🇨🇭
🇨🇭 Hosting
2026-09-07 05:10:17
(18 hours ago)
Automated WAF report: 400-500 blocked requests from this IP detected by our WAF.
Bad Web Bot
Web App Attack
🇷🇸
Scan
2026-09-07 02:31:40
(21 hours ago)
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan
Hacking
🇧🇾
lns.bz
2026-09-07 01:20:04
(22 hours ago)
.env scanning [BY]
Web App Attack
Anonymous
2026-09-06 22:37:50
(1 day ago)
Web scanner: GET /static../.env
Web App Attack
Hacking
🇩🇪
Phenix Info
2026-09-06 21:29:59
(1 day ago)
SmallGuard.fr - Forbidden Ext.
Web App Attack
🇩🇪
Viveronese
2026-09-06 21:25:51
(1 day ago)
HTTP vulnerability scanning
Web App Attack
🇵🇱
webadmin
2026-09-06 19:02:08
(1 day ago)
34.127.6.130 - - [06/Sep/2026:21:01:57 +0200] "GET /assets../../../etc/passwd HTTP/1.1" 400 150 "-" ...
show more
34.127.6.130 - - [06/Sep/2026:21:01:57 +0200] "GET /assets../../../etc/passwd HTTP/1.1" 400 150 "-" "-" (mis.sai.com.pl, / mis.sai.com.pl,)
34.127.6.130 - - [06/Sep/2026:21:01:58 +0200] "GET /assets../../../.env HTTP/1.1" 400 150 "-" "-" (mis.sai.com.pl, / mis.sai.com.pl,)
34.127.6.130 - - [06/Sep/2026:21:02:02 +0200] "GET ////../.env HTTP/1.1" 400 150 "-" "-" (mis.sai.com.pl, / mis.sai.com.pl,)
34.127.6.130 - - [06/Sep/2026:21:02:02 +0200] "GET /%2e%2e/%2e%2e/.env HTTP/1.1" 400 150 "-" "-" (mis.sai.com.pl, / mis.sai.com.pl,)
34.127.6.130 - - [06/Sep/2026:21:02:08 +0200] "GET /assets../../../etc/passwd HTTP/1.1" 400 150 "-" "-" (mis.sai.com.pl / mis.sai.com.pl)
show less
Web App Attack
🇳🇿
Antinson
2026-09-06 13:23:04
(1 day ago)
Scraping with a high error ratio and request rate
Bad Web Bot
🇫🇷
pm33
2026-09-06 10:41:38
(1 day ago)
Unauthorized connections HTTP 403
Web App Attack
🇫🇷
fabrice
2026-09-06 05:48:33
(1 day ago)
Repeated Trusted domain errors : 34.127.6.130 - - [06/Sep/2026:07:48:32 +0200] "GET /wp-content/debu ...
show more
Repeated Trusted domain errors : 34.127.6.130 - - [06/Sep/2026:07:48:32 +0200] "GET /wp-content/debug.log HTTP/1.1" 403 1958 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user"
...
show less
Web App Attack
🇺🇸
kadour
2026-09-06 01:45:08
(1 day ago)
[Sat Sep 05 20:45:06.425823 2026] [proxy_fcgi:error] [pid 107349:tid 107377] [client 34.127.6.130:49 ...
show more
[Sat Sep 05 20:45:06.425823 2026] [proxy_fcgi:error] [pid 107349:tid 107377] [client 34.127.6.130:49320] AH01071: Got error 'Primary script unknown', referer: https://172.233.212.194:443/.env.php
[Sat Sep 05 20:45:06.551133 2026] [proxy_fcgi:error] [pid 2547:tid 2651] [client 34.127.6.130:49244] AH01071: Got error 'Primary script unknown', referer: https://172.233.212.194:443/phpinfo.php
[Sat Sep 05 20:45:06.771342 2026] [proxy_fcgi:error] [pid 2546:tid 2682] [client 34.127.6.130:49070] AH01071: Got error 'Primary script unknown', referer: https://172.233.212.194:443/app_dev.php/_profiler/phpinfo
[Sat Sep 05 20:45:06.775840 2026] [proxy_fcgi:error] [pid 107349:tid 107396] [client 34.127.6.130:49024] AH01071: Got error 'Primary script unknown', referer: https://172.233.212.194:443/app_dev.php/_profiler/.env
[Sat Sep 05 20:45:07.122683 2026] [proxy_fcgi:error] [pid 2547:tid 2636] [client 34.127.6.130:49400] AH01071: Got error 'Primary script unknown', referer: https://172.233.212.194:443
...
show less
Web App Attack
🇫🇷
guillaume illien
2026-09-06 01:26:01
(1 day ago)
34.127.6.130 - - [06/Sep/2026:01:25:22 +0000] "GET /assets../../../etc/passwd HTTP/1.1" 400 166 "-" ...
show more
34.127.6.130 - - [06/Sep/2026:01:25:22 +0000] "GET /assets../../../etc/passwd HTTP/1.1" 400 166 "-" "-"
34.127.6.130 - - [06/Sep/2026:01:25:23 +0000] "GET /assets../../../.env HTTP/1.1" 400 166 "-" "-"
34.127.6.130 - - [06/Sep/2026:01:25:24 +0000] "GET /assets/env.js HTTP/1.1" 404 134 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Firefox/78.0; compatible; GrokBot/1.0; +https://x.ai/grokbot"
34.127.6.130 - - [06/Sep/2026:01:25:36 +0000] "GET ////../.env HTTP/1.1" 400 166 "-" "-"
34.127.6.130 - - [06/Sep/2026:01:25:36 +0000] "GET /%2e%2e/%2e%2e/.env HTTP/1.1" 400 166 "-" "-"
34.127.6.130 - - [06/Sep/2026:01:25:59 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.8814.50 Safari/537.36; compatible; ClaudeBot/1.0; [email protected] "
34.127.6.130 - - [06/Sep/2026:01:26:00 +0000] "GET /__aws_leak_probe_bcde5df2__ HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Linux; Android 15; SM-S918B) AppleWebKit/537
...
show less
Hacking
Brute-Force
Web App Attack
SSH
🇦🇺
foff
2026-09-06 00:31:16
(1 day ago)
Source IP: 34.127.6.130 (US/Google LLC). Web application attack detected by OWASP CRS (local file in ...
show more
Source IP: 34.127.6.130 (US/Google LLC). Web application attack detected by OWASP CRS (local file inclusion). Attack observed 2026-09-06T10:31:16+10:00.
show less
Web App Attack
🇳🇿
Antinson
2026-09-05 13:07:55
(2 days ago)
Scraping with a high error ratio and request rate
Bad Web Bot
🇧🇾
lns.bz
2026-09-05 11:29:19
(2 days ago)
Too many 404 requests [BY]
Web App Attack