🇪🇸
jmh888
2026-10-27 18:23:51
(4 hours ago)
34.86.150.60 - - [27/Oct/2026:18:23:50 +0000] "GET /sitemap_index.xml HTTP/1.1" 404 460 "-" "Mozilla ...
show more
34.86.150.60 - - [27/Oct/2026:18:23:50 +0000] "GET /sitemap_index.xml HTTP/1.1" 404 460 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot"
34.86.150.60 - - [27/Oct/2026:18:23:50 +0000] "GET /dist/manifest.json HTTP/1.1" 404 460 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"
34.86.150.60 - - [27/Oct/2026:18:23:50 +0000] "GET /asset-manifest.json HTTP/1.1" 404 460 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"
34.86.150.60 - - [27/Oct/2026:18:23:50 +0000] "GET /manifest.json HTTP/1.1" 404 4404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"
34.86.150.60 - - [27/Oct/2026:18:23:50 +0000] "GET /static/manifest.json HTTP/1.1" 404 4404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Appl
...
show less
Web App Attack
🇬🇧
pinguin
2026-10-27 13:49:31
(8 hours ago)
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: BLOCK
Protocol: HTTP/2 (GET method ...
show more
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /static../.env
UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇩🇪
updown.io
2026-10-27 10:48:56
(11 hours ago)
{"level":"info","ts":1793098134.3045995,"logger":"http.log.access.log1","msg":"handled request","req ...
show more
{"level":"info","ts":1793098134.3045995,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.86.150.60","remote_port":"51180","client_ip":"34.86.150.60","proto":"HTTP/2.0","method":"GET","host":"status.ourhost.az","uri":"/dist/manifest.json","headers":{"Sec-Fetch-Site":["none"],"Sec-Fetch-Dest":["document"],"Accept-Encoding":["gzip, deflate, br, zstd"],"Sec-Fetch-Mode":["navigate"],"X-Nextjs-Data":["1"],"Sec-Ch-Ua-Platform":["\"Windows\""],"Sec-Ch-Ua-Mobile":["?0"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8"],"Sec-Fetch-User":["?1"],"Upgrade-Insecure-Requests":["1"],"Accept-Language":["en-US,en;q=0.9"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 Edg/152.0.0.0"],"Priority":["u=0, i"],"Sec-Ch-Ua":["\"Chromium\";v=\"152\", \"Not?A_Brand\";v=\"24\", \"Microsoft Edge\";v=\"152\""],"X-Middleware-Subrequest":["src/middleware:now
...
show less
DDoS Attack
Web App Attack
🇬🇧
saxicola
2026-10-27 06:30:38
(15 hours ago)
34.86.150.60 - - 2026-10-27 06:30:37 "GET / HTTP/1.1" 403 486 "-" "Mozilla/5.0 (Windows NT 10.0; Win ...
show more
34.86.150.60 - - 2026-10-27 06:30:37 "GET / HTTP/1.1" 403 486 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.86.150.60 - - 2026-10-27 06:30:37 "GET /sitemap.xml HTTP/1.1" 403 486 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)"
...
show less
Bad Web Bot
Web App Attack
🇬🇧
openstrike.co.uk
2026-10-27 06:15:55
(16 hours ago)
1050 attacks on env grabbing URLs (type 2), password/key grabbing URLs, VC URLs, config grabbing URL ...
show more
1050 attacks on env grabbing URLs (type 2), password/key grabbing URLs, VC URLs, config grabbing URLs (type 2), PHP URLs, directory traversals, env grabbing URLs:
GET /@fs/proc/self/cmdline?raw?? HTTP/1.1
GET /__vite_rsc_findSourceMapURL?filename=file:///root/.aws/credentials&environmentName=rsc HTTP/1.1
GET /.git/HEAD HTTP/1.1
GET /secrets.yml HTTP/1.1
GET /document.php?modulepart=systemtools&file=../conf/conf.php&hashp=shared HTTP/1.1
GET /..%2f..%2f.env HTTP/1.1
GET /prisma/.env HTTP/1.1
show less
Hacking
Web App Attack
2026-10-27 04:33:46
(17 hours ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
🇵🇱
strefapi_com
2026-10-27 04:22:13
(18 hours ago)
Brute-force, web
...
Hacking
Brute-Force
Web App Attack
🇬🇧
consul.to
2026-10-27 02:34:59
(19 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇬🇧
KTSTechnology
2026-10-27 01:01:39
(21 hours ago)
Web vulnerability scanning detected by our ISP firewall
Web App Attack
🇬🇧
gurnip
2026-10-26 21:45:48
(1 day ago)
Vulnerability probe of page /graphql, not found on server.
Brute-Force
Web App Attack
🇳🇱
Alt255
2026-10-26 20:53:05
(1 day ago)
[ti-11al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-11al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.86.150.60 - - [26/Oct/2026:21:50:42 +0100] "GET /images../.env HTTP/2.0" 301 320 "-" "Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
...
show less
Bad Web Bot
Web App Attack
2026-10-26 20:37:12
(1 day ago)
path attack /api/..;/.env
Web App Attack
2026-10-26 18:23:20
(1 day ago)
Web application attack: http cve 2021 41773; Web application attack: http path traversal probing; We ...
show more
Web application attack: http cve 2021 41773; Web application attack: http path traversal probing; Web application attack: http sensitive files; Probing for exposed secret / credential files
show less
Hacking
Web App Attack
🇮🇹
CoreTech srl
2026-10-26 15:57:12
(1 day ago)
[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact,ndpi_tcp_issues,ndpi_probing_attempt
Hacking
🇩🇪
JLKnoch Software GmbH
2026-10-26 11:53:07
(1 day ago)
CrowdSec crowdsecurity/http-probing
Brute-Force
Web App Attack
