Web Attack Intelligence Cloudflare Global (Edge) 2026-05-21

May 21, 2026 WebIntelligence

Web attack detections from Cloudflare Global (Edge)

Last Updated: 08:08 UTC

Attackers: 166   Events: 4340

Attack Categories

Category Events Max Severity
generic-probe 4039 LOW
sensitive-file 266 HIGH
admin-probe 24 MEDIUM
acme-probe 4 LOW
rce-probe 4 CRITICAL
wordpress-exploit 2 CRITICAL
wordpress-admin 1 HIGH

Notable Payloads

wordpress-exploit (CRITICAL) — POST /xmlrpc.php
UA: Mozilla/5.0 (Windows NT 10.0; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/96.0.0.0 Safari/537

rce-probe (CRITICAL) — GET /api/v1/executions
UA: TLM-Audit-Scanner/1.0

rce-probe (CRITICAL) — GET /rest/executions
UA: TLM-Audit-Scanner/1.0

wordpress-exploit (CRITICAL) — GET /xmlrpc.php?rsd
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69

sensitive-file (HIGH) — GET /.env
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Sa

wordpress-admin (HIGH) — GET /wp-login.php
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/129.0.0.0 Safari/537.36

sensitive-file (HIGH) — GET /api/.env
UA: Mozilla/5.0 (iPad; CPU OS 18_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1

sensitive-file (HIGH) — GET /public/.env
UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.3

sensitive-file (HIGH) — GET /.git/config
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0

sensitive-file (HIGH) — GET /backend/.env
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Sa

sensitive-file (HIGH) — GET /app/.env
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:132.0) Gecko/20100101 Firefox/132.0

sensitive-file (HIGH) — GET /admin/.env
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Sa

sensitive-file (HIGH) — GET /config.env
UA: Mozilla/5.0 (iPad; CPU OS 18_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1

