|
๐จ๐ฟ
akac
|
|
Web vulnerability scanning: HTTP/2 GET /reset-password
|
Hacking
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
๐จ๐ญ
leo1305
|
|
CrowdSec detection | scenario: http-path-traversal-probing
|
Web App Attack
Exploited Host
|
|
|
๐ง๐ช
cmbplf
|
|
283 requests with url.path *.env
174 requests with url.path */@fs/*
|
Brute-Force
Bad Web Bot
|
|
|
๐บ๐ธ
zapteryx
|
|
34.177.92.114 - - [07/Oct/2026:00:50:44 -0400] "GET /static/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc ...
show more
34.177.92.114 - - [07/Oct/2026:00:50:44 -0400] "GET /static/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ HTTP/1.1" 400 166 "-" "-"
34.177.92.114 - - [07/Oct/2026:00:50:44 -0400] "GET /static/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/1.1" 400 166 "-" "-"
34.177.92.114 - - [07/Oct/2026:00:50:45 -0400] "GET /resources/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/1.1" 400 166 "-" "-"
34.177.92.114 - - [07/Oct/2026:00:50:54 -0400] "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/proc/self/environ HTTP/1.1" 400 166 "-" "-"
34.177.92.114 - - [07/Oct/2026:00:50:54 -0400] "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/.env HTTP/1.1" 400 166 "-" "-"
...
show less
|
Brute-Force
Web App Attack
|
|
|
๐ต๐ฑ
itsvic.dev
|
|
34.177.92.114 - - [07/Oct/2026:00:08:55 +0000] "files.itsvic.dev" "GET /wp-json HTTP/2.0" 404 146 "- ...
show more
34.177.92.114 - - [07/Oct/2026:00:08:55 +0000] "files.itsvic.dev" "GET /wp-json HTTP/2.0" 404 146 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"
34.177.92.114 - - [07/Oct/2026:00:08:55 +0000] "files.itsvic.dev" "GET /@fs/src/.env?raw?? HTTP/2.0" 404 146 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)"
34.177.92.114 - - [07/Oct/2026:00:08:55 +0000] "files.itsvic.dev" "GET /@fs/app/.env?raw?? HTTP/2.0" 404 146 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
...
show less
|
Brute-Force
Web App Attack
|
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.177.92.114 (114.92.177.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.177.92.114 (114.92.177.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 12:32:17.227638 2026] [security2:error] [pid 2252:tid 2252] [client 34.177.92.114:44772] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "zaaniebowen.dev"] [uri "/assets../.env"] [unique_id "asUikewb71MGD1wSAgf1aAAAAAk"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
๐ณ๐ฑ
Webhoster
|
|
CrowdSec detected crowdsecurity/http-crawl-non_statics on a monitored service.
|
Bad Web Bot
|
|
|
๐ณ๐ฑ
Webhoster
|
|
CrowdSec detected crowdsecurity/http-path-traversal-probing on a monitored service.
|
Web App Attack
|
|
|
๐บ๐ธ
Player Unknown
|
|
34.177.92.114 - - [06/Oct/2026:08:15:05 -0700] "GET /public/plugins/text/../../../../../../../../pro ...
show more
34.177.92.114 - - [06/Oct/2026:08:15:05 -0700] "GET /public/plugins/text/../../../../../../../../proc/self/environ HTTP/1.1" 400 6594 "-" "-"
34.177.92.114 - - [06/Oct/2026:08:15:10 -0700] "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/proc/self/environ HTTP/1.1" 400 6594 "-" "-"
34.177.92.114 - - [06/Oct/2026:08:15:10 -0700] "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/.env HTTP/1.1" 400 6594 "-" "-"
34.177.92.114 - - [06/Oct/2026:08:15:11 -0700] "GET /public/plugins/alertlist/../../../../../../../../proc/self/environ HTTP/1.1" 400 6594 "-" "-"
34.177.92.114 - - [06/Oct/2026:08:15:11 -0700] "GET /public/plugins/grafana-clock-panel/../../../../../../../../proc/self/environ HTTP/1.1" 400 6594 "-" "-"
...
show less
|
Brute-Force
SSH
|
|
|
๐ฏ๐ต
S.O.B.A. Dev.
|
|
Web vulnerability scanning
|
Brute-Force
Web Spam
Web App Attack
|
|
|
๐ฐ๐ท
ZEROVOX
|
|
CrowdSec: crowdsecurity/http-probing detected
|
Web App Attack
|
|
|
๐ฌ๐ง
pinguin
|
|
Triggered Cloudflare WAF (firewallManaged) from SG.
Action taken: LOG
Protocol: HTTP/2 (GET method)
...
show more
Triggered Cloudflare WAF (firewallManaged) from SG.
Action taken: LOG
Protocol: HTTP/2 (GET method)
Endpoint: /configuration.js
UA: Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
|
Bad Web Bot
|
|
|
Anonymous
|
|
Scanner hitting /auth/login on narkow.dev (GOOGL-2) โ aaguard
|
Brute-Force
Port Scan
|
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.177.92.114 (114.92.177.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.177.92.114 (114.92.177.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 08:38:50.060358 2026] [security2:error] [pid 31050:tid 31050] [client 34.177.92.114:58256] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "matteozacchino.dev"] [uri "/.htpasswd"] [unique_id "asTr2hYp7cuaPEfzHuJypQAAABo"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
๐ฉ๐ช
lolyay
|
|
34.177.92.114 - - [06/Oct/2026:12:20:56 +0000] "GET /.npmrc HTTP/1.1" 200 4 "-" "Mozilla/5.0 (compat ...
show more
34.177.92.114 - - [06/Oct/2026:12:20:56 +0000] "GET /.npmrc HTTP/1.1" 200 4 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
34.177.92.114 - - [06/Oct/2026:12:20:56 +0000] "GET /wp-json HTTP/1.1" 200 4 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
...
show less
|
Web App Attack
Bad Web Bot
|
|