๐ซ๐ฎ
147.185.133.57
7 hours ago
Triggered Cloudflare WAF from FI.
Action taken: LINK_MAZE_INJECTED
ASN: 396982 (Google LLC)
Protocol ...
show more
Triggered Cloudflare WAF from FI.
Action taken: LINK_MAZE_INJECTED
ASN: 396982 (Google LLC)
Protocol: HTTP/1.1 (GET method)
Endpoint: /
Timestamp: 2026-11-03T10:31:35Z
User-Agent: Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity
show less
Bad Web Bot
๐ธ๐ฌ
15.235.160.67
7 hours ago
Triggered Cloudflare WAF from SG.
Action taken: BLOCK
ASN: 16276 (OVH SAS)
Protocol: HTTP/1.1 (GET m ...
show more
Triggered Cloudflare WAF from SG.
Action taken: BLOCK
ASN: 16276 (OVH SAS)
Protocol: HTTP/1.1 (GET method)
Endpoint: /
Timestamp: 2026-11-03T10:41:01Z
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 PterodactylScan/2.0
show less
Bad Web Bot
๐ณ๐ฑ
45.148.10.62
7 hours ago
Triggered Cloudflare WAF from NL.
Action taken: LINK_MAZE_INJECTED
ASN: 48090 (TECHOFF SRV LIMITED)
...
show more
Triggered Cloudflare WAF from NL.
Action taken: LINK_MAZE_INJECTED
ASN: 48090 (TECHOFF SRV LIMITED)
Protocol: HTTP/1.1 (GET method)
Endpoint: /
Timestamp: 2026-11-03T10:33:45Z
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0
show less
Bad Web Bot
๐ฎ๐ฉ
103.59.161.123
7 hours ago
Triggered Cloudflare WAF from ID.
Action taken: BLOCK
ASN: 150493 (PT Gunung Sedayu Sentosa)
Protoco ...
show more
Triggered Cloudflare WAF from ID.
Action taken: BLOCK
ASN: 150493 (PT Gunung Sedayu Sentosa)
Protocol: HTTP/1.1 (GET method)
Endpoint: /auth/login
Timestamp: 2026-11-03T10:48:20Z
User-Agent: Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.5249.119 Safari/537.36
show less
Bad Web Bot
๐ณ๐ฑ
35.204.96.89
7 hours ago
Triggered Cloudflare WAF from NL.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/1.1 (G ...
show more
Triggered Cloudflare WAF from NL.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/1.1 (GET method)
Endpoint: /test/wp-includes/wlwmanifest.xml
Timestamp: 2026-11-03T10:42:21Z
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
show less
Bad Web Bot
๐ซ๐ฎ
170.168.173.130
7 hours ago
Triggered Cloudflare WAF from FI.
Action taken: BLOCK
ASN: 59651 (AS QualityNetwork)
Protocol: HTTP/ ...
show more
Triggered Cloudflare WAF from FI.
Action taken: BLOCK
ASN: 59651 (AS QualityNetwork)
Protocol: HTTP/1.1 (POST method)
Endpoint: /xmlrpc.php
Timestamp: 2026-11-03T11:19:36Z
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
show less
Bad Web Bot
๐บ๐ธ
147.185.132.189
7 hours ago
Triggered Cloudflare WAF from US.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/1.1 (G ...
show more
Triggered Cloudflare WAF from US.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/1.1 (GET method)
Endpoint: /
Timestamp: 2026-11-03T11:05:09Z
User-Agent: Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity
show less
Bad Web Bot
๐ต๐ฑ
45.138.12.6
7 hours ago
Triggered Cloudflare WAF from PL.
Action taken: BLOCK
ASN: 218785 (TC DATACENTER LIMITED)
Protocol: ...
show more
Triggered Cloudflare WAF from PL.
Action taken: BLOCK
ASN: 218785 (TC DATACENTER LIMITED)
Protocol: HTTP/1.1 (GET method)
Endpoint: /.hg/requires
Timestamp: 2026-11-03T11:19:49Z
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36
show less
Bad Web Bot
๐ณ๐ฑ
5.188.86.234
7 hours ago
Triggered Cloudflare WAF from NL.
Action taken: BLOCK
ASN: 49453 (Global Layer B.V.)
Protocol: HTTP/ ...
show more
Triggered Cloudflare WAF from NL.
Action taken: BLOCK
ASN: 49453 (Global Layer B.V.)
