๐ง๐ช
madeit
2026-09-18 21:46:02
(2 days ago)
Web App Attack
๐ณ๐ฑ
homeshowdomain.nl
2026-09-10 22:02:05
(1 week ago)
Auto-ban: >3000 req/min op 2026-09-10
Web App Attack
SSH
Hacking
๐ธ๐ฌ
securejdprop
2026-09-06 16:42:37
(2 weeks ago)
This IP was detected by CrowdSec triggering custom/vpatch-bad-cloudflare.
Hacking
๐บ๐ธ
TPI-Abuse
2026-08-18 01:58:07
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 162.158.189.114 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.189.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 21:58:02.510922 2026] [security2:error] [pid 8032:tid 8032] [client 162.158.189.114:10733] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.elianabeam.com"] [uri "/.git/HEAD"] [unique_id "aoO8KuLKwUz9raS1IQj4sgAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ฟ
Prcek
2026-08-17 08:49:17
(1 month ago)
PortScan:HOST=162.158.189.114,DPORTS=443
Port Scan
๐บ๐ธ
TPI-Abuse
2026-08-17 08:03:22
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 162.158.189.114 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.189.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 04:03:16.588907 2026] [security2:error] [pid 3911:tid 3911] [client 162.158.189.114:14242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.markgebhard.net"] [uri "/.git/HEAD"] [unique_id "aoLARCF2rVphxPyt_odEtgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ง๐ช
madeit
2026-08-17 05:38:29
(1 month ago)
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-17 03:49:05
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 162.158.189.114 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.189.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 16 23:49:00.500343 2026] [security2:error] [pid 29649:tid 29649] [client 162.158.189.114:10023] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.masterfulenlighteningfreestudies.org"] [uri "/.git/config"] [unique_id "aoKErKZOseqfVlAAH7YxugAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-07-29 10:44:58
(1 month ago)
Web App Attack
Brute-Force
Exploited Host
Web App Attack
๐ซ๐ฎ
as211431.net
2026-06-22 07:16:24
(2 months ago)
Triggered Cloudflare WAF (linkMaze) from SG.
Action taken: LINK_MAZE_INJECTED
Protocol: HTTP/1.1 (GE ...
show more
Triggered Cloudflare WAF (linkMaze) from SG.
Action taken: LINK_MAZE_INJECTED
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐ฎ๐ช
eyesilyurt
2026-06-14 23:42:38
(3 months ago)
p- login authenticator failed Incorrect authentication data
Brute-Force
SSH
๐บ๐ธ
mawan
2026-04-21 21:37:31
(4 months ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
๐ฉ๐ช
Blexyel
2025-12-25 07:45:11
(8 months ago)
162.158.189.114 - - [25/Dec/2025:07:45:07 +0000] "GET /wp-login.php HTTP/1.1" 451 33 "-" "Mozilla/5. ...
show more
162.158.189.114 - - [25/Dec/2025:07:45:07 +0000] "GET /wp-login.php HTTP/1.1" 451 33 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5_1) AppleWebKit/605.1.15 Safari/605.1.15"
...
show less
Brute-Force
Web App Attack
Anonymous
2025-12-01 17:03:21
(9 months ago)
[Mon Dec 01 18:03:19.393716 2025] [authz_core:error] [pid 18818] [client 162.158.189.114:12125] AH01 ...
show more
[Mon Dec 01 18:03:19.393716 2025] [authz_core:error] [pid 18818] [client 162.158.189.114:12125] AH01630: client denied by server configuration: /etc/httpd/htdocs, referer: https://www.bing.com/
[Mon Dec 01 18:03:19.737102 2025] [authz_core:error] [pid 18818] [client 162.158.189.114:12125] AH01630: client denied by server configuration: /etc/httpd/htdocs, referer: https://www.google.fr/
[Mon Dec 01 18:03:20.080060 2025] [authz_core:error] [pid 18818] [client 162.158.189.114:12125] AH01630: client denied by server configuration: /etc/httpd/htdocs, referer: https://www.google.co.uk/
...
show less
Web App Attack
๐จ๐ณ
ThreatBook.io
2025-09-03 22:12:36
(1 year ago)
2025-09-03 17:18:02 /ar.php
2025-09-03 17:18:03 /abcd.php
2025-09-03 17:18:05 /error.php
2025-09-03 ...
show more
2025-09-03 17:18:02 /ar.php
2025-09-03 17:18:03 /abcd.php
2025-09-03 17:18:05 /error.php
2025-09-03 17:18:02 /lock360.php
2025-09-03 17:18:04 /new.php
2025-09-03 17:18:04 /ol.php
show less
Web App Attack