๐บ๐ธ
MHuiG
2024-09-24 02:43:25
(1 year ago)
The IP has triggered Cloudflare WAF. action: block source: firewallCustom clientAsn: 16509 clientASN ...
show more
The IP has triggered Cloudflare WAF. action: block source: firewallCustom clientAsn: 16509 clientASNDescription: AMAZON-02 clientCountryName: US clientIP: 3.141.5.70 clientRequestHTTPHost: mhuig.top clientRequestHTTPMethodName: GET clientRequestHTTPProtocol: HTTP/1.1 clientRequestPath: /.env clientRequestQuery: datetime: 2024-09-24T01:12:46Z rayName: 8c7ee87c285c631a ruleId: 62370dc6b7504b8c983f836ea0faec20 userAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB).
show less
Open Proxy
VPN IP
Port Scan
Hacking
SQL Injection
Bad Web Bot
Exploited Host
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-09-23 22:56:11
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 3.141.5.70 (ec2-3-141-5-70.us-east-2.compute.am ...
show more
(mod_security) mod_security (id:210492) triggered by 3.141.5.70 (ec2-3-141-5-70.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 23 18:56:07.069940 2024] [security2:error] [pid 510142:tid 510279] [client 3.141.5.70:62813] [client 3.141.5.70] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.castaspell.com"] [uri "/.env"] [unique_id "ZvHyB6kOlK1uKT7OYi-eWgAAAFU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-09-23 19:21:51
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 3.141.5.70 (ec2-3-141-5-70.us-east-2.compute.am ...
show more
(mod_security) mod_security (id:210492) triggered by 3.141.5.70 (ec2-3-141-5-70.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 23 15:21:46.126589 2024] [security2:error] [pid 21179:tid 21179] [client 3.141.5.70:59911] [client 3.141.5.70] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.cyber-matrix.org"] [uri "/.env"] [unique_id "ZvG_yv7ZNHhstul9BYAm0gAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฆ๐บ
advena
2024-09-23 17:30:55
(1 year ago)
3.141.5.70 (AS16509 AMAZON-02) was intercepted at 2024-09-23T17:27:53Z after violating WAF directive ...
show more
3.141.5.70 (AS16509 AMAZON-02) was intercepted at 2024-09-23T17:27:53Z after violating WAF directive: c2a2f414a67c409f90cccb6c5bba0215. Pre-cautionary/corrective action applied: block.
show less
Web Spam
Hacking
Brute-Force
Web App Attack
๐ณ๐ฑ
Savvii
2024-09-23 16:27:00
(1 year ago)
20 attempts against mh-misbehave-ban on storm
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
MHuiG
2024-09-23 14:07:53
(1 year ago)
The IP has triggered Cloudflare WAF. action: block source: firewallCustom clientAsn: 16509 clientASN ...
show more
The IP has triggered Cloudflare WAF. action: block source: firewallCustom clientAsn: 16509 clientASNDescription: AMAZON-02 clientCountryName: US clientIP: 3.141.5.70 clientRequestHTTPHost: mhuig.top clientRequestHTTPMethodName: GET clientRequestHTTPProtocol: HTTP/1.1 clientRequestPath: /.env clientRequestQuery: datetime: 2024-09-23T13:14:24Z rayName: 8c7acc319a0529d8 ruleId: 62370dc6b7504b8c983f836ea0faec20 userAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB).
show less
Open Proxy
VPN IP
Port Scan
Hacking
SQL Injection
Bad Web Bot
Exploited Host
Web App Attack
๐ฌ๐ง
Swiptly
2024-09-23 13:02:09
(1 year ago)
Multiple critical ModSecurity events
...
Web Spam
Bad Web Bot
๐ต๐ฑ
sefinek.net
2024-09-23 12:20:12
(1 year ago)
Triggered Cloudflare WAF (firewallCustom).
Action taken: BLOCK
ASN: 16509 (AMAZON-02) [US]
Protocol: ...
show more
Triggered Cloudflare WAF (firewallCustom).
