2026-11-03 12:04:56
UTC ·
(3 days ago)
IP matched detection query 50 and more bad rqs apache.
Hacking
Bad Web Bot
Brute-Force
Web App Attack
🇬🇧
openstrike.co.uk
2026-11-03 06:17:48
UTC ·
(3 days ago)
210 attacks on PHP URLs, password/key grabbing URLs, env grabbing URLs, config grabbing URLs (type 2), directory traversals, VC URLs, env grabbing URLs (type 2):
GET /laravel../config/database.php HTTP/1.1
GET /.git-credentials HTTP/1.1
GET /public.. ...
show more
210 attacks on PHP URLs, password/key grabbing URLs, env grabbing URLs, config grabbing URLs (type 2), directory traversals, VC URLs, env grabbing URLs (type 2):
GET /laravel../config/database.php HTTP/1.1
GET /.git-credentials HTTP/1.1
GET /public../.env HTTP/1.1
GET /secrets.yml HTTP/1.1
GET /..%2f..%2f.env HTTP/1.1
GET /.git/HEAD HTTP/1.1
GET /proc/self/cmdline HTTP/1.1
show less
Web App Attack
Hacking
🇺🇸
jormaster3k
2026-11-02 13:14:19
UTC ·
(4 days ago)
Attack against Apache (too many 404s)
Web App Attack
🇫🇮
as211431.net
2026-11-02 10:06:19
UTC ·
(4 days ago)
Triggered Cloudflare WAF (firewallCustom) from CA.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /.changeset/config.json
UA: Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawl ...
show more
Triggered Cloudflare WAF (firewallCustom) from CA.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /.changeset/config.json
UA: Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇰🇷
fanbinit
2026-11-02 09:34:20
UTC ·
(4 days ago)
Repeated HTTP requests for sensitive configuration or repository paths.
Web App Attack
🇩🇪
filstal.org
2026-11-02 09:17:06
UTC ·
(4 days ago)
ModSecurity/OWASP CRS: Protocol-Violation – HTTP header is restricted by policy (/x-middleware-subrequest/) (920450) | GET / | UA: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36
Web App Attack
2026-11-02 09:09:55
UTC ·
(4 days ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇩🇪
updown.io
2026-11-02 06:44:57
UTC ·
(4 days ago)
{"level":"info","ts":1793601895.7109425,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.152.48.1","remote_port":"59964","client_ip":"34.152.48.1","proto":"HTTP/2.0","method":"GET","host":"status.techlocally.com","ur ...
show more
{"level":"info","ts":1793601895.7109425,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.152.48.1","remote_port":"59964","client_ip":"34.152.48.1","proto":"HTTP/2.0","method":"GET","host":"status.techlocally.com","uri":"/webpack-stats.json","headers":{"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"Priority":["u=0, i"],"Sec-Fetch-User":["?1"],"Sec-Ch-Ua-Platform":["\"Windows\""],"Sec-Fetch-Dest":["document"],"Accept-Encoding":["gzip, deflate, br, zstd"],"Sec-Ch-Ua-Mobile":["?0"],"X-Nextjs-Data":["1"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"],"Upgrade-Insecure-Requests":["1"],"Sec-Ch-Ua":["\"Chromium\";v=\"153\", \"M
...
show less
DDoS Attack
Web App Attack
2026-11-02 06:01:07
UTC ·
(4 days ago)
Aggressive web scan
Web App Attack
2026-11-02 05:59:42
UTC ·
(4 days ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇩🇪
filstal.org
2026-11-02 05:59:05
UTC ·
(4 days ago)
ModSecurity/OWASP CRS: Protocol-Violation – HTTP header is restricted by policy (/x-middleware-subrequest/) (920450) | GET / + /sitemap.xml | UA: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari ...
show more
ModSecurity/OWASP CRS: Protocol-Violation – HTTP header is restricted by policy (/x-middleware-subrequest/) (920450) | GET / + /sitemap.xml | UA: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36
show less
Web App Attack
🇹🇼
kalaexj
2026-11-02 05:56:40
UTC ·
(4 days ago)
CrowdSec crowdsecurity/http-probing (11 events)
Hacking
Web App Attack
🇫🇮
as211431.net
2026-11-02 05:52:15
UTC ·
(4 days ago)
Triggered Cloudflare WAF (firewallCustom) from CA.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /supabase/.env
UA: Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)
This report was generated by:
https ...
show more
Triggered Cloudflare WAF (firewallCustom) from CA.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /supabase/.env
UA: Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
