🇨🇱
Fernando Soto
2026-11-06 03:05:15
UTC ·
(15 hours ago)
WAF propio vps1 (CL): 404x67,sensMASx194 score 30 en 1h. sondeo rutas sensibles, barrido 404.
Port Scan
Web App Attack
🇫🇷
SpaceHost-Server
2026-11-05 23:15:07
UTC ·
(18 hours ago)
Brute-Force
Web App Attack
🇭🇺
kranem
2026-11-05 15:00:55
UTC ·
(1 day ago)
Triggered Cloudflare WAF from US.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/2 (GET method)
Endpoint: /.env.development.local
Timestamp: 2026-11-05T10:17:11Z
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ...
show more
Triggered Cloudflare WAF from US.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/2 (GET method)
Endpoint: /.env.development.local
Timestamp: 2026-11-05T10:17:11Z
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot
show less
Bad Web Bot
🇧🇷
ICS Labs
2026-11-05 13:22:05
UTC ·
(1 day ago)
ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-11-05 UTC.
Brute-Force
🇫🇷
masterguru
2026-11-05 13:00:18
UTC ·
(1 day ago)
Too much 404 requests in 1 minute. Operator GE matched 20 at IP:block_script. (46020-131)
Hacking
🇺🇸
kbeezie
2026-11-05 12:26:58
UTC ·
(1 day ago)
136.71.206.95 - - [05/Nov/2026:07:26:58 -0500] "GET /proc/self/environ HTTP/1.1" 429 162 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)"
136.71.206.95 - - [05/Nov/2026:07:26:58 -0500] "GET /var/run/secrets/kubernetes.io/service ...
show more
136.71.206.95 - - [05/Nov/2026:07:26:58 -0500] "GET /proc/self/environ HTTP/1.1" 429 162 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)"
136.71.206.95 - - [05/Nov/2026:07:26:58 -0500] "GET /var/run/secrets/kubernetes.io/serviceaccount/token HTTP/1.1" 429 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)"
136.71.206.95 - - [05/Nov/2026:07:26:58 -0500] "GET /push_config.json HTTP/1.1" 429 162 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)"
136.71.206.95 - - [05/Nov/2026:07:26:58 -0500] "GET /firebase.json HTTP/1.1" 429 162 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"
136.71.206.95 - - [05/Nov/2026:07:26:58 -0500] "GET /google-service-account.json HTTP/1.1" 429 162 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
show less
Bad Web Bot
Web App Attack
🇦🇺
nzhost.co.nz
2026-11-05 11:53:01
UTC ·
(1 day ago)
$f2bV_matches
Hacking
Brute-Force
🇩🇪
Callum
2026-11-05 10:26:56
UTC ·
(1 day ago)
probing for exposed files and admin pages and path traversal: 309 attempts within 135 minutes, seen by web server log
Web App Attack
🇭🇺
kranem
2026-11-05 09:00:51
UTC ·
(1 day ago)
Triggered Cloudflare WAF from US.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/2 (GET method)
Endpoint: /media../.env
Timestamp: 2026-11-05T06:52:00Z
User-Agent: Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537 ...
show more
Triggered Cloudflare WAF from US.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/2 (GET method)
Endpoint: /media../.env
Timestamp: 2026-11-05T06:52:00Z
User-Agent: Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
show less
Bad Web Bot
🇩🇪
IloGus
2026-11-05 08:15:09
UTC ·
(1 day ago)
WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail
Web App Attack
🇧🇾
lns.bz
2026-11-05 07:27:27
UTC ·
(1 day ago)
.env scanning [BY]
Web App Attack
🇺🇸
jormaster3k
2026-11-05 07:10:56
UTC ·
(1 day ago)
Attack against Apache (too many 404s)
Web App Attack
🇩🇪
ordifypl
2026-11-05 06:52:19
UTC ·
(1 day ago)
Web vulnerability scanning: probing for .env, .git, WordPress, phpunit and other non-existent files (fail2ban web-scan)
Web App Attack
Bad Web Bot
🇦🇺
rubixstudios
2026-11-05 06:39:03
UTC ·
(1 day ago)
Excessive HTTP requests consistent with automated attack behaviour detected by Imunify360
DDoS Attack
Brute-Force
Web App Attack
🇬🇧
Andrew
2026-11-05 04:19:16
UTC ·
(1 day ago)
136.71.206.95 - - [05/Nov/2026:04:19:15 +0000] "GET //.env HTTP/1.1" 404 414 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
136.71.206.95 - - [05/Nov/2026:04:19:15 +0000] "GET /co ...
show more
136.71.206.95 - - [05/Nov/2026:04:19:15 +0000] "GET //.env HTTP/1.1" 404 414 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
136.71.206.95 - - [05/Nov/2026:04:19:15 +0000] "GET /config/.env HTTP/1.1" 404 414 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
136.71.206.95 - - [05/Nov/2026:04:19:15 +0000] "GET /api/uploads/%2e%2e%2f%2e%2e%2f.env HTTP/1.1" 404 531 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
136.71.206.95 - - [05/Nov/2026:04:19:15 +0000] "GET /firebase-admin.json HTTP/1.1" 404 414 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
136.71.206.95 - - [05/Nov/2026:04:19:15 +0000] "GET /assets../.env HTTP/1.1" 404 414 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
136.71.206.95 - - [05/Nov/2026:04:19:15 +0000] "GET /uploads../.env HTTP/1.1" 404 3511 "-" "Mozilla/5.0 (compatible; Grok
...
show less
Hacking
Web App Attack
