Anonymous
2026-09-13 07:07:04
(1 month ago)
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: ID, Attack patterns: WordPress scanning, Backup file probing, Cloud secrets probing
Bad Web Bot
Web App Attack
๐ฎ๐ณ
evicky2002
2026-09-13 06:00:01
(1 month ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
๐ซ๐ฎ
mnazibo
2026-09-12 13:00:05
(1 month ago)
Date: 12/Sep/2026 15:56:21 | Reported IP: 34.50.94.87 mod_security | id: 930130 932130 932235 932260 933135 934100 934130 942151 942550 | ID/group.my_domain/- | Connections: 260 | Blocked: Permanent Block: [LF_MODSEC] | URIs: /; /actions/.env; /admin ...
show more
Date: 12/Sep/2026 15:56:21 | Reported IP: 34.50.94.87 mod_security | id: 930130 932130 932235 932260 933135 934100 934130 942151 942550 | ID/group.my_domain/- | Connections: 260 | Blocked: Permanent Block: [LF_MODSEC] | URIs: /; /actions/.env; /admin/.env; /administrator/.env; /administrator/phpinfo.php; /admin-panel/.env; /admin/phpinfo.php; /angular/.env; /ansible/.env; /api/dev/.env; /api/.env; /api/staging/.env; /api/v1/.env; /api/v2/.env; /api/v3/.env; /app/.env; /application_default_credentials.json; /application/.env; /apps/.env; /aws/.env; /azure/.env; /backend/.env; /backup/.env; /backups/.env; /beta/.env; /beta/phpinfo.php; /bin/.env; /bootstrap/.env; /brevo/.env; /build/.env; /buildkite/.env; /bulk/.env; /cache/.env; /cakephp/.env; /campaign/.env; /cd/.env; /ci/.env; /circleci/.env; /client/.env; /cloud/.env; /cms/.env; /codeigniter/.env; /config/app/.env; /config/.env; /.config/gcloud/application_default_credentials.json; /c
show less
SQL Injection
Brute-Force
Bad Web Bot
๐ฌ๐ง
pinguin
2026-09-12 12:52:36
(1 month ago)
Triggered Cloudflare WAF (firewallCustom) from ID.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
This report was ge ...
show more
Triggered Cloudflare WAF (firewallCustom) from ID.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐ซ๐ฎ
mnazibo
2026-09-12 12:30:19
(1 month ago)
Date: Sep 12 15:23:34 2026 EAT | Reported IP: 34.50.94.87 mod_security | id: 932130 932235 932260 933135 934100 934130 942151 942550 949110 930130 920440 920500 | ID/usernameab.my_domain/- | Connections: 1 | Blocked: Permanent Block: [LF_MODSEC] | Lo ...
show more
Date: Sep 12 15:23:34 2026 EAT | Reported IP: 34.50.94.87 mod_security | id: 932130 932235 932260 933135 934100 934130 942151 942550 949110 930130 920440 920500 | ID/usernameab.my_domain/- | Connections: 1 | Blocked: Permanent Block: [LF_MODSEC] | Logs: ; Remote Command Execution: Unix Shell Expression Found; Remote Command Execution: Unix Command Injection (command without evasion); Remote Command Execution: Direct Unix Command Execution; PHP Injection Attack: Variable Access Found; Node.js Injection Attack 1/2; Node.js Injection Attack 1/2; Node.js Injection Attack 1/2; JavaScript Prototype Pollution; JavaScript Prototype Pollution; SQL Injection Attack: SQL function name detected; JSON-Based SQL Injection; Inbound Anomaly Score Exceeded (Total Score: 55); Restricted File Access Attempt; Remote Command Execution: Unix Shell Expression Found; Remote Command Execution: Unix Command Injection (command without evasion); Remote Command Exe
show less
SQL Injection
Brute-Force
Bad Web Bot
๐ฉ๐ช
snhosting
2026-09-12 12:29:00
(1 month ago)
34.50.94.87 - - [12/Sep/2026:14:28:50 +0200] "GET /.git/config HTTP/1.1" 404 9 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.50.94.87 - - [12/Sep/2026:14:28:51 +0200] "GET /.e ...
show more
34.50.94.87 - - [12/Sep/2026:14:28:50 +0200] "GET /.git/config HTTP/1.1" 404 9 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.50.94.87 - - [12/Sep/2026:14:28:51 +0200] "GET /.env HTTP/1.1" 404 9 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.50.94.87 - - [12/Sep/2026:14:28:51 +0200] "GET /.env.local HTTP/1.1" 404 9 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.50.94.87 - - [12/Sep/2026:14:28:51 +0200] "GET /.env.production HTTP/1.1" 404 9 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.50.94.87 - - [12/Sep/2026:14:28:51 +0200] "GET /.env.staging HTTP/1.1" 404 9 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
๐ฆ๐บ
electronico
2026-09-12 12:22:46
(1 month ago)
34.50.94.87 - - [12/Sep/2026:23:22:44 +1100] "GET /.git/config HTTP/1.1" 404 241 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.50.94.87 - - [12/Sep/2026:23:22:44 +1100] "GET / ...
show more
34.50.94.87 - - [12/Sep/2026:23:22:44 +1100] "GET /.git/config HTTP/1.1" 404 241 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.50.94.87 - - [12/Sep/2026:23:22:44 +1100] "GET /.env HTTP/1.1" 404 241 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.50.94.87 - - [12/Sep/2026:23:22:44 +1100] "GET /.env.local HTTP/1.1" 404 241 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.50.94.87 - - [12/Sep/2026:23:22:45 +1100] "GET /.env.production HTTP/1.1" 404 241 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.50.94.87 - - [12/Sep/2026:23:22:45 +1100] "GET /.env.staging HTTP/1.1" 404 241 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.50.94
...
show less
Brute-Force
Web App Attack
๐ง๐พ
lns.bz
2026-09-12 11:35:15
(1 month ago)
Too many 404 requests [BY]
Web App Attack
๐ซ๐ท
masterguru
2026-09-12 11:32:54
(1 month ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)
Hacking
Web App Attack
๐ธ๐ช
vaia.cloud
2026-09-12 11:05:01
(1 month ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
๐ณ๐ฑ
Alt255
2026-09-12 08:11:40
(1 month ago)
34.50.94.87 - - [12/Sep/2026:10:11:39 +0200] "GET /.git/config HTTP/1.1" 301 512 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
Bad Web Bot
Web App Attack
Anonymous
2026-09-12 06:08:53
(1 month ago)
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: ID, Attack patterns: WordPress scanning, Backup file probing, Cloud secrets probing
Bad Web Bot
Web App Attack
๐ฉ๐ช
FeG Deutschland
2026-09-12 06:05:23
(1 month ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 27
Exploited Host
Web App Attack
๐ซ๐ท
AGEPCom
2026-09-12 05:46:49
(1 month ago)
Smart-Ban: IP bannie via score AbuseIPDB
Brute-Force
Web App Attack
๐ฉ๐ช
EGP Abuse Dept
2026-09-12 05:29:52
(1 month ago)
Scanning for web/db/file exploits on ruederosa.tafelconfigurator.nl
SQL Injection
Bad Web Bot
Web App Attack