๐จ๐ฑ
Fernando Soto
2026-10-14 03:05:39
(17 hours ago)
WAF propio vps1 (CL): sensMASx195 score 30 en 1h. sondeo rutas sensibles.
Web App Attack
๐ช๐ธ
robotstxt
2026-10-14 01:44:06
(18 hours ago)
34.159.201.20 - - [14/Oct/2026:01:44:03 +0000] "GET /..%2f..%2f.env HTTP/1.1" 400 193 "-" "-" "-" ed ...
show more
34.159.201.20 - - [14/Oct/2026:01:44:03 +0000] "GET /..%2f..%2f.env HTTP/1.1" 400 193 "-" "-" "-" edge="34.159.201.20"
34.159.201.20 - - [14/Oct/2026:01:44:03 +0000] "GET /icons/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/proc/self/environ HTTP/1.1" 400 193 "-" "-" "-" edge="34.159.201.20"
34.159.201.20 - - [14/Oct/2026:01:44:03 +0000] "GET /icons/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/proc/self/environ HTTP/1.1" 400 193 "-" "-" "-" edge="34.159.201.20"
34.159.201.20 - - [14/Oct/2026:01:44:03 +0000] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ HTTP/1.1" 400 193 "-" "-" "-" edge="34.159.201.20"
34.159.201.20 - - [14/Oct/2026:01:44:03 +0000] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ HTTP/1.1" 400 193 "-" "-" "-" edge="34.159.201.20"
...
show less
Web Spam
Web App Attack
Anonymous
2026-10-14 01:02:32
(19 hours ago)
Hacking Attempt
Hacking
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-13 22:58:55
(21 hours ago)
[ti-01al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apac ...
show more
[ti-01al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 34.159.201.20 - - [14/Oct/2026:00:58:54 +0200] "GET /login HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.159.201.20 - - [14/Oct/2026:00:58:54 +0200] "GET /auth HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.159.201.20 - - [14/Oct/2026:00:58:54 +0200] "GET /forgot-password HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.159.201.20 - - [14/Oct/2026:00:58:54 +0200] "GET /onboarding HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, li
...
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
dot.mg
2026-10-13 22:16:02
(22 hours ago)
Bad behaviour
Web Spam
๐ช๐ธ
robotstxt
2026-10-13 21:13:07
(23 hours ago)
34.159.201.20 - - [13/Oct/2026:21:13:05 +0000] "GET /uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.en ...
show more
34.159.201.20 - - [13/Oct/2026:21:13:05 +0000] "GET /uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/1.1" 400 193 "-" "-" "-" edge="34.159.201.20"
34.159.201.20 - - [13/Oct/2026:21:13:05 +0000] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/1.1" 400 193 "-" "-" "-" edge="34.159.201.20"
34.159.201.20 - - [13/Oct/2026:21:13:05 +0000] "GET /..%2f..%2f.env HTTP/1.1" 400 193 "-" "-" "-" edge="34.159.201.20"
34.159.201.20 - - [13/Oct/2026:21:13:05 +0000] "GET /api/attachments/img/avatar/..%2F..%2F..%2F..%2F..%2Fproc%2Fself%2Fenviron HTTP/1.1" 400 193 "-" "-" "-" edge="34.159.201.20"
34.159.201.20 - - [13/Oct/2026:21:13:05 +0000] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ HTTP/1.1" 400 193 "-" "-" "-" edge="34.159.201.20"
...
show less
Web Spam
Web App Attack
๐ง๐ช
cmbplf
2026-10-13 20:27:59
(1 day ago)
359 requests with url.path */@fs/*
144 requests with url.path */proc/*
122 requests with url.path ...
show more
359 requests with url.path */@fs/*
144 requests with url.path */proc/*
122 requests with url.path *.ssh/*
show less
Brute-Force
Bad Web Bot
Anonymous
2026-10-13 20:15:57
(1 day ago)
34.159.201.20 - - [13/Oct/2026:22:15:45 +0200] "GET /.git-credentials HTTP/2.0" 403 268 "-" "Mozilla ...
show more
34.159.201.20 - - [13/Oct/2026:22:15:45 +0200] "GET /.git-credentials HTTP/2.0" 403 268 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot"
show less
Web Spam
Blog Spam
Brute-Force
Web App Attack
๐ฉ๐ช
sigurg
2026-10-13 19:36:25
(1 day ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
๐ฎ๐น
VHosting
2026-10-13 19:35:07
(1 day ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
๐ฉ๐ช
DaleCooper
2026-10-13 18:12:46
(1 day ago)
34.159.201.20 - - [13/Oct/2026:20:12:07 +0200] "POST /cgi-bin/php-cgi.exe?%ADd+allow_url_include%3d1 ...
show more
34.159.201.20 - - [13/Oct/2026:20:12:07 +0200] "POST /cgi-bin/php-cgi.exe?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 404 188 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
34.159.201.20 - - [13/Oct/2026:20:12:07 +0200] "POST /cgi-bin/php?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 404 125 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)"
...
show less
Brute-Force
๐บ๐ธ
jormaster3k
2026-10-13 17:57:40
(1 day ago)
Attack against Apache (too many 404s)
Web App Attack
๐ช๐ธ
robotstxt
2026-10-13 17:26:53
(1 day ago)
34.159.201.20 - - [13/Oct/2026:17:26:51 +0000] "GET /..%2f..%2f.env HTTP/1.1" 400 193 "-" "-" "-" ed ...
show more
34.159.201.20 - - [13/Oct/2026:17:26:51 +0000] "GET /..%2f..%2f.env HTTP/1.1" 400 193 "-" "-" "-" edge="34.159.201.20"
34.159.201.20 - - [13/Oct/2026:17:26:51 +0000] "GET /..%2f.env HTTP/1.1" 400 193 "-" "-" "-" edge="34.159.201.20"
34.159.201.20 - - [13/Oct/2026:17:26:51 +0000] "GET /uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/1.1" 400 193 "-" "-" "-" edge="34.159.201.20"
34.159.201.20 - - [13/Oct/2026:17:26:51 +0000] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ HTTP/1.1" 400 193 "-" "-" "-" edge="34.159.201.20"
34.159.201.20 - - [13/Oct/2026:17:26:51 +0000] "GET /icons/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/proc/self/environ HTTP/1.1" 400 193 "-" "-" "-" edge="34.159.201.20"
...
show less
Web Spam
Web App Attack
Anonymous
2026-10-13 17:20:05
(1 day ago)
| Multiple common web attacks from same source ip. (multiple servers)
Web App Attack
Hacking
SQL Injection
๐จ๐ฑ
Fernando Soto
2026-10-13 16:45:02
(1 day ago)
WAF propio vps1 (CL): 404x29,sensMASx195 score 30 en 1h. sondeo rutas sensibles, barrido 404.
Port Scan
Web App Attack