🇪🇸
el-brujo
2026-05-16 09:51:43
(1 month ago)
Cloudflare WAF: Request Path: /registros-dns.html Request Query: ?domain=jaguarvein88.bravejournal.n ...
show more
Cloudflare WAF: Request Path: /registros-dns.html Request Query: ?domain=jaguarvein88.bravejournal.net Host: elhacker.net userAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Action: managed_challenge Source: firewallCustom ASN Description: Cogent Communications, LLC Country: US Method: GET Timestamp: 2026-05-16T09:51:43Z ruleId: 0d02bf0901634311802a66d604909a6a. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB).
show less
Hacking
SQL Injection
Web App Attack
🇬🇧
consul.to
2026-03-22 18:56:07
(2 months ago)
Web attack/malicious scanning detected
Web App Attack
🇦🇪
abusiveIntelligence
2025-12-16 23:20:00
(6 months ago)
SSH Authentication Brute Force Attempt
Brute-Force
🇫🇷
sprmario
2025-09-11 17:45:08
(9 months ago)
Domain : muhammetmustafagunaltin.com
Rule : env
2025-09-08 12:26:53 192.168.1.68 GET /.env - 443 - 1 ...
show more
Domain : muhammetmustafagunaltin.com
Rule : env
2025-09-08 12:26:53 192.168.1.68 GET /.env - 443 - 172.68.3.121 HTTP/2 Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0 - muhammetmustafagunaltin.com 403 0 0 0 415 351 - 181.41.206.230
show less
Hacking
SQL Injection
🇩🇪
Vegascosmetics
2025-09-09 21:51:01
(9 months ago)
Kingcopy(AI-IDS): IP is wandering around the site and acting suspiciously.
Bad Web Bot
2025-09-09 16:31:13
(9 months ago)
Failed login attempt detected by Fail2Ban in recidive jail
Brute-Force
🇺🇸
dtorrer
2025-09-09 14:12:52
(9 months ago)
General vulnerability scan.
Port Scan
🇳🇱
BlueWire Hosting
2025-09-09 14:10:12
(9 months ago)
Scanning for Laravel vulnerabilities
Web App Attack
🇫🇷
MatStef132
2025-09-09 13:32:02
(9 months ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: CHALLENGE
Protocol: HTTP/1.1 (GET m ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0
show less
Bad Web Bot
🇩🇪
conseilgouz
2025-09-09 13:14:16
(9 months ago)
ave-17 : Block hidden directories=>/.env(/)
Hacking
🇬🇧
Aetherweb Ark
2025-09-09 12:45:52
(9 months ago)
(mod_security) mod_security (id:949110) triggered by 181.41.206.230 (US/United States/-): N in the l ...
show more
(mod_security) mod_security (id:949110) triggered by 181.41.206.230 (US/United States/-): N in the last X secs
show less
Web App Attack
🇧🇪
taivas.nl
2025-09-09 12:02:12
(9 months ago)
Site scraper
Web App Attack
🇺🇸
TPI-Abuse
2025-09-09 11:03:32
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 181.41.206.230 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 181.41.206.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 09 07:03:29.023639 2025] [security2:error] [pid 23021:tid 23021] [client 181.41.206.230:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "a.hvacs-aircon.com"] [uri "/.env"] [unique_id "aMAJgRpjOcfETFZxKLxeMAAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-09-09 10:27:39
(9 months ago)
Infected user bad webscan
Exploited Host
🇺🇸
TPI-Abuse
2025-09-09 10:26:17
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 181.41.206.230 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 181.41.206.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 09 06:26:11.936872 2025] [security2:error] [pid 32025:tid 32025] [client 181.41.206.230:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "saltybluemexico.com"] [uri "/.env"] [unique_id "aMAAw20SZk-gtZb-9KNANwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack