|
🇨🇱
Fernando Soto
|
|
WAF propio vps1 (CL): 404MASx232,sensMASx194 score 32 en 1h. sondeo rutas sensibles, barrido 404.
|
Port Scan
Web App Attack
|
|
Anonymous
|
|
IP matched detection query 50 and more bad rqs apache.
|
Hacking
Bad Web Bot
Brute-Force
Web App Attack
|
|
🇧🇷
radardatelecom
|
|
Blocked by Radar da Telecom firewall — abuseipdb
|
Bad Web Bot
Web App Attack
|
|
🇪🇸
masterguru
|
|
BAD BOT - Detected and Blocked.. Matched phrase "OAI-SearchBot" at REQUEST_HEADERS:User-Agent. (1100000-122)
|
Bad Web Bot
|
|
Anonymous
|
|
(mod_security) mod_security triggered on hostname [redacted] 34.150.174.41 (US/United States/41.174.150.34.bc.googleusercontent.com)
|
SQL Injection
|
|
🇬🇧
pinguin
|
|
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: LOG
Protocol: HTTP/2 (GET method)
Endpoint: /js../.env
UA: Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)
This report was generated by:
https://github.com/sefin ...
show more
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: LOG
Protocol: HTTP/2 (GET method)
Endpoint: /js../.env
UA: Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
|
Bad Web Bot
|
|
🇩🇪
edena
|
|
34.150.174.41 - - [02/Nov/2026:15:06:45 +0100] "GET /dev/.env HTTP/1.1" 403 325 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
34.150.174.41 - - [02/Nov/2026:15:06:45 +0100] "GET /config.env HTTP/1.1" 403 325 "-" "Mozilla/5.0 (Linux; ...
show more
34.150.174.41 - - [02/Nov/2026:15:06:45 +0100] "GET /dev/.env HTTP/1.1" 403 325 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
34.150.174.41 - - [02/Nov/2026:15:06:45 +0100] "GET /config.env HTTP/1.1" 403 325 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
34.150.174.41 - - [02/Nov/2026:15:06:45 +0100] "GET /staging/.env HTTP/1.1" 403 1826 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
...
show less
|
Web App Attack
Bad Web Bot
|
|
🇦🇺
Proxay Fox
|
|
34.150.174.41 - - [02/Nov/2026:23:02:25 +1000] "GET /.next/server/app/page.js HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected]) AppleWebKit/537.36" "-" 403 348 TLSv1.3/TLS_AES_256_GCM_SHA384 . 71c128155b49ca16 ...
show more
34.150.174.41 - - [02/Nov/2026:23:02:25 +1000] "GET /.next/server/app/page.js HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected]) AppleWebKit/537.36" "-" 403 348 TLSv1.3/TLS_AES_256_GCM_SHA384 . 71c128155b49ca1627bef51be315b631e38384facbfab0c2290d822ffd695414
34.150.174.41 - - [02/Nov/2026:23:02:26 +1000] "GET /appearance/../../proc/self/environ HTTP/1.1" 400 150 "-" "-" "-" 50 295 TLSv1.3/TLS_AES_256_GCM_SHA384 . 3a3963c70a5eeb9a781b8cb92c65f438bd95f44d348b91249c198d336b50aa15
34.150.174.41 - - [02/Nov/2026:23:02:26 +1000] "GET /api/attachments/img/avatar/..%2F..%2F..%2F..%2F..%2Fproc%2Fself%2Fenviron HTTP/1.1" 400 150 "-" "-" "-" 89 295 TLSv1.3/TLS_AES_256_GCM_SHA384 . 71c128155b49ca1627bef51be315b631e38384facbfab0c2290d822ffd695414
34.150.174.41 - - [02/Nov/2026:23:02:26 +1000] "GET /api/attachments/img/avatar/..%2F..%2F..%2F..%2F..%2F.env HTTP/1.1" 400 150 "-" "-" "-" 72 295 TLSv1.3/TLS_AES_256_GCM_SHA384 . cbe3653ba98fc96e688b966e3fbaf2b2b
...
show less
|
Brute-Force
Web App Attack
|
|
Anonymous
|
|
(mod_security) mod_security triggered on hostname [redacted])
|
SQL Injection
|
|
🇩🇪
Marc
|
|
34.150.174.41 - - [02/Nov/2026:13:07:04 +0100] "GET /sitemap.xml HTTP/2.0" 404 291 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)" 34.150.174.41 - - [02/Nov/2026:13:07:04 +0100] "GET /sitemap_index.xml HTTP/2.0" 404 269 "-" "Moz ...
show more
34.150.174.41 - - [02/Nov/2026:13:07:04 +0100] "GET /sitemap.xml HTTP/2.0" 404 291 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)" 34.150.174.41 - - [02/Nov/2026:13:07:04 +0100] "GET /sitemap_index.xml HTTP/2.0" 404 269 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected])" 34.150.174.41 - - [02/Nov/2026:13:07:04 +0100] "GET /swagger HTTP/2.0" 404 269 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
show less
|
Brute-Force
|
|
🇲🇾
Rizzy
|
|
Multiple WAF Violations
|
Brute-Force
Web App Attack
|
|
🇬🇧
kie
|
|
02-11-2026:11:33:35UTC [Nginx Web Server] Suspicious web request: path:/.env path:/wp-config path:/.git path:/.env,/.git path:/.aws/ (198 request(s)).
|
Bad Web Bot
Web App Attack
|
|
🇳🇱
Alt255
|
|
[topuurbd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34.150.174.41 - - \[02/Nov/2026:12:14:56 +0100\] "GET /images../.env HTTP/1.1" 200 3051 "-" "Mozilla/5.0 \(compatible\; Amazonbot/0.1\; +https://develop ...
show more
[topuurbd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34.150.174.41 - - \[02/Nov/2026:12:14:56 +0100\] "GET /images../.env HTTP/1.1" 200 3051 "-" "Mozilla/5.0 \(compatible\; Amazonbot/0.1\; +https://developer.amazon.com/support/amazonbot\)"
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇳🇱
Site.eu
|
|
Scanning for secret files (.env, .git, credentials, config backups)
|
Bad Web Bot
Web App Attack
|
|
🇩🇪
pscriptos
|
|
This IP was detected by CrowdSec triggering crowdsecurity/appsec-vpatch
|
Web App Attack
|