🇩🇪
Manuel Braeuer
2026-10-21 10:57:48
(1 day ago)
34.24.41.248 - - [21/Oct/2026:12:57:47 +0200] "GET /img../.env HTTP/1.1" 403 6260 "-" "DuckAssistBot ...
show more
34.24.41.248 - - [21/Oct/2026:12:57:47 +0200] "GET /img../.env HTTP/1.1" 403 6260 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
34.24.41.248 - - [21/Oct/2026:12:57:47 +0200] "GET /media../.env HTTP/1.1" 403 6260 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
34.24.41.248 - - [21/Oct/2026:12:57:47 +0200] "GET /images../.env HTTP/1.1" 403 6260 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"
34.24.41.248 - - [21/Oct/2026:12:57:48 +0200] "GET /dist../.env HTTP/1.1" 403 6260 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
34.24.41.248 - - [21/Oct/2026:12:57:48 +0200] "GET /public../.env HTTP/1.1" 403 6260 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
...
show less
Web App Attack
🇫🇷
Murazaki
2026-10-21 09:40:33
(1 day ago)
portainer.mehdibenadel.com 34.24.41.248 - - [21/Oct/2026:11:40:33 +0200] "-" 500 170 "-" "-" "-"
...
Hacking
🇺🇸
abuse-opdc
2026-10-21 09:11:26
(1 day ago)
Malicious HTTP requests matching injection/exploit signatures.
Web App Attack
Brute-Force
🇫🇷
Murazaki
2026-10-21 06:30:09
(1 day ago)
cloud.mehdibenadel.com 34.24.41.248 - - [21/Oct/2026:08:30:09 +0200] "-" 500 170 "-" "-" "-"
...
Hacking
🇺🇸
antlac1
2026-10-21 05:51:06
(1 day ago)
CrowdSec detected malicious behaviour (scenario: LePresidente/http-generic-403-bf)
Web App Attack
🇺🇸
jormaster3k
2026-10-21 05:26:10
(1 day ago)
Attack against Apache (too many 404s)
Web App Attack
🇩🇪
netclix.gr
2026-10-21 05:08:23
(1 day ago)
(mod_security) mod_security triggered on hostname [redacted] 34.24.41.248 (US/United States/248.41.2 ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.24.41.248 (US/United States/248.41.24.34.bc.googleusercontent.com)
show less
SQL Injection
🇷🇸
Smel
2026-10-21 05:07:15
(1 day ago)
HTTP/80/443/8080 Unauthorized Probe, Hack -
Hacking
Web App Attack
🇺🇸
nasset
2026-10-21 05:02:23
(1 day ago)
34.24.41.248 - - [20/Oct/2026:22:02:23 -0700] "GET /app/..;/.env HTTP/1.1" 404 581 "-" "Mozilla/5.0 ...
show more
34.24.41.248 - - [20/Oct/2026:22:02:23 -0700] "GET /app/..;/.env HTTP/1.1" 404 581 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" TLSv1.3 TLS_AES_256_GCM_SHA384
34.24.41.248 - - [20/Oct/2026:22:02:23 -0700] "GET /.env.supabase HTTP/1.1" 403 584 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )" TLSv1.3 TLS_AES_256_GCM_SHA384
34.24.41.248 - - [20/Oct/2026:22:02:23 -0700] "GET /dist/.env HTTP/1.1" 403 584 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)" TLSv1.3 TLS_AES_256_GCM_SHA384
34.24.41.248 - - [20/Oct/2026:22:02:23 -0700] "GET /core/.env HTTP/1.1" 403 584 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36" TLSv1.3 TLS_AES_256_GCM_SHA384
34.24.41.248 - - [20/Oct/2026:22:02:23 -0700] "GET /build/.env HTTP/1.1" 4
...
show less
Bad Web Bot
Web App Attack
🇩🇪
MarkGGN
2026-10-21 04:57:06
(1 day ago)
Web attack. 34.24.41.248 - - [21/Oct/2026:06:57:06 +0200] "GET /_image?href=/../../../.env HTTP/2.0" ...
show more
Web attack. 34.24.41.248 - - [21/Oct/2026:06:57:06 +0200] "GET /_image?href=/../../../.env HTTP/2.0" 404 742 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
34.24.41.248 - - [21/Oct/2026:06:57:06 +0200] "GET /client/.env HTTP/2.0" 444 0 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
show less
Web App Attack
🇩🇪
todix
2026-10-21 02:43:51
(1 day ago)
"GET /@fs/.env?raw?? HTTP/1.1" 403 6505 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +/)"
Web App Attack
2026-10-21 02:09:59
(1 day ago)
Attempted access to sensitive endpoint (/api/uploads/%2e%2e%2f%2e%2e%2f.env) detected. Automated sca ...
show more
Attempted access to sensitive endpoint (/api/uploads/%2e%2e%2f%2e%2e%2f.env) detected. Automated scan or unauthorized probing.
show less
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-10-21 01:56:03
(1 day ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-cve-2021-41773
Web App Attack
Hacking
🇬🇧
pinguin
2026-10-21 01:34:21
(1 day ago)
Triggered Cloudflare WAF (ratelimit) from US.
Action taken: BLOCK
Protocol: HTTP/2 (POST method)
End ...
show more
Triggered Cloudflare WAF (ratelimit) from US.
Action taken: BLOCK
Protocol: HTTP/2 (POST method)
Endpoint: /api
UA: Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇳🇱
taivas.nl
2026-10-21 01:30:04
(1 day ago)
General_bad_requests
Bad Web Bot