๐ซ๐ท
demomodule
2026-10-26 10:02:15
(16 minutes ago)
PrestaShop Security Module: suspicious probe path detected (/.env)
Web App Attack
๐ซ๐ท
masterguru
2026-10-26 09:08:22
(1 hour ago)
BAD BOT - Detected and Blocked.. Matched phrase "baidu" at REQUEST_HEADERS:User-Agent. (1100000-193)
Bad Web Bot
๐บ๐ธ
countdownmail.com
2026-10-26 07:58:02
(2 hours ago)
SQL injection attempts targeting database vulnerabilities. Extensive web application scanning for vu ...
show more
SQL injection attempts targeting database vulnerabilities. Extensive web application scanning for vulnerabilities. High volume automated attack. Sample: /*.auto.tfvars.
show less
SQL Injection
Web App Attack
Bad Web Bot
๐ซ๐ฎ
paissangroup
2026-10-26 05:30:56
(4 hours ago)
Multiple WAF Violations
Web App Attack
๐ง๐ท
Peregrine
2026-10-26 03:11:52
(7 hours ago)
Fail2Ban ct101 Jail: tomcat-404 | Evidence: 136.70.9.186 172.71.151.170 - - [25/Oct/2026:20:21:06 -0 ...
show more
Fail2Ban ct101 Jail: tomcat-404 | Evidence: 136.70.9.186 172.71.151.170 - - [25/Oct/2026:20:21:06 -0300] "GET /dist/manifest.json HTTP/1.1" 404 18149
136.70.9.186 172.71.151.169 - - [25/Oct/2026:20:21:06 -0300] "GET /.vite/manifest.json HTTP/1.1" 404 18149
136.70.9.186 172.71.151.170 - - [25/Oct/2026:20:21:06 -0300] "GET /ngsw.json HTTP/1.1" 404 18149
136.70.9.186 172.71.151.170 - - [25/Oct/2026:20:21:06 -0300] "GET /wzer2xa96x9adskp0756 HTTP/1.1" 404 18149
136.70.9.186 172.71.151.169 - - [25/Oct/2026:20:21:06 -0300] "GET /dist/.vite/manifest.json HTTP/1.1" 404 18149
show less
Bad Web Bot
Web App Attack
๐ง๐ท
Peregrine
2026-10-25 23:21:14
(10 hours ago)
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 136.70.9.186 172.71.151.169 - - [25/Oct/2026:20:21: ...
show more
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 136.70.9.186 172.71.151.169 - - [25/Oct/2026:20:21:07 -0300] "GET /@fs/app/.env?import&raw?? HTTP/1.1" 404 18149
show less
Bad Web Bot
๐ซ๐ท
mrcrassi
2026-10-25 21:02:37
(13 hours ago)
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: BLOCK
Protocol: HTTP/2 (GET method ...
show more
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /env/.env
UA: Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐บ๐ธ
agenciahypelab.com.br
2026-10-25 17:03:01
(17 hours ago)
WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_TRIGGER
Brute-Force
SSH
๐ง๐ท
dermatovirtual
2026-10-25 15:25:27
(18 hours ago)
Dermato Virtual CSIRT: Malicious web exploit/scanning probes against app.dermatovirtual.com.br (Web ...
show more
Dermato Virtual CSIRT: Malicious web exploit/scanning probes against app.dermatovirtual.com.br (Web Server Ports 80/443). 46 unauthorized requests recorded between 2026-10-25 15:22:51 UTC and 2026-10-25 15:23:01 UTC (rate: ~46 req/min). Edge perimeter firewall drop active.
Log sample:
[2026-10-25 15:23:00 UTC] IP: 136.70.9.186 - W3C IIS (Port 80): GET /core/.env -> HTTP 500 [CLIENT: 136.70.9.186]
[2026-10-25 15:23:00 UTC] IP: 136.70.9.186 - W3C IIS (Port 80): GET /.next/.env -> HTTP 500 [CLIENT: 136.70.9.186]
[2026-10-25 15:23:00 UTC] IP: 136.70.9.186 - W3C IIS (Port 80): GET /.git/config -> HTTP 500 [CLIENT: 136.70.9.186]
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
snappic
2026-10-25 11:07:01
(23 hours ago)
Scanning for .env files [GET /api/fs/read?allowOutsideWorkspace=true&path=/app/.env] [Mozilla/5.0 (c ...
show more
Scanning for .env files [GET /api/fs/read?allowOutsideWorkspace=true&path=/app/.env] [Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)]
show less
Bad Web Bot
Web App Attack
๐ธ๐ฌ
simpeg-adm.bandung.go.id
2026-10-25 10:41:48
(23 hours ago)
25/Oct/2026:10:41:46 +0000;136.70.9.186;"/sitemap.xml"
25/Oct/2026:10:41:46 +0000;136.70.9.186;"/sit ...
show more
25/Oct/2026:10:41:46 +0000;136.70.9.186;"/sitemap.xml"
25/Oct/2026:10:41:46 +0000;136.70.9.186;"/sitemap_index.xml"
25/Oct/2026:10:41:47 +0000;136.70.9.186;"/dist/.vite/manifest.json"
25/Oct/2026:10:41:47 +0000;136.70.9.186;"/dist/manifest.json"
25/Oct/2026:10:41:47 +0000;136.70.9.186;"/eb2j4t2qit4c0qd2rahi"
25/Oct/2026:10:41:48 +0000;136.70.9.186;"/.vite/manifest.json"
25/Oct/2026:10:41:48 +0000;136.70.9.186;"/z9x8c7v6b5-debug-trigger-app.alexbucklandphotography.co.uk"
...
show less
Web Spam
Brute-Force
Web App Attack
๐ฉ๐ช
bazter.pro
2026-10-25 08:47:15
(1 day ago)
Fail2Ban: plesk-bot-aggressive - 15 failures
Port Scan
Bad Web Bot
Web App Attack
Anonymous
2026-10-25 08:01:19
(1 day ago)
Web application attack.
Hacking
๐ฉ๐ช
Marc
2026-10-25 07:19:39
(1 day ago)
136.70.9.186 - - [25/Oct/2026:08:19:38 +0100] "GET /sitemap.xml HTTP/2.0" 404 291 "-" "Mozilla/5.0 A ...
show more
136.70.9.186 - - [25/Oct/2026:08:19:38 +0100] "GET /sitemap.xml HTTP/2.0" 404 291 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot" 136.70.9.186 - - [25/Oct/2026:08:19:39 +0100] "GET /sitemap_index.xml HTTP/2.0" 404 292 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)" 136.70.9.186 - - [25/Oct/2026:08:19:39 +0100] "GET /dashboard HTTP/2.0" 404 269 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
show less
Brute-Force
Anonymous
2026-10-25 06:54:38
(1 day ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack