๐บ๐ธ
VirtualAllocEx
2026-10-11 14:53:37
(1 week ago)
Cloudflare automated security report.
Events: 10.
Sources: firewallCustom.
Request paths: /.env.prod ...
show more
Cloudflare automated security report.
Events: 10.
Sources: firewallCustom.
Request paths: /.env.prod, /server/.env, /.ssh/authorized_keys, /login, /scripts/.env.
Countries: US.
ASNs: 396982.
User agents: Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html), Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/), Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot, Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36, Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler).
show less
Web App Attack
๐บ๐ธ
VirtualAllocEx
2026-10-11 13:05:36
(1 week ago)
Cloudflare automated security report.
Action: BLOCK; events: 8.
Sources: firewallCustom.
Request pat ...
show more
Cloudflare automated security report.
Action: BLOCK; events: 8.
Sources: firewallCustom.
Request paths: /pkg/.env, /private/.env, /.env.stage, /.env.old, /cache/original/%2e%2e/.env.
Countries: US.
ASNs: 396982.
User agents: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot, Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/), Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/), Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] ), Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/).
show less
Web App Attack
๐บ๐ธ
VirtualAllocEx
2026-10-11 12:25:03
(1 week ago)
Cloudflare automated security report.
Action: BLOCK; events: 8.
Sources: firewallCustom.
Request pat ...
show more
Cloudflare automated security report.
Action: BLOCK; events: 8.
Sources: firewallCustom.
Request paths: /users/login, /.env.production, /dashboard/.env, /.env.local, /v1/graphql.
Countries: US.
ASNs: 396982.
User agents: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36, Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler), Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/), Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler), Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/).
show less
Web App Attack
๐บ๐ธ
VirtualAllocEx
2026-10-11 11:52:59
(1 week ago)
Cloudflare automated security report.
Action: BLOCK; events: 9.
Sources: firewallCustom.
Request pat ...
show more
Cloudflare automated security report.
Action: BLOCK; events: 9.
Sources: firewallCustom.
Request paths: /utils/.env, /src/.env, /pipeline/.env, /.env.old, /apps/.env.
Countries: US.
ASNs: 396982.
User agents: DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot), Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler), Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user), Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot), Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] ).
show less
Web App Attack
๐บ๐ธ
VirtualAllocEx
2026-10-11 11:22:14
(1 week ago)
Cloudflare automated security report.
Action: BLOCK; events: 10.
Sources: firewallCustom.
Request pa ...
show more
Cloudflare automated security report.
Action: BLOCK; events: 10.
Sources: firewallCustom.
Request paths: /lib/.env, /agents/.env, /llm/.env, /.env.production, /static//.env.
Countries: US.
ASNs: 396982.
User agents: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] ), Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler), Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/), Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] ), DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot).
show less
Web App Attack
๐ฉ๐ฐ
toolbit.online
2026-10-11 11:09:11
(1 week ago)
Automated reconnaissance behaviour detected by CrowdSec - 2 suspicious requests across application p ...
show more
Automated reconnaissance behaviour detected by CrowdSec - 2 suspicious requests across application paths. Classified as known-bad scanner user-agent (scenario "http-bad-user-agent", in our own server logs). Behavioural detection, auto-banned at the firewall.
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
VirtualAllocEx
2026-10-11 09:50:22
(1 week ago)
Cloudflare automated security report.
Action: BLOCK; events: 9.
Sources: firewallCustom.
Request pat ...
show more
Cloudflare automated security report.
Action: BLOCK; events: 9.
Sources: firewallCustom.
Request paths: /@fs/app/.env, /.env.local::$DATA, /dashboard/.env, /api/w/admins/jobs_u/get_log_file/../../../../proc/self/environ, /docker-compose.yml.
Countries: US.
ASNs: 396982.
User agents: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot), CCBot/2.0 (https://commoncrawl.org/faq/), Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] ), Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/), Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html).
show less
Web App Attack
๐บ๐ธ
VirtualAllocEx
2026-10-11 09:19:46
(1 week ago)
Cloudflare automated security report.