sensitive-file (HIGH) — GET /.docker/.env
UA: TLM-Audit-Scanner/1.0

sensitive-file (HIGH) — GET /.docker/laravel/app/.env
UA: TLM-Audit-Scanner/1.0

sensitive-file (HIGH) — GET /.git/
UA: TLM-Audit-Scanner/1.0

sensitive-file (HIGH) — GET /.git/FETCH_HEAD
UA: TLM-Audit-Scanner/1.0

sensitive-file (HIGH) — GET /.git/COMMIT_EDITMSG
UA: TLM-Audit-Scanner/1.0

sensitive-file (HIGH) — GET /.git/ORIG_HEAD
UA: TLM-Audit-Scanner/1.0

sensitive-file (HIGH) — GET /.git/HEAD
UA: TLM-Audit-Scanner/1.0

IP Address : ASN : Country : Attack Type

  • 104.210.140.141 : AS8075 microsoft corporation : United States of America : generic-probe
  • 106.52.171.40 : AS45090 shenzhen tencent computer systems company limited : China : generic-probe
  • 113.190.199.224 : AS45899 vnpt corp : Viet Nam : generic-probe
  • 114.119.137.232 : AS136907 huawei clouds : Singapore : generic-probe
  • 114.119.140.206 : AS136907 huawei clouds : Singapore : generic-probe
  • 114.119.151.126 : AS136907 huawei clouds : Singapore : generic-probe
  • 114.119.152.69 : AS136907 huawei clouds : Singapore : generic-probe
  • 114.119.153.188 : AS136907 huawei clouds : Singapore : generic-probe
  • 114.119.155.210 : AS136907 huawei clouds : Singapore : generic-probe
  • 114.119.155.58 : AS136907 huawei clouds : Singapore : generic-probe
  • 114.119.159.8 : AS136907 huawei clouds : Singapore : generic-probe
  • 116.179.32.227 : AS4837 china unicom china169 backbone : China : generic-probe
  • 116.179.32.28 : AS4837 china unicom china169 backbone : China : generic-probe
  • 123.18.88.21 : AS45899 vnpt corp : Viet Nam : generic-probe
  • 123.207.65.62 : AS45090 shenzhen tencent computer systems company limited : China : generic-probe
  • 129.226.174.80 : AS132203 tencent building kejizhongyi avenue : Hong Kong : generic-probe
  • 136.0.213.47 : AS18779 egihosting : United States of America : generic-probe
  • 139.59.126.230 : AS14061 digitalocean llc : Singapore : wordpress-exploit
  • 14.255.178.139 : AS45899 vnpt corp : Viet Nam : generic-probe
  • 168.144.113.139 : ASNone : United States of America : sensitive-file
  • 174.67.236.169 : AS22773 cox communications inc. : United States of America : generic-probe
  • 18.221.7.154 : AS16509 amazon.com inc : United States of America : generic-probe
  • 184.72.231.133 : AS14618 amazon.com inc. : United States of America : generic-probe
  • 185.181.61.203 : AS56655 terrahost as : Norway : generic-probe
  • 185.191.171.1 : AS209366 semrush cy ltd : United Kingdom of Great Britain and Northern Ireland : generic-probe
  • 185.191.171.10 : AS209366 semrush cy ltd : United Kingdom of Great Britain and Northern Ireland : generic-probe
  • 185.191.171.11 : AS209366 semrush cy ltd : United Kingdom of Great Britain and Northern Ireland : generic-probe
  • 185.191.171.12 : AS209366 semrush cy ltd : United Kingdom of Great Britain and Northern Ireland : generic-probe
  • 185.191.171.13 : AS209366 semrush cy ltd : United Kingdom of Great Britain and Northern Ireland : generic-probe
  • 185.191.171.14 : AS209366 semrush cy ltd : United Kingdom of Great Britain and Northern Ireland : generic-probe
  • 185.191.171.15 : AS209366 semrush cy ltd : United Kingdom of Great Britain and Northern Ireland : generic-probe
  • 185.191.171.16 : AS209366 semrush cy ltd : United Kingdom of Great Britain and Northern Ireland : generic-probe
  • 185.191.171.17 : AS209366 semrush cy ltd : United Kingdom of Great Britain and Northern Ireland : generic-probe
  • 185.191.171.18 : AS209366 semrush cy ltd : United Kingdom of Great Britain and Northern Ireland : generic-probe
  • 185.191.171.19 : AS209366 semrush cy ltd : United Kingdom of Great Britain and Northern Ireland : generic-probe
  • 185.191.171.2 : AS209366 semrush cy ltd : United Kingdom of Great Britain and Northern Ireland : generic-probe
  • 185.191.171.3 : AS209366 semrush cy ltd : United Kingdom of Great Britain and Northern Ireland : generic-probe
  • 185.191.171.4 : AS209366 semrush cy ltd : United Kingdom of Great Britain and Northern Ireland : generic-probe
