🇨🇭
🇨🇭 Hosting
2026-10-15 05:10:11
(13 minutes ago)
Automated WAF report: 800-900 blocked requests from this IP detected by our WAF.
Bad Web Bot
Web App Attack
🇨🇦
Dunham Support
2026-10-15 04:19:54
(1 hour ago)
(mod_security) mod_security triggered on hostname [redacted] 34.97.64.173 (JP/Japan/173.64.97.34.bc. ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.97.64.173 (JP/Japan/173.64.97.34.bc.googleusercontent.com)
show less
SQL Injection
🇳🇴
jad-abuse
2026-10-15 03:43:22
(1 hour ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_expos ...
show more
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_exposure, env_probe, source_backup. Observed by 1 sensor(s); 203 hits.
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 03:36:59
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 34.97.64.173 (173.64.97.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.97.64.173 (173.64.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 23:36:53.525189 2026] [security2:error] [pid 18854:tid 18854] [client 34.97.64.173:55554] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "valkyriepanthers.com"] [uri "/.git/config"] [unique_id "atBKVZAvopReNM4388vfZgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
RamSet
2026-10-15 03:36:16
(1 hour ago)
[swy] HTTP-Probe on port 443 (via domain). 50 distinct paths probed in 8s. Sustained 53 req/min, 49 ...
show more
[swy] HTTP-Probe on port 443 (via domain). 50 distinct paths probed in 8s. Sustained 53 req/min, 49 nonexistent paths (404). Paths: /.git/config, /.env, /.env.local, /.env.production, /.env.staging, /.env.development, /.env.test, /.env.remote, /.env.bak, /.env.backup, /.env.save, /.env.old, /.env.sample, /.env.example, /.env.dev, /.env.prod, /.env.stage, /.env.ci, /.env.docker, /.env.live, /.env.preprod, /.env.uat, /.env.dist, /.env.swp, /.env.txt, /.env.json, /.env.yaml, /.env.yml, /app/.env, /apps/.env, /api/.env, /web/.env, /site/.env, /public/.env, /admin/.env, /backend/.env, /server/.env, /frontend/.env, /src/.env, /core/.env, /core/app/.env, /config/.env, /private/.env, /application/.env, /, /.env1, /.env2, /.env_copy, /.env~
show less
Bad Web Bot
Web App Attack
🇿🇦
conure.sh
2026-10-15 00:05:30
(5 hours ago)
csagent: score 21.7: 404 noise floor x7, secrets grab x2; 1 domain(s) in 2s
Web App Attack
2026-10-14 23:10:03
(6 hours ago)
suspicious request in access.log
Web App Attack
🇬🇧
consul.to
2026-10-14 22:19:58
(7 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇧🇪
cmbplf
2026-10-14 21:22:56
(8 hours ago)
7.306 requests with url.path *.env
1.120 requests with url.path *phpinfo.php
201 requests with ur ...
show more
7.306 requests with url.path *.env
1.120 requests with url.path *phpinfo.php
201 requests with url.path *credentials.json
106 requests with url.path *.php.bak
show less
Brute-Force
Bad Web Bot
2026-10-14 21:14:51
(8 hours ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇦🇹
mindrider
2026-10-14 11:02:20
(18 hours ago)
34.97.64.173 - - [14/Oct/2026:13:02:18 +0200] "GET /.git/config HTTP/1.1" 404 2968 "-" "Mozilla/5.0 ...
show more
34.97.64.173 - - [14/Oct/2026:13:02:18 +0200] "GET /.git/config HTTP/1.1" 404 2968 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
34.97.64.173 - - [14/Oct/2026:13:02:19 +0200] "GET /.env.local HTTP/1.1" 404 2968 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
...
show less
Brute-Force
Web App Attack
🇵🇱
Budyn
2026-10-14 10:36:21
(18 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: vault.astropot.online | URI: /.git/config | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-10-14 10:27:36
(18 hours ago)
Excessive 404/403 errors
Brute-Force
🇸🇪
vaia.cloud
2026-10-14 10:20:03
(19 hours ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
