🇳🇱
Eric
2026-09-02 13:47:10
(5 minutes ago)
[Wed Sep 02 13:47:08.643039 2026] [security2:error] [pid 1108809:tid 1108809] [client 44.215.67.168: ...
show more
[Wed Sep 02 13:47:08.643039 2026] [security2:error] [pid 1108809:tid 1108809] [client 44.215.67.168:14516] [client 44.215.67.168] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "fambus.nl"] [uri "/"] [unique_id "apgo3FM0gHsboKP3d5_JGgAAABM"], referer: https://fambus.nl/
[Wed Sep 02 13:47:09.629554 2026] [security2:error] [pid 1079173:tid 1079173] [client 44.215.67.168:14520] [client 44.215.67.168] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (
...
show less
Hacking
Web App Attack
2026-09-02 13:04:17
(48 minutes ago)
Unauthorized access (443/tcp/https)
Port Scan
Web App Attack
🇩🇪
DocNetzwerk
2026-09-02 12:34:24
(1 hour ago)
(PERMBLOCK) 44.215.67.168 (US/United States/ec2-44-215-67-168.compute-1.amazonaws.com) has had more ...
show more
(PERMBLOCK) 44.215.67.168 (US/United States/ec2-44-215-67-168.compute-1.amazonaws.com) has had more than 3 temp blocks
show less
Hacking
🇭🇳
unph
2026-09-02 12:12:59
(1 hour ago)
Intento de acceso sospechoso bloqueado por AbuseIPDB Blocker Plugin
Brute-Force
🇫🇷
vtchost.com
2026-09-02 12:05:27
(1 hour ago)
apt.minux.cc:443 44.215.67.168 - - [02/Sep/2026:14:05:26 +0200] "POST / HTTP/1.1" 200 4535 "https:// ...
show more
apt.minux.cc:443 44.215.67.168 - - [02/Sep/2026:14:05:26 +0200] "POST / HTTP/1.1" 200 4535 "https://apt.minux.cc/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36"
...
show less
Web App Attack
2026-09-02 11:52:28
(2 hours ago)
[Wed Sep 02 11:52:27.299730 2026] [authz_core:error] [pid 1260529:tid 1260529] [client 44.215.67.168 ...
show more
[Wed Sep 02 11:52:27.299730 2026] [authz_core:error] [pid 1260529:tid 1260529] [client 44.215.67.168:18886] AH01630: client denied by server configuration: /var/www/erp.alieninternet.be/htdocs/, referer: https://api.erp.alieninternet.be/
[Wed Sep 02 11:52:27.397997 2026] [authz_core:error] [pid 1260529:tid 1260529] [client 44.215.67.168:18886] AH01630: client denied by server configuration: /var/www/erp.alieninternet.be/htdocs/, referer: https://api.erp.alieninternet.be/
[Wed Sep 02 11:52:27.515616 2026] [authz_core:error] [pid 1260529:tid 1260529] [client 44.215.67.168:18886] AH01630: client denied by server configuration: /var/www/erp.alieninternet.be/htdocs/, referer: https://api.erp.alieninternet.be/
[Wed Sep 02 11:52:27.631971 2026] [authz_core:error] [pid 1260529:tid 1260529] [client 44.215.67.168:18886] AH01630: client denied by server configuration: /var/www/erp.alieninternet.be/htdocs/, referer: https://api.erp.alieninternet.be/
[Wed Sep 02 11:52:27.770018 2026] [authz_core:er
...
show less
Brute-Force
2026-09-02 09:07:00
(4 hours ago)
Bad behavior
Web App Attack
Hacking
🇭🇺
kranem
2026-09-02 09:00:27
(4 hours ago)
Triggered Cloudflare WAF from US.
Action taken: BLOCK
ASN: 14618 (Amazon.com, Inc.)
Protocol: HTTP/1 ...
show more
Triggered Cloudflare WAF from US.
Action taken: BLOCK
ASN: 14618 (Amazon.com, Inc.)
Protocol: HTTP/1.1 (GET method)
Endpoint: /
Timestamp: 2026-09-02T06:50:15Z
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
show less
Bad Web Bot
🇺🇸
etu brutus
2026-09-02 07:06:48
(6 hours ago)
44.215.67.168 Blocked by [Attack Vector List]
...
Hacking
Brute-Force
Exploited Host
🇩🇪
Admins@FBN
2026-09-02 06:29:29
(7 hours ago)
FW-PortScan: Traffic Blocked srcport=10920 dstport=443
Port Scan
2026-09-02 06:15:55
(7 hours ago)
Blocked by firewall on hugin [443/tcp] | Rule: AbuseIPDB | SPT: 10656 | TTL: 64 | LEN: 44 | TOS: 0x0 ...
show more
Blocked by firewall on hugin [443/tcp] | Rule: AbuseIPDB | SPT: 10656 | TTL: 64 | LEN: 44 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
🇬🇧
Interceptor_HQ
2026-09-02 05:40:46
(8 hours ago)
request_uri: / -- automatic report --
Brute-Force
Hacking
🇨🇭
blinx
2026-09-02 05:15:35
(8 hours ago)
Suspicious activity detected by Modsecurity
Web Spam
Port Scan
Hacking
Bad Web Bot
Web App Attack
🇫🇷
bazter.pro
2026-09-02 05:06:52
(8 hours ago)
Auto-Ban [2026-09-02 08:06:52]: CRITICAL: High-score datacenter (100% AbuseIPDB, Amazon Data Service ...
show more
Auto-Ban [2026-09-02 08:06:52]: CRITICAL: High-score datacenter (100% AbuseIPDB, Amazon Data Services Northern Virginia); DC: Amazon Data Services Northern Virginia [Paths: 9] | Details: Other paths: /_next/static/chunks/0~eh28s1mh.25.js, /_next/static/chunks/123xr0ff8odpi.js, /_next/static/chunks/0~2~26-bv9lu7.js, /_next/static/chunks/0fgtogsaqv.d8.js, /_next/static/chunks/04sg-5h7iz1wq.js, /_next/static/chunks/03uw.099o5acj.js, /, /_next/static/chunks/turbopack-0672a5rkgm-r3.js, /_next/static/chunks/0lf.28y5176_u.js
show less
Web App Attack
🇫🇷
mrcrassi
2026-09-02 04:56:11
(8 hours ago)
Triggered Cloudflare WAF (botFight) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET ...
show more
Triggered Cloudflare WAF (botFight) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot