🇩🇪
Klompenzijncool
2026-11-08 21:18:41
UTC ·
(1 hour ago)
Web scanning/probing blocked by Fail2Ban.
Port Scan
Bad Web Bot
🇩🇪
Admins@FBN
2026-11-08 17:19:20
UTC ·
(5 hours ago)
FW-PortScan: Traffic Blocked srcport=54031 dstport=443
Port Scan
🇫🇮
as211431.net
2026-11-08 13:38:12
UTC ·
(9 hours ago)
Triggered Cloudflare WAF (firewallManaged) from RO.
Action taken: BLOCK
Protocol: HTTP/1.1 (POST method)
Endpoint: /
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
This report was ...
show more
Triggered Cloudflare WAF (firewallManaged) from RO.
Action taken: BLOCK
Protocol: HTTP/1.1 (POST method)
Endpoint: /
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
Anonymous
2026-11-08 13:18:11
UTC ·
(9 hours ago)
This IP was detected by CrowdSec triggering local/abuseipdb-watchlist
Port Scan
🇪🇸
Francisco Vallejo
2026-11-08 12:26:09
UTC ·
(10 hours ago)
[Sun Nov 08 13:26:07.973258 2026] [security2:error] [pid 3252920:tid 3252976] [client 193.32.162.221:49181] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST ...
show more
[Sun Nov 08 13:26:07.973258 2026] [security2:error] [pid 3252920:tid 3252976] [client 193.32.162.221:49181] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "barluna.es"] [uri "/"] [unique_id "avBqX6PfU_8PMamWo_hiEQAAAEo"]
[Sun Nov 08 13:26:09.245567 2026] [security2:error] [pid 3252919:tid 3252960] [client 193.32.162.221:49877] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.8"] [tag "a
...
show less
Brute-Force
SSH
🇬🇧
consul.to
2026-11-08 12:19:52
UTC ·
(10 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇫🇷
sthoyer.de
2026-11-08 04:42:00
UTC ·
(18 hours ago)
193.32.162.221 - - [08/Nov/2026:05:41:56 +0100] "POST /?rest_route=/batch/v1 HTTP/1.1" 200 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
193.32.162.221 - - [08/Nov/2026:05:41 ...
show more
193.32.162.221 - - [08/Nov/2026:05:41:56 +0100] "POST /?rest_route=/batch/v1 HTTP/1.1" 200 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
193.32.162.221 - - [08/Nov/2026:05:41:57 +0100] "POST /?rest_route=/batch/v1 HTTP/1.1" 200 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
193.32.162.221 - - [08/Nov/2026:05:41:59 +0100] "POST /?rest_route=/batch/v1 HTTP/1.1" 200 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Web App Attack
Anonymous
2026-11-08 01:42:20
UTC ·
(21 hours ago)
Web application attack detected.
Web App Attack
🇨🇿
ddw
2026-11-08 00:46:52
UTC ·
(22 hours ago)
ModSecurity detection - Rules: 949110(Inbound Anomaly Score Exceeded (Total Score: 15))
Web App Attack
Anonymous
2026-11-07 22:31:23
UTC ·
(1 day ago)
Fail2Ban: repeated malicious HTTP requests (path probing / exploit attempts) against a public web server.
Web App Attack
Bad Web Bot
Anonymous
2026-11-07 22:13:31
UTC ·
(1 day ago)
193.32.162.221 - sliver85.eu - [07/Nov/2026:23:13:28 +0100] "POST /?rest_route=/batch/v1 HTTP/1.1" 444 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
193.32.162.221 - sliver85.eu - [0 ...
show more
193.32.162.221 - sliver85.eu - [07/Nov/2026:23:13:28 +0100] "POST /?rest_route=/batch/v1 HTTP/1.1" 444 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
193.32.162.221 - sliver85.eu - [07/Nov/2026:23:13:29 +0100] "POST /?rest_route=/batch/v1 HTTP/1.1" 444 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
193.32.162.221 - sliver85.eu - [07/Nov/2026:23:13:30 +0100] "POST /?rest_route=/batch/v1 HTTP/1.1" 444 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Brute-Force
Web App Attack
🇺🇸
PlexLads
2026-11-07 21:21:44
UTC ·
(1 day ago)
193.32.162.221 - - [07/Nov/2026:13:21:37 -0800] "POST /?rest_route=/batch/v1 HTTP/1.1" 403 12564 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 193.32.162.221 - - [07/Nov/2026:13: ...
show more
193.32.162.221 - - [07/Nov/2026:13:21:37 -0800] "POST /?rest_route=/batch/v1 HTTP/1.1" 403 12564 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 193.32.162.221 - - [07/Nov/2026:13:21:37 -0800] "POST /?rest_route=/batch/v1 HTTP/1.1" 403 12564 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 193.32.162.221 - - [07/Nov/2026:13:21:41 -0800] "POST /?rest_route=/batch/v1 HTTP/1.1" 403 12564 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 193.32.162.221 - - [07/Nov/2026:13:21:41 -0800] "POST /?rest_route=/batch/v1 HTTP/1.1" 403 12564 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 193.32.162.221 - - [07/Nov/2026:13:21:44 -0800] "POST /?rest_route=/batch/v1 HTTP/1.1" 403 12563 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x
...
show less
Hacking
Web App Attack
🇫🇷
security.rdmc.fr
2026-11-07 20:25:33
UTC ·
(1 day ago)
Activity from blacklisted IP
Hacking
🇧🇷
radardatelecom
2026-11-07 16:54:09
UTC ·
(1 day ago)
Blocked by Radar da Telecom firewall — abuseipdb
Bad Web Bot
Web App Attack
Anonymous
2026-11-07 16:14:40
UTC ·
(1 day ago)
fail2ban_an apache-modsecurity [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [uri "/"]
Bad Web Bot
Web App Attack