🇳🇱
Alboweb B.V.
2026-10-29 04:11:13
UTC ·
(1 week ago)
Bad web bot activity detected by Fail2Ban in plesk-apache-badbot jail
Bad Web Bot
🇩🇪
Philister11
2026-10-29 02:21:37
UTC ·
(1 week ago)
CrowdSec: crowdsecurity/http-cve-2021-41773 (NL/AS396982)
Web App Attack
Hacking
Anonymous
2026-10-29 01:12:57
UTC ·
(1 week ago)
Attempted access to sensitive endpoint (/.//.env) detected. Automated scan or unauthorized probing.
Web App Attack
🇩🇪
Philister11
2026-10-29 00:40:03
UTC ·
(1 week ago)
CrowdSec: crowdsecurity/http-crawl-non_statics (NL/AS396982)
Bad Web Bot
Web App Attack
🇺🇸
IndigoRidge
2026-10-28 23:35:58
UTC ·
(1 week ago)
[Wed Oct 28 19:35:56.347892 2026] [authz_core:error] [pid 1339181:tid 140325666400000] [client 34.178.0.253:0] AH01630: client denied by server configuration: /usr/share/psa-roundcube/qde80sl40xl4x6mr5qmk
[Wed Oct 28 19:35:56.740462 2026] [authz_core ...
show more
[Wed Oct 28 19:35:56.347892 2026] [authz_core:error] [pid 1339181:tid 140325666400000] [client 34.178.0.253:0] AH01630: client denied by server configuration: /usr/share/psa-roundcube/qde80sl40xl4x6mr5qmk
[Wed Oct 28 19:35:56.740462 2026] [authz_core:error] [pid 1339180:tid 140325884512000] [client 34.178.0.253:0] AH01630: client denied by server configuration: /usr/share/psa-roundcube/credentials.json
[Wed Oct 28 19:35:56.857750 2026] [authz_core:error] [pid 1339180:tid 140325532182272] [client 34.178.0.253:0] AH01630: client denied by server configuration: /usr/share/psa-roundcube/docker-compose.yaml
[Wed Oct 28 19:35:56.884848 2026] [authz_core:error] [pid 1339532:tid 140326253463296] [client 34.178.0.253:0] AH01630: client denied by server configuration: /usr/share/psa-roundcube/.changeset
[Wed Oct 28 19:35:57.975761 2026] [authz_core:error] [pid 1454444:tid 140324626228992] [client 34.178.0.253:0] AH01630: client denied by server configuration: /usr/share/psa-roundcube/.bashrc
...
show less
Web App Attack
🇩🇪
gadix
2026-10-28 23:17:15
UTC ·
(1 week ago)
[29/Oct/2026:00:17:14.391564 +0100] auKCen5Lh-SJZ79-Ubo9nwAAAAk 34.178.0.253 59142 127.0.0.1 7081
[29/Oct/2026:00:17:14.663008 +0100] auKCen5Lh-SJZ79-Ubo91AAAAA8 34.178.0.253 60316 127.0.0.1 7081
[29/Oct/2026:00:17:14.696428 +0100] auKCen5Lh-SJZ79-Ub ...
show more
[29/Oct/2026:00:17:14.391564 +0100] auKCen5Lh-SJZ79-Ubo9nwAAAAk 34.178.0.253 59142 127.0.0.1 7081
[29/Oct/2026:00:17:14.663008 +0100] auKCen5Lh-SJZ79-Ubo91AAAAA8 34.178.0.253 60316 127.0.0.1 7081
[29/Oct/2026:00:17:14.696428 +0100] auKCen5Lh-SJZ79-Ubo91gAAAAE 34.178.0.253 60336 127.0.0.1 7081
...
show less
Web App Attack
🇿🇦
Megasurf
2026-10-28 22:56:14
UTC ·
(1 week ago)
web application attack (blocked by the web application firewall). Blocked automatically by our firewall (LF_MODSEC).