Protocol: HTTP/1.1 (GET method)
Endpoint: /wp-login.php
Timestamp: 2026-11-03T11:27:20Z
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15
show less
Bad Web Bot
๐ฉ๐ช
164.92.225.75
7 hours ago
Triggered Cloudflare WAF from DE.
Action taken: BLOCK
ASN: 14061 (DigitalOcean, LLC)
Protocol: HTTP/ ...
show more
Triggered Cloudflare WAF from DE.
Action taken: BLOCK
ASN: 14061 (DigitalOcean, LLC)
Protocol: HTTP/1.1 (GET method)
Endpoint: /wp-login.php
Timestamp: 2026-11-03T11:40:07Z
User-Agent: Mozilla/5.0
show less
Bad Web Bot
๐บ๐ธ
136.70.101.66
7 hours ago
Triggered Cloudflare WAF from US.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/1.1 (G ...
show more
Triggered Cloudflare WAF from US.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/1.1 (GET method)
Endpoint: /blog/wp-includes/wlwmanifest.xml
Timestamp: 2026-11-03T11:38:08Z
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
show less
Bad Web Bot
๐ง๐ท
34.95.185.201
7 hours ago
Triggered Cloudflare WAF from BR.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/2 (GET ...
show more
Triggered Cloudflare WAF from BR.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/2 (GET method)
Endpoint: /sendgrid.env
Timestamp: 2026-11-03T11:42:42Z
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)
show less
Bad Web Bot
๐ณ๐ฑ
93.123.109.230
7 hours ago
Triggered Cloudflare WAF from NL.
Action taken: LINK_MAZE_INJECTED
ASN: 48090 (TECHOFF SRV LIMITED)
...
show more
Triggered Cloudflare WAF from NL.
Action taken: LINK_MAZE_INJECTED
ASN: 48090 (TECHOFF SRV LIMITED)
Protocol: HTTP/1.1 (GET method)
Endpoint: /config.yaml
Timestamp: 2026-11-03T11:46:14Z
User-Agent: Mozilla/5.0 (compatible; Konqueror/4.2; Linux) KHTML/4.2.4 (like Gecko) Slackware/13.0
show less
Bad Web Bot
๐บ๐ธ
205.210.31.69
7 hours ago
Triggered Cloudflare WAF from US.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/1.1 (G ...
show more
Triggered Cloudflare WAF from US.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/1.1 (GET method)
Endpoint: /
Timestamp: 2026-11-03T11:48:53Z
User-Agent: Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity
show less
Bad Web Bot
๐บ๐ธ
216.25.90.56
7 hours ago
Triggered Cloudflare WAF from US.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/1.1 (G ...
show more
Triggered Cloudflare WAF from US.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/1.1 (GET method)
Endpoint: /
Timestamp: 2026-11-03T11:48:08Z
User-Agent: Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity
show less
Bad Web Bot
๐ฉ๐ช
159.65.119.30
7 hours ago
Triggered Cloudflare WAF from DE.
Action taken: BLOCK
ASN: 14061 (DigitalOcean, LLC)
Protocol: HTTP/ ...
show more
Triggered Cloudflare WAF from DE.
Action taken: BLOCK
ASN: 14061 (DigitalOcean, LLC)
Protocol: HTTP/1.1 (GET method)
Endpoint: /wp-login.php
Timestamp: 2026-11-03T11:52:01Z
User-Agent: Mozilla/5.0
show less
Bad Web Bot
๐ต๐ฑ
45.138.12.188
7 hours ago
Triggered Cloudflare WAF from PL.
Action taken: BLOCK
ASN: 218785 (TC DATACENTER LIMITED)
Protocol: ...
show more
Triggered Cloudflare WAF from PL.
Action taken: BLOCK
ASN: 218785 (TC DATACENTER LIMITED)
Protocol: HTTP/1.1 (GET method)
Endpoint: /_nuxt/HoyxqOY_.js
Timestamp: 2026-11-03T11:54:14Z
User-Agent: Java/1.6.0_13
show less
Bad Web Bot
๐ณ๐ฑ
195.178.110.232
8 hours ago
Nov 3 11:50:31 NODE-1 sshd[3642194]: Invalid user admin from 195.178.110.232 port 50950
Nov 3 11:5 ...
