Automated XSS scanner (Dalfox) targeted sites on 21 Oct 2026
High volume of requests with:
- Que ...
show moreAutomated XSS scanner (Dalfox) targeted sites on 21 Oct 2026
High volume of requests with:
- Query parameters containing "FUZZ" + XSS payloads
- class=dalfox markers
- Payloads such as <svg onload=alert(1)>, <img src=x onerror=...>, javascript:alert, onfocus/onerror/onload handlers, double URL encoding, etc.
- User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:75.0) Gecko/20100101 Firefox/75.0
Clear automated vulnerability scanning activity from a residential fixed-line IP.
show less
IP 34.150.49.143 performed aggressive automated reconnaissance against our WordPress site on 2026-06 ...
show moreIP 34.150.49.143 performed aggressive automated reconnaissance against our WordPress site on 2026-06-16 between ~06:08–06:11 UTC.
It made 300+ HTTP requests in roughly 2 minutes, systematically probing for sensitive files and endpoints including:
- config.json, credentials.json, secrets.json, aws.json, service-account.json
- docker-compose.yml / .yaml / .prod.yml and related files
- actuator/* endpoints (configprops, env, heapdump, etc.)
- phpinfo.php, info.php, debug.php and similar
- Various backup/archive files and other common sensitive paths
The scanner used dozens of rotating, often outdated or fake User-Agents. The volume of requests caused high server load and connection timeouts.
Clear automated bad web bot / web application reconnaissance activity.
show less
Bad Web BotWeb App Attack
By clicking “Accept all”, you agree to the storing of cookies on your device to remember preferences and
analyze site usage.
Read more
- Required to log into your AbuseIPDB account, and store these cookie preferences.