🇳🇱
homeshowdomain.nl
2026-11-06 23:01:38
UTC ·
(3 hours ago)
Auto-ban: >3000 req/min op 2026-11-06
Web App Attack
SSH
Hacking
2026-11-06 20:16:55
UTC ·
(6 hours ago)
(mod_security) mod_security triggered on hostname [redacted] 34.95.136.127 (BR/Brazil/127.136.95.34.bc.googleusercontent.com)
SQL Injection
🇺🇸
jormaster3k
2026-11-06 20:00:45
UTC ·
(6 hours ago)
Attack against Apache (too many 404s)
Web App Attack
🇺🇸
Sockets-AR
2026-11-06 19:20:34
UTC ·
(6 hours ago)
CrowdSec: path traversal attempt detected (crowdsecurity/http-path-traversal-probing) at 2026-11-06T19:20:34.459Z
Web App Attack
2026-11-06 18:22:14
UTC ·
(7 hours ago)
Bot / seems abusive / Apache connections: 28
DDoS Attack
Web Spam
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-11-06 17:52:33
UTC ·
(8 hours ago)
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: elastic.budyn.ovh | Path: /uploads../.env | User-Agent: DuckAssistBot/1.1 (https://duckduckgo ...
show more
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: elastic.budyn.ovh | Path: /uploads../.env | User-Agent: DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot) | Request: [Empty / GET Request]
show less
Hacking
Web App Attack
🇵🇱
sefinek.net
2026-11-06 17:36:06
UTC ·
(8 hours ago)
Triggered Cloudflare WAF (firewallCustom) from BR.
Action: BLOCK | Protocol: HTTP/2 (GET) | Endpoint: /assets../.env | UA: Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/) • Generated by: github.com/sefinek/Cloudflare-WAF-To-Abus ...
show more
Triggered Cloudflare WAF (firewallCustom) from BR.
Action: BLOCK | Protocol: HTTP/2 (GET) | Endpoint: /assets../.env | UA: Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/) • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇷🇴
iulianh
2026-11-06 17:27:36
UTC ·
(8 hours ago)
80,443
Brute-Force
SSH
🇩🇪
mzaiser12
2026-11-06 17:02:08
UTC ·
(9 hours ago)
Web application probing: 168 requests to typical attack paths (/.env.production, /.env.ses, /admin/.env, /.env.keys) within 5 min. Reported automatically by a SIEM; contact via abuse mailbox of the reporting network.
Bad Web Bot
Web App Attack
🇨🇦
cubie
2026-11-06 16:15:37
UTC ·
(10 hours ago)
CubieCloud automated detection (CubieAurora): path traversal attempts (x3); high-rate 404 scanning (x1). Observed over ~1h against our web platform. Confidence score 70/100.
Hacking
Bad Web Bot
Web App Attack
🇩🇪
shurizma
2026-11-06 15:50:09
UTC ·
(10 hours ago)
[06/Nov/2026:15:50:09 +0000] - 401 401 - GET https node.shuri.gg "/.env.staging.local" [Client 34.95.136.127] [Length 77] [Gzip -] [Sent-to 127.0.0.1] "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic ...
show more
[06/Nov/2026:15:50:09 +0000] - 401 401 - GET https node.shuri.gg "/.env.staging.local" [Client 34.95.136.127] [Length 77] [Gzip -] [Sent-to 127.0.0.1] "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )" "-"
...
show less
Web App Attack
Bad Web Bot
🇵🇱
Budyn
2026-11-06 15:48:01
UTC ·
(10 hours ago)
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: apm.budyn.ovh | Path: /.vite/manifest.json | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; ...
show more
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: apm.budyn.ovh | Path: /.vite/manifest.json | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 | Request: [Empty / GET Request]
show less
Hacking
Web App Attack
2026-11-06 15:43:16
UTC ·
(10 hours ago)
34.95.136.127 - - [06/Nov/2026:23:43:14 +0800] "GET /o4ebr3i30p1e3uizxrdk HTTP/1.1" 404 39532 "https://www.nonsensemakers.com/o4ebr3i30p1e3uizxrdk" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.co ...
show more
34.95.136.127 - - [06/Nov/2026:23:43:14 +0800] "GET /o4ebr3i30p1e3uizxrdk HTTP/1.1" 404 39532 "https://www.nonsensemakers.com/o4ebr3i30p1e3uizxrdk" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot"
34.95.136.127 - - [06/Nov/2026:23:43:15 +0800] "GET /wp/wp-includes/js/jquery/ui/tabs.min.js.map HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"
34.95.136.127 - - [06/Nov/2026:23:43:15 +0800] "GET /wp/wp-includes/js/jquery/ui/core.min.js.map HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"
34.95.136.127 - - [06/Nov/2026:23:43:15 +0800] "GET /wp/wp-content/plugins/pagelines-lazyloader/js/lazy-load.js.map HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari
...
show less
Bad Web Bot
Web App Attack
🇩🇪
updown.io
2026-11-06 15:09:02
UTC ·
(11 hours ago)
{"level":"info","ts":1793977741.977288,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.95.136.127","remote_port":"54100","client_ip":"34.95.136.127","proto":"HTTP/2.0","method":"GET","host":"status.cloudpirates.io", ...
show more
{"level":"info","ts":1793977741.977288,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.95.136.127","remote_port":"54100","client_ip":"34.95.136.127","proto":"HTTP/2.0","method":"GET","host":"status.cloudpirates.io","uri":"/supabase/config.toml","headers":{"X-Custom-Ip-Authorization":["100.101.191.143"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"Accept":["*/*"],"X-Originating-Ip":["100.101.191.143"],"Accept-Encoding":["gzip"],"Cluster-Client-Ip":["100.101.191.143"],"X-Forwarded-For":["100.101.191.143"],"X-Real-Ip":["100.101.191.143"],"X-Client-Ip":["100.101.191.143"],"X-Proxyuser-Ip":["100.101.191.143"],"User-Agent":["Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"],"Forwarded":["for=100.101.191.143"],"True-Client-Ip":["100.101.191.143"],"X-Nextjs-Data":["1"],"X-Remote-Ip":["100.101.191.143"],"X-R
...
show less
DDoS Attack
Web App Attack
🇹🇷
Jova
2026-11-06 15:07:50
UTC ·
(11 hours ago)
Requests impersonating 3 different crawlers from one IP.
Bad Web Bot
