🇺🇸
EmilGH
2026-11-07 09:39:43
UTC ·
(1 hour ago)
34.23.237.145 - - [07/Nov/2026:04:39:35 -0500] "GET /.git/config HTTP/1.1" 403 527 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.23.237.145 - - [07/Nov/2026:04:39:36 -05 ...
show more
34.23.237.145 - - [07/Nov/2026:04:39:35 -0500] "GET /.git/config HTTP/1.1" 403 527 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.23.237.145 - - [07/Nov/2026:04:39:36 -0500] "GET /.env HTTP/1.1" 403 527 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.23.237.145 - - [07/Nov/2026:04:39:36 -0500] "GET /.env.local HTTP/1.1" 403 527 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.23.237.145 - - [07/Nov/2026:04:39:36 -0500] "GET /.env.production HTTP/1.1" 403 527 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.23.237.145 - - [07/Nov/2026:04:39:36 -0500] "GET /.env.staging HTTP/1.1" 403 527 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko)
...
show less
Bad Web Bot
Web App Attack
🇩🇪
diosama
2026-11-07 09:24:31
UTC ·
(1 hour ago)
CrowdSec blocked: crowdsecurity/appsec-vpatch
Brute-Force
Web App Attack
🇺🇸
mnsf
2026-11-07 05:05:17
UTC ·
(6 hours ago)
Abuse Detected (10)
Brute-Force
Web App Attack
Anonymous
2026-11-07 04:26:34
UTC ·
(6 hours ago)
34.23.237.145 - - [07/Nov/2026:05:26:33 +0100] "GET /.git/config HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
Web App Attack
🇺🇸
aks4226
2026-11-07 03:54:19
UTC ·
(7 hours ago)
Attacking common web applications. (n01)
Web App Attack
Anonymous
2026-11-07 03:32:26
UTC ·
(7 hours ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇩🇪
snhosting
2026-11-07 02:56:27
UTC ·
(8 hours ago)
34.23.237.145 - - [07/Nov/2026:03:56:00 +0100] "GET /.git/config HTTP/1.1" 499 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.23.237.145 - - [07/Nov/2026:03:56:07 +0100] "GET /.env HTT ...
show more
34.23.237.145 - - [07/Nov/2026:03:56:00 +0100] "GET /.git/config HTTP/1.1" 499 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.23.237.145 - - [07/Nov/2026:03:56:07 +0100] "GET /.env HTTP/1.1" 499 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.23.237.145 - - [07/Nov/2026:03:56:11 +0100] "GET /.env.local HTTP/1.1" 499 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.23.237.145 - - [07/Nov/2026:03:56:14 +0100] "GET /.env.production HTTP/1.1" 499 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.23.237.145 - - [07/Nov/2026:03:56:18 +0100] "GET /.env.staging HTTP/1.1" 499 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
🇺🇸
dot.mg
2026-11-07 01:20:02
UTC ·
(9 hours ago)
Bad behaviour
Web Spam
🇸🇪
vaia.cloud
2026-11-06 23:10:01
UTC ·
(12 hours ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
🇵🇱
sefinek.net
2026-11-06 21:32:23
UTC ·
(13 hours ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action: BLOCK | Protocol: HTTP/1.1 (GET) | Endpoint: /firebase-key.json | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 • Generat ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action: BLOCK | Protocol: HTTP/1.1 (GET) | Endpoint: /firebase-key.json | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇫🇮
as211431.net
2026-11-06 18:19:13
UTC ·
(16 hours ago)
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: BLOCK
Protocol: HTTP/1.1 (POST method)
Endpoint: /
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
This report was ...
show more
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: BLOCK
Protocol: HTTP/1.1 (POST method)
Endpoint: /
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇵🇱
Budyn
2026-11-06 12:18:45
UTC ·
(22 hours ago)
[Budyn Honeypot Sinkhole] | Attack type: Enterprise & Framework Recon Scanner | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: nx.budyn.wtf | Path: /.git/config | User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15 ...
show more
[Budyn Honeypot Sinkhole] | Attack type: Enterprise & Framework Recon Scanner | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: nx.budyn.wtf | Path: /.git/config | User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | Request: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇫🇷
uthul
2026-11-06 11:25:54
UTC ·
(23 hours ago)
T-Pot honeypot: 99 hits on ports [443] (automated)
Port Scan
Web App Attack
🇳🇱
e.fierstra
2026-11-06 10:57:34
UTC ·
(1 day ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇺🇦
URAN Publishing Service
2026-11-06 09:04:26
UTC ·
(1 day ago)
[06/Nov/2026:11:04:26 +0200] -- 34.23.237.145 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.git/config HTTP/1.1
Bad Web Bot
Web App Attack