  • 185.191.171.5 : AS209366 semrush cy ltd : United Kingdom of Great Britain and Northern Ireland : generic-probe
  • 185.191.171.6 : AS209366 semrush cy ltd : United Kingdom of Great Britain and Northern Ireland : generic-probe
  • 185.191.171.7 : AS209366 semrush cy ltd : United Kingdom of Great Britain and Northern Ireland : generic-probe
  • 185.191.171.8 : AS209366 semrush cy ltd : United Kingdom of Great Britain and Northern Ireland : generic-probe
  • 185.191.171.9 : AS209366 semrush cy ltd : United Kingdom of Great Britain and Northern Ireland : generic-probe
  • 185.213.174.22 : AS41608 nextgenwebs s.l. : Netherlands : sensitive-file
  • 192.42.116.18 : AS1101 surfnet bv : Netherlands : generic-probe
  • 193.189.100.200 : AS41281 keff networks ltd : United Kingdom of Great Britain and Northern Ireland : generic-probe
  • 194.233.94.134 : AS141995 contabo asia private limited : Singapore : generic-probe
  • 195.178.110.199 : AS30823 combahton gmbh : United States of America : rce-probe
  • 20.199.161.175 : AS8075 microsoft corporation : Switzerland : sensitive-file
  • 216.73.216.207 : AS7029 windstream communications llc : United States of America : generic-probe
  • 216.73.217.74 : AS7029 windstream communications llc : United States of America : generic-probe
  • 2a01:4f8:1c18:34e7::1 : AS24940 hetzner online gmbh : Germany : generic-probe
  • 2a03:2880:f806:10:: : AS32934 facebook inc. : United States of America : generic-probe
  • 2a03:2880:f806:11:: : AS32934 facebook inc. : United States of America : generic-probe
  • 2a03:2880:f806:12:: : AS32934 facebook inc. : United States of America : generic-probe
  • 2a03:2880:f806:13:: : AS32934 facebook inc. : United States of America : generic-probe
  • 2a03:2880:f806:14:: : AS32934 facebook inc. : United States of America : generic-probe
  • 2a03:2880:f806:15:: : AS32934 facebook inc. : United States of America : generic-probe
  • 2a03:2880:f806:16:: : AS32934 facebook inc. : United States of America : generic-probe
  • 2a03:2880:f806:17:: : AS32934 facebook inc. : United States of America : generic-probe
  • 2a03:2880:f806:18:: : AS32934 facebook inc. : United States of America : generic-probe
  • 2a03:2880:f806:19:: : AS32934 facebook inc. : United States of America : generic-probe
  • 2a03:2880:f806:1:: : AS32934 facebook inc. : United States of America : generic-probe
  • 2a03:2880:f806:1a:: : AS32934 facebook inc. : United States of America : generic-probe
  • 2a03:2880:f806:1b:: : AS32934 facebook inc. : United States of America : generic-probe
  • 2a03:2880:f806:1c:: : AS32934 facebook inc. : United States of America : generic-probe
  • 2a03:2880:f806:1d:: : AS32934 facebook inc. : United States of America : generic-probe
  • 2a03:2880:f806:1e:: : AS32934 facebook inc. : United States of America : generic-probe
  • 2a03:2880:f806:1f:: : AS32934 facebook inc. : United States of America : generic-probe
  • 2a03:2880:f806:20:: : AS32934 facebook inc. : United States of America : generic-probe
  • 2a03:2880:f806:21:: : AS32934 facebook inc. : United States of America : generic-probe
  • 2a03:2880:f806:22:: : AS32934 facebook inc. : United States of America : generic-probe
  • 2a03:2880:f806:23:: : AS32934 facebook inc. : United States of America : generic-probe
  • 2a03:2880:f806:24:: : AS32934 facebook inc. : United States of America : generic-probe
  • 2a03:2880:f806:25:: : AS32934 facebook inc. : United States of America : generic-probe
  • 2a03:2880:f806:26:: : AS32934 facebook inc. : United States of America : generic-probe
  • 2a03:2880:f806:27:: : AS32934 facebook inc. : United States of America : generic-probe
  • 2a03:2880:f806:28:: : AS32934 facebook inc. : United States of America : generic-probe
  • 2a03:2880:f806:29:: : AS32934 facebook inc. : United States of America : generic-probe
  • 2a03:2880:f806:2:: : AS32934 facebook inc. : United States of America : generic-probe
  • 2a03:2880:f806:2d:: : AS32934 facebook inc. : United States of America : generic-probe
  • 2a03:2880:f806:35:: : AS32934 facebook inc. : United States of America : generic-probe
  • 2a03:2880:f806:36:: : AS32934 facebook inc. : United States of America : generic-probe
  • 2a03:2880:f806:39:: : AS32934 facebook inc. : United States of America : generic-probe
  • 2a03:2880:f806:3:: : AS32934 facebook inc. : United States of America : generic-probe
  • 2a03:2880:f806:3b:: : AS32934 facebook inc. : United States of America : generic-probe
  • 2a03:2880:f806:3c:: : AS32934 facebook inc. : United States of America : generic-probe
  • 2a03:2880:f806:3d:: : AS32934 facebook inc. : United States of America : generic-probe
  • 2a03:2880:f806:3e:: : AS32934 facebook inc. : United States of America : generic-probe
  • 2a03:2880:f806:3f:: : AS32934 facebook inc. : United States of America : generic-probe
  • 2a03:2880:f806:40:: : AS32934 facebook inc. : United States of America : generic-probe
  • 2a03:2880:f806:41:: : AS32934 facebook inc. : United States of America : generic-probe
  • 2a03:2880:f806:42:: : AS32934 facebook inc. : United States of America : generic-probe
  • 2a03:2880:f806:43:: : AS32934 facebook inc. : United States of America : generic-probe
  • 2a03:2880:f806:44:: : AS32934 facebook inc. : United States of America : generic-probe
  • 2a03:2880:f806:45:: : AS32934 facebook inc. : United States of America : generic-probe
  • 2a03:2880:f806:46:: : : : generic-probe
  • 2a03:2880:f806:47:: : : : generic-probe
  • 2a03:2880:f806:48:: : : : generic-probe
  • 2a03:2880:f806:49:: : : : generic-probe
  • 2a03:2880:f806:4:: : : : generic-probe
  • 2a03:2880:f806:4a:: : : : generic-probe
  • 2a03:2880:f806:4b:: : : : generic-probe
  • 2a03:2880:f806:4c:: : : : generic-probe
  • 2a03:2880:f806:4d:: : : : generic-probe
  • 2a03:2880:f806:4f:: : : : generic-probe
  • 2a03:2880:f806:50:: : : : generic-probe
  • 2a03:2880:f806:51:: : : : generic-probe
  • 2a03:2880:f806:52:: : : : generic-probe
  • 2a03:2880:f806:5:: : : : generic-probe
  • 2a03:2880:f806:6:: : : : generic-probe
  • 2a03:2880:f806:7:: : : : generic-probe
  • 2a03:2880:f806:8:: : : : generic-probe
  • 2a03:2880:f806:9:: : : : generic-probe
  • 2a03:2880:f806:: : : : generic-probe
  • 2a03:2880:f806:a:: : : : generic-probe
  • 2a03:2880:f806:b:: : : : generic-probe
  • 2a03:2880:f806:c:: : : : generic-probe
  • 2a03:2880:f806:d:: : : : generic-probe
  • 2a03:2880:f806:e:: : : : generic-probe
  • 2a03:2880:f806:f:: : : : generic-probe
  • 34.9.216.246 : : : generic-probe
  • 37.57.123.216 : : : generic-probe
  • 40.77.167.150 : : : generic-probe
  • 40.77.167.235 : : : generic-probe
  • 40.77.167.243 : : : generic-probe
  • 40.77.167.25 : : : generic-probe
  • 40.77.167.36 : : : generic-probe
  • 43.128.73.132 : : : generic-probe
  • 43.134.92.251 : : : generic-probe
  • 43.135.182.95 : : : generic-probe
  • 43.155.129.131 : : : generic-probe
  • 43.161.234.148 : : : generic-probe
  • 45.146.55.196 : : : wordpress-admin
  • 45.180.6.137 : : : generic-probe
  • 51.68.236.69 : : : generic-probe
  • 52.167.144.160 : : : generic-probe
  • 52.167.144.183 : : : generic-probe
  • 52.167.144.190 : : : generic-probe
  • 52.167.144.195 : : : generic-probe
  • 74.7.228.7 : : : generic-probe
  • 74.7.230.1 : : : generic-probe
  • 85.208.96.193 : : : generic-probe
  • 85.208.96.194 : : : generic-probe
  • 85.208.96.195 : : : generic-probe
  • 85.208.96.196 : : : generic-probe
  • 85.208.96.197 : : : generic-probe
  • 85.208.96.198 : : : generic-probe
  • 85.208.96.199 : : : generic-probe
  • 85.208.96.200 : : : generic-probe
  • 85.208.96.201 : : : generic-probe
  • 85.208.96.202 : : : generic-probe
  • 85.208.96.203 : : : generic-probe
  • 85.208.96.204 : : : generic-probe
  • 85.208.96.205 : : : generic-probe
  • 85.208.96.206 : : : generic-probe
  • 85.208.96.207 : : : generic-probe
  • 85.208.96.208 : : : generic-probe
  • 85.208.96.209 : : : generic-probe
  • 85.208.96.210 : : : generic-probe
  • 85.208.96.211 : : : generic-probe
  • 85.208.96.212 : : : generic-probe
  • 85.208.98.22 : : : generic-probe
  • 85.208.98.23 : : : generic-probe
  • 85.208.98.24 : : : generic-probe
  • 88.97.219.198 : : : wordpress-exploit
Share on: