๐ณ๐ด
tmiland
2026-10-11 02:15:13
(2 days ago)
Detected 67 connections from 34.48.205.99 last 10 minutes.; lone high-rate source (combined 134 requ ...
show more
Detected 67 connections from 34.48.205.99 last 10 minutes.; lone high-rate source (combined 134 requests in both windows); Logs: 34.48.205.99 - - [11/Oct/2026:04:14:34 +0200] \GET / HTTP/1.1\" 200 50196 \"-\" \"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML
show less
DDoS Attack
Bad Web Bot
Web App Attack
๐ณ๐ด
tmiland
2026-10-11 02:14:43
(2 days ago)
(nginx_444) Nginx 444 34.48.205.99 (US/United States/99.205.48.34.bc.googleusercontent.com): 5 in th ...
show more
(nginx_444) Nginx 444 34.48.205.99 (US/United States/99.205.48.34.bc.googleusercontent.com): 5 in the last 3600 secs; IP: 34.48.205.99; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.48.205.99 - - [11/Oct/2026:04:14:36 +0200] "GET /z9x8c7v6b5-debug-trigger-app.*.* HTTP/1.1" 444 0 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)" 34.48.205.99 - - [11/Oct/2026:04:14:37 +0200] "GET /z9x8c7v6b5-debug-trigger-app.*.* HTTP/1.1" 444 0 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)" 34.48.205.99 - - [11/Oct/2026:04:14:40 +0200] "GET /Dockerfile HTTP/1.1" 444 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )" 34.48.205.99 - - [11/Oct/2026:04:14:40 +0200] "GET /docker-compose.yaml HTTP/1.1" 444 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )" 34.48.205.99 - - [11/Oct/2026:04:14:40 +0200] "GET /.npmrc HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://coher
show less
Brute-Force
Anonymous
2026-10-11 01:50:28
(2 days ago)
34.48.205.99 - - [10/Oct/2026:20:49:45 -0500] "GET /.env.production HTTP/1.1" 403 199 "-" "Mozilla/5 ...
show more
34.48.205.99 - - [10/Oct/2026:20:49:45 -0500] "GET /.env.production HTTP/1.1" 403 199 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot" 34.48.205.99
34.48.205.99 - - [10/Oct/2026:20:49:45 -0500] "GET /.env.example HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 34.48.205.99
34.48.205.99 - - [10/Oct/2026:20:49:45 -0500] "GET /.env.old HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" 34.48.205.99
34.48.205.99 - - [10/Oct/2026:20:49:45 -0500] "GET /.env.bak HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)" 34.48.205.99
34.48.205.99 - - [10/Oct/2026:20:49:45 -0500] "GET /.env.save HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; Meta-Externa
...
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
Quarks Solutions
2026-10-11 01:30:50
(2 days ago)
crowdsecurity/appsec-vpatch
Web App Attack
๐ฉ๐ช
bazter.pro
2026-10-11 01:23:41
(2 days ago)
Fail2Ban: plesk-bot-aggressive - 15 failures
Port Scan
Bad Web Bot
Web App Attack
๐ฌ๐ง
relianoid.com
2026-10-11 01:17:01
(2 days ago)
404 Errors Abuse detected by Relianoid OSS Load Balancer - relianoid.com
Web App Attack
๐บ๐ธ
1gz
2026-10-11 01:14:08
(2 days ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: CHALLENGE
Protocol: HTTP/2 (GET met ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: CHALLENGE
Protocol: HTTP/2 (GET method)
Endpoint: /firebase-adminsdk.json
UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐ณ๐ฑ
tmiland
2026-10-11 01:00:02
(2 days ago)
Detected 90 connections from 34.48.205.99 last 10 minutes.; lone high-rate source (combined 180 requ ...
