๐ง๐ท
Peregrine
2026-08-21 03:16:24
(2 days ago)
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 34.83.187.233 104.22.72.10 - - [18/Aug/2026:14:27:0 ...
show more
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 34.83.187.233 104.22.72.10 - - [18/Aug/2026:14:27:01 -0300] "GET /.aws/config HTTP/1.1" 404 18149
show less
Bad Web Bot
๐ง๐ท
Peregrine
2026-08-19 03:17:12
(4 days ago)
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 34.83.187.233 104.22.72.10 - - [18/Aug/2026:14:27:0 ...
show more
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 34.83.187.233 104.22.72.10 - - [18/Aug/2026:14:27:01 -0300] "GET /.aws/config HTTP/1.1" 404 18149
show less
Bad Web Bot
Anonymous
2026-08-18 17:32:18
(4 days ago)
2026/08/18 14:32:16 [error] 2704777#2704777: *153915 access forbidden by rule, client: 34.83.187.233 ...
show more
2026/08/18 14:32:16 [error] 2704777#2704777: *153915 access forbidden by rule, client: 34.83.187.233, server: blog.sorotop.com.br, request: "GET /.env.js HTTP/2.0", host: "blog.sorotop.com.br"
2026/08/18 14:32:17 [error] 2704777#2704777: *153915 access forbidden by rule, client: 34.83.187.233, server: blog.sorotop.com.br, request: "GET /.git/config HTTP/2.0", host: "blog.sorotop.com.br"
2026/08/18 14:32:17 [error] 2704777#2704777: *153915 access forbidden by rule, client: 34.83.187.233, server: blog.sorotop.com.br, request: "GET /.git/HEAD HTTP/2.0", host: "blog.sorotop.com.br"
...
show less
Port Scan
๐ซ๐ท
mrcrassi
2026-08-18 16:33:10
(4 days ago)
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: BLOCK
Protocol: HTTP/2 (GET method ...
show more
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /.env.js
UA: anthropic-ai
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
Anonymous
2026-08-18 16:32:02
(4 days ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
๐ง๐ท
Halux
2026-08-18 15:59:28
(4 days ago)
34.83.187.233 Probing protected path or service
Web App Attack
๐ฎ๐ณ
evicky2002
2026-08-18 07:13:36
(5 days ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
Anonymous
2026-08-17 20:10:59
(5 days ago)
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Word ...
show more
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: WordPress scanning, Backup file probing, Cloud secrets probing
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
InfraGuardAPI
2026-08-17 17:42:13
(5 days ago)
InfraGuard API: sonda honeypot em /api/.env
Hacking
Bad Web Bot
๐ธ๐ช
vaia.cloud
2026-08-17 06:45:03
(6 days ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
Anonymous
2026-08-17 06:06:18
(6 days ago)
34.83.187.233 - - [17/Aug/2026:08:06:17 +0200] "GET /manifest.json HTTP/1.1" 404 184 "-" "Mozilla/5. ...
show more
34.83.187.233 - - [17/Aug/2026:08:06:17 +0200] "GET /manifest.json HTTP/1.1" 404 184 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36 EdgA/152.0.0.0"
34.83.187.233 - - [17/Aug/2026:08:06:17 +0200] "GET /config/database.yml HTTP/1.1" 403 124 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot"
34.83.187.233 - - [17/Aug/2026:08:06:17 +0200] "GET /assets/manifest.json HTTP/1.1" 404 184 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36 EdgA/152.0.0.0"
34.83.187.233 - - [17/Aug/2026:08:06:17 +0200] "GET /rclone.conf HTTP/1.1" 403 124 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot"
34.83.187.233 - - [17/Aug/2026:08:06:17 +0200] "GET /wp-json HTTP/1.1" 403 124 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatibl
...
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
Vasile
2026-08-17 06:03:46
(6 days ago)
Shield Guard: AbuseIPDB: 100% (trรจs malveillant) | Honeypot: /.env.old
Web App Attack
Anonymous
2026-08-17 05:50:05
(6 days ago)
IP banned by Fail2Ban in jail nginx-abusive-ips
Web App Attack
Brute-Force
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-08-17 05:46:37
(6 days ago)
(mod_security) mod_security (id:210730) triggered by 34.83.187.233 (233.187.83.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.83.187.233 (233.187.83.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 01:46:31.985955 2026] [security2:error] [pid 10982:tid 10985] [client 34.83.187.233:33346] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||atechtransmission.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "atechtransmission.com"] [uri "/z9x8c7v6b5-debug-trigger-atechtransmission.com"] [unique_id "aoKgN5LIT0EU9t4xY_gM4gAAAUA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฆ๐บ
rubixstudios
2026-08-17 05:43:03
(6 days ago)
Excessive HTTP requests consistent with automated attack behaviour detected by Imunify360
DDoS Attack
Brute-Force
Web App Attack