🇺🇸
jormaster3k
2026-08-24 01:54:10
(5 minutes ago)
Attack against Apache (too many 404s)
Web App Attack
🇳🇱
e.fierstra
2026-08-23 21:17:33
(4 hours ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇩🇪
updown.io
2026-08-23 20:46:58
(5 hours ago)
{"level":"info","ts":1787518016.3323958,"logger":"http.log.access.log1","msg":"handled request","req ...
show more
{"level":"info","ts":1787518016.3323958,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.148.234.200","remote_port":"56642","client_ip":"34.148.234.200","proto":"HTTP/2.0","method":"GET","host":"status.blot.im","uri":"/config/database.yml","headers":{"User-Agent":["Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"],"Accept-Encoding":["gzip, deflate"],"Accept":["*/*"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"status.blot.im","ech":false}},"bytes_read":0,"user_id":"","duration":0.000124718,"size":0,"status":429,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"]}}
{"level":"info","ts":1787518016.3462558,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.148.234.200","remote_port":"56642","client_ip":"34.148.234.200","proto":"HTTP/2.0","method":"GET","host":"status.blot.im","uri":"/webpack-stats.json"
...
show less
DDoS Attack
Web App Attack
🇳🇱
Savvii
2026-08-23 20:18:59
(5 hours ago)
20 attempts against mh-misbehave-ban on frost
Brute-Force
Bad Web Bot
Web App Attack
🇻🇳
trung.fun
2026-08-23 15:03:05
(10 hours ago)
DDoS, Hack, Brute Force, Web Attack
...
DDoS Attack
Web Spam
Hacking
Brute-Force
Web App Attack
🇬🇧
andypiper
2026-08-23 01:01:14
(1 day ago)
CrowdSec ban for AbuseIPDB Top List
Brute-Force
Web App Attack
2026-08-23 00:48:42
(1 day ago)
Portscan: TCP/8080 (4x), TCP/8443 (2x)
Port Scan
🇯🇵
nhawsjones
2026-08-23 00:29:55
(1 day ago)
[Sun Aug 23 09:29:54.668280 2026] [authz_core:error] [pid 1464040:tid 131442189244096] [client 34.14 ...
show more
[Sun Aug 23 09:29:54.668280 2026] [authz_core:error] [pid 1464040:tid 131442189244096] [client 34.148.234.200:39406] AH01630: client denied by server configuration: /var/www/html/server-status
...
show less
Brute-Force
🇩🇪
pscriptos
2026-08-23 00:14:08
(1 day ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
🇩🇪
Zydzy
2026-08-22 23:17:38
(1 day ago)
Automated attack detected. Server: 95.140.154.181. Jail: nginx-scanner.
Web App Attack
🇩🇪
lolyay
2026-08-22 20:57:05
(1 day ago)
34.148.234.200 - - [22/Aug/2026:20:57:04 +0000] "GET /backend/.env HTTP/1.1" 200 4 "-" "Mozilla/5.0 ...
show more
34.148.234.200 - - [22/Aug/2026:20:57:04 +0000] "GET /backend/.env HTTP/1.1" 200 4 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; MistralAI-User/1.0"
34.148.234.200 - - [22/Aug/2026:20:57:04 +0000] "GET /.git/config HTTP/1.1" 200 4 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; MistralAI-User/1.0"
...
show less
Web App Attack
Bad Web Bot
2026-08-22 20:30:03
(1 day ago)
CrowdSec decision: crowdsecurity/http-sensitive-files (origin: crowdsec)
Web App Attack
🇬🇧
pinguin
2026-08-22 19:39:05
(1 day ago)
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: BLOCK
Protocol: HTTP/2 (GET method ...
show more
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /server-status
UA: Mozilla/5.0 (compatible; Diffbot/1.0; +https://diffbot.com)
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
2026-08-22 19:09:20
(1 day ago)
Aggressive web scan
Web App Attack
🇩🇪
updown.io
2026-08-22 19:07:20
(1 day ago)
{"level":"info","ts":1787425637.2486448,"logger":"http.log.access.log1","msg":"handled request","req ...
show more
{"level":"info","ts":1787425637.2486448,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.148.234.200","remote_port":"46382","client_ip":"34.148.234.200","proto":"HTTP/2.0","method":"GET","host":"demo.updown.io","uri":"/.git/config","headers":{"Accept-Encoding":["gzip, deflate"],"Accept":["*/*"],"User-Agent":["Mozilla/5.0 (compatible; cohere-ai/1.0; +https://cohere.com)"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"demo.updown.io","ech":false}},"bytes_read":0,"user_id":"","duration":0.000104559,"size":0,"status":429,"resp_headers":{"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"],"Server":["Caddy"]}}
{"level":"info","ts":1787425637.3044891,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.148.234.200","remote_port":"46382","client_ip":"34.148.234.200","proto":"HTTP/2.0","method":"GET","host":"demo.updown.io","uri":"/.aws/config","headers":{"Accept-Encoding":["gzip, defla
...
show less
DDoS Attack
Web App Attack