🇳🇱
homeshowdomain.nl
2026-11-13 23:00:25
UTC ·
(23 hours ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-11-12.
Web App Attack
SSH
Hacking
🇺🇸
Secure Gateway®️
2026-11-13 22:00:11
UTC ·
(1 day ago)
Report By Secure Gateway Security Team: Unauthorized Connection Attempt
Hacking
🇺🇸
ALSCO®️
2026-11-13 22:00:11
UTC ·
(1 day ago)
Report By ALSCO Security Team: Brute Force Login Attempt
SQL Injection
🇧🇪
boxed-it
2026-11-13 21:33:41
UTC ·
(1 day ago)
GET /.git/config (Tarpitted for 3h14m15s, wasted 682.38kB)
Web App Attack
🇩🇪
IloGus
2026-11-13 21:00:14
UTC ·
(1 day ago)
WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail
Web App Attack
🇳🇱
Site.eu
2026-11-13 20:12:29
UTC ·
(1 day ago)
Scanning for secret files (.env, .git, credentials, config backups)
Bad Web Bot
Web App Attack
🇺🇸
FreeMyIP
2026-11-13 19:56:22
UTC ·
(1 day ago)
Automated fail2ban report: web application attack / scanning for exploitable paths.
Bad Web Bot
Web App Attack
🇫🇮
as211431.net
2026-11-13 19:00:07
UTC ·
(1 day ago)
Triggered Cloudflare WAF (firewallManaged) from TW.
Action taken: BLOCK
Protocol: HTTP/1.1 (POST method)
Endpoint: /
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
This report was ...
show more
Triggered Cloudflare WAF (firewallManaged) from TW.
Action taken: BLOCK
Protocol: HTTP/1.1 (POST method)
Endpoint: /
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇳🇱
Alt255
2026-11-13 17:59:03
UTC ·
(1 day ago)
[ftpbd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34.80.100.165 - - \[13/Nov/2026:18:58:43 +0100\] "GET /.git/config HTTP/1.1" 404 2176 "-" "Mozilla/5.0 \(X11\; Linux x86_64\) AppleWebKit/537.36 \(KHTML, l ...
show more
[ftpbd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34.80.100.165 - - \[13/Nov/2026:18:58:43 +0100\] "GET /.git/config HTTP/1.1" 404 2176 "-" "Mozilla/5.0 \(X11\; Linux x86_64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇫🇷
Feelautom
2026-11-13 17:54:41
UTC ·
(1 day ago)
[FeelAutom Auto-Ban] PathScan: /.env.backup (Score: 200)
Port Scan
🇩🇪
Nevermind
2026-11-13 17:21:01
UTC ·
(1 day ago)
34.80.100.165 - - [13/Nov/2026:18:21:00 +0100] "GET /.git/config HTTP/1.1" 403 6234 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.80.100.165 - - [13/Nov/2026:18:21:01 +0 ...
show more
34.80.100.165 - - [13/Nov/2026:18:21:00 +0100] "GET /.git/config HTTP/1.1" 403 6234 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.80.100.165 - - [13/Nov/2026:18:21:01 +0100] "GET /.env HTTP/1.1" 403 6234 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.80.100.165 - - [13/Nov/2026:18:21:01 +0100] "GET /.env.local HTTP/1.1" 403 6234 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.80.100.165 - - [13/Nov/2026:18:21:01 +0100] "GET /.env.production HTTP/1.1" 403 6234 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Web App Attack
🇧🇷
ICS Labs
2026-11-13 16:48:40
UTC ·
(1 day ago)
ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-11-13 UTC.
Brute-Force
🇫🇷
security.rdmc.fr
2026-11-13 16:37:38
UTC ·
(1 day ago)
Activity from blacklisted IP
Hacking
🇺🇸
EmilGH
2026-11-13 15:38:16
UTC ·
(1 day ago)
34.80.100.165 - - [13/Nov/2026:15:38:04 +0000] "GET / HTTP/1.1" 403 2146 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.80.100.165 - - [13/Nov/2026:15:38:05 +0000] "GET /.git/config HTTP ...
show more
34.80.100.165 - - [13/Nov/2026:15:38:04 +0000] "GET / HTTP/1.1" 403 2146 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.80.100.165 - - [13/Nov/2026:15:38:05 +0000] "GET /.git/config HTTP/1.1" 403 564 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.80.100.165 - - [13/Nov/2026:15:38:05 +0000] "POST / HTTP/1.1" 403 2146 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.80.100.165 - - [13/Nov/2026:15:38:06 +0000] "GET /.env HTTP/1.1" 403 564 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.80.100.165 - - [13/Nov/2026:15:38:06 +0000] "GET /.env.local HTTP/1.1" 403 564 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.80.100.165 - - [13/Nov/2026:15:38:06 +0000] "GET /.env.production HTT
...
show less
Bad Web Bot
Web App Attack
🇩🇪
ghostwarriors
2026-11-13 14:50:20
UTC ·
(1 day ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack