Anonymous
2026-11-10 19:08:19
UTC ·
(29 minutes ago)
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: WordPress scanning, Backup file probing, Cloud secrets probing
Bad Web Bot
Web App Attack
🇩🇪
BlueWire Hosting
2026-11-10 10:59:06
UTC ·
(8 hours ago)
High-confidence malicious configuration/VCS probe
Web App Attack
🇬🇧
pinguin
2026-11-10 03:49:51
UTC ·
(15 hours ago)
Triggered Cloudflare WAF (linkMaze) from US.
Action taken: LINK_MAZE_INJECTED
Protocol: HTTP/1.1 (GET method)
Endpoint: /firebase-key.json
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/53 ...
show more
Triggered Cloudflare WAF (linkMaze) from US.
Action taken: LINK_MAZE_INJECTED
Protocol: HTTP/1.1 (GET method)
Endpoint: /firebase-key.json
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇬🇧
oja
2026-11-10 03:19:19
UTC ·
(16 hours ago)
Aggressive web scanner
Web App Attack
🇺🇸
francelink.fr
2026-11-10 00:04:30
UTC ·
(19 hours ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-09T03:39:38.000Z.
Web App Attack
🇮🇹
VHosting
2026-11-09 20:10:04
UTC ·
(23 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇩🇪
Laplus
2026-11-09 19:45:58
UTC ·
(23 hours ago)
34.22.50.208 - - [09/Nov/2026:20:45:53 +0100] "GET /.git/config HTTP/1.1" 302 145 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
34.22.50.208 - - [09/Nov/2026:20:45:53 + ...
show more
34.22.50.208 - - [09/Nov/2026:20:45:53 +0100] "GET /.git/config HTTP/1.1" 302 145 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
34.22.50.208 - - [09/Nov/2026:20:45:53 +0100] "GET /.env HTTP/1.1" 302 145 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
34.22.50.208 - - [09/Nov/2026:20:45:53 +0100] "GET /.env.local HTTP/1.1" 302 145 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
34.22.50.208 - - [09/Nov/2026:20:45:53 +0100] "GET /.env.production HTTP/1.1" 302 145 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
34.22.50.208 - - [09/Nov/2026:20:45:53 +0100] "GET /.env.staging HTTP/1.1" 302 145 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, l
...
show less
Hacking
Web App Attack
🇬🇧
poundawebsiteltd
2026-11-09 11:47:20
UTC ·
(1 day ago)
Malicious activity in general-malicious. Evidence: (apache_probe) Failed Access (403/404) 34.22.50.208 (US/United States/[REDACTED_DOMAIN]): 20 in the last 3600 secs | UA: (apache_probe) Failed Access (403/404) 34.22.50.208 (US/United States/208.50.2 ...
show more
Malicious activity in general-malicious. Evidence: (apache_probe) Failed Access (403/404) 34.22.50.208 (US/United States/[REDACTED_DOMAIN]): 20 in the last 3600 secs | UA: (apache_probe) Failed Access (403/404) 34.22.50.208 (US/United States/208.50.22.34.bc.googleusercontent.com): 20 in the last 3600 secs
show less
Brute-Force
Web App Attack
🇩🇪
konseptit
2026-11-09 11:09:47
UTC ·
(1 day ago)
(mod_security) mod_security triggered on hostname [redacted] 34.22.50.208 (US/United States/208.50.22.34.bc.googleusercontent.com)
SQL Injection
🇺🇸
Power Ca
2026-11-09 10:12:28
UTC ·
(1 day ago)
34.22.50.208 - - [09/Nov/2026:10:11:46 +0000] "GET /.env~ HTTP/2.0" 404 185 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.22.50.208 - - [09/Nov/2026:10:11:46 +0000] "GET ...
show more
34.22.50.208 - - [09/Nov/2026:10:11:46 +0000] "GET /.env~ HTTP/2.0" 404 185 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.22.50.208 - - [09/Nov/2026:10:11:46 +0000] "GET /.env1 HTTP/2.0" 404 185 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.22.50.208 - - [09/Nov/2026:10:11:46 +0000] "GET /.env2 HTTP/2.0" 404 185 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.22.50.208 - - [09/Nov/2026:10:11:46 +0000] "GET /.env_copy HTTP/2.0" 404 185 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.22.50.208 - - [09/Nov/2026:10:12:20 +0000] "GET /phpinfo HTTP/2.0" 404 185 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/53
...
show less
Bad Web Bot
Web App Attack
🇸🇪
vaia.cloud
2026-11-09 09:55:02
UTC ·
(1 day ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack
Anonymous
2026-11-09 09:23:00
UTC ·
(1 day ago)
GET /.git/config HTTP/1.1
...
Web App Attack
🇺🇸
francelink.fr
2026-11-09 03:39:22
UTC ·
(1 day ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-09T03:38:40.000Z.
Web App Attack
🇳🇱
e.fierstra
2026-11-09 01:31:17
UTC ·
(1 day ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇱🇻
radix
2026-11-09 00:13:41
UTC ·
(1 day ago)
Automated probing for sensitive configuration files and environment leaks.
Brute-Force
Web App Attack