๐ฉ๐ช
Laplus
2026-10-17 08:07:27
(1 hour ago)
93.152.221.41 - - [17/Oct/2026:10:07:05 +0200] "GET /sitemap.xml HTTP/1.1" 404 19 "-" "Mozilla/5.0 ( ...
show more
93.152.221.41 - - [17/Oct/2026:10:07:05 +0200] "GET /sitemap.xml HTTP/1.1" 404 19 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" "-"
93.152.221.41 - - [17/Oct/2026:10:07:05 +0200] "GET /sitemap_index.xml HTTP/1.1" 404 3875 "https://www.google.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0" "-"
93.152.221.41 - - [17/Oct/2026:10:07:05 +0200] "POST / HTTP/1.1" 405 57 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "-"
93.152.221.41 - - [17/Oct/2026:10:07:06 +0200] "GET /wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings HTTP/1.1" 404 1295 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 Edg/123.0.0.0" "-"
93.152.221.41 - - [17/Oct/2026:10:07:07 +0200] "POST / HTTP/1.1" 405 15105 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Ch
...
show less
Web App Attack
๐บ๐ธ
mnsf
2026-10-17 08:05:15
(1 hour ago)
Too many Status 40X (13)
Brute-Force
Web App Attack
๐ฎ๐ณ
Shubham Kumar
2026-10-17 06:25:26
(2 hours ago)
Repeated scrape-guard abuse (flag #0)
Web App Attack
๐ฌ๐ง
Aetherweb Ark
2026-10-17 06:10:43
(3 hours ago)
(mod_security) mod_security (id:949110) triggered by 93.152.221.41 (DE/Germany/-): N in the last X s ...
show more
(mod_security) mod_security (id:949110) triggered by 93.152.221.41 (DE/Germany/-): N in the last X secs
show less
Web App Attack
๐ฌ๐ง
openstrike.co.uk
2026-10-17 05:16:26
(4 hours ago)
8 attacks on password/key grabbing URLs:
GET /.aws/credentials HTTP/1.1
Hacking
๐ซ๐ท
regishoussin
2026-10-17 04:29:14
(4 hours ago)
Automated web scanning detected by Wazuh (rule 100180): repeated 400/404 errors from mass probing of ...
show more
Automated web scanning detected by Wazuh (rule 100180): repeated 400/404 errors from mass probing of admin/backdoor paths (e.g. wp-login.php, known CMS shell filenames) on an Apache web server, on 2026-10-17 04:29 UTC.
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
EmilGH
2026-10-17 04:04:23
(5 hours ago)
93.152.221.41 - - [17/Oct/2026:04:04:16 +0000] "GET /robots.txt HTTP/1.1" 404 533 "http://rmtrading. ...
show more
93.152.221.41 - - [17/Oct/2026:04:04:16 +0000] "GET /robots.txt HTTP/1.1" 404 533 "http://rmtrading.tech/robots.txt" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:120.0) Gecko/20100101 Firefox/120.0"
93.152.221.41 - - [17/Oct/2026:04:04:16 +0000] "GET /robots.txt HTTP/1.1" 404 537 "http://www.rmtrading.tech/robots.txt" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
93.152.221.41 - - [17/Oct/2026:04:04:16 +0000] "GET /sitemap.xml HTTP/1.1" 404 533 "http://rmtrading.tech/sitemap.xml" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:120.0) Gecko/20100101 Firefox/120.0"
93.152.221.41 - - [17/Oct/2026:04:04:17 +0000] "GET /sitemap.xml HTTP/1.1" 404 537 "http://www.rmtrading.tech/sitemap.xml" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0"
93.152.221.41 - - [17/Oct/2026:04:04:17 +0000] "GET /sitemap_index.xml HTTP/1.1" 404 533 "http://rmtrading.tech/
...
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
1gz
2026-10-17 03:30:48
(5 hours ago)
Triggered Cloudflare WAF (firewallManaged) from DE.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET meth ...
show more
Triggered Cloudflare WAF (firewallManaged) from DE.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /wp-config.php-backup
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐ฌ๐ง
SilverZippo
2026-10-17 02:12:19
(7 hours ago)
Web App Attack
Web App Attack
๐ฉ๐ช
maxpower
2026-10-17 01:50:32
(7 hours ago)
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 93.152.221.41 (DE/Germany/-): 1 in the l ...
show more
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 93.152.221.41 (DE/Germany/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 93.152.221.41 - - [17/Oct/2026:03:50:29 +0200] "GET /.aws/credentials HTTP/1.1" 301 276 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "93.152.221.41" host=vortici.it
show less
Port Scan
๐ฉ๐ช
dbmwebdesign
2026-10-17 01:30:10
(7 hours ago)
Repeated probing for non-existent PHP exploit paths blocked by Fail2Ban
Web App Attack
๐ซ๐ท
โจ
2026-10-17 01:26:14
(7 hours ago)
Rule : Security
IP in black list
Port Scan
Hacking
Brute-Force
Anonymous
2026-10-16 23:27:53
(9 hours ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
๐ฆ๐น
SchiWaGoA
2026-10-16 23:20:33
(10 hours ago)
fail2ban npm-scanner: Web vulnerability scanning (probing for .env, .git, phpinfo and similar files)
Web App Attack
Bad Web Bot
Anonymous
2026-10-16 22:28:57
(10 hours ago)
93.152.221.41 - - [16/Oct/2026:17:28:48 -0500] "GET /.env HTTP/1.1" 301 242 "-" "Mozilla/5.0 (Window ...
show more
93.152.221.41 - - [16/Oct/2026:17:28:48 -0500] "GET /.env HTTP/1.1" 301 242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/120.0.0.0" 172.71.247.250
93.152.221.41 - - [16/Oct/2026:17:28:48 -0500] "GET /.env HTTP/1.1" 301 258 "http://www.southernpatio.com/.env" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/120.0.0.0" 172.70.248.155
93.152.221.41 - - [16/Oct/2026:17:28:52 -0500] "GET /.env.bak HTTP/1.1" 301 246 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:119.0) Gecko/20100101 Firefox/119.0" 172.71.247.250
93.152.221.41 - - [16/Oct/2026:17:28:53 -0500] "GET /.env.bak HTTP/1.1" 301 258 "http://www.southernpatio.com/.env.bak" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:119.0) Gecko/20100101 Firefox/119.0" 172.70.248.155
93.152.221.41 - - [16/Oct/2026:17:28:54 -0500] "GET /db.sql HTTP/1.1" 301 244 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Mo
...
show less
Brute-Force
Bad Web Bot
Web App Attack