🇫🇷
SpaceHost-Server
2026-10-07 22:24:32
UTC ·
(1 month ago)
Brute-Force
Web App Attack
🇩🇪
updown.io
2026-10-07 02:13:18
UTC ·
(1 month ago)
{"level":"info","ts":1791339194.9052396,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"35.243.193.203","remote_port":"40656","client_ip":"35.243.193.203","proto":"HTTP/2.0","method":"GET","host":"status.mollis.com.ar" ...
show more
{"level":"info","ts":1791339194.9052396,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"35.243.193.203","remote_port":"40656","client_ip":"35.243.193.203","proto":"HTTP/2.0","method":"GET","host":"status.mollis.com.ar","uri":"/mz48o4v35l012ixhl5rp","headers":{"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"X-Nextjs-Data":["1"],"User-Agent":["Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )"],"Accept":["*/*"],"Accept-Encoding":["gzip"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"status.mollis.com.ar","ech":false}},"bytes_read":0,"user_id":"","duration":0.000160807,"size":0,"status":429,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"]}}
{"level":"info","ts":1791339195.154364,"l
...
show less
DDoS Attack
Web App Attack
🇺🇸
Sockets-AR
2026-10-06 23:40:33
UTC ·
(1 month ago)
CrowdSec: sensitive file probing detected (crowdsecurity/http-sensitive-files) at 2026-10-06T23:40:32.869Z
Web App Attack
🇫🇷
SpaceHost-Server
2026-10-06 22:19:58
UTC ·
(1 month ago)
Brute-Force
Web App Attack
🇪🇸
robotstxt
2026-10-06 20:46:06
UTC ·
(1 month ago)
35.243.193.203 - - [06/Oct/2026:20:45:47 +0000] "-" 400 193 "-" "-" "-" edge="35.243.193.203"
35.243.193.203 - - [06/Oct/2026:20:45:47 +0000] "-" 400 193 "-" "-" "-" edge="35.243.193.203"
35.243.193.203 - - [06/Oct/2026:20:45:47 +0000] "-" 400 193 "- ...
show more
35.243.193.203 - - [06/Oct/2026:20:45:47 +0000] "-" 400 193 "-" "-" "-" edge="35.243.193.203"
35.243.193.203 - - [06/Oct/2026:20:45:47 +0000] "-" 400 193 "-" "-" "-" edge="35.243.193.203"
35.243.193.203 - - [06/Oct/2026:20:45:47 +0000] "-" 400 193 "-" "-" "-" edge="35.243.193.203"
35.243.193.203 - - [06/Oct/2026:20:45:47 +0000] "-" 400 193 "-" "-" "-" edge="35.243.193.203"
35.243.193.203 - - [06/Oct/2026:20:45:47 +0000] "-" 400 193 "-" "-" "-" edge="35.243.193.203"
...
show less
Web Spam
Web App Attack
🇺🇸
TPI-Abuse
2026-10-06 18:13:08
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 35.243.193.203 (203.193.243.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 14:13:02.119401 2026] [security2:error] [pid 15586:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 35.243.193.203 (203.193.243.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 14:13:02.119401 2026] [security2:error] [pid 15586:tid 15586] [client 35.243.193.203:41486] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.escribaniasmith.com.ar"] [uri "/web/.env"] [unique_id "asU6LmaqXOUTHWvz97QFFQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-06 17:10:42
UTC ·
(1 month ago)
Vulnerability scan
Web App Attack
🇺🇸
snappic
2026-10-06 15:22:12
UTC ·
(1 month ago)
Scanning for config [GET /config.json.js] [Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)]
Bad Web Bot
Web App Attack
🇺🇸
snappic
2026-10-06 10:56:07
UTC ·
(1 month ago)
Scanning for config [GET /config.json.js] [Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)]
Bad Web Bot
Web App Attack
2026-10-06 10:26:26
UTC ·
(1 month ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇺🇸
Sockets-AR
2026-10-06 09:48:38
UTC ·
(1 month ago)
CrowdSec: HTTP DoS detected (crowdsecurity/http-dos-swithcing-ua) at 2026-10-06T09:48:37.609Z
DDoS Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-10-06 09:46:01
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 35.243.193.203 (203.193.243.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 05:45:53.738410 2026] [security2:error] [pid 6563:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 35.243.193.203 (203.193.243.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 05:45:53.738410 2026] [security2:error] [pid 6563:tid 6563] [client 35.243.193.203:60990] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sieder.com.ar"] [uri "/dist/.env"] [unique_id "asTDUbPdhPlzQHE2EttuDAAAACE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Sockets-AR
2026-10-06 09:05:20
UTC ·
(1 month ago)
CrowdSec: HTTP DoS detected (crowdsecurity/http-dos-swithcing-ua) at 2026-10-06T09:05:19.696Z
DDoS Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-10-06 08:00:53
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 35.243.193.203 (203.193.243.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 04:00:46.693268 2026] [security2:error] [pid 13195:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 35.243.193.203 (203.193.243.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 04:00:46.693268 2026] [security2:error] [pid 13195:tid 13195] [client 35.243.193.203:60918] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "frenosilent.com.ar"] [uri "/.htpasswd"] [unique_id "asSqrmtQrn5WXbmnk9tVIgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-06 07:55:01
UTC ·
(1 month ago)
suspicious request in access.log
Web App Attack
