|
Anonymous
|
|
Excessive crawling/scraping. Vulnerable file probing.
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇬🇧
gws-hostmaster
|
|
ModSecurity OWASP CRS (Anomaly Score: 45): HTTP header is restricted by policy (/x-middleware-subrequest/);JavaScript Prototype Pollution;JSON-Based SQL Injection;Node.js Injection Attack 1/2;OS File Access Attempt;Remote Command Execution: Unix Shel ...
show more
ModSecurity OWASP CRS (Anomaly Score: 45): HTTP header is restricted by policy (/x-middleware-subrequest/);JavaScript Prototype Pollution;JSON-Based SQL Injection;Node.js Injection Attack 1/2;OS File Access Attempt;Remote Command Execution: Unix Shell Code Found;Request content type is not allowed by policy;URL file extension is restricted by policy;
show less
|
Web App Attack
|
|
Anonymous
|
|
IP matched detection query bad paths many.
|
Brute-Force
Web App Attack
|
|
🇬🇧
gws-hostmaster
|
|
ModSecurity OWASP CRS (Anomaly Score: 45): HTTP header is restricted by policy (/x-middleware-subrequest/);JavaScript Prototype Pollution;JSON-Based SQL Injection;Node.js Injection Attack 1/2;OS File Access Attempt;Remote Command Execution: Unix Shel ...
show more
ModSecurity OWASP CRS (Anomaly Score: 45): HTTP header is restricted by policy (/x-middleware-subrequest/);JavaScript Prototype Pollution;JSON-Based SQL Injection;Node.js Injection Attack 1/2;OS File Access Attempt;Remote Command Execution: Unix Shell Code Found;URL file extension is restricted by policy;
show less
|
Web App Attack
|
|
🇩🇪
JLKnoch Software GmbH
|
|
CrowdSec crowdsecurity/http-probing
|
Brute-Force
Web App Attack
|
|
🇺🇸
jcbriar
|
|
Searching for vulnerable scripts
|
Hacking
Web App Attack
|
|
🇺🇸
Matthew Ping
|
|
Excessive connections (DDoS/flood) blocked by CSF CT_LIMIT on banks.
|
DDoS Attack
Brute-Force
|
|
🇪🇸
robotstxt
|
|
34.159.66.130 - - [22/Oct/2026:14:47:18 +0000] "GET /robots.txt HTTP/2.0" 403 123 "https://javiercasares.com/robots.txt" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot" "-" edge="34.159.66.130" ...
show more
34.159.66.130 - - [22/Oct/2026:14:47:18 +0000] "GET /robots.txt HTTP/2.0" 403 123 "https://javiercasares.com/robots.txt" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot" "-" edge="34.159.66.130"
34.159.66.130 - - [22/Oct/2026:14:47:20 +0000] "GET /sitemap.xml HTTP/2.0" 403 20 "https://javiercasares.com/sitemap.xml" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" "-" edge="34.159.66.130"
34.159.66.130 - - [22/Oct/2026:14:47:34 +0000] "GET /ngsw.json HTTP/2.0" 403 15393 "https://javiercasares.com/ngsw.json" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" "-" edge="34.159.66.130"
34.159.66.130 - - [22/Oct/2026:14:47:34 +0000] "GET /z9x8c7v6b5-debug-trigger-javiercasares.com HTTP/2.0" 403 15741 "https://javiercasares.com/z9x8c7v6b5-debug-trigger-javiercasares.com" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.ba
...
show less
|
Web App Attack
|
|
🇳🇱
Site.eu
|
|
Excessive multi-domain requests
|
Brute-Force
|
|
🇩🇪
BlueWire Hosting
|
|
Aggressive scanning resulting into 404
|
Bad Web Bot
|
|
Anonymous
|
|
(mod_security) mod_security triggered on hostname [redacted] 34.159.66.130 (DE/Germany/130.66.159.34.bc.googleusercontent.com)
|
SQL Injection
|
|
🇬🇧
NotCool
|
|
[7200] (DOTENVPROBE,CRAWLDELAY) Login failure/trigger from 34.159.66.130 (DE/Germany/130.66.159.34.bc.googleusercontent.com): 50 in the last 3600 secs
|
Brute-Force
|
|
🇺🇸
lavnet.net
|
|
34.159.66.130 - - [22/Oct/2026:14:13:19 +0000] "GET /robots.txt HTTP/2.0" 404 1901 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
34.159.66.130 - - [22/Oct/2026:14:13:23 +0000] ...
show more
34.159.66.130 - - [22/Oct/2026:14:13:19 +0000] "GET /robots.txt HTTP/2.0" 404 1901 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
34.159.66.130 - - [22/Oct/2026:14:13:23 +0000] "GET /sitemap.xml HTTP/2.0" 404 1878 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)"
34.159.66.130 - - [22/Oct/2026:14:13:23 +0000] "GET /sitemap_index.xml HTTP/2.0" 404 1855 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
34.159.66.130 - - [22/Oct/2026:14:13:24 +0000] "GET /signin HTTP/2.0" 404 1878 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 Edg/152.0.0.0"
34.159.66.130 - - [22/Oct/2026:14:13:24 +0000] "GET /auth HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome
...
show less
|
Brute-Force
|
|
🇺🇸
iwle
|
|
[Thu Oct 22 10:01:03.192163 2026] [:error] [pid 1598:tid 1730] [client 34.159.66.130:0] [client 34.159.66.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(?:\\\\.env(?:\\\\.[^/]*)?|\\\\.git(?:/|$)|phpinfo(?:\\\\.php ...
show more
[Thu Oct 22 10:01:03.192163 2026] [:error] [pid 1598:tid 1730] [client 34.159.66.130:0] [client 34.159.66.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(?:\\\\.env(?:\\\\.[^/]*)?|\\\\.git(?:/|$)|phpinfo(?:\\\\.php)?(?:\\\\.(?:bak|old|save|tmp|swp|~))?|php-info\\\\.php|phpversion\\\\.php|info\\\\.php|debug\\\\.php|pinfo\\\\.php|pi\\\\.php|php\\\\.php|i\\\\.php|application_default_credentials\\\\.json|(?:firebase|google ..." at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/local_rules/100-site-policy.conf"] [line "146"] [id "100113"] [msg "Local Policy: Sensitive file or diagnostic endpoint probe"] [severity "WARNING"] [tag "local/sensitive-file-probe"] [hostname "iwle.com"] [uri "/@fs/root/.env"] [unique_id "atoXH-Q-qVdx6hJGykdJ0AAAABg"]
[Thu Oct 22 10:01:04.306675 2026] [:error] [pid 1600:tid 1756] [client 34.159.66.130:0] [client 34.159.66.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(?:\\\\.env(?:\\\\.[^/]
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇩🇪
IVski.com
|
|
IVski WAF | Next.js middleware bypass attempt (CVE-2025-29927)
|
Hacking
Brute-Force
Web App Attack
|
