๐ง๐ท
ICS Labs
2026-10-14 15:19:49
(1 day ago)
ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-10-14 UTC.
Brute-Force
๐บ๐ธ
mnsf
2026-10-14 03:05:35
(1 day ago)
Scanning/Probing (22)
Request Overload (106)
Brute-Force
Web App Attack
๐ซ๐ฎ
Christopher Hughes
2026-10-14 02:59:24
(1 day ago)
35.198.63.126 - - [14/Oct/2026:03:59:23 +0100] "GET /settings%2F.env HTTP/2.0" 404 224 "-" "Mozilla/ ...
show more
35.198.63.126 - - [14/Oct/2026:03:59:23 +0100] "GET /settings%2F.env HTTP/2.0" 404 224 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
show less
Web App Attack
๐ฌ๐ง
pinguin
2026-10-14 01:28:59
(2 days ago)
Triggered Cloudflare WAF (firewallManaged) from BR.
Action taken: LOG
Protocol: HTTP/2 (POST method) ...
show more
Triggered Cloudflare WAF (firewallManaged) from BR.
Action taken: LOG
Protocol: HTTP/2 (POST method)
Endpoint: /webhook-test/
UA: Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐ฉ๐ช
LRob
2026-10-14 01:16:26
(2 days ago)
Crawler ignoring refusals | ua: Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler), Mo ...
show more
Crawler ignoring refusals | ua: Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler), Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot), Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/) (+13 more) | path: /media../.env, /images../.env, /static//home/user/.env (+17 more)
show less
Bad Web Bot
๐ฉ๐ช
Nightreaver
2026-10-14 01:11:44
(2 days ago)
35.198.63.126 - - [14/Oct/2026:03:11:43 0200] "GET /static/manifest.json HTTP/1.1" 404 5750 "-" "Mo ...
show more
35.198.63.126 - - [14/Oct/2026:03:11:43 0200] "GET /static/manifest.json HTTP/1.1" 404 5750 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"
35.198.63.126 - - [14/Oct/2026:03:11:43 0200] "GET /manifest.json HTTP/1.1" 404 5750 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"
35.198.63.126 - - [14/Oct/2026:03:11:43 0200] "GET /asset-manifest.json HTTP/1.1" 404 5750 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"
35.198.63.126 - - [14/Oct/2026:03:11:43 0200] "GET /z9x8c7v6b5-debug-trigger-[snip] HTTP/1.1" 404 5750 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )"
35.198.63.126 - - [14/Oct/2026:03:11:43 0200] "GET /console HTTP/1.1" 404 5750 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebK[...]
show less
Bad Web Bot
Web App Attack
๐ซ๐ฎ
Christopher Hughes
2026-10-14 00:53:09
(2 days ago)
35.198.63.126 - - [14/Oct/2026:01:53:09 +0100] "GET /z9x8c7v6b5-debug-trigger-home.waterwaysnetwork. ...
show more
35.198.63.126 - - [14/Oct/2026:01:53:09 +0100] "GET /z9x8c7v6b5-debug-trigger-home.waterwaysnetwork.co.uk HTTP/2.0" 401 433 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
show less
Web App Attack
๐ฉ๐ช
XICTRON
2026-10-13 20:35:03
(2 days ago)
ModSecurity rule violation detected by Fail2Ban
Web App Attack
๐ฉ๐ช
ghostwarriors
2026-10-13 20:20:16
(2 days ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
๐ฉ๐ช
yitzhaq
2026-10-13 19:57:25
(2 days ago)
35.198.63.126 - - [13/Oct/2026:21:57:21 +0200] "GET /gcp-key.json HTTP/2.0" 301 365 "-" "Mozilla/5.0 ...
show more
35.198.63.126 - - [13/Oct/2026:21:57:21 +0200] "GET /gcp-key.json HTTP/2.0" 301 365 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
35.198.63.126 - - [13/Oct/2026:21:57:21 +0200] "GET /dist/.env HTTP/2.0" 301 360 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot"
35.198.63.126 - - [13/Oct/2026:21:57:21 +0200] "GET /api%2F.env HTTP/2.0" 404 293 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)"
35.198.63.126 - - [13/Oct/2026:21:57:21 +0200] "GET /public/admin.json HTTP/2.0" 301 373 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot"
35.198.63.126 - - [13/Oct/2026:21:57:21 +0200] "GET /config/firebase-admin.json HTTP/2.0" 301 388 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1
show less
Web App Attack
Hacking
๐ซ๐ฎ
Christopher Hughes
2026-10-13 19:32:50
(2 days ago)
35.198.63.126 - - [13/Oct/2026:20:32:49 +0100] "GET /obbgdiuywv8igu5ii33g HTTP/2.0" 401 410 "-" "Moz ...
show more
35.198.63.126 - - [13/Oct/2026:20:32:49 +0100] "GET /obbgdiuywv8igu5ii33g HTTP/2.0" 401 410 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
show less
Web App Attack
๐ฉ๐ช
paissangroup
2026-10-13 19:26:33
(2 days ago)
Multiple WAF Violations
Web App Attack
๐ฌ๐ง
cybersteve99
2026-10-13 18:53:56
(2 days ago)
Too many 4xx Requests -
Brute-Force
Web App Attack
๐ณ๐ฑ
Site.eu
2026-10-13 18:17:32
(2 days ago)
Excessive multi-domain requests
Brute-Force
๐ณ๐ฑ
e.fierstra
2026-10-13 18:16:17
(2 days ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack