🇩🇪
ghostwarriors
2026-07-26 04:20:32
(22 minutes ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-07-26 02:11:05
(2 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇩🇪
4server
2026-07-26 02:06:54
(2 hours ago)
[SunJul2604:06:50.7132452026][security2:error][pid1067493:tid1067602][client91.148.245.81:0]ModSecur ...
show more
[SunJul2604:06:50.7132452026][security2:error][pid1067493:tid1067602][client91.148.245.81:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"fondazionepetronillapontirone.ch.136-243-54-122.cpanel.site\"][uri\"/storage/logs/laravel.log\"][unique_id\"amVrupLY-z7u2B5_qabcMQAAANg\"]
show less
Port Scan
Brute-Force
Web App Attack
🇬🇧
Axel
2026-07-26 01:20:02
(3 hours ago)
Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /.env.product ...
show more
Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /.env.production Server: UK-01
show less
Web App Attack
Hacking
SQL Injection
🇷🇺
6o6ep
2026-07-26 01:05:36
(3 hours ago)
POST / HTTP/1.1
Port Scan
Hacking
Bad Web Bot
2026-07-26 00:48:21
(3 hours ago)
(caddyscan) Scanner path probe from 91.148.245.81 (NL/The Netherlands/-): 5 in the last 3600 secs; P ...
show more
(caddyscan) Scanner path probe from 91.148.245.81 (NL/The Netherlands/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 91.148.245.81 - - [26/Jul/2026:00:48:15 +0000] "GET /.ssh/id_rsa HTTP/1.1"
[REDACTED] 200 2627 91.148.245.81 - - [26/Jul/2026:00:48:15 +0000] "GET /.git/HEAD HTTP/1.1"
[REDACTED] 200 2627 91.148.245.81 - - [26/Jul/2026:00:48:15 +0000] "GET /.ssh/zzcanary-4bcef9400542411d HTTP/1.1"
[REDACTED] 200 2627 91.148.245.81 - - [26/Jul/2026:00:48:15 +0000] "GET /.git/zzcanary-5b473c8cfef44318 HTTP/1.1"
[REDACTED] 200 2627 91.148.245.81 - - [26/Jul/2026:00:48:15 +0000] "GET /actuator/heapdump HTTP/1.1"
show less
Port Scan
🇹🇷
eryilmaz
2026-07-26 00:00:09
(4 hours ago)
Automated attack blocked by eryilmaz WAF/defense engine (level 1, source: auto, path: /config.php)
Web App Attack
Hacking
🇩🇪
TheDjRider
2026-07-25 23:29:50
(5 hours ago)
Fail2Ban:apache-backup-scanner IP:91.148.245.81 matches:<matches[0:120]>
Port Scan
Bad Web Bot
Web App Attack
🇫🇮
as211431.net
2026-07-25 22:46:35
(5 hours ago)
Triggered Cloudflare WAF (firewallCustom) from NL.
Action taken: BLOCK
Protocol: HTTP/1.1 (POST meth ...
show more
Triggered Cloudflare WAF (firewallCustom) from NL.
Action taken: BLOCK
Protocol: HTTP/1.1 (POST method)
Endpoint: /
UA: Go-http-client/1.1
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇲🇾
Rizzy
2026-07-25 22:28:13
(6 hours ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇮🇹
ciccio diddo
2026-07-25 22:00:19
(6 hours ago)
High Burst multiple 40X port:Tcp/80,443
Brute-Force
Web App Attack
2026-07-25 21:59:33
(6 hours ago)
(caddyscan) Scanner path probe from 91.148.245.81 (NL/The Netherlands/-): 5 in the last 3600 secs; P ...
show more
(caddyscan) Scanner path probe from 91.148.245.81 (NL/The Netherlands/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 91.148.245.81 - - [25/Jul/2026:21:59:28 +0000] "GET /wp-config.php HTTP/1.1"
[REDACTED] 200 2627 91.148.245.81 - - [25/Jul/2026:21:59:28 +0000] "GET /api/.env HTTP/1.1"
[REDACTED] 200 2627 91.148.245.81 - - [25/Jul/2026:21:59:28 +0000] "GET /.env.production HTTP/1.1"
[REDACTED] 200 2627 91.148.245.81 - - [25/Jul/2026:21:59:29 +0000] "GET /.vscode/sftp.json HTTP/1.1"
[REDACTED] 200 2627 91.148.245.81 - - [25/Jul/2026:21:59:29 +0000] "GET /.vscode/zzcanary-c33b39ecff5c05f.json HTTP/1.1"
show less
Port Scan
2026-07-25 21:46:43
(6 hours ago)
Web App Attack
2026-07-25 21:11:50
(7 hours ago)
91.148.245.81 - - [25/Jul/2026:21:11:49 +0000] "GET /backup.sql HTTP/1.1" 404 21032 "-" "Go-http-cli ...
show more
91.148.245.81 - - [25/Jul/2026:21:11:49 +0000] "GET /backup.sql HTTP/1.1" 404 21032 "-" "Go-http-client/1.1"
...
show less
Bad Web Bot
Web App Attack
🇨🇭
leo1305
2026-07-25 19:06:14
(9 hours ago)
CrowdSec detection | scenario: http-sensitive-files
Web App Attack
Exploited Host