🇫🇷
SpaceHost-Server
2026-09-15 22:19:15
(1 day ago)
Brute-Force
Web App Attack
🇳🇱
Alt255
2026-09-15 15:03:05
(1 day ago)
[topuurbd] Web exploit scanning: 6 suspicious requests detected by fail2ban jail <name>. Example: 34 ...
show more
[topuurbd] Web exploit scanning: 6 suspicious requests detected by fail2ban jail <name>. Example: 34.154.202.234 - - \[13/Sep/2026:16:13:18 +0200\] "GET /.git/config HTTP/1.1" 307 344 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/131.0.0.0 Safari/537.36"
34.154.202.234 - - \[13/Sep/2026:16:13:18 +0200\] "GET /.env HTTP/1.1" 307 344 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/131.0.0.0 Safari/537.36"
34.154.202.234 - - \[13/Sep/2026:16:13:18 +0200\] "GET /.env.local HTTP/1.1" 307 344 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/131.0.0.0 Safari/537.36"
34.154.202.234 - - \[13/Sep/2026:16:13:19 +0200\] "GET /.env.production HTTP/1.1"
...
show less
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-09-15 04:54:59
(1 day ago)
Excessive multi-domain requests
Brute-Force
🇫🇷
SpaceHost-Server
2026-09-14 22:18:15
(2 days ago)
Brute-Force
Web App Attack
🇮🇹
CoreTech srl
2026-09-14 14:09:59
(2 days ago)
cloudlinux2 fail2ban: 2026-09-13 17:14:04,153 fail2ban.filter [1591]: INFO [plesk-modsecu ...
show more
cloudlinux2 fail2ban: 2026-09-13 17:14:04,153 fail2ban.filter [1591]: INFO [plesk-modsecurity] Found 35.231.58.91 - 2026-09-13 17:14:04cloudlinux2 fail2ban: 2026-09-13 17:14:04,169 fail2ban.filter [1591]: INFO [plesk-modsecurity] Found 35.231.58.91 - 2026-09-13 17:14:04cloudlinux2 fail2ban: 2026-09-13 17:14:04,138 fail2ban.filter [1591]: INFO [plesk-modsecurity] Found 35.231.58.91 - 2026-09-13 17:14:04cloudlinux2 fail2ban: 2026-09-13 17:14:04,284 fail2ban.filter [1591]: INFO [plesk-modsecurity] Found 35.231.58.91 - 2026-09-13 17:14:04cloudlinux2 fail2ban: 2026-09-13 17:14:04,198 fail2ban.filter [1591]: INFO [plesk-modsecurity] Found 35.231.58.91 - 2026-09-13 17:14:04cloudlinux2 fail2ban: 2026-09-13 17:14:04,586 fail2ban.filter [1591]: INFO [recidive] Found 35.231.58.91 - 2026-09-13 17:14:04cloudlinux2 fail2ban: 2026-09-13 17:14:04,274 fail2ban.filter [1591]: INFO [plesk-modsecurity] Found 35.231.58.91 - 2026-09-13 17:14:04cloudlinux2
show less
Brute-Force
🇮🇪
thecivvie
2026-09-14 13:45:02
(2 days ago)
foomuuri firewall banned tcp/443 59 attempts
Brute-Force
🇩🇪
macrob
2026-09-14 13:34:55
(2 days ago)
2026/09/14 13:34:53 [error] 1743661#1743661: *11330687 access forbidden by rule, client: 34.154.202. ...
show more
2026/09/14 13:34:53 [error] 1743661#1743661: *11330687 access forbidden by rule, client: 34.154.202.234, server: binixo-vn.com, request: "GET /.git/config HTTP/2.0", host: "binixo-vn.com"
2026/09/14 13:34:53 [error] 1743664#1743664: *11330707 access forbidden by rule, client: 34.154.202.234, server: binixo-vn.com, request: "GET /.env HTTP/2.0", host: "binixo-vn.com"
2026/09/14 13:34:53 [error] 1743664#1743664: *11330712 access forbidden by rule, client: 34.154.202.234, server: binixo-vn.com, request: "GET /.env.local HTTP/2.0", host: "binixo-vn.com"
...
show less
Web App Attack
🇬🇧
thetomtaylor.co.uk
2026-09-13 18:08:02
(3 days ago)
Fail2Ban - [WAF]ModSecurity OWASP CRS rule violation on nginx-modsecurity ... [ice01,ice02,wa01,wa02 ...
show more
Fail2Ban - [WAF]ModSecurity OWASP CRS rule violation on nginx-modsecurity ... [ice01,ice02,wa01,wa02]
show less
Hacking
SQL Injection
Web App Attack
🇬🇧
thetomtaylor.co.uk
2026-09-13 16:20:05
(3 days ago)
Fail2Ban - [WAF]ModSecurity rule violation on modsecurity ... [wa01,wa02]
Hacking
SQL Injection
Web App Attack
🇳🇱
middelkoopcc
2026-09-13 15:22:01
(3 days ago)
2026-09-13 17:20:08 GET /.git/config [301] && 2026-09-13 17:20:08 GET /.env [301] && 2026-09-13 17:2 ...
show more
2026-09-13 17:20:08 GET /.git/config [301] && 2026-09-13 17:20:08 GET /.env [301] && 2026-09-13 17:20:08 GET /.env.bak [301] && 239 more within 20 minutes
show less
Web App Attack
🇫🇷
masterguru
2026-09-13 13:13:49
(3 days ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-201)
Hacking
Web App Attack
🇩🇪
pltcldvlpr
2026-09-12 21:48:48
(4 days ago)
CMS/framework probe: 34.154.202.234 - - [12/Sep/2026:23:48:48 +0200] "GET /.git/config HTTP/1.1" 444 ...
show more
CMS/framework probe: 34.154.202.234 - - [12/Sep/2026:23:48:48 +0200] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" asn=396982 org="Google LLC" country=IT
...
show less
Web App Attack
🇺🇸
Rocky Mountain Bioengineering Symposium
2026-09-12 20:36:55
(4 days ago)
[Sat Sep 12 14:36:51.644340 2026] [authz_core:error] [pid 354183:tid 139766263694912] [client 34.154 ...
show more
[Sat Sep 12 14:36:51.644340 2026] [authz_core:error] [pid 354183:tid 139766263694912] [client 34.154.202.234:47370] AH01630: client denied by server configuration: /var/www/public_rsrc/assets/.env.bak
[Sat Sep 12 14:36:54.505572 2026] [authz_core:error] [pid 354183:tid 139763872953920] [client 34.154.202.234:47370] AH01630: client denied by server configuration: /var/www/public_rsrc/assets/.env.dist
[Sat Sep 12 14:36:54.667990 2026] [authz_core:error] [pid 354183:tid 139765701645888] [client 34.154.202.234:47370] AH01630: client denied by server configuration: /var/www/public_rsrc/assets/.env.swp
...
show less
Bad Web Bot
🇫🇮
as211431.net
2026-09-12 17:34:11
(4 days ago)
Triggered Cloudflare WAF (firewallManaged) from IT.
Action taken: BLOCK
Protocol: HTTP/1.1 (POST met ...
show more
Triggered Cloudflare WAF (firewallManaged) from IT.
Action taken: BLOCK
Protocol: HTTP/1.1 (POST method)
Endpoint: /
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇳🇱
Site.eu
2026-09-12 16:04:42
(4 days ago)
Excessive multi-domain requests
Brute-Force