🇱🇻
GooddayGroup
2026-10-31 00:07:44
UTC ·
(1 week ago)
Web application exploit / backdoor attempt detected.
Hacking
Brute-Force
🇮🇹
VHosting
2026-10-17 11:49:39
UTC ·
(3 weeks ago)
Detected attack and reported by a human
Brute-Force
Web App Attack
SSH
DDoS Attack
Exploited Host
Bad Web Bot
🇺🇸
1gz
2026-09-30 23:47:17
UTC ·
(1 month ago)
Triggered Cloudflare WAF (firewallCustom) from T1.
Action taken: CHALLENGE
Protocol: HTTP/2 (GET method)
Endpoint: /script.js
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.0
This report was generated by:
https:// ...
show more
Triggered Cloudflare WAF (firewallCustom) from T1.
Action taken: CHALLENGE
Protocol: HTTP/2 (GET method)
Endpoint: /script.js
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.0
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
xmission.com
2026-09-03 19:40:41
UTC ·
(2 months ago)
Blocked by UFW (TCP on 49284)
Source port: 9004
Packet length: 596
This report (for 2a03:e600:0100:0000:0000:0000:0000:0008) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇹🇷
neron
2026-08-15 23:06:48
UTC ·
(2 months ago)
CrowdSec blocked: http:exploit detected via OPNsense firewall
Hacking
Web App Attack
🇹🇷
neron
2026-08-06 21:11:47
UTC ·
(3 months ago)
CrowdSec blocked: http:exploit detected via OPNsense firewall
Hacking
Web App Attack
🇹🇷
neron
2026-08-03 06:29:43
UTC ·
(3 months ago)
CrowdSec blocked: http:exploit detected via OPNsense firewall
Hacking
Web App Attack
🇩🇪
4server
2026-08-01 01:07:19
UTC ·
(3 months ago)
[SatAug0103:07:14.1600882026][security2:error][pid879951:tid879999][client2a03:e600:100::8:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949- ...
show more
[SatAug0103:07:14.1600882026][security2:error][pid879951:tid879999][client2a03:e600:100::8:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"ipv6.kvsm-blackstone.com\"][uri\"/\"][unique_id\"am1GwgetP3y2O3T_eMjLQAAAAEw\"]
show less
Port Scan
Brute-Force
Web App Attack
🇹🇷
neron
2026-07-31 17:06:18
UTC ·
(3 months ago)
CrowdSec blocked: http:exploit detected via OPNsense firewall
Hacking
Web App Attack
🇹🇷
neron
2026-07-25 04:27:08
UTC ·
(3 months ago)
CrowdSec blocked: http:exploit detected via OPNsense firewall
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-17 11:48:04
UTC ·
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 2a03:e600:100::8 (tor-exit-anonymizer-v6.appliedprivacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 07:47:55.105019 2026] [security2:error] [pid 7731 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a03:e600:100::8 (tor-exit-anonymizer-v6.appliedprivacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 07:47:55.105019 2026] [security2:error] [pid 7731:tid 7731] [client 2a03:e600:100::8:46922] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.indie100.com"] [uri "/.git/config"] [unique_id "ajKJa-TrFeQWxxIw1iPSWgAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-16 10:26:52
UTC ·
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 2a03:e600:100::8 (tor-exit-anonymizer-v6.appliedprivacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 06:26:43.326737 2026] [security2:error] [pid 3058 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a03:e600:100::8 (tor-exit-anonymizer-v6.appliedprivacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 06:26:43.326737 2026] [security2:error] [pid 30584:tid 30584] [client 2a03:e600:100::8:40840] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.riedmannfamily.com"] [uri "/.git/config"] [unique_id "ajEk4-5KgX4IE0NgWzRm0QAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-12 03:19:38
UTC ·
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 2a03:e600:100::8 (tor-exit-anonymizer-v6.appliedprivacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 23:19:32.236358 2026] [security2:error] [pid 2119 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a03:e600:100::8 (tor-exit-anonymizer-v6.appliedprivacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 23:19:32.236358 2026] [security2:error] [pid 21192:tid 21220] [client 2a03:e600:100::8:38532] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.birdhousefarms.com"] [uri "/.git/config"] [unique_id "ait6xNtbr2HvDvPIRRYpKgAAAJY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Savvii
2026-06-10 08:21:20
UTC ·
(5 months ago)
20 attempts against mh-misbehave-ban on web-new
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-05 20:11:32
UTC ·
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 2a03:e600:100::8 (tor-exit-anonymizer-v6.appliedprivacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 16:11:23.851331 2026] [security2:error] [pid 452: ...
show more
(mod_security) mod_security (id:210492) triggered by 2a03:e600:100::8 (tor-exit-anonymizer-v6.appliedprivacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 16:11:23.851331 2026] [security2:error] [pid 452:tid 452] [client 2a03:e600:100::8:34312] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.nwuoregon.org"] [uri "/.git/config"] [unique_id "aiMta_fcy1gtgyqVWHEoRQAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
