🇩🇪
Hugopvigo
2026-05-09 10:09:24
UTC ·
(6 months ago)
2a01:7e01::2000:b7ff:fee7:2ab9 - - [09/May/2026:12:09:21 +0200] "GET /.env.development.local HTTP/1.1" 404 885757 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
...
Hacking
Brute-Force
Web App Attack
SSH
🇩🇪
Viveronese
2026-05-09 07:03:16
UTC ·
(6 months ago)
HTTP vulnerability scanning
Web App Attack
🇳🇱
Savvii
2026-05-08 12:38:02
UTC ·
(6 months ago)
20 attempts against mh-misbehave-ban on choy
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Aetherweb Ark
2026-05-08 05:38:43
UTC ·
(6 months ago)
(mod_security) mod_security (id:949110) triggered by 2a01:7e01::2000:b7ff:fee7:2ab9 (Unknown): N in the last X secs
Web App Attack
🇺🇸
TPI-Abuse
2026-05-07 22:09:25
UTC ·
(6 months ago)
(mod_security) mod_security (id:210730) triggered by 2a01:7e01::2000:b7ff:fee7:2ab9 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 07 18:09:17.188500 2026] [security2:error] [pid 30586:tid 30586] [client ...
show more
(mod_security) mod_security (id:210730) triggered by 2a01:7e01::2000:b7ff:fee7:2ab9 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 07 18:09:17.188500 2026] [security2:error] [pid 30586:tid 30586] [client 2a01:7e01::2000:b7ff:fee7:2ab9:45928] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||cpking.com|F|2"] [data ".old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "cpking.com"] [uri "/config.old"] [unique_id "af0NjS4-KIwe7n9g6o2U6AAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-06 15:47:55
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2a01:7e01::2000:b7ff:fee7:2ab9 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 06 11:47:48.006903 2026] [security2:error] [pid 2187:tid 2204] [client 2 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a01:7e01::2000:b7ff:fee7:2ab9 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 06 11:47:48.006903 2026] [security2:error] [pid 2187:tid 2204] [client 2a01:7e01::2000:b7ff:fee7:2ab9:59060] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fayleuzzi.com.floridarobotics.com"] [uri "/.git/config"] [unique_id "aftipKhqfI2dRlM-cg6dIwAAAMs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-06 00:28:06
UTC ·
(6 months ago)
(mod_security) mod_security (id:210730) triggered by 2a01:7e01::2000:b7ff:fee7:2ab9 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 05 20:28:00.721451 2026] [security2:error] [pid 28067:tid 28067] [client ...
show more
(mod_security) mod_security (id:210730) triggered by 2a01:7e01::2000:b7ff:fee7:2ab9 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 05 20:28:00.721451 2026] [security2:error] [pid 28067:tid 28067] [client 2a01:7e01::2000:b7ff:fee7:2ab9:44610] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||ehrlichfamily.com.ehrlichmedia.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ehrlichfamily.com.ehrlichmedia.com"] [uri "/config.bak"] [unique_id "afqLEOikc9HS9QYhAlJnJAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-05-04 03:45:13
UTC ·
(6 months ago)
(mod_security) mod_security triggered on hostname [redacted] 2a01:7e01::2000:b7ff:fee7:2ab9 (DE/Germany/-)
SQL Injection
🇺🇸
TPI-Abuse
2026-05-03 22:29:35
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2a01:7e01::2000:b7ff:fee7:2ab9 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 03 18:29:28.500011 2026] [security2:error] [pid 23098:tid 23098] [client ...
show more
(mod_security) mod_security (id:210492) triggered by 2a01:7e01::2000:b7ff:fee7:2ab9 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 03 18:29:28.500011 2026] [security2:error] [pid 23098:tid 23098] [client 2a01:7e01::2000:b7ff:fee7:2ab9:60532] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "museum.henning.org"] [uri "/.env.test"] [unique_id "affMSOo6gnkxhF4jd1eiYQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇳
Genhost
2026-05-03 20:03:01
UTC ·
(6 months ago)
SCANNING OF PHP SHELL FILES
Brute-Force
SSH
🇫🇷
pocketpark
2026-05-02 14:29:19
UTC ·
(6 months ago)
Triggered Cloudflare WAF (firewallCustom) from DE.
Action: BLOCK | Protocol: HTTP/1.1 (GET) | Endpoint: /admin/users/list/active | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 • G ...
show more
Triggered Cloudflare WAF (firewallCustom) from DE.
Action: BLOCK | Protocol: HTTP/1.1 (GET) | Endpoint: /admin/users/list/active | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot