🇺🇸
solantex
2026-11-06 14:54:54
UTC ·
(4 minutes ago)
Unauthorized automated scanning and reconnaissance against Solantex resources. No crawl, scan or test permission has been granted to this source.
Web App Attack
🇺🇸
IndigoRidge
2026-11-06 14:52:52
UTC ·
(6 minutes ago)
35.194.79.53 - - [06/Nov/2026:09:52:52 -0500] "GET /media../.env HTTP/1.1" 403 6530 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )"
35.194.79.53 - - [06/Nov/2026:09:52:52 -0500] "GET /js.. ...
show more
35.194.79.53 - - [06/Nov/2026:09:52:52 -0500] "GET /media../.env HTTP/1.1" 403 6530 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )"
35.194.79.53 - - [06/Nov/2026:09:52:52 -0500] "GET /js../.env HTTP/1.1" 403 6530 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"
35.194.79.53 - - [06/Nov/2026:09:52:52 -0500] "GET /img../.env HTTP/1.1" 403 6530 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)"
...
show less
Web App Attack
🇩🇪
ghostwarriors
2026-11-06 14:50:10
UTC ·
(9 minutes ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
🇩🇪
yitzhaq
2026-11-06 14:41:30
UTC ·
(18 minutes ago)
35.194.79.53 - - [06/Nov/2026:15:41:27 +0100] "GET /api/fs/read?allowOutsideWorkspace=true&path=/proc/self/environ HTTP/2.0" 301 455 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
35.194.79.53 - - [06/Nov/2026:15:41:27 +0100] "GET /ap ...
show more
35.194.79.53 - - [06/Nov/2026:15:41:27 +0100] "GET /api/fs/read?allowOutsideWorkspace=true&path=/proc/self/environ HTTP/2.0" 301 455 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
35.194.79.53 - - [06/Nov/2026:15:41:27 +0100] "GET /api/w/starter/jobs_u/get_log_file/../../../../proc/self/environ HTTP/2.0" 301 380 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)"
35.194.79.53 - - [06/Nov/2026:15:41:27 +0100] "GET /api/w/default/jobs_u/get_log_file/../../../../proc/self/environ HTTP/2.0" 301 380 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot"
35.194.79.53 - - [06/Nov/2026:15:41:27 +0100] "GET /auth.json HTTP/2.0" 301 360 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
35.194.79.53 - - [06/Nov/2026:15:41:27 +0100] "GET /wp-config.php.old HTTP/2.0" 301 374 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot"
35.194.79.53 -
show less
Web App Attack
Hacking
Anonymous
2026-11-06 14:40:05
UTC ·
(19 minutes ago)
| Multiple common web attacks from same source ip. (multiple servers)
Web App Attack
Hacking
SQL Injection
🇺🇸
SketchyDude
2026-11-06 14:20:02
UTC ·
(39 minutes ago)
Banned by Fail2Ban jail: apache-fakegooglebot
Bad Web Bot
🇳🇱
Alt255
2026-11-06 14:09:44
UTC ·
(50 minutes ago)
[ti-tinov] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 35.194.79.53 - - [06/Nov/2026:15:09:24 +0100] "GET /sitemap.xml HTTP/2.0" 404 1863 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X ...
show more
[ti-tinov] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 35.194.79.53 - - [06/Nov/2026:15:09:24 +0100] "GET /sitemap.xml HTTP/2.0" 404 1863 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
35.194.79.53 - - [06/Nov/2026:15:09:24 +0100] "GET /api-keys HTTP/2.0" 404 1854 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
35.194.79.53 - - [06/Nov/2026:15:09:24 +0100] "GET /settings/security HTTP/2.0" 404 1854 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
35.194.79.53 - - [06/Nov/2026:15:09:24 +0100] "GET /bi
...
show less
Bad Web Bot
Web App Attack
🇫🇮
Christopher Hughes
2026-11-06 14:07:14
UTC ·
(52 minutes ago)
35.194.79.53 - - [06/Nov/2026:14:07:13 +0000] "GET /z9x8c7v6b5-debug-trigger-ai.waterwaysnetwork.co.uk HTTP/2.0" 401 410 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
Web App Attack
🇫🇮
as211431.net
2026-11-06 14:06:16
UTC ·
(53 minutes ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /var/run/secrets/kubernetes.io/serviceaccount/token
UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0 ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /var/run/secrets/kubernetes.io/serviceaccount/token
UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇫🇮
Christopher Hughes
2026-11-06 13:44:03
UTC ·
(1 hour ago)
35.194.79.53 - - [06/Nov/2026:13:44:02 +0000] "GET /apps/marketing/.env HTTP/2.0" 401 410 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googleb ...
show more
35.194.79.53 - - [06/Nov/2026:13:44:02 +0000] "GET /apps/marketing/.env HTTP/2.0" 401 410 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
show less
Web App Attack
🇫🇷
dynamix
2026-11-06 13:34:01
UTC ·
(1 hour ago)
Multiple WAF Violations
Web App Attack
🇩🇪
Bedios GmbH
2026-11-06 13:29:40
UTC ·
(1 hour ago)
Excessive probing of non-existent URLs
Bad Web Bot
🇨🇭
backslash
2026-11-06 13:27:01
UTC ·
(1 hour ago)
block ruleset 3D3AFA921A373ECE19B6BA285C2D722163304638
Bad Web Bot
🇳🇱
Savvii
2026-11-06 13:15:17
UTC ·
(1 hour ago)
20 attempts against mh-misbehave-ban on boron
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
Christopher Hughes
2026-11-06 13:15:08
UTC ·
(1 hour ago)
35.194.79.53 - - [06/Nov/2026:13:15:07 +0000] "GET /robots.txt HTTP/2.0" 401 410 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
Web App Attack