🇺🇸
TPI-Abuse
2024-03-29 02:07:22
UTC ·
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c0:16c:5::1 (tor-exit-5.zbau.f3netze.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 28 22:07:19.023123 2024] [security2:error] [pid 29200] [client 2a ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c0:16c:5::1 (tor-exit-5.zbau.f3netze.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 28 22:07:19.023123 2024] [security2:error] [pid 29200] [client 2a0b:f4c0:16c:5::1:65027] [client 2a0b:f4c0:16c:5::1] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.wellingtonrossi.com"] [uri "/.git/config"] [unique_id "ZgYiV2Oi6ZQgzqyAQ51CBwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-03-28 18:19:04
UTC ·
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c0:16c:5::1 (tor-exit-5.zbau.f3netze.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 28 14:18:57.996898 2024] [security2:error] [pid 31431] [client 2a ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c0:16c:5::1 (tor-exit-5.zbau.f3netze.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 28 14:18:57.996898 2024] [security2:error] [pid 31431] [client 2a0b:f4c0:16c:5::1:11563] [client 2a0b:f4c0:16c:5::1] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.ggaccounting.services"] [uri "/.git/config"] [unique_id "ZgW0kbV3Oj1HVnf8xG0rYwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-03-27 12:32:50
UTC ·
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c0:16c:5::1 (tor-exit-5.zbau.f3netze.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 27 08:32:44.428610 2024] [security2:error] [pid 32652] [client 2a ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c0:16c:5::1 (tor-exit-5.zbau.f3netze.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 27 08:32:44.428610 2024] [security2:error] [pid 32652] [client 2a0b:f4c0:16c:5::1:14421] [client 2a0b:f4c0:16c:5::1] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||paramountcapital.net|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "paramountcapital.net"] [uri "/.sql"] [unique_id "ZgQR7KJo92PS2aTZ1VAbcQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-03-21 11:10:26
UTC ·
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c0:16c:5::1 (tor-exit-5.zbau.f3netze.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 21 07:10:19.429204 2024] [security2:error] [pid 4628] [client 2a0 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c0:16c:5::1 (tor-exit-5.zbau.f3netze.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 21 07:10:19.429204 2024] [security2:error] [pid 4628] [client 2a0b:f4c0:16c:5::1:7983] [client 2a0b:f4c0:16c:5::1] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.helstone.com"] [uri "/.git/config"] [unique_id "ZfwVm-npk--tTJhm30gkNgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-03-21 09:49:44
UTC ·
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c0:16c:5::1 (tor-exit-5.zbau.f3netze.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 21 05:49:40.075997 2024] [security2:error] [pid 26849] [client 2a ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c0:16c:5::1 (tor-exit-5.zbau.f3netze.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 21 05:49:40.075997 2024] [security2:error] [pid 26849] [client 2a0b:f4c0:16c:5::1:60963] [client 2a0b:f4c0:16c:5::1] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.asurprisinglittletown.com"] [uri "/.git/config"] [unique_id "ZfwCtFNTrKcvZhwQ2LLSRQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-03-21 08:18:02
UTC ·
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c0:16c:5::1 (tor-exit-5.zbau.f3netze.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 21 04:17:58.125732 2024] [security2:error] [pid 23693] [client 2a ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c0:16c:5::1 (tor-exit-5.zbau.f3netze.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 21 04:17:58.125732 2024] [security2:error] [pid 23693] [client 2a0b:f4c0:16c:5::1:63801] [client 2a0b:f4c0:16c:5::1] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.littlebiglebanon.com"] [uri "/.git/config"] [unique_id "ZfvtNhKFWR69nSsmNeoCUAAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-03-21 07:36:01
