🇬🇧
[email protected]
2025-12-06 01:00:37
UTC ·
(11 months ago)
...
Brute-Force
SSH
🇳🇱
homeshowdomain.nl
2025-12-05 23:00:08
UTC ·
(11 months ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2025-12-04.
Hacking
Web App Attack
SSH
🇬🇧
Starburst SysOp Team
2025-12-05 13:21:26
UTC ·
(11 months ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-sou2-3)
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 13:02:30
UTC ·
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 34.206.64.229 (ec2-34-206-64-229.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 08:02:25.126890 2025] [security2:error] [pid 3162:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 34.206.64.229 (ec2-34-206-64-229.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 08:02:25.126890 2025] [security2:error] [pid 3162:tid 3162] [client 34.206.64.229:45134] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "elevese.com.restaurantfurnituremart.com"] [uri "/.git/"] [unique_id "aTLX4TPfAJSjibvqC0DiAAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2025-12-05 04:36:34
UTC ·
(11 months ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 127
Exploited Host
Web App Attack
Anonymous
2025-12-05 04:31:18
UTC ·
(11 months ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
🇺🇸
TPI-Abuse
2025-12-05 04:15:38
UTC ·
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 34.206.64.229 (ec2-34-206-64-229.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 23:15:31.451689 2025] [security2:error] [pid 27128:t ...
show more
(mod_security) mod_security (id:210492) triggered by 34.206.64.229 (ec2-34-206-64-229.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 23:15:31.451689 2025] [security2:error] [pid 27128:tid 27128] [client 34.206.64.229:42352] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "esysapps.com"] [uri "/.git/"] [unique_id "aTJcY7lfd1BYfXA-XPJxJwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 03:54:35
UTC ·
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 34.206.64.229 (ec2-34-206-64-229.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 22:54:30.659011 2025] [security2:error] [pid 32249:t ...
show more
(mod_security) mod_security (id:210492) triggered by 34.206.64.229 (ec2-34-206-64-229.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 22:54:30.659011 2025] [security2:error] [pid 32249:tid 32249] [client 34.206.64.229:59556] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "etrass.info"] [uri "/.git/"] [unique_id "aTJXdu6GHTe_gykm9wZi7AAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
as211431.net
2025-12-05 02:38:36
UTC ·
(11 months ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /.git/HEAD
UA: Mozilla/5.0 (X11; Linux x86_64)
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
Bad Web Bot
🇺🇸
TPI-Abuse
2025-12-05 02:28:46
UTC ·
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 34.206.64.229 (ec2-34-206-64-229.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 21:28:40.687602 2025] [security2:error] [pid 22552:t ...
show more
(mod_security) mod_security (id:210492) triggered by 34.206.64.229 (ec2-34-206-64-229.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 21:28:40.687602 2025] [security2:error] [pid 22552:tid 22552] [client 34.206.64.229:38752] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "essentialee.com"] [uri "/.git/"] [unique_id "aTJDWLpf7SYOQRWZVozl7gAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
ALPHANET
2025-12-05 01:59:02
UTC ·
(11 months ago)
web exploits
Hacking
Exploited Host
Web App Attack
Anonymous
2025-12-05 01:57:12
UTC ·
(11 months ago)
SuspiciousC2 Activity detected by FMBAD System 2025-12-05 04:57:11
Hacking
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 01:39:18
UTC ·
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 34.206.64.229 (ec2-34-206-64-229.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 20:39:14.924122 2025] [security2:error] [pid 17186:t ...
show more
(mod_security) mod_security (id:210492) triggered by 34.206.64.229 (ec2-34-206-64-229.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 20:39:14.924122 2025] [security2:error] [pid 17186:tid 17186] [client 34.206.64.229:43712] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "evtoy.danged.com"] [uri "/.git/"] [unique_id "aTI3wlajLA-lgm9kacomegAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2025-12-05 01:24:10
UTC ·
(11 months ago)
1.301 requests with url.path *.git/
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2025-12-05 01:09:46
UTC ·
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 34.206.64.229 (ec2-34-206-64-229.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 20:09:39.840582 2025] [security2:error] [pid 16284:t ...
show more
(mod_security) mod_security (id:210492) triggered by 34.206.64.229 (ec2-34-206-64-229.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 20:09:39.840582 2025] [security2:error] [pid 16284:tid 16284] [client 34.206.64.229:57536] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "esdulemba.com"] [uri "/.git/"] [unique_id "aTIw0xeCgBKg8kswqnXRMQAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack