🇩🇪
ut-addicted.com
2026-05-19 17:08:40
(1 month ago)
\[19/May/2026:19:08:38 +0200\] agyZFi4YYk2st1WXve2m9wAAABQ 34.118.95.41 54656 78.46.187.162 80
\[19/ ...
show more
\[19/May/2026:19:08:38 +0200\] agyZFi4YYk2st1WXve2m9wAAABQ 34.118.95.41 54656 78.46.187.162 80
\[19/May/2026:19:08:38 +0200\] agyZFkGw058GDVsVeCX-CwAAAJM 34.118.95.41 54704 78.46.187.162 80
\[19/May/2026:19:08:38 +0200\] agyZFl-xRKPBmyo8BHofgwAAAEI 34.118.95.41 54702 78.46.187.162 80
show less
Brute-Force
Web App Attack
🇩🇪
SCHAPPY
2026-05-14 22:43:26
(1 month ago)
Bad bot identified by user agent
Bad Web Bot
🇨🇭
SaDo
2026-05-12 07:04:00
(2 months ago)
Web App Attack, Docker Attack
Port Scan
Brute-Force
Bad Web Bot
2026-05-11 09:18:02
(2 months ago)
(caddyscan) Scanner path probe from 34.118.95.41 (PL/Poland/41.95.118.34.bc.googleusercontent.com): ...
show more
(caddyscan) Scanner path probe from 34.118.95.41 (PL/Poland/41.95.118.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.118.95.41 - - [11/May/2026:09:00:01 +0000] "GET /actuator/heapdump HTTP/1.1"
[REDACTED] 200 2627 34.118.95.41 - - [11/May/2026:09:00:01 +0000] "GET /actuator/env HTTP/1.1"
[REDACTED] 200 2627 34.118.95.41 - - [11/May/2026:09:00:02 +0000] "GET /actuator/configprops HTTP/1.1"
[REDACTED] 200 2627 34.118.95.41 - - [11/May/2026:09:17:58 +0000] "GET /actuator/env HTTP/1.1"
[REDACTED] 200 2627 34.118.95.41 - - [11/May/2026:09:17:58 +0000] "GET /actuator/heapdump HTTP/1.1"
show less
Port Scan
🇫🇮
as211431.net
2026-05-11 04:36:05
(2 months ago)
Triggered Cloudflare WAF (firewallCustom) from PL.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET metho ...
show more
Triggered Cloudflare WAF (firewallCustom) from PL.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /actuator/env
UA: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.80 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
2026-05-11 00:58:42
(2 months ago)
(caddyscan) Scanner path probe from 34.118.95.41 (PL/Poland/41.95.118.34.bc.googleusercontent.com): ...
show more
(caddyscan) Scanner path probe from 34.118.95.41 (PL/Poland/41.95.118.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.118.95.41 - - [11/May/2026:00:25:47 +0000] "GET /actuator/heapdump HTTP/1.1"
[REDACTED] 200 2627 34.118.95.41 - - [11/May/2026:00:25:47 +0000] "GET /actuator/env HTTP/1.1"
[REDACTED] 200 2627 34.118.95.41 - - [11/May/2026:00:25:48 +0000] "GET /actuator/configprops HTTP/1.1"
[REDACTED] 200 2627 34.118.95.41 - - [11/May/2026:00:58:37 +0000] "GET /actuator/heapdump HTTP/1.1"
[REDACTED] 200 2627 34.118.95.41 - - [11/May/2026:00:58:37 +0000] "GET /actuator/configprops HTTP/1.1"
show less
Port Scan
🇺🇸
TPI-Abuse
2026-05-10 21:31:40
(2 months ago)
(mod_security) mod_security (id:210831) triggered by 34.118.95.41 (41.95.118.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210831) triggered by 34.118.95.41 (41.95.118.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 10 17:31:37.088950 2026] [security2:error] [pid 23359:tid 23359] [client 34.118.95.41:59814] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||m.gatheringsattheschool.com|F|4"] [data "EmailWolf"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "m.gatheringsattheschool.com"] [uri "/actuator/env"] [unique_id "agD5OS4NLz0uSXwKQU01NQAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-05-10 15:36:00
(2 months ago)
(caddyscan) Scanner path probe from 34.118.95.41 (PL/Poland/41.95.118.34.bc.googleusercontent.com): ...
show more
(caddyscan) Scanner path probe from 34.118.95.41 (PL/Poland/41.95.118.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.118.95.41 - - [10/May/2026:15:18:31 +0000] "GET /actuator/env HTTP/1.1"
[REDACTED] 200 2627 34.118.95.41 - - [10/May/2026:15:18:31 +0000] "GET /actuator/heapdump HTTP/1.1"
[REDACTED] 200 2627 34.118.95.41 - - [10/May/2026:15:18:32 +0000] "GET /actuator/configprops HTTP/1.1"
[REDACTED] 200 2627 34.118.95.41 - - [10/May/2026:15:35:54 +0000] "GET /actuator/heapdump HTTP/1.1"
[REDACTED] 200 2627 34.118.95.41 - - [10/May/2026:15:35:54 +0000] "GET /actuator/configprops HTTP/1.1"
show less
Port Scan