Web App Attack
🇵🇹
WebTejo
2026-10-28 21:20:56
UTC ·
(1 week ago)
Detected multiple authentication failures and invalid user attempts in LF_CPANEL from IP address 34.178.0.253 on [PT] Tucano Node.
Brute-Force
SSH
Anonymous
2026-10-28 20:01:33
UTC ·
(1 week ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
Anonymous
2026-10-28 18:54:33
UTC ·
(1 week ago)
[da.kdns.gr] httpd-config-scan: sites=global; logs=/var/log/httpd/access_log; samples=/admin/.env | /.env.bak | /.env.supabase
Hacking
Web App Attack
🇫🇷
mrcrassi
2026-10-28 17:48:42
UTC ·
(1 week ago)
Triggered Cloudflare WAF (ratelimit) from NL.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /.docker/secrets.json
UA: Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)
This report was generated by:
https://github.com/sefinek/Clo ...
show more
Triggered Cloudflare WAF (ratelimit) from NL.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /.docker/secrets.json
UA: Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇨🇭
4server
2026-10-28 17:34:07
UTC ·
(1 week ago)
[2026-10-2818:34:01 0100]info[webmaild]34.178.0.253--\"GET/sitemap.xmlHTTP/1.1\"FAILEDLOGINwebmaild:loginattemptwithoutusername[2026-10-2818:34:02 0100]info[webmaild]34.178.0.253--\"GET/3ww2qauzrrcxyi3gy859HTTP/1.1\"FAILEDLOGINwebmaild:loginattemptwi ...
show more
[2026-10-2818:34:01 0100]info[webmaild]34.178.0.253--\"GET/sitemap.xmlHTTP/1.1\"FAILEDLOGINwebmaild:loginattemptwithoutusername[2026-10-2818:34:02 0100]info[webmaild]34.178.0.253--\"GET/3ww2qauzrrcxyi3gy859HTTP/1.1\"FAILEDLOGINwebmaild:loginattemptwithoutusername[2026-10-2818:34:02 0100]info[webmaild]34.178.0.253--\"GET/service-account.jsonHTTP/1.1\"FAILEDLOGINwebmaild:loginattemptwithoutusername[2026-10-2818:34:02 0100]info[webmaild]34.178.0.253--\"GET/403.shtmlHTTP/1.1\"FAILEDLOGINwebmaild:loginattemptwithoutusername[2026-10-2818:34:02 0100]info[webmaild]34.178.0.253--\"GET/key.jsonHTTP/1.1\"FAILEDLOGINwebmaild:loginattemptwithoutusername[2026-10-2818:34:02 0100]info[webmaild]34.178.0.253--\"GET/DockerfileHTTP/1.1\"FAILEDLOGINwebmaild:loginattemptwithoutusername[2026-10-2818:34:02 0100]info[webmaild]34.178.0.253--\"GET/terraform.tfstateHTTP/1.1\"FAILEDLOGINwebmaild:loginattemptwithoutusername[2026-10-2818:34:02 0100]info[webmaild]34.178.0.253--\"GET/serverless.ymlHTTP/1.1\"FAILEDLOGINwebmaild:loginattemptwi
show less
Hacking
Web App Attack
Anonymous
2026-10-28 17:27:12
UTC ·
(1 week ago)
IP matched detection query Detection of too many failed responses.
Brute-Force
Bad Web Bot
Hacking
🇳🇱
middelkoopcc
2026-10-28 16:54:01
UTC ·
(1 week ago)
2026-10-28 17:52:05 GET /.git/HEAD [301] && 2026-10-28 17:52:05 GET /.next/.env [301] && 2026-10-28 17:52:05 GET /dist/.env [301] && 189 more within 20 minutes
Web App Attack
🇨🇦
Anytech
2026-10-28 16:53:28
UTC ·
(1 week ago)
Blocked by Conn-Monitor: env-probing
Web App Attack
Hacking