🇸🇪
SkyDancer
2026-11-06 10:24:21
UTC ·
(1 week ago)
Multiple intrusion attempts via http/https on known vulnerable url offsets. Attack automatically blocked by SkyDancer Ai(web-X).
Hacking
Brute-Force
🇿🇦
conure.sh
2026-11-04 12:03:54
UTC ·
(1 week ago)
csagent: score 19.4: 404 noise floor x38, secrets grab x1; 1 domain(s) in 2s
Web App Attack
🇮🇹
mgarofano80
2026-11-03 21:55:59
UTC ·
(1 week ago)
Brute-Force
Web App Attack
🇳🇱
e.fierstra
2026-11-03 17:21:52
UTC ·
(1 week ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇫🇷
GabrielJST
2026-11-03 17:14:33
UTC ·
(1 week ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 34.179.225.251 (DE/Germany/251.225.179.34.bc.googleusercontent.com)
Bad Web Bot
🇺🇸
TPI-Abuse
2026-11-03 17:05:04
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.179.225.251 (251.225.179.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 12:04:58.971977 2026] [security2:error] [pid 20721:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 34.179.225.251 (251.225.179.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 12:04:58.971977 2026] [security2:error] [pid 20721:tid 20721] [client 34.179.225.251:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.365soft.top"] [uri "/.env.credentials"] [unique_id "auoUOvkuXervDzXLt-j13wAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
mrcrassi
2026-11-03 16:56:24
UTC ·
(1 week ago)
Triggered Cloudflare WAF (firewallManaged) from DE.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /docker-compose.production.yml
UA: Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)
This report w ...
show more
Triggered Cloudflare WAF (firewallManaged) from DE.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /docker-compose.production.yml
UA: Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇧🇷
radardatelecom
2026-11-03 16:53:05
UTC ·
(1 week ago)
Blocked by Radar da Telecom firewall — abuseipdb
Bad Web Bot
Web App Attack
🇧🇾
lns.bz
2026-11-03 16:45:38
UTC ·
(1 week ago)
.env scanning [BY]
Web App Attack
🇮🇹
CoreTech srl
2026-11-03 15:19:04
UTC ·
(1 week ago)
cloudlinux2 fail2ban: 2026-11-03 16:15:24,352 fail2ban.filter [1898]: INFO [plesk-modsecurity] Found 34.81.193.103 - 2026-11-03 16:15:23cloudlinux2 fail2ban: 2026-11-03 16:15:30,978 fail2ban.filter [1898]: INFO [plesk-modsecurit ...
show more
cloudlinux2 fail2ban: 2026-11-03 16:15:24,352 fail2ban.filter [1898]: INFO [plesk-modsecurity] Found 34.81.193.103 - 2026-11-03 16:15:23cloudlinux2 fail2ban: 2026-11-03 16:15:30,978 fail2ban.filter [1898]: INFO [plesk-modsecurity] Found 34.81.193.103 - 2026-11-03 16:15:30cloudlinux2 fail2ban: 2026-11-03 16:15:31,712 fail2ban.filter [1898]: INFO [recidive] Found 34.81.193.103 - 2026-11-03 16:15:31cloudlinux2 fail2ban: 2026-11-03 16:15:30,945 fail2ban.filter [1898]: INFO [plesk-modsecurity] Found 34.81.193.103 - 2026-11-03 16:15:30cloudlinux2 fail2ban: 2026-11-03 16:15:30,928 fail2ban.filter [1898]: INFO [plesk-modsecurity] Found 34.81.193.103 - 2026-11-03 16:15:30cloudlinux2 fail2ban: 2026-11-03 16:15:30,995 fail2ban.filter [1898]: INFO [plesk-modsecurity] Found 34.81.193.103 - 2026-11-03 16:15:30cloudlinux2 fail2ban: 2026-11-03 16:15:30,964 fail2ban.filter [1898]: INFO [plesk-modsecurity] Found 34.81.193.103 - 2026-11-03 16:15:30clou
show less
Brute-Force
Anonymous
2026-11-03 14:58:25
UTC ·
(1 week ago)
apache vulnerability scan
Web App Attack
🇩🇪
palzer.IT
2026-11-03 14:22:41
UTC ·
(1 week ago)
Report for plesk-apache-badbot: 34.179.225.251 - - [03/Nov/2026:15:22:31 +0100] GET /api/fs/read?allowOutsideWorkspace=true&path=/app/.env [DOMAIN_REMOVED] 404 6335 - Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; + ...
show more
Report for plesk-apache-badbot: 34.179.225.251 - - [03/Nov/2026:15:22:31 +0100] GET /api/fs/read?allowOutsideWorkspace=true&path=/app/.env [DOMAIN_REMOVED] 404 6335 - Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +[DOMAIN_REMOVED]
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-11-03 14:12:07
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.179.225.251 (251.225.179.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 09:12:03.304562 2026] [security2:error] [pid 3477037: ...
show more
(mod_security) mod_security (id:210492) triggered by 34.179.225.251 (251.225.179.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 09:12:03.304562 2026] [security2:error] [pid 3477037:tid 3477062] [client 34.179.225.251:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.callaplusfirst.com"] [uri "/.env.credentials"] [unique_id "aunrs_Au5W4X8-jCNM0v0gAAAIs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇬
HighWay
2026-11-03 12:44:13
UTC ·
(1 week ago)
34.179.225.251 - - [03/Nov/2026:12:44:07 +0000] "GET /admin%2F.env HTTP/1.1" 404 513 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
34.179.225.251 - - [03/Nov/2026:12:44:07 +0000] "GET /dashboard%2F.env HTTP/1.1" 404 513 "-" "Mozilla/ ...
show more
34.179.225.251 - - [03/Nov/2026:12:44:07 +0000] "GET /admin%2F.env HTTP/1.1" 404 513 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
34.179.225.251 - - [03/Nov/2026:12:44:07 +0000] "GET /dashboard%2F.env HTTP/1.1" 404 513 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)"
34.179.225.251 - - [03/Nov/2026:12:44:07 +0000] "GET /settings%2F.env HTTP/1.1" 404 513 "-" "Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
...
show less
Port Scan
Bad Web Bot
Web App Attack
🇲🇾
Rizzy
2026-11-03 12:42:00
UTC ·
(1 week ago)
Multiple WAF Violations
Brute-Force
Web App Attack