UTC ·
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c0:16c:5::1 (tor-exit-5.zbau.f3netze.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 21 03:35:56.337080 2024] [security2:error] [pid 11251] [client 2a ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c0:16c:5::1 (tor-exit-5.zbau.f3netze.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 21 03:35:56.337080 2024] [security2:error] [pid 11251] [client 2a0b:f4c0:16c:5::1:17431] [client 2a0b:f4c0:16c:5::1] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.chaplain.us"] [uri "/.git/config"] [unique_id "ZfvjXAKj2IIxFMHKR3iNxQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-03-17 15:46:54
UTC ·
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c0:16c:5::1 (tor-exit-5.zbau.f3netze.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 17 11:46:44.918480 2024] [security2:error] [pid 24303] [client 2a ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c0:16c:5::1 (tor-exit-5.zbau.f3netze.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 17 11:46:44.918480 2024] [security2:error] [pid 24303] [client 2a0b:f4c0:16c:5::1:6057] [client 2a0b:f4c0:16c:5::1] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.dylanwalsh.net"] [uri "/.git/config"] [unique_id "ZfcQZMzPUeXNzE0ChEgvjwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-03-13 21:26:51
UTC ·
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c0:16c:5::1 (tor-exit-5.zbau.f3netze.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 13 17:26:45.687684 2024] [security2:error] [pid 15519] [client 2a ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c0:16c:5::1 (tor-exit-5.zbau.f3netze.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 13 17:26:45.687684 2024] [security2:error] [pid 15519] [client 2a0b:f4c0:16c:5::1:54603] [client 2a0b:f4c0:16c:5::1] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.zoticus.com"] [uri "/.git/config"] [unique_id "ZfIaFcjqfQnvj6ogKF66GwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
MHuiG
2024-03-13 20:06:42
UTC ·
(2 years ago)
The IP has triggered Cloudflare WAF. action: managed_challenge source: country clientAsn: 205100 clientASNDescription: F3NETZE clientCountryName: T1 clientIP: 2a0b:f4c0:16c:5::1 clientRequestHTTPHost: rssbox.mhuig.top clientRequestHTTPMethodName: GET ...
show more
The IP has triggered Cloudflare WAF. action: managed_challenge source: country clientAsn: 205100 clientASNDescription: F3NETZE clientCountryName: T1 clientIP: 2a0b:f4c0:16c:5::1 clientRequestHTTPHost: rssbox.mhuig.top clientRequestHTTPMethodName: GET clientRequestHTTPProtocol: HTTP/1.1 clientRequestPath: /favicon.ico clientRequestQuery: datetime: 2024-03-13T19:20:09Z rayName: 863e61365b75381b ruleId: country userAgent: Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1.1 Mobile/15E148 Safari/604.1. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB).
show less
Open Proxy
VPN IP
Port Scan
Hacking
SQL Injection
Bad Web Bot
Exploited Host
Web App Attack
🇺🇸
beehivesafety
2023-05-10 02:36:53
UTC ·
(3 years ago)
Threat Blocked by BeeHive from (ASN:205100) (Network:F3NETZE) (Host:redirect.beehive.systems) (Method:GET) (Protocol:HTTP/2) (Timestamp:2023-05-09T18:15:51Z)
Open Proxy
VPN IP
Port Scan
Hacking
SQL Injection
Bad Web Bot
Exploited Host
Web App Attack
🇨🇳
ThreatBook.io
2022-12-07 16:11:58
UTC ·
(3 years ago)
2022-12-07 08:47:48 /apple-touch-icon.png
Web App Attack
🇩🇪
Hobby Bob
2022-11-29 14:54:37
UTC ·
(3 years ago)
Nov 29 20:54:34 mail dovecot: pop3-login: Disconnected (no auth attempts in 0 secs): user=, rip=2a0b:f4c0:16c:5::1, lip=X.X.X.X session=
Port Scan
Hacking
🇳🇱
3Gear
2022-08-19 22:29:51
UTC ·
(4 years ago)
2022-08-20 2:29:50 1782 [Warning] Access denied for user 'root'@'tor-exit-5.zbau.f3netze.de' (using password: NO)
...
Port Scan
SQL Injection
Brute-Force
🇬🇧
Systemforce
2022-03-22 23:58:58
UTC ·
(4 years ago)
2022-03-23 3:58:57 362143 [Warning] Access denied for user 'root'@'tor-exit-5.zbau.f3netze.de' (using password: NO)
2022-03-23 3:58:58 362144 [Warning] Access denied for user 'root'@'tor-exit-5.zbau.f3netze.de' (using password: YES)
...
Hacking
SQL Injection
