🇧🇪
madeit
2026-09-26 07:48:24
(2 weeks ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-08-19 02:40:09
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 162.158.79.7 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.79.7 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 18 22:40:01.938322 2026] [security2:error] [pid 15251:tid 15251] [client 162.158.79.7:12306] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.fixmywellwater.com"] [uri "/.git/HEAD"] [unique_id "aoUXga2AKQ64JeSZcgHmoAAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-17 23:45:03
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 162.158.79.7 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.79.7 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 19:44:54.826576 2026] [security2:error] [pid 9796:tid 9796] [client 162.158.79.7:11426] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.sailingcharterburma.com"] [uri "/.git/HEAD"] [unique_id "aoOc9tln2kjG1kYPQiiwiQAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-17 23:12:27
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 162.158.79.7 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.79.7 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 19:12:19.756530 2026] [security2:error] [pid 12493:tid 12493] [client 162.158.79.7:11578] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.canonarizona.com"] [uri "/.git/HEAD"] [unique_id "aoOVU-IhUpqyb8BMr1B_ewAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-17 10:30:07
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 162.158.79.7 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.79.7 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 06:30:01.218624 2026] [security2:error] [pid 16177:tid 16177] [client 162.158.79.7:14142] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.ladymfashion.com"] [uri "/.git/HEAD"] [unique_id "aoLiqQFstABjIViBidBaGgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-08-09 12:35:42
(2 months ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-05-15 09:18:07
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.79.7 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.79.7 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 05:17:42.835149 2026] [security2:error] [pid 7534:tid 7534] [client 162.158.79.7:9246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "shelbynash.com"] [uri "/.env.php"] [unique_id "agbkth3XhkoiIgWxbigiigAAAEM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
el-brujo
2025-09-24 05:04:59
(1 year ago)
24/Sep/2025:07:04:58.802536 +0200Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client ...
show more
24/Sep/2025:07:04:58.802536 +0200Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 162.158.79.7] ModSecurity: Warning. Pattern match "(?:(?:\\\\\\\\(|\\\\\\\\[)[a-zA-Z0-9_.$\\\\"'\\\\\\\\[\\\\\\\\](){}/*\\\\\\\\s]+(?:\\\\\\\\)|\\\\\\\\])[0-9_.$\\\\"'\\\\\\\\[\\\\\\\\](){}/*\\\\\\\\s]*\\\\\\\\([a-zA-Z0-9_.$\\\\"'\\\\\\\\[\\\\\\\\](){}/*\\\\\\\\s].*\\\\\\\\)|\\\\\\\\([\\\\\\\\s]*string[\\\\\\\\s]*\\\\\\\\)[\\\\\\\\s]*(?:\\\\"|'))" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "503"] [id "933210"] [msg "PHP Injection Attack: Variable Function Call Found"] [data "Matched Data: (Ingles) (Articulo) found within REQUEST_FILENAME: /manuales/Hacking y Seguridad informatica/29. Modern Era Hacking (Ingles) (Articulo) autor Dr Amarendra K, Venkata Naresh Mandhala and SaiSri Damecharla.pdf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "
...
show less
Hacking
Web App Attack
🇪🇸
el-brujo
2025-08-27 15:02:21
(1 year ago)
27/Aug/2025:17:02:21.124793 +0200Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client ...
show more
27/Aug/2025:17:02:21.124793 +0200Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 162.158.79.7] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1056"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".inc"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "el-hacker.org"] [uri "/manuales/Lenguajes de Progra
...
show less
Hacking
Web App Attack
🇪🇸
el-brujo
2025-08-21 04:53:45
(1 year ago)
21/Aug/2025:06:53:44.922931 +0200Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client ...
show more
21/Aug/2025:06:53:44.922931 +0200Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 162.158.79.7] ModSecurity: Warning. Pattern match "(?:(?:\\\\\\\\(|\\\\\\\\[)[a-zA-Z0-9_.$\\\\"'\\\\\\\\[\\\\\\\\](){}/*\\\\\\\\s]+(?:\\\\\\\\)|\\\\\\\\])[0-9_.$\\\\"'\\\\\\\\[\\\\\\\\](){}/*\\\\\\\\s]*\\\\\\\\([a-zA-Z0-9_.$\\\\"'\\\\\\\\[\\\\\\\\](){}/*\\\\\\\\s].*\\\\\\\\)|\\\\\\\\([\\\\\\\\s]*string[\\\\\\\\s]*\\\\\\\\)[\\\\\\\\s]*(?:\\\\"|'))" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "503"] [id "933210"] [msg "PHP Injection Attack: Variable Function Call Found"] [data "Matched Data: (Ingles) (Articulo) found within REQUEST_FILENAME: /manuales/Hacking y Seguridad informatica/29. Modern Era Hacking (Ingles) (Articulo) autor Dr Amarendra K, Venkata Naresh Mandhala and SaiSri Damecharla.pdf"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "
...
show less
Hacking
Web App Attack
🇮🇪
eyesilyurt
2025-08-14 00:24:03
(1 year ago)
p- login authenticator failed Incorrect authentication data
Brute-Force
SSH
🇺🇸
creations.works
2025-08-12 19:25:33
(1 year ago)
Blocked by UFW on vds [80/tcp]
Source port: 20144
TTL: 57
Packet length: 60
TOS: 0x00
This report w ...
show more
Blocked by UFW on vds [80/tcp]
Source port: 20144
TTL: 57
Packet length: 60
TOS: 0x00
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
Web App Attack
🇺🇸
creations.works
2025-08-10 21:18:34
(1 year ago)
Blocked by UFW on vds [80/tcp]
Source port: 53288
TTL: 58
Packet length: 60
TOS: 0x00
This report w ...
show more
Blocked by UFW on vds [80/tcp]
Source port: 53288
TTL: 58
Packet length: 60
TOS: 0x00
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
Web App Attack
🇺🇸
creations.works
2025-07-31 14:03:14
(1 year ago)
Blocked by UFW on vds [80/tcp]
Source port: 45494
TTL: 58
Packet length: 60
TOS: 0x00
This report w ...
show more
Blocked by UFW on vds [80/tcp]
Source port: 45494
TTL: 58
Packet length: 60
TOS: 0x00
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
Web App Attack
🇩🇪
Séfora Srl
2025-06-27 11:02:41
(1 year ago)
Bad user agents ignoring web crawling rules. Draing bandwidth - detected by Fail2Ban in plesk-apache ...
show more
Bad user agents ignoring web crawling rules. Draing bandwidth - detected by Fail2Ban in plesk-apache-badbot jail
show less
Bad Web Bot
