🇫🇮
as211431.net
2026-10-27 02:08:31
(1 hour ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET metho ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /.well-known/openid-configuration
UA: Mozilla/5.0 (compatible; WellKnownBot/0.1; +https://well-known.dev/about/#bot)
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇫🇷
regishoussin
2026-10-27 00:31:52
(3 hours ago)
Automated web scanning detected by Wazuh (rule 100180): repeated 400/404 errors from mass probing of ...
show more
Automated web scanning detected by Wazuh (rule 100180): repeated 400/404 errors from mass probing of admin/backdoor paths (e.g. wp-login.php, known CMS shell filenames) on an Apache web server, on 2026-10-27 00:31 UTC.
show less
Bad Web Bot
Web App Attack
2026-10-26 21:41:34
(6 hours ago)
Bad Web Bot
🇬🇧
poundawebsiteltd
2026-10-26 10:53:48
(17 hours ago)
Malicious activity in general-malicious. Evidence: (apache_probe) Failed Access (403/404) 143.198.19 ...
show more
Malicious activity in general-malicious. Evidence: (apache_probe) Failed Access (403/404) 143.198.194.141 (SG/Singapore/-): 20 in the last 3600 secs | UA: (apache_probe) Failed Access (403/404) 143.198.194.141 (SG/Singapore/-): 20 in the last 3600 secs
show less
Brute-Force
Web App Attack
🇺🇸
ArturShelby
2026-10-26 07:00:55
(21 hours ago)
Critical file access: /.well-known/openid-configuration
Web App Attack
🇬🇧
consul.to
2026-10-25 23:36:49
(1 day ago)
Web attack/malicious scanning detected
Web App Attack
🇩🇪
bazter.pro
2026-10-25 18:52:56
(1 day ago)
Fail2Ban: plesk-bot-aggressive - 15 failures
Port Scan
Bad Web Bot
Web App Attack
🇷🇺
Reaper
2026-10-25 15:42:07
(1 day ago)
Repeated 404 errors from 143.198.194.141
Web App Attack
🇷🇺
Reaper
2026-10-24 04:57:27
(2 days ago)
Repeated 404 errors from 143.198.194.141
Web App Attack
🇬🇧
consul.to
2026-10-24 03:19:21
(3 days ago)
Web attack/malicious scanning detected
Web App Attack
🇮🇪
Coolnagour
2026-10-24 02:27:48
(3 days ago)
http-probing: /ads.txt
Web App Attack
🇳🇱
tmiland
2026-10-23 20:59:10
(3 days ago)
(nginx_404) Dot directory Honeypot Trap 143.198.194.141 (SG/Singapore/-): 2 in the last 3600 secs; I ...
show more
(nginx_404) Dot directory Honeypot Trap 143.198.194.141 (SG/Singapore/-): 2 in the last 3600 secs; IP: 143.198.194.141; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 143.198.194.141 - - [23/Oct/2026:22:58:52 +0200] "GET /.well-known/apple-app-site-association HTTP/1.1" 404 12058 "-" "Mozilla/5.0 (compatible; WellKnownBot/0.1; +https://well-known.dev/about/#bot)" 143.198.194.141 - - [23/Oct/2026:22:59:09 +0200] "GET /.well-known/assetlinks.json HTTP/1.1" 404 2992 "-" "Mozilla/5.0 (compatible; WellKnownBot/0.1; +https://well-known.dev/about/#bot)"
show less
Brute-Force
2026-10-23 15:25:05
(3 days ago)
143.198.194.141 - - [23/Oct/2026:23:24:12 +0800] "GET /ads.txt HTTP/1.1" 403 199 "-" "Mozilla/5.0 (c ...
show more
143.198.194.141 - - [23/Oct/2026:23:24:12 +0800] "GET /ads.txt HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; WellKnownBot/0.1; +https://well-known.dev/about/#bot)"
143.198.194.141 - - [23/Oct/2026:23:24:17 +0800] "GET /app-ads.txt HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; WellKnownBot/0.1; +https://well-known.dev/about/#bot)"
143.198.194.141 - - [23/Oct/2026:23:24:22 +0800] "GET /.well-known/apple-app-site-association HTTP/1.1" 404 30445 "-" "Mozilla/5.0 (compatible; WellKnownBot/0.1; +https://well-known.dev/about/#bot)"
143.198.194.141 - - [23/Oct/2026:23:24:27 +0800] "GET /apple-app-site-association HTTP/1.1" 404 30445 "-" "Mozilla/5.0 (compatible; WellKnownBot/0.1; +https://well-known.dev/about/#bot)"
143.198.194.141 - - [23/Oct/2026:23:24:37 +0800] "GET /.well-known/gpc.json HTTP/1.1" 404 196 "-" "Mozilla/5.0 (compatible; WellKnownBot/0.1; +https://well-known.dev/about/#bot)"
143.198.194.141 - - [23/Oct/2026:23:24:42 +0800] "GET /.well-known/nodeinfo HTTP/1.1" 404 30445 "-"
...
show less
Bad Web Bot
Web App Attack
🇩🇪
svr
2026-10-23 10:13:20
(3 days ago)
Abusive Automated Web Scanner
Web App Attack
🇹🇷
cagatayakinci.com
2026-10-23 00:50:35
(4 days ago)
143.198.194.141 - - [23/Oct/2026:03:49:42 +0300] "GET /app-ads.txt HTTP/1.1" 404 15204 "-" "Mozilla/ ...
show more
143.198.194.141 - - [23/Oct/2026:03:49:42 +0300] "GET /app-ads.txt HTTP/1.1" 404 15204 "-" "Mozilla/5.0 (compatible; WellKnownBot/0.1; +https://well-known.dev/about/#bot)"
143.198.194.141 - - [23/Oct/2026:03:49:52 +0300] "GET /.well-known/apple-app-site-association HTTP/1.1" 404 15218 "-" "Mozilla/5.0 (compatible; WellKnownBot/0.1; +https://well-known.dev/about/#bot)"
143.198.194.141 - - [23/Oct/2026:03:49:57 +0300] "GET /apple-app-site-association HTTP/1.1" 404 15204 "-" "Mozilla/5.0 (compatible; WellKnownBot/0.1; +https://well-known.dev/about/#bot)"
143.198.194.141 - - [23/Oct/2026:03:50:03 +0300] "GET /.well-known/assetlinks.json HTTP/1.1" 404 15204 "-" "Mozilla/5.0 (compatible; WellKnownBot/0.1; +https://well-known.dev/about/#bot)"
143.198.194.141 - - [23/Oct/2026:03:50:08 +0300] "GET /.well-known/gpc.json HTTP/1.1" 404 15217 "-" "Mozilla/5.0 (compatible; WellKnownBot/0.1; +https://well-known.dev/about/#bot)"
143.198.194.141 - - [23/Oct/2026:03:50:14 +0300] "GET /.well-known/nodein
...
show less
Web App Attack
Port Scan