🇫🇷
SpaceHost-Server
2026-09-20 22:23:07
(11 minutes ago)
Brute-Force
Web App Attack
🇫🇷
mrcrassi
2026-09-20 20:24:38
(2 hours ago)
Triggered Cloudflare WAF (firewallManaged) from NL.
Action taken: BLOCK
Protocol: HTTP/1.1 (HEAD met ...
show more
Triggered Cloudflare WAF (firewallManaged) from NL.
Action taken: BLOCK
Protocol: HTTP/1.1 (HEAD method)
Endpoint: /wp-config.php
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 Edg/126.0.0.0
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇧🇷
dominioz
2026-09-20 19:51:19
(2 hours ago)
2026-09-20 16:38:34 GET /%2e%2e/etc/passwd _=5hprk2dd&v=fp37a - 45.138.12.32 HTTP/1.1 Mozilla/5.0+(M ...
show more
2026-09-20 16:38:34 GET /%2e%2e/etc/passwd _=5hprk2dd&v=fp37a - 45.138.12.32 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+14_5)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/125.0.0.0+Safari/537.36 https://duckduckgo.com/?q=zmf06 301 627
...
show less
Brute-Force
Web App Attack
🇬🇧
consul.to
2026-09-20 16:54:36
(5 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇧🇷
Halux
2026-09-20 15:58:39
(6 hours ago)
45.138.12.32 Probing protected path or service
Web App Attack
🇧🇷
dominioz
2026-09-20 15:32:03
(7 hours ago)
2026-09-20 15:28:30 GET /.git/FETCH_HEAD _=bqlqhih4&v=72pv1 - 45.138.12.32 HTTP/1.1 Mozilla/5.0+(Lin ...
show more
2026-09-20 15:28:30 GET /.git/FETCH_HEAD _=bqlqhih4&v=72pv1 - 45.138.12.32 HTTP/1.1 Mozilla/5.0+(Linux;+Android+14;+SM-S928B)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/125.0.6422.165+Mobile+Safari/537.36 https://twitter.com/ 301 604
2026-09-20 15:30:55 GET /settings.py _=zdgmly82&v=jvbbz - 45.138.12.32 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/125.0.0.0+Safari/537.36+Edg/125.0.0.0 https://www.bing.com/search?q=wvyek1 301 596
2026-09-20 15:30:55 GET /settings.py _=zdgmly82&v=jvbbz - 45.138.12.32 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/125.0.0.0+Safari/537.36+Edg/125.0.0.0 https://www.bing.com/search?q=wvyek1 301 596
2026-09-20 15:31:37 GET /config.yml _=pdzjbipu&v=b5xgi - 45.138.12.32 HTTP/1.1 Mozilla/5.0+(X11;+Ubuntu;+Linux+x86_64;+rv:126.0)+Gecko/20100101+Firefox/126.0 https://www.google.com/search?q=bysnfw 301 594
...
show less
Web App Attack
🇧🇷
dominioz
2026-09-20 15:13:03
(7 hours ago)
2026-09-20 15:09:55 GET /.env _=jxdlearb&v=l8z7m - 45.138.12.32 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86 ...
show more
2026-09-20 15:09:55 GET /.env _=jxdlearb&v=l8z7m - 45.138.12.32 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/126.0.0.0+Safari/537.36 https://news.ycombinator.com/ 301 601
2026-09-20 15:11:13 GET /.env.bak _=xasp9ggh&v=ck6kl - 45.138.12.32 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/124.0.0.0+Safari/537.36+Vivaldi/6.7.3329.35 https://news.ycombinator.com/ 301 609
2026-09-20 15:11:56 GET /.env _=755c6unf&v=8supn - 45.138.12.32 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/126.0.0.0+Safari/537.36 https://www.reddit.com/ 301 601
2026-09-20 15:12:20 GET /.env+ _=ih6b2ylc&v=pfec5 - 45.138.12.32 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/125.0.0.0+Safari/537.36+Edg/125.0.0.0 https://www.reddit.com/ 301 603
2026-09-20 15:12:53 GET /.env.. _=i5pppvuc&v=9hz4o - 45.138.12.32 HTTP/1.1 Mozilla/5.0+(Lin
...
show less
Web App Attack
🇳🇱
Site.eu
2026-09-20 14:01:33
(8 hours ago)
Excessive multi-domain requests
Brute-Force
🇩🇪
neckaralb-admin.de
2026-09-20 14:00:43
(8 hours ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇺🇸
kosada.com
2026-09-20 13:41:58
(8 hours ago)
Repeated exploit attempts, for example: /.%2eenv?_=22ha13uu&v=2n3eu (HTTP/1.1 port 443, user agent: ...
show more
Repeated exploit attempts, for example: /.%2eenv?_=22ha13uu&v=2n3eu (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0")
show less
Web App Attack
🇩🇪
onlyops.app
2026-09-20 13:00:09
(9 hours ago)
Web application firewall (ModSecurity) detected malicious traffic | detected by Fail2Ban (plesk-mods ...
show more
Web application firewall (ModSecurity) detected malicious traffic | detected by Fail2Ban (plesk-modsecurity jail) | onlyops.app
show less
Exploited Host
🇩🇪
macrob
2026-09-20 12:34:55
(9 hours ago)
2026/09/20 12:34:12 [error] 478236#478236: *18133087 access forbidden by rule, client: 45.138.12.32, ...
show more
2026/09/20 12:34:12 [error] 478236#478236: *18133087 access forbidden by rule, client: 45.138.12.32, server: fn.binixo.es, request: "GET /.env?_=zuyoouj1&v=qmq6h HTTP/1.1", host: "binixo.bg", referrer: "https://t.co/mo2gwkuliy"
2026/09/20 12:34:52 [error] 478236#478236: *18134520 access forbidden by rule, client: 45.138.12.32, server: fn.binixo.es, request: "GET /.env?_=za5bu0j1&v=ki0eq HTTP/1.1", host: "binixo.bg", referrer: "https://binixo.bg/admin"
2026/09/20 12:34:54 [error] 478232#478232: *18134648 access forbidden by rule, client: 45.138.12.32, server: fn.binixo.es, request: "GET /.env?_=hk3uosk2&v=qwdbk HTTP/1.1", host: "binixo.bg", referrer: "https://binixo.bg/"
...
show less
Web App Attack
🇧🇪
madeit
2026-09-20 11:56:13
(10 hours ago)
Web App Attack
🇩🇪
LRob
2026-09-20 11:05:13
(11 hours ago)
Asking over plain http and never following the redirect served — a crawler that reads nothing it ask ...
show more
Asking over plain http and never following the redirect served — a crawler that reads nothing it asks for | method: GET | path: / | 2026-09-20 11:05 UTC
show less
Bad Web Bot
🇩🇪
YF
2026-09-20 11:00:14
(11 hours ago)
Environment file probe
Web App Attack