๐บ๐ธ
Starburst SysOp Team
2026-06-26 07:17:40
(22 minutes ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-mnz6-1)
Hacking
Web App Attack
๐ฆ๐บ
clapper
2026-06-26 06:59:54
(40 minutes ago)
(mod_security) mod_security (id:949110) triggered by 45.45.237.2 (US/United States/hosted-by.infraly ...
show more
(mod_security) mod_security (id:949110) triggered by 45.45.237.2 (US/United States/hosted-by.infraly.co): 3 in the last 3600 secs; ID: LUC
show less
Brute-Force
Bad Web Bot
๐บ๐ธ
Starburst SysOp Team
2026-06-26 06:50:17
(49 minutes ago)
(mod_security-custom) mod_security (id:210492) triggered by 45.45.237.2 (US/United States/Illinois/C ...
show more
(mod_security-custom) mod_security (id:210492) triggered by 45.45.237.2 (US/United States/Illinois/Chicago/hosted-by.infraly.co/[AS400529 INFRALY-LLC]): 1 in the last 3600 secs (0-srv1)
show less
Hacking
๐จ๐ฆ
electronico
2026-06-26 06:01:18
(1 hour ago)
45.45.237.2 - - [26/Jun/2026:17:01:15 +1100] "GET /.git/HEAD HTTP/1.1" 404 5878 "-" "CCBot/2.0 (http ...
show more
45.45.237.2 - - [26/Jun/2026:17:01:15 +1100] "GET /.git/HEAD HTTP/1.1" 404 5878 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
45.45.237.2 - - [26/Jun/2026:17:01:15 +1100] "GET /.git/config HTTP/1.1" 404 5878 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
45.45.237.2 - - [26/Jun/2026:17:01:16 +1100] "GET /.env HTTP/1.1" 404 2049 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
45.45.237.2 - - [26/Jun/2026:17:01:16 +1100] "GET /.env.production HTTP/1.1" 404 2049 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)"
45.45.237.2 - - [26/Jun/2026:17:01:16 +1100] "GET /.env.local HTTP/1.1" 404 2049 "-" "Mozilla/5.0 (compatible; Google-CloudVertexBot; +https://cloud.google.com/vertex-ai-bot)"
45.45.237.2 - - [26/Jun/2026:17:01:17 +1100] "GET /.env.bak HTTP/1.1" 404 2049 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)"
45.45.237.2 - - [26/Jun/2026:17:01:17 +1100] "GET /.env.development HTTP/1.1" 404 2049 "
...
show less
Brute-Force
Web App Attack
๐ซ๐ท
masterguru
2026-06-26 05:49:32
(1 hour ago)
BAD BOT - Detected and Blocked.. Matched phrase "baidu" at REQUEST_HEADERS:User-Agent. (1100000-131)
Bad Web Bot
๐ฌ๐ง
pinguin
2026-06-26 05:30:40
(2 hours ago)
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET meth ...
show more
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /credentials.json
UA: Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
Anonymous
2026-06-26 05:15:50
(2 hours ago)
<jail> banned by fail2ban
Brute-Force
Web App Attack
๐ฆ๐บ
Terrier
2026-06-26 05:00:03
(2 hours ago)
Blocked for HTTP vulnerability scanning (excessive 40x)
Web App Attack
๐ซ๐ท
guillaume illien
2026-06-26 04:51:49
(2 hours ago)
45.45.237.2 - - [26/Jun/2026:04:51:40 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (compatible; ...
show more
45.45.237.2 - - [26/Jun/2026:04:51:40 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/bot)"
45.45.237.2 - - [26/Jun/2026:04:51:44 +0000] "GET /assets/worders_front/application-8dbe75a27fb7eaa5ae243cc11ff6d626e1ce6f2a00364dd702f79842549b2625.js HTTP/1.1" 301 178 "-" "Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)"
45.45.237.2 - - [26/Jun/2026:04:51:45 +0000] "GET /.env HTTP/1.1" 301 178 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
45.45.237.2 - - [26/Jun/2026:04:51:46 +0000] "GET /.env.local HTTP/1.1" 301 178 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/bot)"
45.45.237.2 - - [26/Jun/2026:04:51:46 +0000] "GET /.env.production HTTP/1.1" 301 178 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
45.45.237.2 - - [26/Jun/2026:04:51:48 +0000] "GET /.env.development HTTP/1.1" 301 178 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +h
...
show less
Hacking
Brute-Force
Web App Attack
SSH
๐บ๐ธ
Charlesiv
2026-06-26 04:01:12
(3 hours ago)
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: BLOCK
ASN: 400529 (Infraly, LLC)
P ...
show more
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: BLOCK
ASN: 400529 (Infraly, LLC)
Protocol: HTTP/1.1 (GET method)
Endpoint: /
Timestamp: 2026-06-26T03:27:23Z
Ray ID: a1191dad2eed26c8
UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)
show less
Bad Web Bot
๐ซ๐ท
dynamix
2026-06-26 02:33:35
(5 hours ago)
Multiple WAF Violations
Web App Attack
๐ฌ๐ง
andypiper
2026-06-26 01:03:05
(6 hours ago)
CrowdSec ban for AbuseIPDB Top List
Brute-Force
Web App Attack
๐ฉ๐ช
Blexyel
2026-06-26 00:11:14
(7 hours ago)
45.45.237.2 - - [26/Jun/2026:02:11:13 +0200] "GET /.git/config HTTP/1.1" 200 265 "-" "Mozilla/5.0 (c ...
show more
45.45.237.2 - - [26/Jun/2026:02:11:13 +0200] "GET /.git/config HTTP/1.1" 200 265 "-" "Mozilla/5.0 (compatible; xAI-SearchBot/1.0; +https://x.ai)" "pingusmc.org"
...
show less
Brute-Force
Web App Attack
๐บ๐ธ
pixiekat
2026-06-25 23:43:48
(7 hours ago)
[Thu Jun 25 23:43:47.234517 2026] [access_compat:error] [pid 327589:tid 327609] [client 45.45.237.2: ...
show more
[Thu Jun 25 23:43:47.234517 2026] [access_compat:error] [pid 327589:tid 327609] [client 45.45.237.2:46098] AH01797: client denied by server configuration: /var/www/vhosts/infosage-api/public/, referer: http://dev.infosagehealth.org
[Thu Jun 25 23:43:47.616608 2026] [access_compat:error] [pid 327589:tid 327610] [client 45.45.237.2:46098] AH01797: client denied by server configuration: /var/www/vhosts/infosage-api/public/.env, referer: http://dev.infosagehealth.org/.env
[Thu Jun 25 23:43:47.743681 2026] [access_compat:error] [pid 327589:tid 327600] [client 45.45.237.2:46098] AH01797: client denied by server configuration: /var/www/vhosts/infosage-api/public/.env.local, referer: http://dev.infosagehealth.org/.env.local
[Thu Jun 25 23:43:47.859342 2026] [access_compat:error] [pid 327589:tid 327598] [client 45.45.237.2:46098] AH01797: client denied by server configuration: /var/www/vhosts/infosage-api/public/keyfile.json, referer: http://dev.infosagehealth.org/keyfile.json
[Thu Jun 25 23:43
...
show less
Brute-Force
๐ซ๐ท
SpaceHost-Server
2026-06-25 22:31:13
(9 hours ago)
Brute-Force
Web App Attack