show more
Nov 3 11:50:31 NODE-1 sshd[3642194]: Invalid user admin from 195.178.110.232 port 50950
Nov 3 11:51:32 NODE-1 sshd[3659020]: Invalid user admin from 195.178.110.232 port 52660
Nov 3 11:52:50 NODE-1 sshd[3674971]: Invalid user admin from 195.178.110.232 port 54384
Nov 3 11:53:48 NODE-1 sshd[3690061]: Invalid user admin from 195.178.110.232 port 56036
Nov 3 11:55:01 NODE-1 sshd[3706767]: Invalid user admin from 195.178.110.232 port 57860
...
show less
Brute-Force
SSH
๐จ๐ณ
116.1.149.196
9 hours ago
2026-11-03T10:40:47.398639+01:00 CORE-0 sshd[2880254]: Disconnected from authenticating user root 11 ...
show more
2026-11-03T10:40:47.398639+01:00 CORE-0 sshd[2880254]: Disconnected from authenticating user root 116.1.149.196 port 49178 [preauth]
2026-11-03T10:41:54.387340+01:00 CORE-0 sshd[2915847]: Invalid user sameer from 116.1.149.196 port 55843
2026-11-03T10:41:54.391214+01:00 CORE-0 sshd[2915847]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.1.149.196
2026-11-03T10:41:56.017509+01:00 CORE-0 sshd[2915847]: Failed password for invalid user sameer from 116.1.149.196 port 55843 ssh2
2026-11-03T10:41:56.785217+01:00 CORE-0 sshd[2915847]: Disconnected from invalid user sameer 116.1.149.196 port 55843 [preauth]
...
show less
Brute-Force
SSH
๐บ๐ธ
216.25.124.26
10 hours ago
Triggered Cloudflare WAF from US.
Action taken: BLOCK
ASN: 14618 (Amazon.com, Inc.)
Protocol: HTTP/1 ...
show more
Triggered Cloudflare WAF from US.
Action taken: BLOCK
ASN: 14618 (Amazon.com, Inc.)
Protocol: HTTP/1.1 (GET method)
Endpoint: /
Timestamp: 2026-11-03T07:29:45Z
User-Agent: RecordedFuture Global Inventory Crawler
show less
Bad Web Bot
๐บ๐ธ
104.30.167.164
10 hours ago
Triggered Cloudflare WAF from US.
Action taken: BLOCK
ASN: 13335 (Cloudflare, Inc.)
Protocol: HTTP/1 ...
show more
Triggered Cloudflare WAF from US.
Action taken: BLOCK
ASN: 13335 (Cloudflare, Inc.)
Protocol: HTTP/1.1 (HEAD method)
Endpoint: /
Timestamp: 2026-11-03T07:10:12Z
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36 (compatible; +https://developers.cloudflare.com/security-center/)
show less
Bad Web Bot
๐บ๐ธ
199.165.159.177
10 hours ago
Triggered Cloudflare WAF from US.
Action taken: BLOCK
ASN: 22168 (The Shadowserver Foundation, Inc.) ...
show more
Triggered Cloudflare WAF from US.
Action taken: BLOCK
ASN: 22168 (The Shadowserver Foundation, Inc.)
Protocol: HTTP/1.1 (GET method)
Endpoint: /
Timestamp: 2026-11-03T07:36:52Z
User-Agent: Mozilla/5.0 (Windows NT 10.0.0; Win64; x64; ) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.156 Not(A:Brand/24 YaBrowser/24.4.1.899 Yowser/2.5 Safari/537.36
show less
Bad Web Bot
๐บ๐ธ
184.105.139.67
10 hours ago
Triggered Cloudflare WAF from US.
Action taken: BLOCK
ASN: 6939 (Hurricane Electric LLC)
Protocol: H ...
show more
Triggered Cloudflare WAF from US.
Action taken: BLOCK
ASN: 6939 (Hurricane Electric LLC)
Protocol: HTTP/1.1 (GET method)
Endpoint: /
Timestamp: 2026-11-03T07:41:13Z
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0
show less
Bad Web Bot
๐ฉ๐ช
34.159.143.51
10 hours ago
Triggered Cloudflare WAF from DE.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/1.1 (G ...
show more
Triggered Cloudflare WAF from DE.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/1.1 (GET method)
Endpoint: /mailer/.env
Timestamp: 2026-11-03T07:40:21Z
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
show less
Bad Web Bot
๐ธ๐ฌ
34.87.186.192
10 hours ago
Triggered Cloudflare WAF from SG.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/2 (GET ...
show more
Triggered Cloudflare WAF from SG.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/2 (GET method)
Endpoint: /.env.dev.local
Timestamp: 2026-11-03T07:57:33Z
User-Agent: Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)
show less
Bad Web Bot