🇫🇷
dynamix
2026-11-06 13:00:35
UTC ·
(37 seconds ago)
Multiple WAF Violations
Web App Attack
🇬🇧
consul.to
2026-11-06 12:45:44
UTC ·
(15 minutes ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
agenciahypelab.com.br
2026-11-06 11:51:50
UTC ·
(1 hour ago)
WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_TRIGGER
Brute-Force
SSH
🇺🇸
freehosts.eu
2026-11-06 11:43:20
UTC ·
(1 hour ago)
Triggered Cloudflare WAF (firewallCustom) from BE.
Action: BLOCK | Protocol: HTTP/2 (GET) | Endpoint: /public../.env | UA: Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot) • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
Bad Web Bot
🇲🇾
Rizzy
2026-11-06 11:38:01
UTC ·
(1 hour ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇩🇪
Gwyneth Llewelyn
2026-11-06 10:05:48
UTC ·
(2 hours ago)
2026/11/06 10:05:45 [error] 3084#3084: *1135397 access forbidden by rule, client: 34.53.201.131, server: [redacted], request: "GET /laravel/.env HTTP/2.0", host: "www.betatechnologies.info"
2026/11/06 10:05:45 [error] 3084#3084: *1135397 access forbi ...
show more
2026/11/06 10:05:45 [error] 3084#3084: *1135397 access forbidden by rule, client: 34.53.201.131, server: [redacted], request: "GET /laravel/.env HTTP/2.0", host: "www.betatechnologies.info"
2026/11/06 10:05:45 [error] 3084#3084: *1135397 access forbidden by rule, client: 34.53.201.131, server: [redacted], request: "GET /wp/.env HTTP/2.0", host: "www.betatechnologies.info"
2026/11/06 10:05:46 [error] 3084#3084: *1135397 access forbidden by rule, client: 34.53.201.131, server: [redacted], request: "GET /cache/original/%2e%2e/%2e%2e/.env HTTP/2.0", host: "www.betatechnologies.info"
show less
Brute-Force
Web App Attack
🇩🇪
FeG Deutschland
2026-11-06 10:00:38
UTC ·
(3 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇩🇪
rh24
2026-11-06 09:38:51
UTC ·
(3 hours ago)
(badbots) Bad bot user-agent [redacted] from 34.53.201.131 (BE/Belgium/131.201.53.34.bc.googleusercontent.com)
Hacking
🇩🇪
philipplindner
2026-11-06 09:05:25
UTC ·
(3 hours ago)
Honeypot hit on www.philipp-lindner.de - Targeted URI: /security_trap.php
Hacking
🇳🇱
e.fierstra
2026-11-06 09:01:59
UTC ·
(3 hours ago)
excessive HTTP 404 errors
Bad Web Bot
🇫🇮
oh.mg
2026-11-06 08:55:23
UTC ·
(4 hours ago)
34.53.201.131 - - [06/Nov/2026:09:55:18 +0100] "GET /yunohost/sso?r=aHR0cHM6Ly9mcmFuay5tcm1hbi5uZXQvLmVudj9mb289YmFy HTTP/1.1" 403 3087 "https://frank.mrman.net/.env%3Ffoo=bar" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) ...
show more
34.53.201.131 - - [06/Nov/2026:09:55:18 +0100] "GET /yunohost/sso?r=aHR0cHM6Ly9mcmFuay5tcm1hbi5uZXQvLmVudj9mb289YmFy HTTP/1.1" 403 3087 "https://frank.mrman.net/.env%3Ffoo=bar" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
34.53.201.131 - - [06/Nov/2026:09:55:20 +0100] "GET /yunohost/sso?r=aHR0cHM6Ly9mcmFuay5tcm1hbi5uZXQvLm5leHQvc2VydmVyL2FwcC9wYWdlLmpz HTTP/1.1" 403 498 "https://frank.mrman.net/.next/server/app/page.js" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
34.53.201.131 - - [06/Nov/2026:09:55:21 +0100] "GET /yunohost/sso?r=aHR0cHM6Ly9mcmFuay5tcm1hbi5uZXQvYXBpL2ZzL3JlYWQ/YWxsb3dPdXRzaWRlV29ya3NwYWNlPXRydWUmcGF0aD0vYXBwLy5lbnY= HTTP/1.1" 403 498 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Goog
...
show less
Bad Web Bot
Web App Attack
🇳🇱
thedreamer.nl
2026-11-06 08:14:33
UTC ·
(4 hours ago)
34.53.201.131 - - [06/Nov/2026:09:11:31 +0100] "GET / HTTP/2.0" 403 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0" "BE" "Brussels" "50.85340" "4.34700"
34. ...
show more
34.53.201.131 - - [06/Nov/2026:09:11:31 +0100] "GET / HTTP/2.0" 403 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0" "BE" "Brussels" "50.85340" "4.34700"
34.53.201.131 - - [06/Nov/2026:09:11:31 +0100] "GET /robots.txt HTTP/2.0" 403 107 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)" "BE" "Brussels" "50.85340" "4.34700"
34.53.201.131 - - [06/Nov/2026:09:11:31 +0100] "GET /sitemap.xml HTTP/2.0" 403 107 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)" "BE" "Brussels" "50.85340" "4.34700"
34.53.201.131 - - [06/Nov/2026:09:11:31 +0100] "GET /sitemap_index.xml HTTP/2.0" 403 107 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot" "BE" "Brussels" "50.85340" "4.34700"
34.53.201.131 - - [06/Nov/2026:09:11:31 +0100] "GET /admin HTTP/2.0" 403 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7)
...
show less
Brute-Force
Bad Web Bot
Anonymous
2026-11-06 08:12:22
UTC ·
(4 hours ago)
Web application attack: http cve 2021 41773; Web application attack: http path traversal probing; Web application attack: http sensitive files; Probing for exposed secret / credential files
Hacking
Web App Attack
🇳🇱
Alt255
2026-11-06 08:08:24
UTC ·
(4 hours ago)
[cb-09al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 34.53.201.131 - - [06/Nov/2026:09:08:10 +0100] "GET /z9x8c7v6b5-debug-trigger-dashboard.freightlounge.network HTTP/2.0" 404 1855 "-" ...
show more
[cb-09al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 34.53.201.131 - - [06/Nov/2026:09:08:10 +0100] "GET /z9x8c7v6b5-debug-trigger-dashboard.freightlounge.network HTTP/2.0" 404 1855 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot"
34.53.201.131 - - [06/Nov/2026:09:08:10 +0100] "GET /checkout HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
34.53.201.131 - - [06/Nov/2026:09:08:10 +0100] "GET /login HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
34.53.201.131 - - [06/Nov/2026:09:08:
...
show less
Bad Web Bot
Web App Attack
🇫🇷
SpaceHost-Server
2026-11-05 23:20:07
UTC ·
(13 hours ago)
Brute-Force
Web App Attack