๐ฆ๐บ
AWW-Admin
2026-08-01 07:02:36
(4 minutes ago)
(mod_security) mod_security triggered on hostname [redacted] 35.234.25.167 (TW/Taiwan/167.25.234.35. ...
show more
(mod_security) mod_security triggered on hostname [redacted] 35.234.25.167 (TW/Taiwan/167.25.234.35.bc.googleusercontent.com)
show less
SQL Injection
๐ซ๐ฎ
as211431.net
2026-08-01 06:48:52
(17 minutes ago)
Triggered Cloudflare WAF (firewallCustom) from TW.
Action taken: BLOCK
Protocol: HTTP/1.1 (POST meth ...
show more
Triggered Cloudflare WAF (firewallCustom) from TW.
Action taken: BLOCK
Protocol: HTTP/1.1 (POST method)
Endpoint: /
UA: Mozilla/5.0 (compatible; ClaudeBot/1.0; [email protected] )
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐ฉ๐ช
grassau.com
2026-08-01 05:47:48
(1 hour ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 35.234.25.167 (TW/Ta ...
show more
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 35.234.25.167 (TW/Taiwan/Taipei City/Taipei/167.25.234.35.bc.googleusercontent.com)
show less
Bad Web Bot
Anonymous
2026-08-01 05:07:52
(1 hour ago)
Aggressive web scan
Web App Attack
๐ฌ๐ง
consul.to
2026-08-01 03:40:30
(3 hours ago)
Web attack/malicious scanning detected
Web App Attack
๐ซ๐ท
masterguru
2026-08-01 02:41:08
(4 hours ago)
URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .back/ .b ...
show more
URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .back/ .backup/ .bak/ .bck/ .bk/ .bkp/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .cnf/ .com/ .compositefont/ .config/ .conf/ .copy/ .crt/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dist/ .dll/ .dos/ .dpkg-dist/ .drv/ .gadget/ .hta/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .inf/ .ini/ .jks/ .jse/ .key/ .licx/ .lnk/ .log/ .mdb/ .msc/ .ocx/ .old/ .pass/ .pdb/ .pfx/ .pif/ .pem/ .pol/ .prf/ .printer/ .pwd/ .rdb/ .rdp/ .reg/ .resources/ .resx/ .sav/ .save/ .scr/ .sct/ .sh/ .shs/ .sql/ .sqlite/ .sqlite3/ .swap/ .swo/ .swp/ .sys/ .temp/ .tfstate/ .tlb/ .tmp/ .vb/ .vbe/ .vbs/ .vbproj/ .vsdisco/ .vxd/ .webinfo/ .ws/ .wsc/ .wsf/ .wsh/ .xsd/ .xsx/" at TX:extension. (920440-201)
show less
Hacking
๐บ๐ธ
WellSpring
2026-08-01 02:09:40
(4 hours ago)
env exposure on naturologie.com/.env.production โ WellSpr.ing/NetSentinel civic-AI security layer
Web App Attack
๐ฎ๐น
CoreTech srl
2026-08-01 01:33:56
(5 hours ago)
cloudlinux2 fail2ban: 2026-08-01 03:28:56,920 fail2ban.filter [1838]: INFO [plesk-wordpre ...
show more
cloudlinux2 fail2ban: 2026-08-01 03:28:56,920 fail2ban.filter [1838]: INFO [plesk-wordpress] Found 65.111.31.207 - 2026-08-01 03:28:56cloudlinux2 fail2ban: 2026-08-01 03:28:57,935 fail2ban.filter [1838]: INFO [plesk-wordpress] Found 104.207.38.251 - 2026-08-01 03:28:57cloudlinux2 fail2ban: 2026-08-01 03:29:08,374 fail2ban.filter [1838]: INFO [plesk-wordpress] Found 104.207.52.125 - 2026-08-01 03:29:08cloudlinux2 fail2ban: 2026-08-01 03:29:11,721 fail2ban.filter [1838]: INFO [plesk-wordpress] Found 45.3.33.243 - 2026-08-01 03:29:11cloudlinux2 fail2ban: 2026-08-01 03:29:10,621 fail2ban.filter [1838]: INFO [plesk-wordpress] Found 104.207.56.117 - 2026-08-01 03:29:10cloudlinux2 fail2ban: 2026-08-01 03:29:12,873 fail2ban.filter [1838]: INFO [plesk-wordpress] Found 65.111.26.63 - 2026-08-01 03:29:12cloudlinux2 fail2ban: 2026-08-01 03:29:09,463 fail2ban.filter [1838]: INFO [plesk-wordpress] Found 65.111.8.8 - 2026-08-01 03:29:09cloudlinux2
show less
Web App Attack
๐ท๐ด
iulianh
2026-08-01 01:28:14
(5 hours ago)
*
Brute-Force
SSH
๐ฆ๐บ
paulshipley.com.au
2026-08-01 01:08:56
(5 hours ago)
[Sat Aug 01 11:08:56.033681 2026] [security2:error] [pid 748368] [client 35.234.25.167:61054] [clien ...
show more
[Sat Aug 01 11:08:56.033681 2026] [security2:error] [pid 748368] [client 35.234.25.167:61054] [client 35.234.25.167] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "rjryanpartners.com.au"] [uri "/.env.development"] [unique_id "am1HKESWlMIc7rtCVHiZHgAAAAE"]
...
show less
Web App Attack
๐ฉ๐ช
MusicLibrary
2026-08-01 01:08:10
(5 hours ago)
Probing foreign-stack admin panels / known exploit paths (Joomla, phpMyAdmin, phpunit, OWA, etc.)
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Savvii
2026-07-31 22:20:50
(8 hours ago)
20 attempts against mh-misbehave-ban on ozone
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
homeshowdomain.nl
2026-07-31 21:59:18
(9 hours ago)
Auto-ban: >3000 req/min op 2026-07-31
Web App Attack
SSH
Hacking
๐ฆ๐บ
2000cn.com.au
2026-07-31 21:51:58
(9 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
๐ณ๐ฑ
BlueWire Hosting
2026-07-31 21:39:19
(9 hours ago)
Probing websites for vulnerabilities
Web App Attack