๐ซ๐ท
arsonist
2026-09-17 08:12:40
(19 hours ago)
[fail2ban]
2026-09-17T08:12:40.158218+00:00 arson caddy[1890453]: {"level":"info","ts":1789632760.15 ...
show more
[fail2ban]
2026-09-17T08:12:40.158218+00:00 arson caddy[1890453]: {"level":"info","ts":1789632760.1581945,"logger":"http.log.access.default","msg":"handled request","request":{"remote_ip":"8.234.29.89","remote_port":"34014","client_ip":"8.234.29.89","proto":"HTTP/1.1","method":"GET","host":"z.aos.lol","uri":"/.git/config","headers":{"Next-Action":["x"],"X-Nextjs-Request-Id":["1cfd07ec"],"User-Agent":["Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"],"Accept-Encoding":["gzip, deflate"],"Accept":["*/*"],"Connection":["keep-alive"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"http/1.1","server_name":"z.aos.lol","ech":false}},"bytes_read":0,"user_id":"","duration":0.000049302,"size":7,"status":418,"resp_headers":{"Content-Type":["text/plain; charset=utf-8"],"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"]}}
...
show less
Bad Web Bot
๐ณ๐ฑ
Alt255
2026-09-17 07:55:17
(20 hours ago)
[ti-27al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-27al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 8.234.29.89 - - [17/Sep/2026:09:55:04 +0200] "GET /.git/config HTTP/1.1" 404 849 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
๐ณ๐ฑ
SchorelWeb
2026-09-16 15:30:19
(1 day ago)
Cluster member (Omitted) (US/United States/-) said, TEMPDENY 8.234.29.89, Reason:[(Suspicious) Suspi ...
show more
Cluster member (Omitted) (US/United States/-) said, TEMPDENY 8.234.29.89, Reason:[(Suspicious) Suspicious activity detected 8.234.29.89 (US/United States/89.29.234.8.bc.googleusercontent.com): 10 in the last 3600 secs]
show less
Brute-Force
SSH
๐ซ๐ท
mrcrassi
2026-09-16 14:43:38
(1 day ago)
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: BLOCK
Protocol: HTTP/1.1 (POST met ...
show more
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: BLOCK
Protocol: HTTP/1.1 (POST method)
Endpoint: /
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐น๐ท
ayayntr
2026-09-16 14:42:42
(1 day ago)
[Wed Sep 16 17:42:39.198089 2026] [authz_core:error] [pid 18624:tid 18672] [client 8.234.29.89:46116 ...
show more
[Wed Sep 16 17:42:39.198089 2026] [authz_core:error] [pid 18624:tid 18672] [client 8.234.29.89:46116] AH01630: client denied by server configuration: /usr/share/zabbix
[Wed Sep 16 17:42:39.375447 2026] [authz_core:error] [pid 18624:tid 18673] [client 8.234.29.89:46116] AH01630: client denied by server configuration: /usr/share/zabbix
[Wed Sep 16 17:42:39.543304 2026] [authz_core:error] [pid 18624:tid 18675] [client 8.234.29.89:46116] AH01630: client denied by server configuration: /usr/share/zabbix
[Wed Sep 16 17:42:39.710312 2026] [authz_core:error] [pid 18624:tid 18676] [client 8.234.29.89:46116] AH01630: client denied by server configuration: /usr/share/zabbix
[Wed Sep 16 17:42:39.875734 2026] [authz_core:error] [pid 18624:tid 18652] [client 8.234.29.89:46116] AH01630: client denied by server configuration: /usr/share/zabbix
...
show less
Brute-Force
SSH
๐บ๐ฆ
URAN Publishing Service
2026-09-16 14:21:43
(1 day ago)
[16/Sep/2026:17:21:43 +0300] -- 8.234.29.89 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.git/c ...
show more
[16/Sep/2026:17:21:43 +0300] -- 8.234.29.89 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.git/config HTTP/1.1
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-16 13:48:03
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 8.234.29.89 (89.29.234.8.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 8.234.29.89 (89.29.234.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 09:47:57.813996 2026] [security2:error] [pid 3821:tid 3821] [client 8.234.29.89:53592] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "zazuza.com"] [uri "/.git/config"] [unique_id "aqqeDbdrpyza8osDSa8FFAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-16 13:03:09
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 8.234.29.89 (89.29.234.8.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 8.234.29.89 (89.29.234.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 09:03:04.020800 2026] [security2:error] [pid 28616:tid 28616] [client 8.234.29.89:35330] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "zavijava.net"] [uri "/.git/config"] [unique_id "aqqTiBn0o8p-9oAjip5WjgAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
dot.mg
2026-09-16 12:58:03
(1 day ago)
Bad behaviour
Web Spam
๐ฉ๐ช
gadix
2026-09-16 12:52:44
(1 day ago)
[16/Sep/2026:14:52:43.172111 +0200] aqqRG72-Kkq_6ydLFe8mpwAAAIc 8.234.29.89 39936 127.0.0.1 7081
[16 ...
show more
[16/Sep/2026:14:52:43.172111 +0200] aqqRG72-Kkq_6ydLFe8mpwAAAIc 8.234.29.89 39936 127.0.0.1 7081
[16/Sep/2026:14:52:43.452538 +0200] aqqRG72-Kkq_6ydLFe8mqQAAAJg 8.234.29.89 39950 127.0.0.1 7081
[16/Sep/2026:14:52:43.588968 +0200] aqqRG72-Kkq_6ydLFe8mqgAAAIA 8.234.29.89 39966 127.0.0.1 7081
...
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-16 03:57:14
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 8.234.29.89 (89.29.234.8.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 8.234.29.89 (89.29.234.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 23:57:08.213024 2026] [security2:error] [pid 13205:tid 13207] [client 8.234.29.89:51394] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ywt.bestofthis.com"] [uri "/.git/config"] [unique_id "aqoTlEM5u1qASJQbYH7PoAAAAMA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-16 01:29:19
(2 days ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
๐ณ๐ฑ
WeCloudit-Anti-Abuse
2026-09-16 00:49:15
(2 days ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
๐บ๐ธ
TPI-Abuse
2026-09-16 00:48:17
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 8.234.29.89 (89.29.234.8.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 8.234.29.89 (89.29.234.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 20:48:09.884635 2026] [security2:error] [pid 13887:tid 13887] [client 8.234.29.89:32956] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "yvonnebraden.com"] [uri "/.git/config"] [unique_id "aqnnSSedJmb9woJKcbFG5AAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
yvoictra
2026-09-16 00:41:03
(2 days ago)
Bloqueado automรกticamente por CrowdSec. Escenario: crowdsecurity/http-sensitive-files
Web App Attack