🇨🇱
Fernando Soto
2026-11-07 03:05:13
UTC ·
(1 hour ago)
WAF propio vps1 (CL): 404MASx192,sensMASx154 score 32 en 1h. sondeo rutas sensibles, barrido 404.
Port Scan
Web App Attack
🇺🇸
Charlesiv
2026-11-06 17:05:48
UTC ·
(11 hours ago)
Triggered Cloudflare WAF (firewallCustom) from TW.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/2 (GET method)
Endpoint: /nx.json
Timestamp: 2026-11-06T16:01:00Z
Ray ID: a565507afcee8282
UA: Mozilla/5.0 (compatible; Meta-WebIndexer/1.0 ...
show more
Triggered Cloudflare WAF (firewallCustom) from TW.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/2 (GET method)
Endpoint: /nx.json
Timestamp: 2026-11-06T16:01:00Z
Ray ID: a565507afcee8282
UA: Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)
show less
Bad Web Bot
🇳🇱
Cyber SOC
2026-11-06 15:05:09
UTC ·
(13 hours ago)
Peaksys - 2026-11-06 15:04:47 UTC+00
Port Scan
🇦🇹
piqwjdas
2026-11-06 14:24:02
UTC ·
(14 hours ago)
OWASP CRS blocked web attack: HTTP header is restricted by policy (/x-middleware-subrequest/) (rule 920450) | Inbound Anomaly Score Exceeded (Total Score: 5) (rule 949110). Method: GET, URI: /.
Web App Attack
🇺🇸
Mundo Bueno
2026-11-06 14:15:41
UTC ·
(14 hours ago)
[ISILIA Protection v2.3] Tentative d'accès: /.env.local [RATE LIMITED - 1800s quarantine] | Pays: TW | UA: Mozilla/5.0 (compatible; Bytespider;
[email protected] ) AppleWebKit/537.36
Hacking
Web App Attack
🇫🇮
oh.mg
2026-11-06 13:36:37
UTC ·
(15 hours ago)
35.189.189.131 - - [06/Nov/2026:14:36:34 +0100] "GET /sitemap_index.xml HTTP/1.1" 403 498 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36"
35.189.189.131 - - [06/Nov/2026:14:36:35 +0100] "GET /z9x8c7v6b5-de ...
show more
35.189.189.131 - - [06/Nov/2026:14:36:34 +0100] "GET /sitemap_index.xml HTTP/1.1" 403 498 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36"
35.189.189.131 - - [06/Nov/2026:14:36:35 +0100] "GET /z9x8c7v6b5-debug-trigger-www.oh.ke HTTP/1.1" 403 3251 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
35.189.189.131 - - [06/Nov/2026:14:36:35 +0100] "GET /gl8bpohk63q34xw0ndzp HTTP/1.1" 403 3250 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36"
35.189.189.131 - - [06/Nov/2026:14:36:36 +0100] "GET /0ya72xt6dmv8r1e0k7av HTTP/1.1" 403 498 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
35.189.189.131 - - [06/Nov/2026:14:36:37 +0100] "GET /userfiles/x?path=../../.env HTTP/1.1" 403 498 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot"
...
show less
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-11-06 13:17:14
UTC ·
(15 hours ago)
20 attempts against mh-misbehave-ban on milky
Brute-Force
Bad Web Bot
Web App Attack
🇰🇷
fanbinit
2026-11-06 13:16:06
UTC ·
(15 hours ago)
Repeated requests for sensitive configuration or repository paths.
