๐ซ๐ท
GabrielJST
2026-10-11 13:39:10
(1 week ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 34.39.132.198 (BR/Br ...
show more
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 34.39.132.198 (BR/Brazil/198.132.39.34.bc.googleusercontent.com)
show less
Bad Web Bot
๐ธ๐ช
vaia.cloud
2026-10-11 13:30:02
(1 week ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
๐ช๐ธ
robotstxt
2026-10-11 13:02:28
(1 week ago)
34.39.132.198 - - [11/Oct/2026:13:02:25 +0000] "GET /..%2f.env HTTP/1.1" 400 193 "-" "-" "-" edge="3 ...
show more
34.39.132.198 - - [11/Oct/2026:13:02:25 +0000] "GET /..%2f.env HTTP/1.1" 400 193 "-" "-" "-" edge="34.39.132.198"
34.39.132.198 - - [11/Oct/2026:13:02:25 +0000] "GET /..%2f..%2f.env HTTP/1.1" 400 193 "-" "-" "-" edge="34.39.132.198"
34.39.132.198 - - [11/Oct/2026:13:02:25 +0000] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/1.1" 400 193 "-" "-" "-" edge="34.39.132.198"
34.39.132.198 - - [11/Oct/2026:13:02:25 +0000] "GET /uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/1.1" 400 193 "-" "-" "-" edge="34.39.132.198"
34.39.132.198 - - [11/Oct/2026:13:02:25 +0000] "GET /icons/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/proc/self/environ HTTP/1.1" 400 193 "-" "-" "-" edge="34.39.132.198"
...
show less
Web Spam
Web App Attack
๐ช๐ธ
robotstxt
2026-10-11 12:07:32
(1 week ago)
34.39.132.198 - - [11/Oct/2026:12:07:30 +0000] "GET /..%2f.env HTTP/1.1" 400 193 "-" "-" "-" edge="3 ...
show more
34.39.132.198 - - [11/Oct/2026:12:07:30 +0000] "GET /..%2f.env HTTP/1.1" 400 193 "-" "-" "-" edge="34.39.132.198"
34.39.132.198 - - [11/Oct/2026:12:07:30 +0000] "GET /%2e%2e/.env HTTP/1.1" 400 193 "-" "-" "-" edge="34.39.132.198"
34.39.132.198 - - [11/Oct/2026:12:07:30 +0000] "GET /..%2f..%2f.env HTTP/1.1" 400 193 "-" "-" "-" edge="34.39.132.198"
34.39.132.198 - - [11/Oct/2026:12:07:30 +0000] "GET /icons/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/proc/self/environ HTTP/1.1" 400 193 "-" "-" "-" edge="34.39.132.198"
34.39.132.198 - - [11/Oct/2026:12:07:30 +0000] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ HTTP/1.1" 400 193 "-" "-" "-" edge="34.39.132.198"
...
show less
Web Spam
Web App Attack
๐ฉ๐ช
Skyrider
2026-10-11 11:18:46
(1 week ago)
crowdsecurity/http-sensitive-files
Web App Attack
๐บ๐ธ
solantex
2026-10-11 09:01:11
(1 week ago)
Unauthorized automated scanning and reconnaissance against Solantex resources. No crawl, scan or tes ...
show more
Unauthorized automated scanning and reconnaissance against Solantex resources. No crawl, scan or test permission has been granted to this source.
show less
Web App Attack
Anonymous
2026-10-11 06:02:49
(1 week ago)
34.39.132.198 - - [11/Oct/2026:01:02:48 -0500] "GET /.env?raw HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Li ...
show more
34.39.132.198 - - [11/Oct/2026:01:02:48 -0500] "GET /.env?raw HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.71.10.238
34.39.132.198 - - [11/Oct/2026:01:02:48 -0500] "GET /.env?import&raw HTTP/1.1" 403 199 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 172.71.10.238
34.39.132.198 - - [11/Oct/2026:01:02:48 -0500] "GET /.env?import&url&inline HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)" 172.71.10.238
34.39.132.198 - - [11/Oct/2026:01:02:48 -0500] "GET /.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )" 172.71.10.238
34.39.132.198 - - [11/Oct/2026:01:02:48 -0500] "GET /.env.local?raw HTTP/1.1" 403 199 "
...
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-11 04:40:19
(1 week ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
Anonymous
2026-10-11 04:09:43
(1 week ago)
XSS Attempt
Hacking
๐บ๐ธ
1gz
2026-10-11 03:03:06
(1 week ago)
Triggered Cloudflare WAF (firewallCustom) from BR.
Action taken: CHALLENGE
Protocol: HTTP/2 (GET met ...
show more
Triggered Cloudflare WAF (firewallCustom) from BR.
Action taken: CHALLENGE
Protocol: HTTP/2 (GET method)
Endpoint: /.boto
UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
Anonymous
2026-10-11 02:31:47
(1 week ago)
Scanner hitting /graphql on admin.ara-oman.com (GOOGL-2) โ aaguard
Brute-Force
Port Scan
๐ช๐ธ
masterguru
2026-10-11 02:20:34
(1 week ago)
BAD BOT - Detected and Blocked.. Matched phrase "PerplexityBot" at REQUEST_HEADERS:User-Agent. (1100 ...
show more
BAD BOT - Detected and Blocked.. Matched phrase "PerplexityBot" at REQUEST_HEADERS:User-Agent. (1100000-122)
show less
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-10-11 02:12:22
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 34.39.132.198 (198.132.39.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.39.132.198 (198.132.39.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 22:12:14.879914 2026] [security2:error] [pid 6675:tid 6675] [client 34.39.132.198:55572] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||wilklass.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "wilklass.com"] [uri "/z9x8c7v6b5-debug-trigger-wilklass.com"] [unique_id "asrwflBTNgJhsyRynlQw0AAAACo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-11 02:07:04
(1 week ago)
Automated web scanner. Requested suspicious paths: /build/manifest.json | /z9x8c7v6b5-debug-trigger- ...
show more
Automated web scanner. Requested suspicious paths: /build/manifest.json | /z9x8c7v6b5-debug-trigger-tigzig.com | /.vite/manifest.json | /dist/.vite/manifest.json | /dist/manifest.json. UTC: 2026-10-11 01:50:36.
show less
Web App Attack
๐บ๐ธ
[email protected]
2026-10-11 02:02:28
(1 week ago)
CrowdSec ban: crowdsecurity/http-bad-user-agent (duration: 71h59m59s)
Web App Attack