Attack traffic

Blocked Requests

Every site behind Cloudflare is probed constantly: bot scans, known vulnerability paths, automated tooling. Those requests are already blocked, but the pattern of blocked traffic tells you what an attacker is looking for. Specula collects those records and makes them readable.

• Which path, which country, which tool

  Blocked requests are grouped by the paths they target, the countries they come from, and the tools used — Nikto, sqlmap, and the rest.

• Alerts on a spike

  Ordinary background noise raises nothing. You hear about it when the volume of blocked requests climbs unusually.

• It reports, it doesn't claim

  No unprovable verdict like "you are under attack". You get the count and the pattern; the interpretation is yours.