Web App Attack
🇺🇸
Charlesiv
2026-11-06 11:00:38
UTC ·
(18 hours ago)
Triggered Cloudflare WAF (firewallCustom) from TW.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/2 (GET method)
Endpoint: /.next/.env
Timestamp: 2026-11-06T09:53:06Z
Ray ID: a56335912fc98f25
UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, li ...
show more
Triggered Cloudflare WAF (firewallCustom) from TW.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/2 (GET method)
Endpoint: /.next/.env
Timestamp: 2026-11-06T09:53:06Z
Ray ID: a56335912fc98f25
UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)
show less
Bad Web Bot
🇳🇱
Alt255
2026-11-06 10:01:22
UTC ·
(18 hours ago)
[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.189.189.131 - - [06/Nov/2026:11:01:01 +0100] "GET /api/fs/read?allowOutsideWorkspace=true&path=/app/.env HTTP/2.0" 404 1855 "-" "Mozilla/5.0 ( ...
show more
[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.189.189.131 - - [06/Nov/2026:11:01:01 +0100] "GET /api/fs/read?allowOutsideWorkspace=true&path=/app/.env HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"
...
show less
Bad Web Bot
Web App Attack
🇫🇮
as211431.net
2026-11-06 09:57:06
UTC ·
(19 hours ago)
Triggered Cloudflare WAF (linkMaze) from TW.
Action taken: LINK_MAZE_INJECTED
Protocol: HTTP/2 (GET method)
Endpoint: /firebase-adminsdk.json
UA: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
This report was generated by:
...
show more
Triggered Cloudflare WAF (linkMaze) from TW.
Action taken: LINK_MAZE_INJECTED
Protocol: HTTP/2 (GET method)
Endpoint: /firebase-adminsdk.json
UA: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
www.winos.me
2026-11-06 09:28:02
UTC ·
(19 hours ago)
Shield: Layer4 Port 9 Trap
Port Scan
Hacking
🇩🇪
updown.io
2026-11-06 09:08:53
UTC ·
(19 hours ago)
{"level":"info","ts":1793956130.6416328,"logger":"http.log.access.log0","msg":"handled request","request":{"remote_ip":"35.189.189.131","remote_port":"46366","client_ip":"35.189.189.131","proto":"HTTP/2.0","method":"POST","host":"obwy.status.updown.i ...
show more
{"level":"info","ts":1793956130.6416328,"logger":"http.log.access.log0","msg":"handled request","request":{"remote_ip":"35.189.189.131","remote_port":"46366","client_ip":"35.189.189.131","proto":"HTTP/2.0","method":"POST","host":"obwy.status.updown.io","uri":"/graphql","headers":{"Sec-Ch-Ua-Mobile":["?0"],"Accept-Language":["en-US,en;q=0.9"],"Sec-Ch-Ua":["\"Chromium\";v=\"152\", \"Not?A_Brand\";v=\"24\", \"Google Chrome\";v=\"152\""],"Cookie":["REDACTED"],"Referer":["https://obwy.status.updown.io"],"Accept":["*/*"],"Content-Length":["86"],"Accept-Encoding":["gzip, deflate, br, zstd"],"Sec-Fetch-Dest":["empty"],"Sec-Fetch-Site":["same-origin"],"Origin":["https://obwy.status.updown.io"],"Priority":["u=1, i"],"User-Agent":["Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"],"Content-Type":["application/json"],"Sec-Ch-Ua-Platform":["\"macOS\""],"Sec-Fetch-Mode":["cors"]},"tls":{"resumed":false,"version":772,"cipher_suite"
...
show less
DDoS Attack
Web App Attack
2026-11-06 07:58:10
UTC ·
(21 hours ago)
Web application attack: http cve 2021 41773; Web application attack: http path traversal probing; Web application attack: http sensitive files; Probing for exposed secret / credential files
Hacking
Web App Attack
🇨🇭
🇨🇭 Hosting
2026-11-06 05:20:03
UTC ·
(23 hours ago)
Automated security scanning detected: Environment File Exposure, Git Repository Config Exposure, AWS Credentials File Exposure, API Environment File Exposure, Laravel Environment File Exposure, Production Environment File Exposure. Systematic reconna ...
show more
Automated security scanning detected: Environment File Exposure, Git Repository Config Exposure, AWS Credentials File Exposure, API Environment File Exposure, Laravel Environment File Exposure, Production Environment File Exposure. Systematic reconnaissance using automated tools.
show less
Web App Attack