Action taken: BLOCK
ASN: 16509 (AMAZON-02) [US]
Protocol: HTTP/1.1 (method GET)
Domain: sefinek.net
Endpoint: /info.php
Timestamp: 2024-09-23T04:14:04Z
Ray ID: 8c77b4b02fed222b
Rule ID: 28ce88ae31c84d638aec7f360a4f64af
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0
Report generated by Node-Cloudflare-WAF-AbuseIPDB https://github.com/sefinek24/Node-Cloudflare-WAF-AbuseIPDB
show less
Bad Web Bot
๐ณ๐ฑ
Savvii
2024-09-23 11:08:14
(1 year ago)
20 attempts against mh_ha-misbehave-ban on ether
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Savvii
2024-09-23 10:35:51
(1 year ago)
20 attempts against mh-misbehave-ban on steel
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
MHuiG
2024-09-23 10:10:00
(1 year ago)
The IP has triggered Cloudflare WAF. action: block source: firewallCustom clientAsn: 16509 clientASN ...
show more
The IP has triggered Cloudflare WAF. action: block source: firewallCustom clientAsn: 16509 clientASNDescription: AMAZON-02 clientCountryName: US clientIP: 3.141.5.70 clientRequestHTTPHost: mhuig.top clientRequestHTTPMethodName: GET clientRequestHTTPProtocol: HTTP/1.1 clientRequestPath: /.env clientRequestQuery: datetime: 2024-09-23T09:28:31Z rayName: 8c79814f2ca3a3de ruleId: 62370dc6b7504b8c983f836ea0faec20 userAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB).
show less
Open Proxy
VPN IP
Port Scan
Hacking
SQL Injection
Bad Web Bot
Exploited Host
Web App Attack
๐บ๐ธ
MHuiG
2024-09-23 08:11:54
(1 year ago)
The IP has triggered Cloudflare WAF. action: block source: firewallCustom clientAsn: 16509 clientASN ...
show more
The IP has triggered Cloudflare WAF. action: block source: firewallCustom clientAsn: 16509 clientASNDescription: AMAZON-02 clientCountryName: US clientIP: 3.141.5.70 clientRequestHTTPHost: mhuig.top clientRequestHTTPMethodName: GET clientRequestHTTPProtocol: HTTP/1.1 clientRequestPath: /.env clientRequestQuery: datetime: 2024-09-23T06:54:38Z rayName: 8c789fe2d94a13ec ruleId: 62370dc6b7504b8c983f836ea0faec20 userAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB).
show less
Open Proxy
VPN IP
Port Scan
Hacking
SQL Injection
Bad Web Bot
Exploited Host
Web App Attack
๐ต๐ฑ
sefinek.net
2024-09-23 06:11:52
(1 year ago)
Triggered Cloudflare WAF (firewallCustom).
Action taken: BLOCK
ASN: 16509 (AMAZON-02) [US]
Protocol: ...
show more
Triggered Cloudflare WAF (firewallCustom).
Action taken: BLOCK
ASN: 16509 (AMAZON-02) [US]
Protocol: HTTP/1.1 (method GET)
Domain: sefinek.net
Endpoint: /sendgrid/.env
Timestamp: 2024-09-22T20:25:37Z
Ray ID: 8c75067c2fd862b7
Rule ID: 28ce88ae31c84d638aec7f360a4f64af
UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Report generated by Node-Cloudflare-WAF-AbuseIPDB https://github.com/sefinek24/Node-Cloudflare-WAF-AbuseIPDB
show less
Bad Web Bot
๐ณ๐ฑ
Savvii
2024-09-23 05:01:46
(1 year ago)
20 attempts against mh-misbehave-ban on redirect
Brute-Force
Bad Web Bot
Web App Attack
๐ฆ๐บ
advena
2024-09-23 04:03:24
(1 year ago)
3.141.5.70 (AS16509 AMAZON-02) was intercepted at 2024-09-23T03:54:04Z after violating WAF directive ...
show more
3.141.5.70 (AS16509 AMAZON-02) was intercepted at 2024-09-23T03:54:04Z after violating WAF directive: 23548ee2b36547a1be09bb2c0550c529. Pre-cautionary/corrective action applied: block.
show less
Web Spam
Hacking
Brute-Force
Web App Attack