Anonymous
2026-10-22 21:04:00
(1 day ago)
Excessive crawling/scraping. Vulnerable file probing.
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
IVski.com
2026-10-20 02:56:38
(3 days ago)
IVski WAF | Suspicious activity detected - generic bot or scanner pattern
Hacking
Brute-Force
Web App Attack
๐บ๐ธ
drewking
2026-10-19 22:01:07
(4 days ago)
227 malicious / suspicious requests. Ports: 403 /, 403 /.env.production.local, 403 /.env.secret, 403 ...
show more
227 malicious / suspicious requests. Ports: 403 /, 403 /.env.production.local, 403 /.env.secret, 403 /.env.credentials, 403 /.env.keys.
show less
Web App Attack
Hacking
Anonymous
2026-10-19 13:45:23
(4 days ago)
Observed scanned 166 known-sensitive endpoint(s), e.g.: /, /%2eenv, /....//....//....//..../.env, /. ...
show more
Observed scanned 166 known-sensitive endpoint(s), e.g.: /, /%2eenv, /....//....//....//..../.env, /....//....//....//..../proc/self/environ, /.bashrc, /.cargo/credentials.toml
show less
Bad Web Bot
Web App Attack
Anonymous
2026-10-19 07:03:04
(4 days ago)
Observed scanned 1 known-sensitive endpoint(s), e.g.: /.aws/credentials
Bad Web Bot
Web App Attack
๐ซ๐ฎ
as211431.net
2026-10-19 05:36:14
(4 days ago)
Triggered Cloudflare WAF (firewallManaged) from TW.
Action taken: BLOCK
Protocol: HTTP/1.1 (POST met ...
show more
Triggered Cloudflare WAF (firewallManaged) from TW.
Action taken: BLOCK
Protocol: HTTP/1.1 (POST method)
Endpoint: /actions
UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐ง๐ท
Sysadmin-CLC
2026-10-19 04:23:55
(4 days ago)
2026/10/19 04:23:54 [error] 469#469: *80294 limiting requests, excess: 40.540 by zone "general", cli ...
show more
2026/10/19 04:23:54 [error] 469#469: *80294 limiting requests, excess: 40.540 by zone "general", client: 104.199.243.95, server: status.literaturaclassica.com.br, request: "GET /@fs/..%252f..%252f..%252f..%252f..%252fproc/self/environ?raw?? HTTP/1.1", host: "status.literaturaclassica.com.br"
...
show less
Web App Attack
DDoS Attack
๐ช๐ธ
robotstxt
2026-10-19 04:22:35
(4 days ago)
104.199.243.95 - - [19/Oct/2026:04:21:44 +0000] "GET /wp-includes/js/jquery/ui/tabs.min.js?ver=1.14. ...
show more
104.199.243.95 - - [19/Oct/2026:04:21:44 +0000] "GET /wp-includes/js/jquery/ui/tabs.min.js?ver=1.14.2 HTTP/2.0" 403 21665 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" "104.199.243.95" edge="162.158.243.5"
104.199.243.95 - - [19/Oct/2026:04:21:44 +0000] "GET /wp-content/plugins/stop-user-enumeration/frontend/js/frontend.js?ver=1.7.9 HTTP/2.0" 403 21666 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" "104.199.243.95" edge="162.158.243.18"
104.199.243.95 - - [19/Oct/2026:04:21:44 +0000] "GET /wp-includes/js/jquery/ui/core.min.js?ver=1.14.2 HTTP/2.0" 403 21666 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" "104.199.243.95" edge="172.68.87.176"
104.199.243.95 - - [19/Oct/2026:04:21:44 +0000] "GET /wp-content/plugins/ccoo-covenants/includes/theme/js/ajax-search.js?ver=1.2.8 HTTP/2.
...
show less
Web App Attack
๐ซ๐ท
francoisunix
2026-10-19 03:18:26
(4 days ago)
104.199.243.95 - - [19/Oct/2026:03:18:23 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Linux; Andr ...
show more
104.199.243.95 - - [19/Oct/2026:03:18:23 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36"
104.199.243.95 - - [19/Oct/2026:03:18:24 +0000] "GET /robots.txt HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)"
104.199.243.95 - - [19/Oct/2026:03:18:24 +0000] "GET /z9x8c7v6b5-debug-trigger-test.eco-conscient.com HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)"
104.199.243.95 - - [19/Oct/2026:03:18:24 +0000] "GET /fb9tyusc1piqjxa98cs3 HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36"
104.199.243.95 - - [19/Oct/2026:03:18:24 +0000] "GET /a03b2ae22on703lbub4h HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
...
show less
Web App Attack
๐ณ๐ฑ
Savvii
2026-10-19 02:56:05
(4 days ago)
23 attempts against mh-misbehave-ban on bean
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
ipblock.com
2026-10-19 02:39:00
(4 days ago)
IPBlock protected site ID [669-fx].
Exploit request, vulnerability scanner.
Hacking
Bad Web Bot
Web App Attack
๐ง๐ช
voormedia
2026-10-19 01:50:27
(4 days ago)
Accessed trap at '/.env'
Web App Attack
๐ซ๐ท
COMAITE
2026-10-18 23:29:30
(5 days ago)
Common web attack from 104.199.243.95.
Web App Attack
Anonymous
2026-10-18 22:37:19
(5 days ago)
Honey Pot Hit / Attack Vector found!
Port Scan
Hacking
Web App Attack
๐ฉ๐ช
netclix.gr
2026-10-18 22:20:06
(5 days ago)
(mod_security) mod_security triggered on hostname [redacted] 104.199.243.95 (TW/Taiwan/95.243.199.10 ...
show more
(mod_security) mod_security triggered on hostname [redacted] 104.199.243.95 (TW/Taiwan/95.243.199.104.bc.googleusercontent.com)
show less
SQL Injection