2026-08-25 02:00:28
(4 hours ago)
Auto-reported by Fail2Ban (NPM-Auth)
Web App Attack
🇺🇸
Presence
2026-08-24 23:38:25
(7 hours ago)
Bad bot, attempting to find exploits
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
1gz
2026-08-24 20:04:42
(10 hours ago)
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: BLOCK
Protocol: HTTP/1.1 (POST met ...
show more
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: BLOCK
Protocol: HTTP/1.1 (POST method)
Endpoint: /
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇨🇭
backslash
2026-08-24 20:03:03
(10 hours ago)
block ruleset WAF detection and high score on abuseIPDB 149EB1B42C242111FADBBC2EF8F90219570691E1
Bad Web Bot
🇩🇪
ut-addicted.com
2026-08-24 20:01:25
(10 hours ago)
\[Mon Aug 24 22:01:23.601192 2026\] \[:error\] \[pid 19274:tid 140352556078848\] \[client 165.22.35. ...
show more
\[Mon Aug 24 22:01:23.601192 2026\] \[:error\] \[pid 19274:tid 140352556078848\] \[client 165.22.35.3:31044\] \[client 165.22.35.3\] ModSecurity: Access denied with code 403 \(phase 2\). Operator GE matched 5 at TX:anomaly_score. \[file "/usr/local/apache/modsecurity-owasp-latest/rules/REQUEST-949-BLOCKING-EVALUATION.conf"\] \[line "57"\] \[id "949110"\] \[msg "Inbound Anomaly Score Exceeded \(Total Score: 5\)"\] \[severity "CRITICAL"\] \[tag "application-multi"\] \[tag "language-multi"\] \[tag "platform-multi"\] \[tag "attack-generic"\] \[hostname "www.ut-addicted.com"\] \[uri "/"\] \[unique_id "aoyjE9BPkMVnRtR4NfQz9QAAAMc"\], referer: https://www.ut-addicted.com/
show less
Brute-Force
Web App Attack
🇫🇷
masterguru
2026-08-24 19:49:02
(10 hours ago)
PHP Injection Attack: Variable Function Call Found. Pattern match "(?:(?:\\\\(|\\\\ (933210-135)
Hacking
🇺🇸
SX Communications
2026-08-24 19:48:57
(10 hours ago)
Blocked abusive HTTP application-layer DoS / botnet traffic from 165.22.35.3: traffic from this addr ...
show more
Blocked abusive HTTP application-layer DoS / botnet traffic from 165.22.35.3: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host.
show less
DDoS Attack
Bad Web Bot
Exploited Host
🇦🇺
Bay13
2026-08-24 19:35:17
(11 hours ago)
CrowdSec:custom/modsecurity
Web App Attack
🇫🇮
mnazibo
2026-08-24 19:00:04
(11 hours ago)
Date: 24/Aug/2026 21:41:22 | Reported IP: 165.22.35.3 mod_security | id: 200002 933160 934100 934130 ...
show more
Date: 24/Aug/2026 21:41:22 | Reported IP: 165.22.35.3 mod_security | id: 200002 933160 934100 934130 942550 | US/group.my_domain/- | Connections: 5 | Blocked: Permanent Block: [LF_MODSEC] | URIs: / | Logs: Failed to parse request body.; JavaScript Prototype Pollution; JSON-Based SQL Injection; Node.js Injection Attack 1/2; PHP Injection Attack: High-Risk PHP Function Call Found
show less
SQL Injection
Brute-Force
Bad Web Bot
🇩🇪
23p02732
2026-08-24 18:23:05
(12 hours ago)
Automated web scanning and malicious probing
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
ddw
2026-08-24 18:12:32
(12 hours ago)
ModSecurity detection - Rules: 949110(Inbound Anomaly Score Exceeded (Total Score: 60))
Web App Attack
🇫🇮
000rosiu
2026-08-24 18:05:22
(12 hours ago)
Triggered Cloudflare WAF (firewallManaged) from US.
Action: BLOCK | Protocol: HTTP/1.1 (POST) | Endp ...
show more
Triggered Cloudflare WAF (firewallManaged) from US.
Action: BLOCK | Protocol: HTTP/1.1 (POST) | Endpoint: / | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇩🇪
ut-addicted.com
2026-08-24 17:59:10
(12 hours ago)
\[Mon Aug 24 19:59:09.023352 2026\] \[:error\] \[pid 18667:tid 140352461670144\] \[client 165.22.35. ...
show more
\[Mon Aug 24 19:59:09.023352 2026\] \[:error\] \[pid 18667:tid 140352461670144\] \[client 165.22.35.3:8720\] \[client 165.22.35.3\] ModSecurity: Access denied with code 403 \(phase 2\). Operator GE matched 5 at TX:anomaly_score. \[file "/usr/local/apache/modsecurity-owasp-latest/rules/REQUEST-949-BLOCKING-EVALUATION.conf"\] \[line "57"\] \[id "949110"\] \[msg "Inbound Anomaly Score Exceeded \(Total Score: 5\)"\] \[severity "CRITICAL"\] \[tag "application-multi"\] \[tag "language-multi"\] \[tag "platform-multi"\] \[tag "attack-generic"\] \[hostname "ut-addicted.com"\] \[uri "/"\] \[unique_id "aoyGbPTmU0g6PNgU2Mal8gAAAJA"\], referer: https://ut-addicted.com/
show less
Brute-Force
Web App Attack
🇦🇹
Pingger Shikkoken
2026-08-24 17:30:09
(13 hours ago)
2026-08-24T17:30:09+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC ...
show more
2026-08-24T17:30:09+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=165.22.35.3 DST=10.1.1.2 LEN=64 TOS=0x00 PREC=0x00 TTL=51 ID=46691 DF PROTO=TCP SPT=64184 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0
show less
Hacking
Bad Web Bot
🇩🇪
YF
2026-08-24 17:00:12
(13 hours ago)
404 errors Vulnerability scan
Web App Attack