๐ธ๐ช
sweplox.se
2026-10-16 00:02:20
(7 hours ago)
Ip 34.24.9.239 performed 'crowdsecurity/http-crawl-non_statics' (42 events over 894.577808ms) at 202 ...
show more
Ip 34.24.9.239 performed 'crowdsecurity/http-crawl-non_statics' (42 events over 894.577808ms) at 2026-10-16 00:02:19.335338777 +0000 UTC
show less
Bad Web Bot
Web App Attack
๐ต๐ฑ
sefinek.net
2026-10-15 23:34:09
(7 hours ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action: BLOCK | Protocol: HTTP/2 (GET) | Endpoint ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action: BLOCK | Protocol: HTTP/2 (GET) | Endpoint: /terraform.tfvars | UA: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) โข Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐ต๐ฑ
Budyn
2026-10-15 22:22:44
(8 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: budyn.ovh | URI: / | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Hacking
Web App Attack
๐ฉ๐ช
paissangroup
2026-10-15 21:48:13
(9 hours ago)
Multiple WAF Violations
Web App Attack
Anonymous
2026-10-15 20:15:44
(10 hours ago)
34.24.9.239 - - [16/Oct/2026:04:15:43 +0800] "GET /z9x8c7v6b5-debug-trigger-nonsensemakers.com HTTP/ ...
show more
34.24.9.239 - - [16/Oct/2026:04:15:43 +0800] "GET /z9x8c7v6b5-debug-trigger-nonsensemakers.com HTTP/1.1" 404 39532 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"
34.24.9.239 - - [16/Oct/2026:04:15:43 +0800] "GET /wp/wp-includes/js/jquery/ui/tabs.min.js.map HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"
34.24.9.239 - - [16/Oct/2026:04:15:43 +0800] "GET /wp/wp-includes/js/jquery/ui/core.min.js.map HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"
34.24.9.239 - - [16/Oct/2026:04:15:43 +0800] "GET /wp/wp-content/plugins/wonderplugin-video-embed/engine/wonderpluginvideoembed.js.map HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.
...
show less
Bad Web Bot
Web App Attack
๐ฎ๐น
VHosting
2026-10-15 20:05:03
(11 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
๐ต๐ฑ
mscode.pl
2026-10-15 18:36:37
(12 hours ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Prot ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/2 (POST method)
Zone: cms.mscode.pl
Endpoint: /icecoder/lib/file-control.php
UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )
show less
Bad Web Bot
๐ต๐ฑ
Budyn
2026-10-15 18:12:37
(12 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: billing.budyn.ovh | URI: /wp-admin/ | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
www.nomadomia.com
2026-10-15 15:55:35
(15 hours ago)
Hack attack .env
Port Scan
Hacking
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-15 15:03:06
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.24.9.239 (239.9.24.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.24.9.239 (239.9.24.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 11:03:01.667315 2026] [security2:error] [pid 14069:tid 14100] [client 34.24.9.239:45742] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nomadic-welshman.adetnw.com"] [uri "/.git/config"] [unique_id "atDrJadSN9CMwEmOZthdVAAAAEk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ญ๐บ
kranem
2026-10-15 15:00:23
(16 hours ago)
Triggered Cloudflare WAF from US.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/2 (GET ...
show more
Triggered Cloudflare WAF from US.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/2 (GET method)
Endpoint: /....//....//....//..../proc/self/environ
Timestamp: 2026-10-15T12:09:56Z
User-Agent: Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)
show less
Bad Web Bot
๐บ๐ธ
jormaster3k
2026-10-15 14:55:39
(16 hours ago)
Attack against Apache (too many 404s)
Web App Attack
๐ฉ๐ช
IVski.com
2026-10-15 14:25:29
(16 hours ago)
IVski WAF | Sensitive file probe detected - looking for .env
Hacking
Brute-Force
Web App Attack
๐ง๐ท
radardatelecom
2026-10-15 14:17:03
(16 hours ago)
Blocked by Radar da Telecom firewall โ abuseipdb
Bad Web Bot
Web App Attack
๐ฎ๐ฉ
Burayot
2026-10-15 13:45:16
(17 hours ago)
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 34.24.9.239 (US/United States/239.9. ...
show more
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 34.24.9.239 (US/United States/239.9.24.34.bc.googleusercontent.com): 2 in the last 3600 secs
show less
Web App Attack