🇳🇱
homeshowdomain.nl
2026-11-07 22:59:40
UTC ·
(6 days ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-11-06.
Web App Attack
SSH
Hacking
2026-11-06 09:36:26
UTC ·
(1 week ago)
Web application attack: http sensitive files; Web application attack: http path traversal probing; Web application attack: http cve 2021 41773; Probing for exposed secret / credential files
Hacking
Web App Attack
🇳🇱
Site.eu
2026-11-06 09:34:44
UTC ·
(1 week ago)
Scanning for secret files (.env, .git, credentials, config backups)
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-11-06 09:22:17
UTC ·
(1 week ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
iwle
2026-11-06 09:16:43
UTC ·
(1 week ago)
[Fri Nov 06 04:16:39.625232 2026] [:error] [pid 909140:tid 909200] [client 34.47.48.61:0] [client 34.47.48.61] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/httpd/modsecurity.d/activated_ru ...
show more
[Fri Nov 06 04:16:39.625232 2026] [:error] [pid 909140:tid 909200] [client 34.47.48.61:0] [client 34.47.48.61] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "153"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.justuptowngames.com"] [uri "/env.old"] [unique_id "au2a9wKucjNKWYSiQAdpYAAAAJA"], referer: https://justuptowngames.com/env.old
[Fri Nov 06 04:16:41.136909 2026] [:error] [pid 909453:tid 909505] [client 34.47.48.61:0] [client 34.47.48.61] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "153"] [id "949110"] [msg "Inbound Anomaly
...
show less
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-11-06 08:45:41
UTC ·
(1 week ago)
[ti-22al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 34.47.48.61 - - [06/Nov/2026:09:45:27 +0100] "GET /sitemap_index.xml HTTP/2.0" 404 1855 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, l ...
show more
[ti-22al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 34.47.48.61 - - [06/Nov/2026:09:45:27 +0100] "GET /sitemap_index.xml HTTP/2.0" 404 1855 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot"
34.47.48.61 - - [06/Nov/2026:09:45:27 +0100] "GET /38mhcaseix1spnkj6jdq HTTP/2.0" 404 1855 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )"
34.47.48.61 - - [06/Nov/2026:09:45:27 +0100] "GET /z9x8c7v6b5-debug-trigger-kibana.oorpiep.nl HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
34.47.48.61 - - [06/Nov/2026:09:45:27 +0100] "GET /tv0dnzh2a8tzsmmgz23w HTTP/2.0" 404
...
show less
Bad Web Bot
Web App Attack
🇳🇱
e.fierstra
2026-11-06 08:33:01
UTC ·
(1 week ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
2026-11-06 07:05:24
UTC ·
(1 week ago)
Blocked by firewall on hugin [8080/tcp] | Rule: UFW | SPT: 55880 | TTL: 51 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇩🇪
iNetWorker
2026-11-06 07:05:15
UTC ·
(1 week ago)
trying to access non-authorized port
Port Scan
🇫🇷
mrcrassi
2026-11-06 05:59:55
UTC ·
(1 week ago)
Triggered Cloudflare WAF (firewallManaged) from CA.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /.env.prod.local
UA: Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)
This report was generated b ...
show more
Triggered Cloudflare WAF (firewallManaged) from CA.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /.env.prod.local
UA: Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-11-06 04:45:19
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.47.48.61 (61.48.47.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 23:45:14.235472 2026] [security2:error] [pid 10063:tid 1006 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.47.48.61 (61.48.47.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 23:45:14.235472 2026] [security2:error] [pid 10063:tid 10063] [client 34.47.48.61:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whm.cloudex.click"] [uri "/.env.preprod"] [unique_id "au1bWu6mhUS4APFOJ_n5pwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Phenix Info
2026-11-06 03:41:53
UTC ·
(1 week ago)
SmallGuard.fr/Prestashop Forbidden Ext.
Web App Attack
🇩🇪
bazter.pro
2026-11-06 02:18:11
UTC ·
(1 week ago)
Fail2Ban: plesk-bot-aggressive - 15 failures
Port Scan
Bad Web Bot
Web App Attack
🇩🇪
konseptit
2026-11-06 02:05:40
UTC ·
(1 week ago)
(mod_security) mod_security triggered on hostname [redacted] 34.47.48.61 (CA/Canada/61.48.47.34.bc.googleusercontent.com)
SQL Injection
🇬🇧
andypiper
2026-11-06 02:02:08
UTC ·
(1 week ago)
CrowdSec ban for AbuseIPDB Top List
Brute-Force
Web App Attack