show more
Detected 90 connections from 34.48.205.99 last 10 minutes.; lone high-rate source (combined 180 requests in both windows); Logs: 34.48.205.99 - - [11/Oct/2026:02:59:19 +0200] "GET / HTTP/1.1" 200 8297 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" 34.48.205.99 - - [11/Oct/2026:02:59:20 +0200] "GET /webpack-stats.json HTTP/1.1" 200 8289 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" 34.48.205.99 - - [11/Oct/2026:02:59:21 +0200] "GET /q7lx83mt284fg06uaas5 HTTP/1.1" 444 0 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)" 34.48.205.99 - - [11/Oct/2026:02:59:21 +0200] "GET /service-worker.js HTTP/1.1" 200 94 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" 34.48.205.99 - - [11/Oct/2026:02:59:21 +0200] "GET /unauthenticated/js/session-login.min.js?26502009999999999 HTT
show less
DDoS Attack
Bad Web Bot
Web App Attack
๐ณ๐ฑ
tmiland
2026-10-11 00:59:36
(2 days ago)
(nginx_444) Nginx 444 34.48.205.99 (US/United States/99.205.48.34.bc.googleusercontent.com): 5 in th ...
show more
(nginx_444) Nginx 444 34.48.205.99 (US/United States/99.205.48.34.bc.googleusercontent.com): 5 in the last 3600 secs; IP: 34.48.205.99; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.48.205.99 - - [11/Oct/2026:02:59:21 +0200] "GET /q7lx83mt284fg06uaas5 HTTP/1.1" 444 0 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)" 34.48.205.99 - - [11/Oct/2026:02:59:24 +0200] "GET /dashboard%2F.env HTTP/1.1" 444 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot" 34.48.205.99 - - [11/Oct/2026:02:59:25 +0200] "GET /admin%2F.env HTTP/1.1" 444 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot" 34.48.205.99 - - [11/Oct/2026:02:59:26 +0200] "GET /dashboard%2F.env HTTP/1.1" 444 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot" 34.48.205.99 - - [11/Oct/2026:02:59:26 +0200] "GET /admin%2F.env HTTP/1.1" 444 0 "-
show less
Brute-Force
Anonymous
2026-10-11 00:59:29
(2 days ago)
Aggressive web scan
Web App Attack
๐ณ๐ฑ
Savvii
2026-10-11 00:45:26
(2 days ago)
20 attempts against mh-misbehave-ban on lunar
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
EmilGH
2026-10-11 00:43:23
(2 days ago)
34.48.205.99 - - [10/Oct/2026:20:43:22 -0400] "GET /manual HTTP/1.1" 404 470 "-" "Mozilla/5.0 (Windo ...
show more
34.48.205.99 - - [10/Oct/2026:20:43:22 -0400] "GET /manual HTTP/1.1" 404 470 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
34.48.205.99 - - [10/Oct/2026:20:43:22 -0400] "GET /wwms1cvgb8zgx3kbitxl HTTP/1.1" 404 470 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
34.48.205.99 - - [10/Oct/2026:20:43:22 -0400] "GET /ntd463qv6edazas091bt HTTP/1.1" 404 4421 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
34.48.205.99 - - [10/Oct/2026:20:43:22 -0400] "GET /auth/login HTTP/1.1" 404 4422 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
34.48.205.99 - - [10/Oct/2026:20:43:22 -0400] "GET /sign-in HTTP/1.1" 404 4423 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537
...
show less
Bad Web Bot
Web App Attack
Anonymous
2026-10-11 00:30:26
(2 days ago)
Likely credential stuffing on WordPress site
Bad Web Bot
Web App Attack
๐ง๐ฌ
HighWay
2026-10-11 00:18:32
(2 days ago)
34.48.205.99 - - [11/Oct/2026:00:18:20 +0000] "GET /__vite_rsc_findSourceMapURL?filename=file:///app ...
show more
34.48.205.99 - - [11/Oct/2026:00:18:20 +0000] "GET /__vite_rsc_findSourceMapURL?filename=file:///app/.env&environmentName=rsc HTTP/1.1" 404 4759 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
34.48.205.99 - - [11/Oct/2026:00:18:21 +0000] "GET /api/data/..%2f..%2f.env HTTP/1.1" 403 421 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"
34.48.205.99 - - [11/Oct/2026:00:18:21 +0000] "GET /_image?href=/../../../.env HTTP/1.1" 403 421 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
...
show less
Port Scan
Bad Web Bot
Web App Attack
๐บ๐ธ
[email protected]
2026-10-11 00:17:08
(2 days ago)
CrowdSec ban: crowdsecurity/http-admin-interface-probing (duration: 71h59m57s)
Web App Attack