๐ณ๐ฑ
e.fierstra
2026-07-27 10:36:04
(23 hours ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
๐ฉ๐ช
Bedios GmbH
2026-07-27 10:27:26
(23 hours ago)
Login credentials theft attempt
Hacking
Anonymous
2026-07-27 09:48:45
(1 day ago)
34.81.125.215 - - [27/Jul/2026:17:48:43 +0800] "GET /.aws/config HTTP/1.1" 404 396 "-" "meta-externa ...
show more
34.81.125.215 - - [27/Jul/2026:17:48:43 +0800] "GET /.aws/config HTTP/1.1" 404 396 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)"
34.81.125.215 - - [27/Jul/2026:17:48:43 +0800] "GET /console HTTP/1.1" 404 396 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36"
34.81.125.215 - - [27/Jul/2026:17:48:43 +0800] "GET /webpack-stats.json HTTP/1.1" 404 396 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36"
34.81.125.215 - - [27/Jul/2026:17:48:43 +0800] "GET /admin HTTP/1.1" 404 396 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36"
34.81.125.215 - - [27/Jul/2026:17:48:43 +0800] "GET /dashboard HTTP/1.1" 404 396 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36"
...
show less
Web App Attack
๐ฉ๐ช
MarkGGN
2026-07-27 09:24:54
(1 day ago)
Web attack. 34.81.125.215 - - [27/Jul/2026:11:24:54 +0200] "GET /wp-config.php.bak HTTP/2.0" 302 138 ...
show more
Web attack. 34.81.125.215 - - [27/Jul/2026:11:24:54 +0200] "GET /wp-config.php.bak HTTP/2.0" 302 138 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user"
34.81.125.215 - - [27/Jul/2026:11:24:54 +0200] "GET /wp-config.php.old HTTP/2.0" 302 138 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user"
show less
Web App Attack
๐บ๐ธ
rwgomes
2026-07-27 06:31:27
(1 day ago)
Automated report from Intelligence Finance Tools. IP probed malicious path: /wp-json. No such resour ...
show more
Automated report from Intelligence Finance Tools. IP probed malicious path: /wp-json. No such resource exists on this server.
show less
Web App Attack
Hacking
๐ณ๐ฑ
Site.eu
2026-07-27 06:20:48
(1 day ago)
Excessive multi-domain requests
Brute-Force
๐ต๐ฑ
wHosts
2026-07-27 06:19:50
(1 day ago)
Blocked by Fail2Ban
Web App Attack
๐ฎ๐น
CoreTech srl
2026-07-27 04:39:51
(1 day ago)
[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact
Hacking
๐ซ๐ท
IRISIO
2026-07-26 20:29:00
(1 day ago)
scans/SQL injection/spam posts : 728 queries
Web App Attack
SQL Injection
Anonymous
2026-07-26 13:20:24
(1 day ago)
(mod_security) mod_security triggered on hostname [redacted] 34.81.125.215 (TW/Taiwan/215.125.81.34. ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.81.125.215 (TW/Taiwan/215.125.81.34.bc.googleusercontent.com): (CF_ENABLE)
show less
SQL Injection
๐ซ๐ท
mrcrassi
2026-07-26 13:18:16
(1 day ago)
Triggered Cloudflare WAF (firewallManaged) from TW.
Action taken: BLOCK
Protocol: HTTP/2 (GET method ...
show more
Triggered Cloudflare WAF (firewallManaged) from TW.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /graphql
UA: meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐บ๐ธ
jormaster3k
2026-07-26 12:59:57
(1 day ago)
Attack against Apache (too many 404s)
Web App Attack
๐ฉ๐ช
LRob
2026-07-26 10:30:18
(1 day ago)
CrowdSec: crowdsecurity/http-sensitive-files | req: /.git/config | 5 distinct paths | UA: Mozilla/5. ...
show more
CrowdSec: crowdsecurity/http-sensitive-files | req: /.git/config | 5 distinct paths | UA: Mozilla/5.0 (compatible; Bytespider; [email protected] )
show less
Hacking
๐ญ๐บ
DumaNet
2026-07-26 10:27:00
(1 day ago)
Web app attack attempts, scanning for vulnerability.
Date: 2026 Jul 26. 12:24:14
Source IP: 34.81. ...
show more
Web app attack attempts, scanning for vulnerability.
Date: 2026 Jul 26. 12:24:14
Source IP: 34.81.125.215
Portion of the log(s):
34.81.125.215 - [26/Jul/2026:12:24:14 +0200] "GET /.profile HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
34.81.125.215 - [26/Jul/2026:12:24:14 +0200] "GET /.hermes/config.yaml HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
34.81.125.215 - [26/Jul/2026:12:24:14 +0200] "GET /.config/anthropic/credentials/default.json HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
34.81.125.215 - [26/Jul/2026:12:24:14 +0200] "GET /.hermes/auth.json HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
34.81.125.215 - [26/Jul/2026:12:24:14 +0200] "GET /.bashrc HTTP/1.1
show less
Web App Attack
Anonymous
2026-07-26 09:03:41
(2 days ago)
34.81.125.215 - - [26/Jul/2026:11:03:32 +0200] "GET /.git/config HTTP/1.1" 403 7143 "-" "Mozilla/5.0 ...
show more
34.81.125.215 - - [26/Jul/2026:11:03:32 +0200] "GET /.git/config HTTP/1.1" 403 7143 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user"
34.81.125.215 - - [26/Jul/2026:11:03:32 +0200] "GET /.aws/config HTTP/1.1" 403 7143 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user"
34.81.125.215 - - [26/Jul/2026:11:03:32 +0200] "GET /.git/HEAD HTTP/1.1" 403 7143 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user"
34.81.125.215 - - [26/Jul/2026:11:03:32 +0200] "GET /.gitlab-ci.yml HTTP/1.1" 403 7143 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user"
34.81.125.215 - - [26/Jul/2026:11:03:32 +0200] "GET /.git-credentials HTTP/1.1" 403 7143 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko
...
show less
DDoS Attack