🇨🇭
🇨🇭 Hosting
2026-09-30 05:10:31
(1 month ago)
Automated WAF report: 200-300 blocked requests from this IP detected by our WAF.
Bad Web Bot
Web App Attack
🇩🇪
updown.io
2026-09-29 18:42:21
(1 month ago)
{"level":"info","ts":1790707341.2995064,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.159.25.10","remote_port":"40704","client_ip":"34.159.25.10","proto":"HTTP/1.1","method":"GET","host":"status.osuny.org","uri":" ...
show more
{"level":"info","ts":1790707341.2995064,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.159.25.10","remote_port":"40704","client_ip":"34.159.25.10","proto":"HTTP/1.1","method":"GET","host":"status.osuny.org","uri":"/.env.test","headers":{"Connection":["keep-alive"],"Next-Action":["x"],"X-Nextjs-Request-Id":["893fc62f"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"],"Accept-Encoding":["gzip, deflate"],"Accept":["*/*"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"http/1.1","server_name":"status.osuny.org","ech":false}},"bytes_read":0,"user_id":"","duration":0.000137642,"size":0,"status":429,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"]}}
{"level":"info","ts":1790707341.3024142,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.159.25.10","remote_port":"40704","client_ip":"3
...
show less
DDoS Attack
Web App Attack
🇩🇪
FD-IX
2026-09-29 18:41:00
(1 month ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2026-09-28 23:30:00
(1 month ago)
859 requests with url.path *.env
139 requests with url.path *phpinfo.php
Brute-Force
Bad Web Bot
🇳🇱
Alt255
2026-09-28 23:25:03
(1 month ago)
[ti-24al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 34.159.25.10 - - [29/Sep/2026:01:24:49 +0200] "GET /.git/config HTTP/1.1" 404 2142 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/5 ...
show more
[ti-24al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 34.159.25.10 - - [29/Sep/2026:01:24:49 +0200] "GET /.git/config HTTP/1.1" 404 2142 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.159.25.10 - - [29/Sep/2026:01:24:49 +0200] "GET /.env HTTP/1.1" 404 2142 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.159.25.10 - - [29/Sep/2026:01:24:49 +0200] "GET /.env.local HTTP/1.1" 404 2142 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.159.25.10 - - [29/Sep/2026:01:24:49 +0200] "GET /.env.production HTTP/1.1" 404 2142 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like
...
show less
Bad Web Bot
Web App Attack
🇩🇪
ger-stg-sifi1
2026-09-27 16:32:43
(1 month ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
🇫🇷
Feelautom
2026-09-27 08:32:52
(1 month ago)
[FeelAutom Auto-Ban] PathScan: /.env.backup (Score: 200)
Port Scan
🇳🇴
jad-abuse
2026-09-26 06:29:48
(1 month ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_exposure, env_probe, source_backup, server_status, wp_admin. Observed by 1 sensor(s); 263 hits.
Brute-Force
Web App Attack
2026-09-25 02:08:25
(1 month ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-09-24 18:10:18
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.159.25.10 (10.25.159.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 14:10:11.684725 2026] [security2:error] [pid 1461:tid 146 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.159.25.10 (10.25.159.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 14:10:11.684725 2026] [security2:error] [pid 1461:tid 1461] [client 34.159.25.10:58970] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.affid.org"] [uri "/.git/config"] [unique_id "arVng0_WisCINqw1EOzd4QAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-24 01:03:47
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.159.25.10 (10.25.159.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 21:03:40.511678 2026] [security2:error] [pid 11320:tid 11 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.159.25.10 (10.25.159.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 21:03:40.511678 2026] [security2:error] [pid 11320:tid 11328] [client 34.159.25.10:49200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hearthandhomestudio.art"] [uri "/.git/config"] [unique_id "arR27P1ds3dQqIfJIqnxKQAAAUY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-09-23 09:46:57
(1 month ago)
Multiple WAF Violations
Web App Attack
🇨🇭
Ribeye375
2026-09-22 07:29:59
(1 month ago)
HIPS web-exfiltration - Block tcp/0:65535
Web App Attack
🇫🇮
JimArchon72
2026-09-21 22:00:01
(1 month ago)
2026/09/21 21:59:10 "GET /wp-admin/phpinfo.php HTTP/1.1"
Web App Attack
🇷🇴
clauss
2026-09-21 18:09:57
(1 month ago)
34.159.25.10 - - [21/Sep/2026:21:09:56 +0300] "GET /phpinfo.php HTTP/2.0" 404 22055 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.159.25.10 - - [21/Sep/2026:21:09:56 +0300] "GET /info.p ...
show more
34.159.25.10 - - [21/Sep/2026:21:09:56 +0300] "GET /phpinfo.php HTTP/2.0" 404 22055 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.159.25.10 - - [21/Sep/2026:21:09:56 +0300] "GET /info.php HTTP/2.0" 404 22055 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Web App Attack
