|
🇳🇱
BlueWire Hosting
|
|
Bad bot ignoring robot.txt
|
Bad Web Bot
|
|
🇩🇪
ut-addicted.com
|
|
\[Fri Sep 18 01:08:15.795877 2026\] \[:error\] \[pid 32606:tid 140352577058560\] \[client 34.162.70.180:34284\] \[client 34.162.70.180\] ModSecurity: Access denied with code 403 \(phase 2\). Operator GE matched 5 at TX:anomaly_score. \[file "/usr/loc ...
show more
\[Fri Sep 18 01:08:15.795877 2026\] \[:error\] \[pid 32606:tid 140352577058560\] \[client 34.162.70.180:34284\] \[client 34.162.70.180\] ModSecurity: Access denied with code 403 \(phase 2\). Operator GE matched 5 at TX:anomaly_score. \[file "/usr/local/apache/modsecurity-owasp-latest/rules/REQUEST-949-BLOCKING-EVALUATION.conf"\] \[line "57"\] \[id "949110"\] \[msg "Inbound Anomaly Score Exceeded \(Total Score: 5\)"\] \[severity "CRITICAL"\] \[tag "application-multi"\] \[tag "language-multi"\] \[tag "platform-multi"\] \[tag "attack-generic"\] \[hostname "crx.it"\] \[uri "/"\] \[unique_id "aqxy32XDlcTBJB-GjRoKrwAAAMU"\]
show less
|
Brute-Force
Web App Attack
|
|
🇳🇱
Alt255
|
|
34.162.70.180 - - \[09/Sep/2026:17:49:59 +0200\] "GET /.git/config HTTP/1.1" 404 440 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/131.0.0.0 Safari/537.36"
34.162.70.180 - - \[09/Sep/2026:17:50:00 ...
show more
34.162.70.180 - - \[09/Sep/2026:17:49:59 +0200\] "GET /.git/config HTTP/1.1" 404 440 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/131.0.0.0 Safari/537.36"
34.162.70.180 - - \[09/Sep/2026:17:50:00 +0200\] "GET /.env HTTP/1.1" 404 440 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/131.0.0.0 Safari/537.36"
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇳🇱
Alt255
|
|
34.162.70.180 - - \[09/Sep/2026:01:33:09 +0200\] "GET /.git/config HTTP/1.1" 500 9021 "-" "Mozilla/5.0 \(X11\; Linux x86_64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/131.0.0.0 Safari/537.36"
...
|
Bad Web Bot
Web App Attack
|
|
🇩🇪
FD-IX
|
|
Fail2Ban: ModSecurity detected a web application attack.
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
mnsf
|
|
Abuse Detected (9)
|
Brute-Force
Web App Attack
|
|
Anonymous
|
|
Aggressive web scan
|
Web App Attack
|
|
🇭🇺
miszterx.hu
|
|
XORP (haproxy): 162x HTTP 404/403/500 or handshake failure in 24h. Automated report from log_check_iptables_generator.sh (xorp.hu)
|
Web App Attack
|
|
🇳🇱
Site.eu
|
|
Excessive multi-domain requests
|
Brute-Force
|
|
🇮🇳
evicky2002
|
|
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
|
Hacking
Brute-Force
SSH
|
|
🇩🇪
itsolon
|
|
[10/Sep/2026:06:21:33 +0200] 178901409318.089150 34.162.70.180 0 217.154.7.177 443
[10/Sep/2026:06:21:36 +0200] 178901409652.270353 34.162.70.180 0 217.154.7.177 443
[10/Sep/2026:06:21:37 +0200] 178901409749.647787 34.162.70.180 0 217.154.7.177 443
[ ...
show more
[10/Sep/2026:06:21:33 +0200] 178901409318.089150 34.162.70.180 0 217.154.7.177 443
[10/Sep/2026:06:21:36 +0200] 178901409652.270353 34.162.70.180 0 217.154.7.177 443
[10/Sep/2026:06:21:37 +0200] 178901409749.647787 34.162.70.180 0 217.154.7.177 443
[10/Sep/2026:06:21:38 +0200] 178901409858.857891 34.162.70.180 0 217.154.7.177 443
[10/Sep/2026:06:21:39 +0200] 178901409956.007199 34.162.70.180 0 217.154.7.177 443
...
show less
|
Port Scan
Hacking
Brute-Force
Web App Attack
|
|
🇩🇪
itsolon
|
|
[10/Sep/2026:04:13:16 +0200] 17890063969.375625 34.162.70.180 0 217.154.7.177 443
[10/Sep/2026:04:13:20 +0200] 178900640011.636193 34.162.70.180 0 217.154.7.177 443
[10/Sep/2026:04:13:22 +0200] 17890064024.471539 34.162.70.180 0 217.154.7.177 443
[10 ...
show more
[10/Sep/2026:04:13:16 +0200] 17890063969.375625 34.162.70.180 0 217.154.7.177 443
[10/Sep/2026:04:13:20 +0200] 178900640011.636193 34.162.70.180 0 217.154.7.177 443
[10/Sep/2026:04:13:22 +0200] 17890064024.471539 34.162.70.180 0 217.154.7.177 443
[10/Sep/2026:04:13:25 +0200] 178900640527.211081 34.162.70.180 0 217.154.7.177 443
[10/Sep/2026:04:13:27 +0200] 178900640788.460283 34.162.70.180 0 217.154.7.177 443
...
show less
|
Port Scan
Hacking
Brute-Force
Web App Attack
|
|
🇫🇷
mrcrassi
|
|
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: BLOCK
Protocol: HTTP/1.1 (POST method)
Endpoint: /
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
This report was ...
show more
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: BLOCK
Protocol: HTTP/1.1 (POST method)
Endpoint: /
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
|
Bad Web Bot
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.162.70.180 (180.70.162.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 09 06:51:28.273230 2026] [security2:error] [pid 17429:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.162.70.180 (180.70.162.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 09 06:51:28.273230 2026] [security2:error] [pid 17429:tid 17429] [client 34.162.70.180:40948] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "smartradios.info"] [uri "/.git/config"] [unique_id "aqE6MLFMAjWdNAYR0PLcvwAAAAg"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇬🇧
consul.to
|
|
Web attack/malicious scanning detected
|
Web App Attack
|