๐ณ๐ฑ
homeshowdomain.nl
2026-10-22 21:59:42
(2 hours ago)
Auto-ban: >3000 req/min op 2026-10-22
Web App Attack
SSH
Hacking
๐ง๐ช
taivas.nl
2026-10-22 02:32:14
(22 hours ago)
Site scraper
Web App Attack
๐ณ๐ฑ
Site.eu
2026-10-22 01:38:03
(23 hours ago)
Excessive multi-domain requests
Brute-Force
Anonymous
2026-10-22 01:37:02
(23 hours ago)
Bot / scanning and/or hacking attempts: GET /.env.example HTTP/1.1, GET /.env.dev HTTP/1.1, GET /.en ...
show more
Bot / scanning and/or hacking attempts: GET /.env.example HTTP/1.1, GET /.env.dev HTTP/1.1, GET /.env.old HTTP/1.1, GET /.env.prod HTTP/1.1, GET /.env.sample HTTP/1.1
show less
Hacking
Web App Attack
๐ฉ๐ช
EGP Abuse Dept
2026-10-22 01:33:48
(23 hours ago)
Scanning for web/db/file exploits on www.vanderhoutwestland.nl
SQL Injection
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-22 01:07:27
(23 hours ago)
(mod_security) mod_security (id:210492) triggered by 13.212.45.58 (ec2-13-212-45-58.ap-southeast-1.c ...
show more
(mod_security) mod_security (id:210492) triggered by 13.212.45.58 (ec2-13-212-45-58.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 21:07:20.720324 2026] [security2:error] [pid 9367:tid 9456] [client 13.212.45.58:33614] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stupidlikeyou.ceol.us"] [uri "/.git/config"] [unique_id "atlhyL3UtrFmqMVJ7FID1gAAAYA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-22 00:30:03
(1 day ago)
suspicious request in access.log
Web App Attack
Anonymous
2026-10-21 23:56:48
(1 day ago)
13.212.45.58 - - [22/Oct/2026:01:56:30 +0200] "GET /info.php HTTP/2.0" 404 12547
13.212.45.58 - - [2 ...
show more
13.212.45.58 - - [22/Oct/2026:01:56:30 +0200] "GET /info.php HTTP/2.0" 404 12547
13.212.45.58 - - [22/Oct/2026:01:56:32 +0200] "GET /php.php HTTP/2.0" 404 12135
13.212.45.58 - - [22/Oct/2026:01:56:33 +0200] "GET /i.php HTTP/2.0" 404 12135
13.212.45.58 - - [22/Oct/2026:01:56:35 +0200] "GET /pi.php HTTP/2.0" 404 12135
13.212.45.58 - - [22/Oct/2026:01:56:37 +0200] "GET /pinfo.php HTTP/2.0" 404 12135
13.212.45.58 - - [22/Oct/2026:01:56:38 +0200] "GET /test.php HTTP/2.0" 404 12135
13.212.45.58 - - [22/Oct/2026:01:56:40 +0200] "GET /phpinfo HTTP/2.0" 404 12783
13.212.45.58 - - [22/Oct/2026:01:56:42 +0200] "GET /p.php HTTP/2.0" 404 12135
13.212.45.58 - - [22/Oct/2026:01:56:43 +0200] "GET /debug.php HTTP/2.0" 404 12135
13.212.45.58 - - [22/Oct/2026:01:56:45 +0200] "GET /info HTTP/2.0" 404 12783
...
show less
Web Spam
Web App Attack
๐ฎ๐น
VHosting
2026-10-21 23:50:08
(1 day ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
Anonymous
2026-10-21 23:28:27
(1 day ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-21 23:07:41
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 13.212.45.58 (ec2-13-212-45-58.ap-southeast-1.c ...
show more
(mod_security) mod_security (id:210492) triggered by 13.212.45.58 (ec2-13-212-45-58.ap-southeast-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 19:07:33.651136 2026] [security2:error] [pid 27004:tid 27004] [client 13.212.45.58:41800] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pinman.com"] [uri "/.git/config"] [unique_id "atlFtRnH_qkYvJkoLWKGaAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
pinguin
2026-10-21 22:54:15
(1 day ago)
Triggered Cloudflare WAF (firewallManaged) from SG.
Action taken: LOG
Protocol: HTTP/1.1 (GET method ...
show more
Triggered Cloudflare WAF (firewallManaged) from SG.
Action taken: LOG
Protocol: HTTP/1.1 (GET method)
Endpoint: /tmp/phpinfo.php
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐ณ๐ฑ
thedreamer.nl
2026-10-21 22:53:19
(1 day ago)
13.212.45.58 - - [22/Oct/2026:00:50:29 +0200] "GET /.git/config HTTP/1.1" 499 0 "-" "Mozilla/5.0 (Ma ...
show more
13.212.45.58 - - [22/Oct/2026:00:50:29 +0200] "GET /.git/config HTTP/1.1" 499 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "SG" "Singapore" "1.28720" "103.85070"
13.212.45.58 - - [22/Oct/2026:00:50:31 +0200] "GET /.env HTTP/1.1" 499 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "SG" "Singapore" "1.28720" "103.85070"
13.212.45.58 - - [22/Oct/2026:00:50:32 +0200] "GET /.env.local HTTP/1.1" 499 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "SG" "Singapore" "1.28720" "103.85070"
13.212.45.58 - - [22/Oct/2026:00:50:32 +0200] "GET /.env.production HTTP/1.1" 499 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "SG" "Singapore" "1.28720" "103.85070"
13.212.45.58 - - [22/Oct/2026:00
...
show less
Hacking
Brute-Force
Bad Web Bot
Web App Attack