Anonymous
2026-10-08 16:13:06
(6 days ago)
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Back ...
show more
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Backup file probing, Cloud secrets probing, Directory traversal
show less
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Site.eu
2026-10-07 23:31:16
(1 week ago)
Excessive multi-domain requests
Brute-Force
๐ซ๐ท
SpaceHost-Server
2026-10-07 22:22:50
(1 week ago)
Brute-Force
Web App Attack
๐บ๐ธ
helios.live
2026-10-07 19:16:40
(1 week ago)
2026/10/07 19:16:40 [error] 4086750#4086750: *130363 access forbidden by rule, client: 34.56.95.235, ...
show more
2026/10/07 19:16:40 [error] 4086750#4086750: *130363 access forbidden by rule, client: 34.56.95.235, server: kocerroxy.com, request: "GET /dist/.vite/manifest.json HTTP/1.1", host: "kocerroxy.com"
2026/10/07 19:16:40 [error] 4086751#4086751: *131224 access forbidden by rule, client: 34.56.95.235, server: kocerroxy.com, request: "GET /.vite/manifest.json HTTP/1.1", host: "kocerroxy.com"
2026/10/07 19:16:40 [error] 4086752#4086752: *131225 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 34.56.95.235, server: kocerroxy.com, request: "POST /lib/terminal-xhr.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "kocerroxy.com"
34.56.95.235 - - [07/Oct/2026:19:16:40 +0000] "POST /lib/terminal-xhr.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)"
2026/10/07 19:16:40 [error] 4086751#4086751: *131224 access forbidden by rule, client: 34.56.95.235, server
...
show less
Web App Attack
Anonymous
2026-10-07 18:54:57
(1 week ago)
34.56.95.235 - - [07/Oct/2026:18:54:49 +0000] "POST /cgi-bin/php-cgi.exe?%ADd+allow_url_include%3d1+ ...
show more
34.56.95.235 - - [07/Oct/2026:18:54:49 +0000] "POST /cgi-bin/php-cgi.exe?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/2.0" 404 13396 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)"
34.56.95.235 - - [07/Oct/2026:18:54:53 +0000] "GET /.env?raw HTTP/2.0" 404 13283 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
34.56.95.235 - - [07/Oct/2026:18:54:53 +0000] "GET /.env?import&raw HTTP/2.0" 404 13299 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
34.56.95.235 - - [07/Oct/2026:18:54:53 +0000] "GET /.env?import&url&inline HTTP/2.0" 404 13307 "-" "Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)"
34.56.95.235 - - [07/Oct/2026:18:54:54 +0000] "GET /.env?.svg?.wasm?init HTTP/2.0" 404 13292 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )"
...
show less
Brute-Force
Web App Attack
๐ณ๐ฑ
Savvii
2026-10-07 18:46:35
(1 week ago)
20 attempts against mh-misbehave-ban on ozone
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-07 18:30:09
(1 week ago)
[ti-11al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apac ...
show more
[ti-11al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 34.56.95.235 - - [07/Oct/2026:20:29:57 +0200] "GET /.vite/manifest.json HTTP/2.0" 404 31426 "https://inboedel24.nl/.vite/manifest.json" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36"
34.56.95.235 - - [07/Oct/2026:20:29:57 +0200] "GET /z9x8c7v6b5-debug-trigger-inboedel24.nl HTTP/2.0" 404 31435 "https://inboedel24.nl/z9x8c7v6b5-debug-trigger-inboedel24.nl" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
34.56.95.235 - - [07/Oct/2026:20:29:57 +0200] "GET /dist/.vite/manifest.json HTTP/2.0" 404 31444 "https://inboedel24.nl/dist/.vite/manifest.json" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36"
inb
...
show less
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Savvii
2026-10-07 18:15:52
(1 week ago)
20 attempts against mh-misbehave-ban on frost
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-07 17:44:52
(1 week ago)
Fail2Ban apache-noscript
Bad Web Bot
Anonymous
2026-10-07 17:34:47
(1 week ago)
Aggressive web scan
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-07 17:33:39
(1 week ago)
[cb-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[cb-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.56.95.235 - - [07/Oct/2026:19:33:38 +0200] "GET /userfiles?path=../../.env HTTP/1.0" 302 7425 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)"
...
show less
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Savvii
2026-10-07 17:13:18
(1 week ago)
20 attempts against mh-misbehave-ban on choy
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
dynamix
2026-10-07 17:07:01
(1 week ago)
Multiple WAF Violations
Web App Attack
๐ซ๐ท
mrcrassi
2026-10-07 16:40:21
(1 week ago)
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: BLOCK
Protocol: HTTP/2 (GET method ...
show more
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /app-config.json
UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐ช๐ธ
robotstxt
2026-10-07 16:35:14
(1 week ago)
34.56.95.235 - - [07/Oct/2026:16:34:45 +0000] "GET /z9x8c7v6b5-debug-trigger-fundaciopacopuerto.cat ...
show more
34.56.95.235 - - [07/Oct/2026:16:34:45 +0000] "GET /z9x8c7v6b5-debug-trigger-fundaciopacopuerto.cat HTTP/2.0" 403 47783 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)" "34.56.95.235" edge="104.22.118.31"
34.56.95.235 - - [07/Oct/2026:16:34:45 +0000] "GET /dist/.vite/manifest.json HTTP/2.0" 403 47783 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" "34.56.95.235" edge="104.22.118.31"
34.56.95.235 - - [07/Oct/2026:16:34:45 +0000] "GET /.vite/manifest.json HTTP/2.0" 403 47778 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" "34.56.95.235" edge="104.22.118.31"
34.56.95.235 - - [07/Oct/2026:16:34:45 +0000] "GET /build/manifest.json HTTP/2.0" 403 47783 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" "34.56.95.235" edge="104.22.118.31"
34.56.95.235 - - [07/Oct/2026:16:34:45
...
show less
Web App Attack