158.108.148:10279] AH016 ...
show more
[Mon Jul 20 00:41:40.984425 2026] [authz_core:error] [pid 4234] [client 162.158.108.148:10279] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Mon Jul 20 00:41:41.365850 2026] [authz_core:error] [pid 4234] [client 162.158.108.148:10279] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Mon Jul 20 00:41:42.103728 2026] [authz_core:error] [pid 4234] [client 162.158.108.148:10279] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
Anonymous
2026-07-16 16:38:51
(1 week ago)
[Thu Jul 16 18:38:49.380897 2026] [authz_core:error] [pid 20228] [client 162.158.108.148:11687] AH01 ...
show more
[Thu Jul 16 18:38:49.380897 2026] [authz_core:error] [pid 20228] [client 162.158.108.148:11687] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Thu Jul 16 18:38:50.336553 2026] [authz_core:error] [pid 20228] [client 162.158.108.148:11687] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Thu Jul 16 18:38:50.846686 2026] [authz_core:error] [pid 20228] [client 162.158.108.148:11687] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
Anonymous
2026-07-14 20:35:50
(2 weeks ago)
[Tue Jul 14 22:35:48.694892 2026] [authz_core:error] [pid 7871] [client 162.158.108.148:10623] AH016 ...
show more
[Tue Jul 14 22:35:48.694892 2026] [authz_core:error] [pid 7871] [client 162.158.108.148:10623] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Tue Jul 14 22:35:49.603074 2026] [authz_core:error] [pid 7871] [client 162.158.108.148:10623] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Tue Jul 14 22:35:50.034996 2026] [authz_core:error] [pid 7871] [client 162.158.108.148:10623] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
๐ฌ๐ง
pinguin
2026-07-07 21:55:18
(3 weeks ago)
Triggered Cloudflare WAF (firewallManaged) from SG.
Action taken: LOG
Protocol: HTTP/2 (GET method)
...
show more
Triggered Cloudflare WAF (firewallManaged) from SG.
Action taken: LOG
Protocol: HTTP/2 (GET method)
Endpoint: /aa.php
UA: Empty string
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐บ๐ธ
mawan
2026-07-06 09:09:26
(3 weeks ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
Anonymous
2026-05-30 13:17:26
(1 month ago)
[Sat May 30 15:17:23.496745 2026] [authz_core:error] [pid 27464] [client 162.158.108.148:11560] AH01 ...
show more
[Sat May 30 15:17:23.496745 2026] [authz_core:error] [pid 27464] [client 162.158.108.148:11560] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Sat May 30 15:17:25.042339 2026] [authz_core:error] [pid 27464] [client 162.158.108.148:11560] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Sat May 30 15:17:25.495003 2026] [authz_core:error] [pid 27464] [client 162.158.108.148:11560] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
Anonymous
2026-05-29 21:29:21
(2 months ago)
[Fri May 29 23:29:18.962915 2026] [authz_core:error] [pid 6681] [client 162.158.108.148:13406] AH016 ...
show more
[Fri May 29 23:29:18.962915 2026] [authz_core:error] [pid 6681] [client 162.158.108.148:13406] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Fri May 29 23:29:19.663427 2026] [authz_core:error] [pid 6681] [client 162.158.108.148:13406] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Fri May 29 23:29:20.019299 2026] [authz_core:error] [pid 6681] [client 162.158.108.148:13406] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
Anonymous
2026-05-28 08:53:14
(2 months ago)
[Thu May 28 10:53:12.685556 2026] [authz_core:error] [pid 9777] [client 162.158.108.148:13537] AH016 ...
show more
[Thu May 28 10:53:12.685556 2026] [authz_core:error] [pid 9777] [client 162.158.108.148:13537] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Thu May 28 10:53:13.314026 2026] [authz_core:error] [pid 9777] [client 162.158.108.148:13537] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Thu May 28 10:53:13.736986 2026] [authz_core:error] [pid 9777] [client 162.158.108.148:13537] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
Anonymous
2026-05-27 08:26:28
(2 months ago)
[Wed May 27 10:26:27.455526 2026] [authz_core:error] [pid 16878] [client 162.158.108.148:11092] AH01 ...
show more
[Wed May 27 10:26:27.455526 2026] [authz_core:error] [pid 16878] [client 162.158.108.148:11092] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Wed May 27 10:26:27.999718 2026] [authz_core:error] [pid 16878] [client 162.158.108.148:11092] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Wed May 27 10:26:28.363398 2026] [authz_core:error] [pid 16878] [client 162.158.108.148:11092] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
๐ฏ๐ต
S.O.B.A. Dev.
2026-05-14 19:21:29
(2 months ago)
Persistent port scanning or vulnerability scanning
Port Scan
๐ณ๐ฑ
homeshowdomain.nl
2026-05-10 22:03:27
(2 months ago)
Auto-ban: >3000 req/min op 2026-05-10
Web App Attack
SSH
Hacking
๐บ๐ธ
TPI-Abuse
2026-05-08 02:56:20
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.108.148 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.108.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 07 22:56:05.635595 2026] [security2:error] [pid 28642:tid 28642] [client 162.158.108.148:13336] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.1729grove.steambalancing.com"] [uri "/.env.bak"] [unique_id "af1QxR8dpsymtxNLsY-clQAAACE"], referer: https://www.google.com/search?q=www.1729grove.steambalancing.com
show less
Brute-Force
Bad Web Bot
Web App Attack