Anonymous
2026-10-11 16:32:56
(2 weeks ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
๐ง๐ท
Peregrine
2026-10-10 03:15:48
(2 weeks ago)
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 34.69.33.46 104.22.118.10 - - [06/Oct/2026:11:21:15 ...
show more
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 34.69.33.46 104.22.118.10 - - [06/Oct/2026:11:21:15 -0300] "GET /.ssh/id_rsa HTTP/1.1" 404 18149
show less
Bad Web Bot
๐ง๐ท
Caue Henrique
2026-10-09 03:00:01
(2 weeks ago)
Multiple common web attacks, XSS, Web Server 500 Error
Web Spam
Hacking
Web App Attack
๐ง๐ท
Peregrine
2026-10-08 03:16:23
(2 weeks ago)
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 34.69.33.46 104.22.118.10 - - [06/Oct/2026:11:21:15 ...
show more
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 34.69.33.46 104.22.118.10 - - [06/Oct/2026:11:21:15 -0300] "GET /.ssh/id_rsa HTTP/1.1" 404 18149
show less
Bad Web Bot
Anonymous
2026-10-07 04:18:52
(2 weeks ago)
Next.js Authentication Bypass (CVE-2025-29927).
Hacking
๐ง๐ท
Peregrine
2026-10-07 03:12:23
(2 weeks ago)
Fail2Ban ct101 Jail: tomcat-404 | Evidence: 34.69.33.46 104.22.118.10 - - [06/Oct/2026:11:21:14 -030 ...
show more
Fail2Ban ct101 Jail: tomcat-404 | Evidence: 34.69.33.46 104.22.118.10 - - [06/Oct/2026:11:21:14 -0300] "GET /build/manifest.json HTTP/1.1" 404 18149
34.69.33.46 104.22.118.10 - - [06/Oct/2026:11:21:14 -0300] "GET /dist/manifest.json HTTP/1.1" 404 18149
34.69.33.46 104.22.118.13 - - [06/Oct/2026:11:21:14 -0300] "GET /.vite/manifest.json HTTP/1.1" 404 18149
34.69.33.46 104.22.118.10 - - [06/Oct/2026:11:21:14 -0300] "GET /dist/.vite/manifest.json HTTP/1.1" 404 18149
34.69.33.46 104.22.118.10 - - [06/Oct/2026:11:21:14 -0300] "GET /z9x8c7v6b5-debug-trigger-decise.com.br HTTP/1.1" 404 18149
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
abuse-opdc
2026-10-06 22:06:30
(2 weeks ago)
Malicious HTTP requests matching injection/exploit signatures.
Web App Attack
Brute-Force
๐บ๐ธ
agaesteves
2026-10-06 18:37:01
(2 weeks ago)
[SISHIPISMO 360] TipoAtaque.PATH_PROBE | Acesso a path suspeito: /.env.development::$DATA | Paths: / ...
show more
[SISHIPISMO 360] TipoAtaque.PATH_PROBE | Acesso a path suspeito: /.env.development::$DATA | Paths: /.env.development::$DATA | UA: Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)
show less
Web App Attack
Anonymous
2026-10-06 18:19:16
(2 weeks ago)
34.69.33.46 - - [06/Oct/2026:15:19:15 -0300] "GET /.htpasswd HTTP/2.0" 301 162 "-" "Mozilla/5.0 (com ...
show more
34.69.33.46 - - [06/Oct/2026:15:19:15 -0300] "GET /.htpasswd HTTP/2.0" 301 162 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
...
show less
Port Scan
Hacking
SQL Injection
Brute-Force
Bad Web Bot
Exploited Host
๐ซ๐ท
mrcrassi
2026-10-06 17:38:37
(2 weeks ago)
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: BLOCK
Protocol: HTTP/2 (POST metho ...
show more
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: BLOCK
Protocol: HTTP/2 (POST method)
Endpoint: /index.php
UA: Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐ง๐ท
Peregrine
2026-10-06 14:21:19
(2 weeks ago)
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 34.69.33.46 104.22.118.10 - - [06/Oct/2026:11:21:15 ...
show more
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 34.69.33.46 104.22.118.10 - - [06/Oct/2026:11:21:15 -0300] "GET /.ssh/id_rsa HTTP/1.1" 404 18149
show less
Bad Web Bot
๐ซ๐ท
mrcrassi
2026-10-06 13:54:41
(2 weeks ago)
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: BLOCK
Protocol: HTTP/2 (POST metho ...
show more
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: BLOCK
Protocol: HTTP/2 (POST method)
Endpoint: /admin
UA: Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐ช๐ธ
pipeline.es
2026-10-06 09:41:12
(2 weeks ago)
Web scanning / probing for vulnerable paths | URL: /api/orders/..%2f..%2f.env | Evidence: awureviage ...
show more
Web scanning / probing for vulnerable paths | URL: /api/orders/..%2f..%2f.env | Evidence: awureviagens.com.br 34.69.33.46 - - [06/Oct/2026:11:40:27 +0200] \"GET /api/orders/..%2f..%2f.env HTTP/2.0\" 404 196 \"-\" \"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; +https://openai.com/searchbot\" GEOIP_COUNTRY_CODE=US 1045 | ASN: GOOGLE-CLOUD-PLATFORM | Country: US
show less
Port Scan
Web App Attack
๐ง๐ท
Halux
2026-10-06 08:42:22
(2 weeks ago)
34.69.33.46 Probing protected path or service
Web App Attack
๐ฌ๐ง
consul.to
2026-10-06 08:33:49
(2 weeks ago)
Web attack/malicious scanning detected
Web App Attack