Recent reportsWe have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Bad web bot on a honeypot: ignored robots.txt (Disallow: /) and kept crawling without browser behaviour.
Requests within an hour: 1347 on 4 host(s)
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/15 ...
show moreBad web bot on a honeypot: ignored robots.txt (Disallow: /) and kept crawling without browser behaviour.
Requests within an hour: 1347 on 4 host(s)
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Sa | Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bin
Requested, e.g.:
- phpmyadmin.[REDACTED]/.pypirc
- phpmyadmin.[REDACTED]/.streamlit/secrets.toml
- phpmyadmin.[REDACTED]/1b5c6e8f-da8a-47b3-917a-9dc65837f2f6
- phpmyadmin.[REDACTED]/288010ce-962b-4949-80d4-9fac2643dea2
- phpmyadmin.[REDACTED]/31e8db68-2a09-44bb-92ec-8afe2eedc322
- phpmyadmin.[REDACTED]/4f1c02dd-7a71-47b6-958a-3c79adba1a58
- ... and 631 more
show less
Bad web bot on a honeypot: ignored robots.txt (Disallow: /) and kept crawling without browser behaviour.
Requests within an hour: 1123 on 4 host(s)
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/15 ...
show moreBad web bot on a honeypot: ignored robots.txt (Disallow: /) and kept crawling without browser behaviour.
Requests within an hour: 1123 on 4 host(s)
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Sa | Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)
Requested, e.g.:
- cpanel.[REDACTED]/*.auto.tfvars
- cpanel.[REDACTED]/..../..../..../..../proc/self/environ
- cpanel.[REDACTED]/.amplifyrc
- cpanel.[REDACTED]/.aws/credentials%3F.txt
- cpanel.[REDACTED]/.bash_profile
- cpanel.[REDACTED]/.bashrc
- ... and 507 more
show less
Bad web bot on a honeypot: ignored robots.txt (Disallow: /) and kept crawling without browser behaviour.
Requests within an hour: 1150 on 4 host(s)
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/15 ...
show moreBad web bot on a honeypot: ignored robots.txt (Disallow: /) and kept crawling without browser behaviour.
Requests within an hour: 1150 on 4 host(s)
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Sa | Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)
Requested, e.g.:
- artifactory.[REDACTED]/*.auto.tfvars
- artifactory.[REDACTED]/..../..../..../..../proc/self/environ
- artifactory.[REDACTED]/.amplifyrc
- artifactory.[REDACTED]/.aws/credentials%3F.txt
- artifactory.[REDACTED]/.bash_profile
- artifactory.[REDACTED]/.bashrc
- ... and 525 more
show less
Bad web bot on a honeypot: ignored robots.txt (Disallow: /) and kept crawling without browser behaviour.
Requests within an hour: 464 on 2 host(s)
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152 ...
show moreBad web bot on a honeypot: ignored robots.txt (Disallow: /) and kept crawling without browser behaviour.
Requests within an hour: 464 on 2 host(s)
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Sa | Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected]
Requested, e.g.:
- artifactory.[REDACTED]/.bashrc
- artifactory.[REDACTED]/.zshrc
- artifactory.[REDACTED]/392b9c10-47dc-4dd2-bddb-2eae2801a4c8
- artifactory.[REDACTED]/6180f747-b018-4225-bbcc-4a1f0ea378f2
- artifactory.[REDACTED]/7zcrmc3qy5oarhv03no4
- artifactory.[REDACTED]/api/graphql
- ... and 210 more
show less
Bad web bot on a honeypot: ignored robots.txt (Disallow: /) and kept crawling without browser behaviour.
Requests within an hour: 1106 on 4 host(s)
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/15 ...
show moreBad web bot on a honeypot: ignored robots.txt (Disallow: /) and kept crawling without browser behaviour.
Requests within an hour: 1106 on 4 host(s)
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Sa | Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)
Requested, e.g.:
- cas.[REDACTED]/*.auto.tfvars
- cas.[REDACTED]/..../..../..../..../proc/self/environ
- cas.[REDACTED]/.aws/credentials%3F.txt
- cas.[REDACTED]/.bash_profile
- cas.[REDACTED]/.boto
- cas.[REDACTED]/.changeset/config.json
- ... and 468 more
show less
Triggered Cloudflare WAF (firewallCustom) from BE.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /key.json
UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected])
This report w ...
show moreTriggered Cloudflare WAF (firewallCustom) from BE.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /key.json
UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected])
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Web app exploit probe on a honeypot: requested known vulnerability paths (wp-login.php, .env, .git ...).
Requests within an hour: 1701 on 5 host(s)
User agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) V ...
show moreWeb app exploit probe on a honeypot: requested known vulnerability paths (wp-login.php, .env, .git ...).
Requests within an hour: 1701 on 5 host(s)
User agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17. | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Sa
Requested, e.g.:
- app.[REDACTED]/3cgw4s2i73yax7fvga5l
- app.[REDACTED]/448e4d58-6a63-413a-b2e4-5d4cfb5d1344
- app.[REDACTED]/6qzdiw6s2py63er0aoxv
- app.[REDACTED]/7fe22010-3e3d-46d7-94fb-3f3b546f2c92
- app.[REDACTED]/api/console/api_server?sense_version=%40%40SENSE_VERSION&ap
- app.[REDACTED]/api/fs/read?allowOutsideWorkspace=true&path=/app/.env
- ... and 799 more
show less
Web app exploit probe on a honeypot: requested known vulnerability paths (wp-login.php, .env, .git ...).
Requests within an hour: 1282 on 4 host(s)
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/15 ...
show moreWeb app exploit probe on a honeypot: requested known vulnerability paths (wp-login.php, .env, .git ...).
Requests within an hour: 1282 on 4 host(s)
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Sa | Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.co
Requested, e.g.:
- exchange.[REDACTED]/*.auto.tfvars
- exchange.[REDACTED]/..../..../..../..../proc/self/environ
- exchange.[REDACTED]/.amplifyrc
- exchange.[REDACTED]/.aws/credentials%3F.txt
- exchange.[REDACTED]/.bash_profile
- exchange.[REDACTED]/.bashrc
- ... and 599 more
show less