🇮🇳
evicky2002
2026-09-17 06:00:05
(8 hours ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
🇸🇬
crimefireNOC
2026-09-17 03:01:05
(11 hours ago)
[waf.rce.eval] waf.rce.eval on https://manakmewa.com/api/v1/validate/code via POST (action: ban+403)
Hacking
Web App Attack
🇳🇱
Savvii
2026-09-17 02:54:53
(11 hours ago)
20 attempts against mh-misbehave-ban on ethyl
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Petros Stefanakis
2026-09-17 02:52:51
(11 hours ago)
(mod_security) mod_security triggered on hostname [redacted] 35.167.41.118 (US/United States/ec2-35- ...
show more
(mod_security) mod_security triggered on hostname [redacted] 35.167.41.118 (US/United States/ec2-35-167-41-118.us-west-2.compute.amazonaws.com)
show less
SQL Injection
🇧🇷
Halux
2026-09-17 02:09:31
(12 hours ago)
35.167.41.118 Probing protected path or service
Web App Attack
🇺🇸
helios.live
2026-09-17 01:46:34
(12 hours ago)
2026/09/17 01:46:29 [error] 1102433#1102433: *3458866 access forbidden by rule, client: 35.167.41.11 ...
show more
2026/09/17 01:46:29 [error] 1102433#1102433: *3458866 access forbidden by rule, client: 35.167.41.118, server: kocerroxy.com, request: "GET /.vite/manifest.json HTTP/1.1", host: "kocerroxy.com"
2026/09/17 01:46:29 [error] 1102433#1102433: *3458866 access forbidden by rule, client: 35.167.41.118, server: kocerroxy.com, request: "GET /dist/.vite/manifest.json HTTP/1.1", host: "kocerroxy.com"
2026/09/17 01:46:34 [error] 1102433#1102433: *3458917 access forbidden by rule, client: 35.167.41.118, server: kocerroxy.com, request: "GET /.docker/config.json HTTP/1.1", host: "kocerroxy.com"
2026/09/17 01:46:34 [error] 1102433#1102433: *3458917 access forbidden by rule, client: 35.167.41.118, server: kocerroxy.com, request: "GET /.npmrc HTTP/1.1", host: "kocerroxy.com"
2026/09/17 01:46:34 [error] 1102433#1102433: *3458917 access forbidden by rule, client: 35.167.41.118, server: kocerroxy.com, request: "GET /.s3cfg HTTP/1.1", host: "kocerroxy.com"
...
show less
Web App Attack
🇺🇸
kbeezie
2026-09-17 01:31:27
(12 hours ago)
35.167.41.118 - - [16/Sep/2026:21:31:27 -0400] "GET /id_ecdsa HTTP/1.1" 429 162 "-" "Mozilla/5.0 (co ...
show more
35.167.41.118 - - [16/Sep/2026:21:31:27 -0400] "GET /id_ecdsa HTTP/1.1" 429 162 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"
35.167.41.118 - - [16/Sep/2026:21:31:27 -0400] "GET /privatekey.key HTTP/1.1" 429 162 "-" "Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)"
35.167.41.118 - - [16/Sep/2026:21:31:27 -0400] "GET /server.key HTTP/1.1" 429 162 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)"
35.167.41.118 - - [16/Sep/2026:21:31:27 -0400] "POST /api/graphql HTTP/1.1" 429 564 "https://kbeezie.com" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36"
35.167.41.118 - - [16/Sep/2026:21:31:27 -0400] "GET /ssl/server.key HTTP/1.1" 429 162 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)"
show less
Bad Web Bot
Web App Attack
🇧🇷
Halux
2026-09-17 01:04:47
(13 hours ago)
35.167.41.118 Web Application Firewall multiple violations
Hacking
Web App Attack
🇳🇱
Alt255
2026-09-17 01:04:14
(13 hours ago)
[cb-05al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[cb-05al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.167.41.118 - - [17/Sep/2026:03:04:11 +0200] "GET /.ssh/id_rsa HTTP/2.0" 403 81 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36"
...
show less
Bad Web Bot
Web App Attack
🇫🇮
JimArchon72
2026-09-17 00:00:08
(14 hours ago)
2026/09/16 23:59:34 "GET /wp-admin/ HTTP/2.0"
Web App Attack
2026-09-16 23:49:01
(14 hours ago)
Bot / scanning and/or hacking attempts: GET /woonaccessoires/?yith_wcan=1&filter_soort=waxinelic ...
show more
Bot / scanning and/or hacking attempts: GET /woonaccessoires/?yith_wcan=1&filter_soort=waxinelichthoude, GET /wp-login.php?redirect_to=https%3A%2F%2Fheerlijkfijn.nl%2Fw
show less
Hacking
Web App Attack
🇳🇱
Savvii
2026-09-16 23:33:11
(14 hours ago)
20 attempts against mh-misbehave-ban on ozone
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-09-16 23:03:36
(15 hours ago)
20 attempts against mh-misbehave-ban on onion
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
bazter.pro
2026-09-16 23:02:56
(15 hours ago)
Fail2Ban: plesk-bot-aggressive - 15 failures
Port Scan
Bad Web Bot
Web App Attack
🇫🇷
mrcrassi
2026-09-16 22:57:48
(15 hours ago)
Triggered Cloudflare WAF (botFight) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/2 (POST ...
show more
Triggered Cloudflare WAF (botFight) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/2 (POST method)
Endpoint: /mcp
UA: Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot