2026-11-08 12:58:13
UTC ·
(6 hours ago)
RdpGuard detected brute-force attempt on HTTP
Brute-Force
🇫🇷
phoenix1jl96
2026-11-08 07:41:54
UTC ·
(12 hours ago)
2026/11/08 08:41:52 [error] 96551#96551: *483246 open() "/home/user-data/www/default/mailer/.env" failed (2: No such file or directory), client: 34.129.7.120, server: autodiscover.epouville.fr, request: "GET /mailer/.env HTTP/1.1", host: "autodiscove ...
show more
2026/11/08 08:41:52 [error] 96551#96551: *483246 open() "/home/user-data/www/default/mailer/.env" failed (2: No such file or directory), client: 34.129.7.120, server: autodiscover.epouville.fr, request: "GET /mailer/.env HTTP/1.1", host: "autodiscover.epouville.fr"
2026/11/08 08:41:52 [error] 96551#96551: *483246 open() "/usr/local/lib/roundcubemail/.env" failed (2: No such file or directory), client: 34.129.7.120, server: autodiscover.epouville.fr, request: "GET /mail/.env HTTP/1.1", host: "autodiscover.epouville.fr"
...
show less
DNS Compromise
DNS Poisoning
DDoS Attack
Ping of Death
Web Spam
Email Spam
Blog Spam
Port Scan
Hacking
Brute-Force
Bad Web Bot
SSH
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 05:12:39
UTC ·
(14 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.129.7.120 (120.7.129.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 00:12:33.472010 2026] [security2:error] [pid 22033:tid 22 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.129.7.120 (120.7.129.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 00:12:33.472010 2026] [security2:error] [pid 22033:tid 22033] [client 34.129.7.120:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.empoweruamerica.org"] [uri "/.git/config"] [unique_id "avAEwS6iIeCaVyq7KQ8BxgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-11-07 22:59:12
UTC ·
(20 hours ago)
Auto-ban: >3000 req/min op 2026-11-07
Web App Attack
SSH
Hacking
🇺🇸
Secure Gateway®️
2026-11-07 22:00:10
UTC ·
(21 hours ago)
Report By Secure Gateway Security Team: Unauthorized Connection Attempt
Web App Attack
🇺🇸
ALSCO®️
2026-11-07 22:00:10
UTC ·
(21 hours ago)
Report By ALSCO Security Team: Unauthorized Connection Attempt
SQL Injection
🇩🇪
DyhnenTv
2026-11-07 19:18:24
UTC ·
(1 day ago)
CrowdSec webserver: crowdsecurity/http-sensitive-files
Web App Attack
Bad Web Bot
🇫🇷
phoenix1jl96
2026-11-07 16:54:17
UTC ·
(1 day ago)
2026/11/07 17:54:16 [error] 96551#96551: *468756 open() "/home/user-data/www/default/mailer/.env" failed (2: No such file or directory), client: 34.129.7.120, server: autodiscover.dsatec.fr, request: "GET /mailer/.env HTTP/1.1", host: "autodiscover.d ...
show more
2026/11/07 17:54:16 [error] 96551#96551: *468756 open() "/home/user-data/www/default/mailer/.env" failed (2: No such file or directory), client: 34.129.7.120, server: autodiscover.dsatec.fr, request: "GET /mailer/.env HTTP/1.1", host: "autodiscover.dsatec.fr"
2026/11/07 17:54:16 [error] 96551#96551: *468756 open() "/usr/local/lib/roundcubemail/.env" failed (2: No such file or directory), client: 34.129.7.120, server: autodiscover.dsatec.fr, request: "GET /mail/.env HTTP/1.1", host: "autodiscover.dsatec.fr"
...
show less
DNS Compromise
DNS Poisoning
DDoS Attack
Ping of Death
Web Spam
Email Spam
Blog Spam
Port Scan
Hacking
Brute-Force
Bad Web Bot
SSH
Web App Attack
🇺🇸
bigscoots.com
2026-11-07 09:43:14
UTC ·
(1 day ago)
(PERMBLOCK) 34.129.7.120 (US/United States/120.7.129.34.bc.googleusercontent.com) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: 1; Trigger: LF_PERMBLOCK_COUNT; Logs:
Brute-Force
SSH
🇬🇧
pinguin
2026-11-07 05:47:19
UTC ·
(1 day ago)
Triggered Cloudflare WAF (linkMaze) from AU.
Action taken: LINK_MAZE_INJECTED
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
This report ...
show more
Triggered Cloudflare WAF (linkMaze) from AU.
Action taken: LINK_MAZE_INJECTED
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇩🇪
Marco711
2026-11-07 05:25:55
UTC ·
(1 day ago)
port/URL scanning
Port Scan
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 03:35:44
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.129.7.120 (120.7.129.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 22:35:37.357191 2026] [security2:error] [pid 19913:tid 19 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.129.7.120 (120.7.129.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 22:35:37.357191 2026] [security2:error] [pid 19913:tid 19913] [client 34.129.7.120:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.dentguyvt.com"] [uri "/.git/config"] [unique_id "au6ciT_hi8THL2LhVViuigAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-11-07 03:17:46
UTC ·
(1 day ago)
[cb-01vi] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.129.7.120 - - [07/Nov/2026:04:17:29 +0100] "GET /.git/config HTTP/1.1" 403 2174 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML ...
show more
[cb-01vi] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.129.7.120 - - [07/Nov/2026:04:17:29 +0100] "GET /.git/config HTTP/1.1" 403 2174 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇩🇪
dave
2026-11-07 00:07:00
UTC ·
(1 day ago)
threat-feed-sync observed repeated abuse from this IP after local filtering. scenarios=crowdsecurity/appsec-vpatch,crowdsecurity/vpatch-env-access,crowdsecurity/vpatch-git-config observed_by=1_hosts hit_count=101 first_seen=2026-11-07T00:06:23Z last_ ...
show more
threat-feed-sync observed repeated abuse from this IP after local filtering. scenarios=crowdsecurity/appsec-vpatch,crowdsecurity/vpatch-env-access,crowdsecurity/vpatch-git-config observed_by=1_hosts hit_count=101 first_seen=2026-11-07T00:06:23Z last_seen=2026-11-07T00:07:00Z
show less
Web App Attack
🇫🇷
Catalin Negru
2026-11-06 23:44:32
UTC ·
(1 day ago)
Recidive ban by fail2ban on server.blackbit.ro
Brute-Force