Action: BLOCK; events: 8.
Sources: firewallCustom.
Request pat ...
show more
Cloudflare automated security report.
Action: BLOCK; events: 8.
Sources: firewallCustom.
Request paths: /store/.env, /.ssh/known_hosts, /common/.env, /public/admin.json, /assets../.env.
Countries: US.
ASNs: 396982.
User agents: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user), Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/), Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/), Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html), Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/).
show less
Web App Attack
๐บ๐ธ
VirtualAllocEx
2026-10-11 08:58:34
(1 week ago)
Cloudflare automated security report.
Action: BLOCK; events: 8.
Sources: firewallCustom.
Request pat ...
show more
Cloudflare automated security report.
Action: BLOCK; events: 8.
Sources: firewallCustom.
Request paths: /core/.env, /cmd/.env, /backend/.env, /.env.bak, /media../.env.
Countries: US.
ASNs: 396982.
User agents: Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler), Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/), Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/), Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/), Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/).
show less
Web App Attack
๐ง๐ช
cmbplf
2026-10-11 08:28:44
(1 week ago)
600 requests with url.path *.env
143 requests with url.path */@fs/*
Brute-Force
Bad Web Bot
๐บ๐ธ
VirtualAllocEx
2026-10-11 08:17:16
(1 week ago)
Cloudflare automated security report.
Action: BLOCK; events: 4.
Sources: firewallCustom.
Request pat ...
show more
Cloudflare automated security report.
Action: BLOCK; events: 4.
Sources: firewallCustom.
Request paths: /.ssh/authorized_keys, /.env.development::$DATA, /@fs/src/.env, /.env.
Countries: US.
ASNs: 396982.
User agents: Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/), DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot), Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot, Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler).
show less
Web App Attack
๐บ๐ธ
VirtualAllocEx
2026-10-11 07:57:14
(1 week ago)
Cloudflare automated security report.
Action: BLOCK; events: 4.
Sources: firewallCustom.
Request pat ...
show more
Cloudflare automated security report.
Action: BLOCK; events: 4.
Sources: firewallCustom.
Request paths: /@fs/app/.env, /var/.env, /.ssh/id_ed25519, /.env.
Countries: US.
ASNs: 396982.
User agents: Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler), Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot, Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot), Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot.
show less
Web App Attack
๐บ๐ธ
VirtualAllocEx
2026-10-11 07:12:01
(1 week ago)
Cloudflare automated security report.
Action: BLOCK; events: 7.
Sources: firewallCustom.
Request pat ...
show more
Cloudflare automated security report.
Action: BLOCK; events: 7.
Sources: firewallCustom.
Request paths: /.svn/entries, /.env.save, /.env.bak, /.env.local, /.env.
Countries: US.
ASNs: 396982.
User agents: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html), Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler), Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] ), Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot), Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm).
show less
Web App Attack
๐บ๐ธ
VirtualAllocEx
2026-10-11 06:08:52
(1 week ago)
Cloudflare automated security report.
Action: BLOCK; events: 8.
Sources: firewallCustom.
Request pat ...
show more
Cloudflare automated security report.
Action: BLOCK; events: 8.
Sources: firewallCustom.
Request paths: /.env.production, /.env.development, /uploads../.env, /api/system/fileView, /.env.old.
Countries: US.
ASNs: 396982.
User agents: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot), Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/), Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot), Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36, Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler).
show less
Web App Attack
๐บ๐ธ
VirtualAllocEx
2026-10-11 05:48:38
(1 week ago)
Cloudflare automated security report.
Action: BLOCK; events: 6.
Sources: firewallCustom.
Request pat ...
show more
Cloudflare automated security report.
Action: BLOCK; events: 6.
Sources: firewallCustom.
Request paths: /.env.production, /.env, /_nuxt/../.env, /.env.development::$DATA, /.env.old.
Countries: US.
ASNs: 396982.
User agents: Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler), Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot), Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] ), Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot, Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html).
show less
Web App Attack