Anonymous
2026-11-03 12:01:40
UTC ·
(6 days ago)
IP matched detection query 50 and more bad rqs apache.
Hacking
Bad Web Bot
Brute-Force
Web App Attack
🇹🇷
Jova
2026-11-02 16:38:47
UTC ·
(1 week ago)
Requests impersonating 3 different crawlers from one IP.
Bad Web Bot
🇩🇪
LRob
2026-11-02 16:14:37
UTC ·
(1 week ago)
Crawler ignoring refusals | ua: Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler), Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.a ...
show more
Crawler ignoring refusals | ua: Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler), Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user), Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/) (+5 more) | path: /.git/HEAD, /core/.env, /.git/config (+5 more)
show less
Bad Web Bot
Anonymous
2026-11-02 16:13:50
UTC ·
(1 week ago)
Multiple web server 400 error codes from same source ip
Web App Attack
🇧🇷
SvrAdmin
2026-11-02 13:21:36
UTC ·
(1 week ago)
[705] (cpanel) Failed cPanel login from 34.180.69.179 (JP/Japan/179.69.180.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CPANEL; Logs: [2026-11-02 10:21:26 -0300] info [cpaneld] 34.180.69.179 - - "GET ...
show more
[705] (cpanel) Failed cPanel login from 34.180.69.179 (JP/Japan/179.69.180.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CPANEL; Logs: [2026-11-02 10:21:26 -0300] info [cpaneld] 34.180.69.179 - - "GET /sitemap.xml HTTP/1.1" FAILED LOGIN cpaneld: login attempt without username
[2026-11-02 10:21:27 -0300] info [cpaneld] 34.180.69.179 - - "GET /gdynuua2edg64b9nr2bx HTTP/1.1" FAILED LOGIN cpaneld: login attempt without username
[2026-11-02 10:21:28 -0300] info [cpaneld] 34.180.69.179 - - "GET /.env.supabase HTTP/1.1" FAILED LOGIN cpaneld: login attempt without username
[2026-11-02 10:21:30 -0300] info [cpaneld] 34.180.69.179 - - "GET /.env.testing HTTP/1.1" FAILED LOGIN cpaneld: login attempt without username
[2026-11-02 10:21:30 -0300] info [cpaneld] 34.180.69.179 - - "GET /server.key HTTP/1.1" FAILED LOGIN cpaneld: login attempt without username
show less
Port Scan
Hacking
Brute-Force
Exploited Host
🇺🇸
igerman
2026-11-02 11:09:22
UTC ·
(1 week ago)
caddy probes: env-probe: GET /.env.config(DROP), GET /.env.development.local(DROP), GET /.env.preprod(DROP), GET /.env.prod.local(DROP), GET /.env.testing(DROP), GET /@fs/..%252f..%252f..%252f..%252f..%252froot/.env?raw??(DROP), GET /@fs/.env?import& ...
show more
caddy probes: env-probe: GET /.env.config(DROP), GET /.env.development.local(DROP), GET /.env.preprod(DROP), GET /.env.prod.local(DROP), GET /.env.testing(DROP), GET /@fs/..%252f..%252f..%252f..%252f..%252froot/.env?raw??(DROP), GET /@fs/.env?import&?raw??(DROP), GET /@fs/.env?raw&url??(DROP), GET /@fs/.env?url&raw??(DROP), GET /@fs/app/.env.local?import&raw??(DROP), GET /@fs/app/.env.production?import&raw??(DROP), GET /@fs/app/.env?raw??(DROP), GET /@fs/proc/self/cwd/.env?raw??(DROP), GET /@fs/src/.env?raw??(DROP) | path-traversal: GET /@fs/../.env?import&raw??(DROP), GET /@fs/../.env?raw??(DROP) | web: GET /.bashrc(DROP), GET /.vite/manifest.json(DROP), GET /.zshrc(DROP), GET /@fs/var/run/secrets/kubernetes.io/serviceaccount/ca.crt?raw??(DROP), GET /@fs/var/run/secrets/kubernetes.io/serviceaccount/token?raw??(DROP), GET /key.pem(DROP), GET /server.key(DROP)
show less
Web App Attack
🇳🇱
Savvii
2026-11-02 10:39:39
UTC ·
(1 week ago)
20 attempts against mh-misbehave-ban on orcus
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-11-02 09:30:53
UTC ·
(1 week ago)
(mod_security) mod_security triggered on hostname [redacted] 34.180.69.179 (JP/Japan/179.69.180.34.bc.googleusercontent.com)
SQL Injection
Anonymous
2026-11-02 09:29:59
UTC ·
(1 week ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
Anonymous
2026-11-02 09:12:42
UTC ·
(1 week ago)
IP matched detection query 404 icewarp.
Brute-Force
Hacking
🇳🇱
debestelapp
2026-11-02 09:10:07
UTC ·
(1 week ago)
Web App Attack
🇳🇱
Site.eu
2026-11-02 09:02:06
UTC ·
(1 week ago)
Scanning for secret files (.env, .git, credentials, config backups)
Bad Web Bot
Web App Attack
🇺🇸
moppetto
2026-11-02 08:27:33
UTC ·
(1 week ago)
Node.js .env file credential scraping; GET /public../.env
Bad Web Bot
Hacking
🇫🇮
as211431.net
2026-11-02 08:18:49
UTC ·
(1 week ago)
Triggered Cloudflare WAF (firewallCustom) from JP.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /wp-config.php.bak
UA: Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)
This report was generated by:
https://github.com ...
show more
Triggered Cloudflare WAF (firewallCustom) from JP.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /wp-config.php.bak
UA: Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇮🇹
VHosting
2026-11-02 07:10:05
UTC ·
(1 week ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack