๐ช๐ธ
robotstxt
2026-09-30 03:02:06
(2 days ago)
34.138.160.14 - - [30/Sep/2026:03:01:32 +0000] "GET /z9x8c7v6b5-debug-trigger-ccoo.cat HTTP/2.0" 403 ...
show more
34.138.160.14 - - [30/Sep/2026:03:01:32 +0000] "GET /z9x8c7v6b5-debug-trigger-ccoo.cat HTTP/2.0" 403 33419 "https://ccoo.cat/z9x8c7v6b5-debug-trigger-ccoo.cat" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)" "34.138.160.14" edge="104.22.118.107"
34.138.160.14 - - [30/Sep/2026:03:01:32 +0000] "GET /static/manifest.json HTTP/2.0" 403 33372 "https://ccoo.cat/static/manifest.json" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36 EdgA/152.0.0.0" "34.138.160.14" edge="104.22.118.107"
34.138.160.14 - - [30/Sep/2026:03:01:32 +0000] "GET /manifest.json HTTP/2.0" 403 33371 "https://ccoo.cat/manifest.json" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36 EdgA/152.0.0.0" "34.138.160.14" edge="104.22.118.107"
34.138.160.14 - - [30/Sep/2026:03:01:32 +0000] "GET /assets/manifest.json HTTP/2.0" 403 33369 "https://ccoo.cat/assets/manifest.json" "Mozilla/5.0
...
show less
Web App Attack
๐ต๐ฑ
Budyn
2026-09-30 01:55:42
(2 days ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: map.budyn.ovh | URI: / | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-30 01:40:10
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 34.138.160.14 (14.160.138.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.138.160.14 (14.160.138.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 21:40:05.935750 2026] [security2:error] [pid 27605:tid 27605] [client 34.138.160.14:36850] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||icsubb.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "icsubb.com"] [uri "/z9x8c7v6b5-debug-trigger-icsubb.com"] [unique_id "arxodQFkm1RvlUVrta9SlgAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
Hazzard
2026-09-30 01:32:08
(2 days ago)
(mod_security) mod_security triggered on hostname [redacted]): (CF_ENABLE)
SQL Injection
๐บ๐ธ
1gz
2026-09-30 01:16:07
(2 days ago)
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: BLOCK
Protocol: HTTP/2 (GET method ...
show more
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /wp-config.php~
UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐ฉ๐ช
rh24
2026-09-30 00:36:37
(2 days ago)
(badbots) Bad bot user-agent [redacted] from 34.138.160.14 (US/United States/14.160.138.34.bc.google ...
show more
(badbots) Bad bot user-agent [redacted] from 34.138.160.14 (US/United States/14.160.138.34.bc.googleusercontent.com)
show less
Hacking
Anonymous
2026-09-29 23:50:06
(2 days ago)
| Multiple common web attacks from same source ip. (multiple servers)
Web App Attack
Hacking
SQL Injection
๐ง๐ช
cmbplf
2026-09-29 23:33:41
(2 days ago)
2.951 requests from abuseipdb.com blacklisted IP (1yr10mos3w)
Brute-Force
Bad Web Bot
๐ง๐ท
radardatelecom
2026-09-29 22:26:03
(2 days ago)
Blocked by Radar da Telecom firewall โ abuseipdb
Bad Web Bot
Web App Attack
๐บ๐ธ
Secure Gatewayยฎ๏ธ
2026-09-29 22:00:27
(2 days ago)
Report By Secure Gateway Security Team: Unsolicited Connection Attempt
Web App Attack
๐บ๐ธ
ALSCOยฎ๏ธ
2026-09-29 22:00:27
(2 days ago)
Report By ALSCO Security Team: SQL Injection Attempt Detected
SQL Injection
๐ฎ๐น
VHosting
2026-09-29 21:55:03
(2 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
๐ต๐ฑ
Budyn
2026-09-29 20:18:03
(2 days ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: budyn.ovh | URI: / | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Hacking
Web App Attack
๐ณ๐ฑ
middelkoopcc
2026-09-29 20:09:01
(2 days ago)
2026-09-29 22:07:30 GET /.env [301] && 2026-09-29 22:07:30 GET /src/.env [301] && 2026-09-29 22:07:3 ...
show more
2026-09-29 22:07:30 GET /.env [301] && 2026-09-29 22:07:30 GET /src/.env [301] && 2026-09-29 22:07:30 GET /.env.backup [301] && 179 more within 20 minutes
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-29 19:58:16
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 34.138.160.14 (14.160.138.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.138.160.14 (14.160.138.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 15:58:12.916612 2026] [security2:error] [pid 5947:tid 5947] [client 34.138.160.14:56406] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||iceofparadise.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "iceofparadise.com"] [uri "/z9x8c7v6b5-debug-trigger-iceofparadise.com"] [unique_id "arwYVD3vv_gYahW-Y9oDGQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack