🇬🇧
pinguin
2026-09-27 08:01:43
(3 hours ago)
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: LOG
Protocol: HTTP/2 (GET method)
...
show more
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: LOG
Protocol: HTTP/2 (GET method)
Endpoint: /
UA: Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9)
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
Charlesiv
2026-09-27 06:00:42
(5 hours ago)
Triggered Cloudflare WAF (botFight) from US.
Action taken: MANAGED_CHALLENGE
ASN: 16509 (Amazon.com, ...
show more
Triggered Cloudflare WAF (botFight) from US.
Action taken: MANAGED_CHALLENGE
ASN: 16509 (Amazon.com, Inc.)
Protocol: HTTP/2 (GET method)
Endpoint: /
Timestamp: 2026-09-27T04:10:07Z
Ray ID: a417a827fb8cad76
UA: Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9)
show less
Bad Web Bot
🇺🇸
LotPhantom
2026-09-27 04:02:47
(7 hours ago)
2026-09-27T04:02:46.931729+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1 ...
show more
2026-09-27T04:02:46.931729+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=35.86.68.99 DST=157.230.217.55 LEN=60 TOS=0x00 PREC=0x00 TTL=119 ID=3372 DF PROTO=TCP SPT=42586 DPT=2222 WINDOW=62727 RES=0x00 SYN URGP=0
...
show less
Port Scan
Hacking
🇺🇸
OceanTreasure
2026-09-27 01:52:02
(9 hours ago)
tcp/2005; Unsolicited SYN to a port that has never been offered on this address (closed, no service ...
show more
tcp/2005; Unsolicited SYN to a port that has never been offered on this address (closed, no service ever) @ 2026-09-27T01:41:17Z
show less
Port Scan
🇫🇷
Jimbo67
2026-09-27 01:40:48
(9 hours ago)
Cloudflare WAF: 1 hits in 30s | action=block | abuse=suspicious_probe | categories=19 | rule_id=3329 ...
show more
Cloudflare WAF: 1 hits in 30s | action=block | abuse=suspicious_probe | categories=19 | rule_id=3329c9d804134f3e89780d69bfd872dc | URIs=/login_up.php | confidence=0.82
show less
Bad Web Bot
🇫🇷
✨
2026-09-27 01:37:20
(9 hours ago)
Domain : pleskcontrolpanel
Rule : WEB
IP in black list
Port Scan
🇩🇪
Jochen Pretli
2026-09-26 23:44:10
(11 hours ago)
connection to honeypot
Email Spam
Port Scan
🇫🇮
6kilowatti
2026-09-26 23:12:35
(11 hours ago)
2026-09-27T02:12:34.446646+03:00 oh6ah kernel: [UFW BLOCK] IN=enp2s0 OUT= MAC=00:26:18:a8:d6:75:2e:2 ...
show more
2026-09-27T02:12:34.446646+03:00 oh6ah kernel: [UFW BLOCK] IN=enp2s0 OUT= MAC=00:26:18:a8:d6:75:2e:2d:5e:71:aa:73:08:00 SRC=35.86.68.99 DST=192.168.0.102 LEN=60 TOS=0x18 PREC=0x20 TTL=111 ID=56126 DF PROTO=TCP SPT=56118 DPT=10000 WINDOW=62727 RES=0x00 SYN URGP=0
...
show less
Port Scan
2026-09-26 21:12:41
(13 hours ago)
2026-09-26T23:12:40.076568+02:00 vps kernel: [6827951.453287] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=f ...
show more
2026-09-26T23:12:40.076568+02:00 vps kernel: [6827951.453287] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=35.86.68.99 DST=54.37.14.118 LEN=60 TOS=0x00 PREC=0x00 TTL=106 ID=6415 DF PROTO=TCP SPT=60290 DPT=2005 WINDOW=62727 RES=0x00 SYN URGP=0
...
show less
Port Scan
Brute-Force
🇩🇪
sojan
2026-09-26 15:56:18
(19 hours ago)
UFW: Portscan on PROTO=TCP. Targeted ports: DPT=10000 DPT=10000 DPT=10000
Port Scan
2026-09-26 13:45:11
(21 hours ago)
Observed scanned 1 known-sensitive endpoint(s), e.g.: /login_up.php
Bad Web Bot
Web App Attack
🇺🇸
Charlesiv
2026-09-26 10:01:26
(1 day ago)
Triggered Cloudflare WAF (botFight) from US.
Action taken: MANAGED_CHALLENGE
ASN: 16509 (Amazon.com, ...
show more
Triggered Cloudflare WAF (botFight) from US.
Action taken: MANAGED_CHALLENGE
ASN: 16509 (Amazon.com, Inc.)
Protocol: HTTP/2 (GET method)
Endpoint: /
Timestamp: 2026-09-26T09:18:31Z
Ray ID: a4112e8528d8ad76
UA: Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9)
show less
Bad Web Bot
🇪🇸
Francisco Vallejo
2026-09-26 06:11:01
(1 day ago)
[Sat Sep 26 02:51:56.224579 2026] [authz_core:error] [pid 3972882:tid 126352191628992] [client 35.86 ...
show more
[Sat Sep 26 02:51:56.224579 2026] [authz_core:error] [pid 3972882:tid 126352191628992] [client 35.86.68.99:36292] AH01630: client denied by server configuration: proxy:http://giedi:8080/robots.txt
[Sat Sep 26 02:51:56.386163 2026] [authz_core:error] [pid 3972882:tid 126351604434624] [client 35.86.68.99:36292] AH01630: client denied by server configuration: proxy:http://giedi:8080/enhancecp
[Sat Sep 26 06:00:45.072994 2026] [authz_core:error] [pid 3972882:tid 126352225199808] [client 35.86.68.99:47396] AH01630: client denied by server configuration: proxy:http://localhost:3001/robots.txt
[Sat Sep 26 06:00:45.231734 2026] [authz_core:error] [pid 3972882:tid 126352183236288] [client 35.86.68.99:47396] AH01630: client denied by server configuration: proxy:http://localhost:3001/enhancecp
[Sat Sep 26 08:11:00.528490 2026] [authz_core:error] [pid 3972881:tid 126351654758080] [client 35.86.68.99:58744] AH01630: client denied by server configuration: proxy:https://localhost:9090/robots.txt
...
show less
Brute-Force
SSH
🇩🇪
Lino Project
2026-09-26 03:04:14
(1 day ago)
35.86.68.99 - - [26/Sep/2026:05:04:10 +0200] "GET /enhancecp HTTP/2.0" 301 140 "-" "Mozilla/5.0 (com ...
show more
35.86.68.99 - - [26/Sep/2026:05:04:10 +0200] "GET /enhancecp HTTP/2.0" 301 140 "-" "Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9)"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-26 01:29:18
(1 day ago)
*Port Scan* detected from 35.86.68.99 (US/United States/ec2-35-86-68-99.us-west-2.compute.amazonaws. ...
show more
*Port Scan* detected from 35.86.68.99 (US/United States/ec2-35-86-68-99.us-west-2.compute.amazonaws.com). 5 hits in the last 30 seconds
show less
Brute-Force
Port Scan
