🇳🇱
Alt255
2026-11-11 10:25:16
UTC ·
(4 days ago)
[ti-17al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.175.174.57 - - [11/Nov/2026:11:25:14 +0100] "GET /.git/config HTTP/1.1" 404 6976 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTM ...
show more
[ti-17al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.175.174.57 - - [11/Nov/2026:11:25:14 +0100] "GET /.git/config HTTP/1.1" 404 6976 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇳🇱
ConsulHosting
2026-11-11 10:25:02
UTC ·
(4 days ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
🇳🇱
e.fierstra
2026-11-11 10:06:43
UTC ·
(4 days ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-11-11 09:33:30
UTC ·
(4 days ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇦🇺
rubixstudios
2026-11-11 08:54:02
UTC ·
(4 days ago)
Excessive HTTP requests consistent with automated attack behaviour detected by Imunify360
DDoS Attack
Brute-Force
Web App Attack
🇵🇱
Ferron
2026-11-11 08:22:56
UTC ·
(4 days ago)
Ferron abuse ban: Custom abuse event: automated_scan
Port Scan
🇺🇸
mcp-log-sentinel
2026-11-11 06:06:35
UTC ·
(4 days ago)
Log Sentinel automated defense: blocked HIGH threat (Unauthorized reconnaissance scan probing for exposed sensitive files or configuration). Attack vector / Path: GET /.git/config. [Target server IP, domain names, and internal infrastructure redacted ...
show more
Log Sentinel automated defense: blocked HIGH threat (Unauthorized reconnaissance scan probing for exposed sensitive files or configuration). Attack vector / Path: GET /.git/config. [Target server IP, domain names, and internal infrastructure redacted for privacy]
show less
Port Scan
Web App Attack
🇺🇸
tdamg
2026-11-11 05:52:55
UTC ·
(4 days ago)
Automated probing for secret and config files (.env, cloud credential files): 1 refused requests to 1 distinct paths (HTTP 403/404), 2026-11-11 05:52 to 05:52 UTC. Blocked at firewall.
Web App Attack
Hacking
🇳🇱
Savvii
2026-11-11 05:37:28
UTC ·
(4 days ago)
20 attempts against mh-misbehave-ban on frost
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
big-cloud.nl
2026-11-10 20:20:00
UTC ·
(5 days ago)
Try to access /.git/config
Web App Attack
🇫🇮
as211431.net
2026-11-10 18:57:57
UTC ·
(5 days ago)
Triggered Cloudflare WAF (firewallCustom) from ES.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /credentials.json
UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
This report ...
show more
Triggered Cloudflare WAF (firewallCustom) from ES.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /credentials.json
UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇬🇧
consul.to
2026-11-10 04:45:22
UTC ·
(5 days ago)
Web attack/malicious scanning detected
Web App Attack
🇳🇱
Alt255
2026-11-10 03:21:39
UTC ·
(5 days ago)
[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.175.174.57 - - [10/Nov/2026:04:21:35 +0100] "GET /.git/config HTTP/1.1" 403 179 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML ...
show more
[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.175.174.57 - - [10/Nov/2026:04:21:35 +0100] "GET /.git/config HTTP/1.1" 403 179 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
2026-11-09 13:07:00
UTC ·
(6 days ago)
2026-11-07 14:15:53 *.*.*.* GET /.env.backup - 443 - 34.175.174.57 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 404 0 2 1443 371 24
2026-11-07 14:15:53 *.*.*.* GET /.env.bak ...
show more
2026-11-07 14:15:53 *.*.*.* GET /.env.backup - 443 - 34.175.174.57 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 404 0 2 1443 371 24
2026-11-07 14:15:53 *.*.*.* GET /.env.bak - 443 - 34.175.174.57 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 404 0 2 1443 368 24
2026-11-07 14:15:53 *.*.*.* GET /.env.remote - 443 - 34.175.174.57 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 404 0 2 1443 371 25
2026-11-07 14:15:53 *.*.*.* GET /.env.test - 443 - 34.175.174.57 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 404 0 2 1443 369 25
show less
Web App Attack
🇳🇱
homeshowdomain.nl
2026-11-07 22:59:15
UTC ·
(1 week ago)
Auto-ban: >3000 req/min op 2026-11-07
Web App Attack
SSH
Hacking
