🇨🇱
Fernando Soto
2026-11-05 03:05:14
UTC ·
(2 days ago)
WAF propio vps1 (CL): 404x31,sensMASx194 score 30 en 1h. sondeo rutas sensibles, barrido 404.
Port Scan
Web App Attack
🇫🇷
SpaceHost-Server
2026-11-04 23:18:25
UTC ·
(2 days ago)
Brute-Force
Web App Attack
🇫🇷
SpaceHost-Server
2026-11-03 23:17:36
UTC ·
(3 days ago)
Brute-Force
Web App Attack
🇭🇺
kranem
2026-11-03 18:00:29
UTC ·
(3 days ago)
Triggered Cloudflare WAF from DE.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/2 (GET method)
Endpoint: /application/.env
Timestamp: 2026-11-03T16:59:53Z
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude ...
show more
Triggered Cloudflare WAF from DE.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/2 (GET method)
Endpoint: /application/.env
Timestamp: 2026-11-03T16:59:53Z
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-11-03 16:56:49
UTC ·
(3 days ago)
(mod_security) mod_security (id:210580) triggered by 34.179.250.225 (225.250.179.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 11:56:41.894797 2026] [security2:error] [pid 22676:ti ...
show more
(mod_security) mod_security (id:210580) triggered by 34.179.250.225 (225.250.179.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 11:56:41.894797 2026] [security2:error] [pid 22676:tid 22676] [client 34.179.250.225:0] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at ARGS:file. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||mail.ccamp.dev|F|2"] [data "Matched Data: proc/self/environ found within ARGS:file: /proc/self/environ"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "mail.ccamp.dev"] [uri "/api/system/fileView"] [unique_id "auoSSXyPa0bRN29wWmMbmwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇷
radardatelecom
2026-11-03 16:53:03
UTC ·
(3 days ago)
Blocked by Radar da Telecom firewall — abuseipdb
Bad Web Bot
Web App Attack
🇫🇷
Cuteminded
2026-11-03 16:48:08
UTC ·
(3 days ago)
Brute force web login attempts
Web App Attack
🇩🇪
LRob
2026-11-03 16:10:37
UTC ·
(3 days ago)
Crawler ignoring refusals | ua: Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler), Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmaste ...
show more
Crawler ignoring refusals | ua: Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler), Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler), Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot (+7 more) | path: /files../.env, /css../.env, /images../.env (+11 more) | 2026-11-03 16:10 UTC
show less
Bad Web Bot
2026-11-03 16:00:10
UTC ·
(3 days ago)
| Multiple common web attacks from same source ip.
Web App Attack
Hacking
SQL Injection
🇩🇰
HostingGroup
2026-11-03 15:56:53
UTC ·
(3 days ago)
Automated malicious activity (Honeypot Trap) detected and blocked at the CDN edge by NordicCDN Shield. Offenses: 9. First blocked: 2026-11-03.
Bad Web Bot
Web App Attack
🇳🇱
e.fierstra
2026-11-03 15:55:11
UTC ·
(3 days ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇩🇪
big-cloud.nl
2026-11-03 15:52:44
UTC ·
(3 days ago)
Try to access /.env.swp
Web App Attack
2026-11-03 15:25:04
UTC ·
(3 days ago)
Bot / scanning and/or hacking attempts: GET /.dev.vars.staging HTTP/2.0, GET /.dev.vars HTTP/2.0, GET /Dockerrun.aws.json HTTP/2.0, GET /.env.sendgrid HTTP/2.0, GET /config/custom-environment-variables.json HTTP/2.0, GET /.terraform.rc HTTP/2.0, GET ...
show more
Bot / scanning and/or hacking attempts: GET /.dev.vars.staging HTTP/2.0, GET /.dev.vars HTTP/2.0, GET /Dockerrun.aws.json HTTP/2.0, GET /.env.sendgrid HTTP/2.0, GET /config/custom-environment-variables.json HTTP/2.0, GET /.terraform.rc HTTP/2.0, GET /.output/server/index.mjs HTTP/2.0, GET /docker-compose.prod.yml HTTP/2.0, GET /firebaseConfig.js HTTP/2.0, GET /settings/_payload.json HTTP/2.0, GET /.dev.vars.production HTTP/2.0, GET /samconfig.toml HTTP/2.0, GET /.next/required-server-files.json HTTP/2.0, GET /docker-compose/.env HTTP/2.0, GET /*.auto.tfvars HTTP/2.0, GET /docker-compose.dev.yml HTTP/2.0, GET /next.config.mjs HTTP/2.0, GET /terraform.tfstate.backup HTTP/2.0, GET /firebase-config.js HTTP/2.0
show less
Hacking
Web App Attack
🇨🇱
Fernando Soto
2026-11-03 15:05:02
UTC ·
(3 days ago)
WAF propio vps1 (CL): 404x31,sensMASx194 score 30 en 1h. sondeo rutas sensibles, barrido 404.
Port Scan
Web App Attack
🇺🇸
cwytech
2026-11-03 15:02:35
UTC ·
(3 days ago)
Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: crowdsecurity/http-probing.
Bad Web Bot
Web App Attack
