🇩🇪
bryth
2026-10-02 15:36:10
UTC ·
(1 month ago)
Wordpress login/xmlrpc abuse (Fri Oct 2 03:17:16 PM UTC 2026)
Hacking
Web App Attack
🇺🇸
nekoify
2026-10-02 15:13:25
UTC ·
(1 month ago)
IP has triggered Cloudflare WAF. action: block source: firewallManaged clientAsn: 396982 clientASNDescription: Google LLC clientCountryName: TW clientIP: 35.229.170.235 clientRequestHTTPMethodName: POST clientRequestHTTPProtocol: HTTP/2 clientRequest ...
show more
IP has triggered Cloudflare WAF. action: block source: firewallManaged clientAsn: 396982 clientASNDescription: Google LLC clientCountryName: TW clientIP: 35.229.170.235 clientRequestHTTPMethodName: POST clientRequestHTTPProtocol: HTTP/2 clientRequestPath: /api/v1/validate/code clientRequestQuery: datetime: 2026-10-02T15:13:25Z rayName: a444a6a72f9cfd45 ruleId: 7bd01eeccb6b420fa0be30264603a5cb userAgent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot.
show less
Open Proxy
VPN IP
Port Scan
Hacking
SQL Injection
Bad Web Bot
Exploited Host
Web App Attack
🇺🇸
Aurealize
2026-10-02 15:08:27
UTC ·
(1 month ago)
Automated Sensitive File discovery attempt detected by a Cloudflare WAF custom rule. Path: /shared/.env.
Web App Attack
Hacking
🇺🇸
wordpresshosting.solutions
2026-10-02 14:37:20
UTC ·
(1 month ago)
Web brute-force / failed auth detected. Evidence: [Fri Oct 02 14:37:20.562119 2026] [authz_core:error] [pid 2991042] [client [IP]:0] AH01630: client [IP]nied by server configuration: [WEB_ROOT]/dist
[Fri Oct 02 14:37:20.608745 2026] [authz_core:error ...
show more
Web brute-force / failed auth detected. Evidence: [Fri Oct 02 14:37:20.562119 2026] [authz_core:error] [pid 2991042] [client [IP]:0] AH01630: client [IP]nied by server configuration: [WEB_ROOT]/dist
[Fri Oct 02 14:37:20.608745 2026] [authz_core:error] [pid 3184571] [client [IP]:0] AH01630: client [IP]nied by server configuration: [WEB_ROOT]/.vite
show less
Brute-Force
Web App Attack
🇳🇱
Webhoster
2026-10-02 14:32:08
UTC ·
(1 month ago)
CrowdSec detected crowdsecurity/http-sensitive-files on a monitored service.
Web App Attack
🇨🇦
john doe
2026-10-02 12:41:22
UTC ·
(1 month ago)
SentinelBot: Spring Boot Exploit (score: 77)
Web App Attack
2026-10-02 08:29:58
UTC ·
(1 month ago)
fail2ban: plesk-modsecurity jail on genckocaeli.com
Web App Attack
🇬🇧
pinguin
2026-10-02 08:29:37
UTC ·
(1 month ago)
Triggered Cloudflare WAF (firewallManaged) from TW.
Action taken: LOG
Protocol: HTTP/2 (GET method)
Endpoint: /index.php
UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )
This report was ge ...
show more
Triggered Cloudflare WAF (firewallManaged) from TW.
Action taken: LOG
Protocol: HTTP/2 (GET method)
Endpoint: /index.php
UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇩🇪
updown.io
2026-10-02 07:53:57
UTC ·
(1 month ago)
{"level":"info","ts":1790927630.9758976,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"35.229.170.235","remote_port":"35796","client_ip":"35.229.170.235","proto":"HTTP/2.0","method":"GET","host":"services.monitoring.q ...
show more
{"level":"info","ts":1790927630.9758976,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"35.229.170.235","remote_port":"35796","client_ip":"35.229.170.235","proto":"HTTP/2.0","method":"GET","host":"services.monitoring.quadient.digital","uri":"/manage/env","headers":{"Cookie":["REDACTED"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"X-Nextjs-Data":["1"],"User-Agent":["Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"],"Accept-Encoding":["gzip"],"Accept":["*/*"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"services.monitoring.quadient.digital","ech":false}},"bytes_read":0,"user_id":"","duration":0.000172018,"size":0,"status":429,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"]}}
{"level":"info","
...
show less
DDoS Attack
Web App Attack
🇨🇭
leo1305
2026-10-02 07:39:03
UTC ·
(1 month ago)
CrowdSec detection | scenario: http-sensitive-files
Web App Attack
Exploited Host
🇩🇪
raph
2026-10-02 07:30:07
UTC ·
(1 month ago)
[DOT FILES] crawler *.env*, .git*, .config*, etc.
Bad Web Bot
Web App Attack
2026-10-02 07:09:12
UTC ·
(1 month ago)
Unauthorized SSH login attempts
Brute-Force
SSH
🇸🇬
leithzz
2026-10-02 06:57:38
UTC ·
(1 month ago)
10x HTTP 403 to krynox.dev from TW, method GET, path /api/v1/loginmethod. Blocked by Cloudflare action block (firewallManaged). Repeated L7 flood traffic.
DDoS Attack
Web App Attack
🇬🇧
gws-hostmaster
2026-10-02 06:55:22
UTC ·
(1 month ago)
ModSecurity OWASP CRS (Anomaly Score: 45): HTTP header is restricted by policy (/x-middleware-subrequest/);JavaScript Prototype Pollution;JSON-Based SQL Injection;Node.js Injection Attack 1/2;OS File Access Attempt;Remote Command Execution: Unix Shel ...
show more
ModSecurity OWASP CRS (Anomaly Score: 45): HTTP header is restricted by policy (/x-middleware-subrequest/);JavaScript Prototype Pollution;JSON-Based SQL Injection;Node.js Injection Attack 1/2;OS File Access Attempt;Remote Command Execution: Unix Shell Code Found;
show less
Web App Attack
🇬🇧
consul.to
2026-10-02 06:34:49
UTC ·
(1 month ago)
Web attack/malicious scanning detected
Web App Attack
