|
🇬🇧
AvonleaConsulting
|
|
Brute force attack stopped by firewall
|
Web Spam
Brute-Force
Web App Attack
|
|
🇬🇧
openstrike.co.uk
|
|
2287 attacks on config grabbing URLs (type 2), env grabbing URLs, VC URLs, password/key grabbing URLs, directory traversals, PHP arg injection (type 2), env grabbing URLs (type 2), PHP URLs:
GET /app-config.json HTTP/1.1
GET /.env.js HTTP/1.1
GET /.g ...
show more
2287 attacks on config grabbing URLs (type 2), env grabbing URLs, VC URLs, password/key grabbing URLs, directory traversals, PHP arg injection (type 2), env grabbing URLs (type 2), PHP URLs:
GET /app-config.json HTTP/1.1
GET /.env.js HTTP/1.1
GET /.git/HEAD HTTP/1.1
GET /@fs/home/ec2-user/.aws/credentials?raw?? HTTP/1.1
GET /..%2f.env HTTP/1.1
GET /index.php?s=index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]=env HTTP/1.1
GET /_image?href=/proc/self/environ HTTP/1.1
POST /icecoder/lib/terminal-xhr.php HTTP/1.1
show less
|
Hacking
Web App Attack
|
|
🇫🇷
✨
|
|
Domain : pinewood-finance.co.uk
Rule : env
2026-09-23 02:40:20 W3SVC94 PLESK72 ***hidden-privacy*** GET /.env.prod - 443 - 207.175.173.60 HTTP/2.0 Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; https://zhipuai.cn/) _fbp=fb.1.1.7901312194E+12.152879774 ...
show more
Domain : pinewood-finance.co.uk
Rule : env
2026-09-23 02:40:20 W3SVC94 PLESK72 ***hidden-privacy*** GET /.env.prod - 443 - 207.175.173.60 HTTP/2.0 Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; https://zhipuai.cn/) _fbp=fb.1.1.7901312194E+12.1528797745.AQECAQMB; ASP.NET_SessionId=qrvm0i0tvhsdsjjkosnw1tsl - www.pinewood-finance.co.uk 404 0 2 1558 502 5 - -
show less
|
Hacking
SQL Injection
|
|
🇬🇧
gws-hostmaster
|
|
ModSecurity OWASP CRS (Anomaly Score: 45): HTTP header is restricted by policy (/x-middleware-subrequest/);JavaScript Prototype Pollution;JSON-Based SQL Injection;Node.js Injection Attack 1/2;OS File Access Attempt;Remote Command Execution: Unix Shel ...
show more
ModSecurity OWASP CRS (Anomaly Score: 45): HTTP header is restricted by policy (/x-middleware-subrequest/);JavaScript Prototype Pollution;JSON-Based SQL Injection;Node.js Injection Attack 1/2;OS File Access Attempt;Remote Command Execution: Unix Shell Code Found;Restricted File Access Attempt;URL file extension is restricted by policy;
show less
|
Web App Attack
|
|
🇬🇧
Greg Poulson
|
|
Our website was hit by this DDOS at a rate of 325 in 5 minutes.
|
DDoS Attack
Web Spam
Brute-Force
|
|
🇬🇧
blik2108
|
|
www.blacknell.co.uk:443 207.175.173.60 - - [23/Sep/2026:00:26:09 +0100] "GET /asset-manifest.json HTTP/1.1" 404 13641 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
www.blac ...
show more
www.blacknell.co.uk:443 207.175.173.60 - - [23/Sep/2026:00:26:09 +0100] "GET /asset-manifest.json HTTP/1.1" 404 13641 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
www.blacknell.co.uk:443 207.175.173.60 - - [23/Sep/2026:00:26:09 +0100] "GET /webpack-stats.json HTTP/1.1" 404 13641 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
www.blacknell.co.uk:443 207.175.173.60 - - [23/Sep/2026:00:26:09 +0100] "GET /dist/manifest.json HTTP/1.1" 404 13641 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
www.blacknell.co.uk:443 207.175.173.60 - - [23/Sep/2026:00:26:09 +0100] "GET /2y8fj69bvs6ajs8qmyfb HTTP/1.1" 404 13641 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
www.blacknell.co.uk:443 207.175.173.60 - - [23/Sep/2026:00:26:09 +0100] "GET /static/manifest.
...
show less
|
Brute-Force
|
|
🇳🇱
ConsulHosting
|
|
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
|
Web App Attack
|
|
🇬🇧
gurnip
|
|
Vulnerability probe of page /api, not found on server.
|
Brute-Force
Web App Attack
|
|
🇬🇧
noise.agency
|
|
207.175.173.60 (BE/Belgium/60.173.175.207.bc.googleusercontent.com), more than 10 Apache 403 hits
|
Hacking
|
|
🇳🇱
Roderic
|
|
(apache-useragents) Failed apache-useragents trigger with match [redacted])
|
Bad Web Bot
|
|
🇫🇮
as211431.net
|
|
Triggered Cloudflare WAF (firewallCustom) from BE.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/2 (GET method)
Endpoint: /app_dev.php/_profiler
UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.co ...
show more
Triggered Cloudflare WAF (firewallCustom) from BE.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/2 (GET method)
Endpoint: /app_dev.php/_profiler
UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
|
Bad Web Bot
|
|
🇬🇧
AvonleaConsulting
|
|
Scanning unused Default website or suspicious access to valid sites from IP marked as abusive
|
Bad Web Bot
Web App Attack
|
|
🇬🇧
SilverZippo
|
|
Web App Attack
|
Web App Attack
|
|
🇩🇪
ghostwarriors
|
|
Attempts against non-existent wp-login
|
Brute-Force
Web App Attack
|
|
🇩🇪
yitzhaq
|
|
207.175.173.60 - - [22/Sep/2026:15:12:35 +0200] "GET /dist/.env HTTP/2.0" 404 294 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
207.175.173.60 - - [22/Sep/2026:15:12:35 +0200] "GET /core/.env HTTP/2.0" 403 297 "-" "Mozilla/5.0 AppleW ...
show more
207.175.173.60 - - [22/Sep/2026:15:12:35 +0200] "GET /dist/.env HTTP/2.0" 404 294 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
207.175.173.60 - - [22/Sep/2026:15:12:35 +0200] "GET /core/.env HTTP/2.0" 403 297 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email])"
207.175.173.60 - - [22/Sep/2026:15:12:35 +0200] "GET /.aws/credentials HTTP/2.0" 404 294 "-" "Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)"
207.175.173.60 - - [22/Sep/2026:15:12:35 +0200] "GET /.aws/config HTTP/2.0" 404 294 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"
207.175.173.60 - - [22/Sep/2026:15:12:35 +0200] "GET /.git/HEAD HTTP/2.0" 403 297 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
207.175.173.60 - - [22/Sep/2026:15:12:35 +0200] "GET /.git-credentials HTTP/2.0" 403 297 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
207.175.173.60 - - [22/Sep/2026:15:12:35 +0200] "GET /.git/config HTT
show less
|
Bad Web Bot
|
