🇳🇱
Roderic
2026-11-06 10:02:37
UTC ·
(7 hours ago)
Insights: web vulnerability probing, 52 requests on 1 site, e.g. /js../.env, /backend/.env, /img../.env (rotating 27 fake bot names, e.g. DeepSeekBot, Browser via Google Cloud, bot (develope
Web App Attack
🇦🇺
aranguren.org
2026-11-06 09:54:17
UTC ·
(7 hours ago)
34.7.225.54 - - [06/Nov/2026:20:54:11 +1100] "GET /.git/config HTTP/2.0" 301 281 "-" "Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" TLSv1.3 TLS_AES_128_GCM_SHA256
34.7.225.54 - - ...
show more
34.7.225.54 - - [06/Nov/2026:20:54:11 +1100] "GET /.git/config HTTP/2.0" 301 281 "-" "Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" TLSv1.3 TLS_AES_128_GCM_SHA256
34.7.225.54 - - [06/Nov/2026:20:54:16 +1100] "GET /.git/config%3F.css HTTP/2.0" 301 288 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot" TLSv1.3 TLS_AES_128_GCM_SHA256
...
show less
Web App Attack
🇨🇦
polycoda
2026-11-06 09:48:02
UTC ·
(8 hours ago)
AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based) - ⚙️ Configuration File Access (Non Decay-Based) - ❌ Excessive 40X Errors (Decay-Based)
Hacking
Bad Web Bot
Web App Attack
🇩🇪
Skyrider
2026-11-06 09:40:28
UTC ·
(8 hours ago)
Nginx: HTTP 4xx probe/scan attempts. Automated fail2ban report.
Bad Web Bot
Web App Attack
Anonymous
2026-11-06 09:26:20
UTC ·
(8 hours ago)
(config_exploit_scan) Configuratie Scanner / Nep GPTBot 34.7.225.54 (NL/The Netherlands/54.225.7.34.bc.googleusercontent.com): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.7.225.54 - - [06/Nov/2026:10:26:15 ...
show more
(config_exploit_scan) Configuratie Scanner / Nep GPTBot 34.7.225.54 (NL/The Netherlands/54.225.7.34.bc.googleusercontent.com): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.7.225.54 - - [06/Nov/2026:10:26:15 +0100] "GET /api/.env.bak HTTP/2.0" 406 321 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"
34.7.225.54 - - [06/Nov/2026:10:26:15 +0100] "GET /.env.supabase HTTP/2.0" 406 317 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)"
34.7.225.54 - - [06/Nov/2026:10:26:15 +0100] "GET /.env.docker HTTP/2.0" 406 317 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
show less
Port Scan
Anonymous
2026-11-06 09:24:14
UTC ·
(8 hours ago)
34.7.225.54 - - [06/Nov/2026:10:24:12 +0100] "GET /api/attachments/img/avatar/..%2F..%2F..%2F..%2F..%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
34.7.225.54 - - [06/Nov/2026:10:24:12 +0100] "GET /sta ...
show more
34.7.225.54 - - [06/Nov/2026:10:24:12 +0100] "GET /api/attachments/img/avatar/..%2F..%2F..%2F..%2F..%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
34.7.225.54 - - [06/Nov/2026:10:24:12 +0100] "GET /static/../../../a/../../../../.env HTTP/2.0" 400 295 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)"
34.7.225.54 - - [06/Nov/2026:10:24:12 +0100] "GET /api/attachments/img/avatar/..%2F..%2F..%2F..%2F..%2Fproc%2Fself%2Fenviron HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)"
34.7.225.54 - - [06/Nov/2026:10:24:12 +0100] "GET /appearance/../../.env HTTP/2.0" 400 295 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
34.7.225.54 - - [06/Nov/2026:10:24:12 +0100] "GET /appearance/../../proc/self/environ HTTP/2.0" 400 295 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)"
...
show less
Brute-Force
SSH
🇬🇧
Aetherweb Ark
2026-11-06 09:17:58
UTC ·
(8 hours ago)
(mod_security) mod_security (id:949110) triggered by 34.7.225.54 (NL/The Netherlands/54.225.7.34.bc.googleusercontent.com): N in the last X secs
Web App Attack
🇳🇴
Abuse Buster
2026-11-06 09:05:58
UTC ·
(8 hours ago)
34.7.225.54 - - [06/Nov/2026:10:05:53 +0100] "GET /robots.txt HTTP/2.0" 404 22 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
34.7.225.54 - - [06/Nov/2026:10:05:54 +0100] "GET /sitemap.xml HTTP/2.0" 404 22 "-" "Mozilla/5.0 (compatible; cohere-ai; +ht ...
show more
34.7.225.54 - - [06/Nov/2026:10:05:53 +0100] "GET /robots.txt HTTP/2.0" 404 22 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
34.7.225.54 - - [06/Nov/2026:10:05:54 +0100] "GET /sitemap.xml HTTP/2.0" 404 22 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)"
34.7.225.54 - - [06/Nov/2026:10:05:54 +0100] "GET /sitemap_index.xml HTTP/2.0" 404 22 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)"
...
show less
Web App Attack
🇳🇱
e.fierstra
2026-11-06 08:54:00
UTC ·
(8 hours ago)
excessive HTTP 404 errors
Bad Web Bot
🇵🇱
wHosts
2026-11-06 08:49:17
UTC ·
(9 hours ago)
Blocked by Fail2Ban
Web App Attack
🇳🇱
Alt255
2026-11-06 08:43:37
UTC ·
(9 hours ago)
[cb-01vi] Excessive 404 errors (web scanning): 50 suspicious requests detected by fail2ban jail apache-404. Example: 34.7.225.54 - - [06/Nov/2026:09:43:13 +0100] "GET /admin/users HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7 ...
show more
[cb-01vi] Excessive 404 errors (web scanning): 50 suspicious requests detected by fail2ban jail apache-404. Example: 34.7.225.54 - - [06/Nov/2026:09:43:13 +0100] "GET /admin/users HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"
34.7.225.54 - - [06/Nov/2026:09:43:13 +0100] "GET /settings/webhooks HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"
34.7.225.54 - - [06/Nov/2026:09:43:13 +0100] "GET /settings/security HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"
34.7.225.54 - - [06/Nov/2026:09:43:13 +0100] "GET /setti
...
show less
Bad Web Bot
Web App Attack
🇬🇧
pinguin
2026-11-06 08:36:34
UTC ·
(9 hours ago)
Triggered Cloudflare WAF (firewallManaged) from NL.
Action taken: LOG
Protocol: HTTP/2 (GET method)
Endpoint: /.npmrc
UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot
This report was gene ...
show more
Triggered Cloudflare WAF (firewallManaged) from NL.
Action taken: LOG
Protocol: HTTP/2 (GET method)
Endpoint: /.npmrc
UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇩🇪
neckaralb-admin.de
2026-11-06 08:25:08
UTC ·
(9 hours ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
Anonymous
2026-11-06 08:19:08
UTC ·
(9 hours ago)
Web application attack: http cve 2021 41773; Web application attack: http path traversal probing; Web application attack: http sensitive files; Probing for exposed secret / credential files
Hacking
Web App Attack
🇫🇷
Hiigara
2026-11-06 07:30:35
UTC ·
(10 hours ago)
connection attempt : 34.7.225.54 on port : tcp/8080 (HTTP-alt)
Port Scan