🇨🇦
cubie
2026-09-20 13:40:37
(2 hours ago)
Port Scan: Admin Enumeration - Reported by CubieCloud Firewall [CFW_H355-009]
Port Scan
🇫🇷
mrcrassi
2026-09-20 12:32:32
(3 hours ago)
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: BLOCK
Protocol: HTTP/1.1 (POST met ...
show more
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: BLOCK
Protocol: HTTP/1.1 (POST method)
Endpoint: /api
UA: Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
paulo.apoloni
2026-09-20 12:13:59
(3 hours ago)
34.63.14.129 - - [20/Sep/2026:09:13:59 -0300] "GET /rclone.conf HTTP/2.0" 444 0 "-" "Mozilla/5.0 (co ...
show more
34.63.14.129 - - [20/Sep/2026:09:13:59 -0300] "GET /rclone.conf HTTP/2.0" 444 0 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
34.63.14.129 - - [20/Sep/2026:09:13:59 -0300] "GET /@fs/app/.env?raw?? HTTP/2.0" 444 0 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36"
34.63.14.129 - - [20/Sep/2026:09:13:59 -0300] "GET /@fs/src/.env?raw?? HTTP/2.0" 444 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"
34.63.14.129 - - [20/Sep/2026:09:13:59 -0300] "GET /@fs/../.env?raw?? HTTP/2.0" 444 0 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
34.63.14.129 - - [20/Sep/2026:09:13:59 -0300] "GET /api/.env HTTP/2.0" 444 0 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
...
show less
Bad Web Bot
Web App Attack
🇧🇷
Halux
2026-09-20 11:32:36
(4 hours ago)
34.63.14.129 Probing protected path or service
Web App Attack
🇺🇸
agenciahypelab.com.br
2026-09-20 10:51:42
(5 hours ago)
WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_TRIGGER
Brute-Force
SSH
🇬🇧
consul.to
2026-09-20 10:39:28
(5 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇧🇷
dominioz
2026-09-20 10:35:03
(5 hours ago)
2026-09-20 10:34:42 GET /.git/config - - 34.63.14.129 HTTP/2 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+ ...
show more
2026-09-20 10:34:42 GET /.git/config - - 34.63.14.129 HTTP/2 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36;+compatible;+OAI-SearchBot/1.4;++https://openai.com/searchbot - 301 544
2026-09-20 10:34:42 GET /.git-credentials - - 34.63.14.129 HTTP/2 CCBot/2.0+(https://commoncrawl.org/faq/) - 301 554
2026-09-20 10:34:42 GET /.env.live - - 34.63.14.129 HTTP/2 Mozilla/5.0+(compatible;+Kimi-SearchBot/1.0;++https://kimi.ai/) - 301 540
2026-09-20 10:34:42 GET /.git/HEAD - - 34.63.14.129 HTTP/2 Mozilla/5.0+(compatible;+Google-Extended;++http://www.google.com/bot.html) - 301 540
2026-09-20 10:34:42 GET /.env.example - - 34.63.14.129 HTTP/2 Mozilla/5.0+(compatible;+MoonshotBot/1.0;++https://kimi.ai/) - 301 546
...
show less
Web App Attack
🇳🇱
Savvii
2026-09-19 05:27:16
(1 day ago)
20 attempts against mh-misbehave-ban on choy
Brute-Force
Bad Web Bot
Web App Attack
🇮🇩
David Koswari
2026-09-18 05:31:00
(2 days ago)
REQ_BLOCKED_ACL
DDoS Attack
FTP Brute-Force
Ping of Death
Port Scan
Hacking
SQL Injection
Spoofing
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
SSH
IoT Targeted
🇲🇽
octageeks.com
2026-09-18 04:10:43
(2 days ago)
Wordpress malicious attack:[octablocked]
Web App Attack
2026-09-18 00:42:58
(2 days ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇫🇷
SpaceHost-Server
2026-09-17 22:21:25
(2 days ago)
Brute-Force
Web App Attack
🇪🇸
robotstxt
2026-09-17 21:24:02
(2 days ago)
34.63.14.129 - - [17/Sep/2026:21:23:54 +0000] "GET /.aws/credentials HTTP/2.0" 403 16023 "https://ap ...
show more
34.63.14.129 - - [17/Sep/2026:21:23:54 +0000] "GET /.aws/credentials HTTP/2.0" 403 16023 "https://api-v2.temporada-alta.com/.aws/credentials" "Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)"
34.63.14.129 - - [17/Sep/2026:21:23:54 +0000] "GET /.aws/config HTTP/2.0" 403 16021 "https://api-v2.temporada-alta.com/.aws/config" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)"
34.63.14.129 - - [17/Sep/2026:21:23:54 +0000] "GET /.git/config HTTP/2.0" 403 16021 "https://api-v2.temporada-alta.com/.git/config" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)"
34.63.14.129 - - [17/Sep/2026:21:23:55 +0000] "GET /.env.local HTTP/2.0" 403 16023 "https://api-v2.temporada-alta.com/.env.local" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )"
...
show less
Web App Attack
🇪🇸
robotstxt
2026-09-17 18:47:59
(2 days ago)
34.63.14.129 - - [17/Sep/2026:18:47:30 +0000] "GET /.aws/config HTTP/2.0" 403 16019 "https://alpha.t ...
show more
34.63.14.129 - - [17/Sep/2026:18:47:30 +0000] "GET /.aws/config HTTP/2.0" 403 16019 "https://alpha.temporada-alta.com/.aws/config" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
34.63.14.129 - - [17/Sep/2026:18:47:30 +0000] "GET /.git/HEAD HTTP/2.0" 403 16021 "https://alpha.temporada-alta.com/.git/HEAD" "CCBot/2.0 (https://commoncrawl.org/faq/)"
34.63.14.129 - - [17/Sep/2026:18:47:30 +0000] "GET /.aws/credentials HTTP/2.0" 403 16021 "https://alpha.temporada-alta.com/.aws/credentials" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)"
34.63.14.129 - - [17/Sep/2026:18:47:30 +0000] "GET /.env.production HTTP/2.0" 403 16023 "https://alpha.temporada-alta.com/.env.production" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
34.63.14.129 - - [17/Sep/2026:18:47:30 +0000] "GET /.git/config HTTP/2.0" 403 16019 "https://alpha.temporada-alta.com/.git/config" "Mozilla/5.0 (compatible; Bytespider; spider
...
show less
Web App Attack
🇸🇬
Cloudkul Cloudkul
2026-09-17 18:06:44
(2 days ago)
Attempted Brute Force on our application
Brute-Force
Web App Attack