{ "generated_at": "2026-10-07T04:00:02Z", "server": { "lat": 46.2044, "lon": 6.1432, "name": "CH (Infomaniak)" }, "stats": { "total_alerts": 50, "unique_ips": 16, "countries_count": 11, "top_country": "US", "top_country_name": "ร‰tats-Unis", "top_country_flag": "๐Ÿ‡บ๐Ÿ‡ธ", "top_scenario_label": "HTTP Probing" }, "top_countries": [ { "country": "US", "country_name": "ร‰tats-Unis", "flag": "๐Ÿ‡บ๐Ÿ‡ธ", "count": 17 }, { "country": "SE", "country_name": "SE", "flag": "๐Ÿ‡ธ๐Ÿ‡ช", "count": 9 }, { "country": "SG", "country_name": "Singapour", "flag": "๐Ÿ‡ธ๐Ÿ‡ฌ", "count": 6 }, { "country": "NL", "country_name": "Pays-Bas", "flag": "๐Ÿ‡ณ๐Ÿ‡ฑ", "count": 6 }, { "country": "ID", "country_name": "Indonรฉsie", "flag": "๐Ÿ‡ฎ๐Ÿ‡ฉ", "count": 4 }, { "country": "HK", "country_name": "Hong Kong", "flag": "๐Ÿ‡ญ๐Ÿ‡ฐ", "count": 3 }, { "country": "AU", "country_name": "AU", "flag": "๐ŸŒ", "count": 1 }, { "country": "PT", "country_name": "PT", "flag": "๐ŸŒ", "count": 1 }, { "country": "EC", "country_name": "EC", "flag": "๐ŸŒ", "count": 1 }, { "country": "MX", "country_name": "MX", "flag": "๐Ÿ‡ฒ๐Ÿ‡ฝ", "count": 1 } ], "top_scenarios": [ { "scenario": "crowdsecurity/http-probing", "label": "HTTP Probing", "category": "web", "count": 9 }, { "scenario": "crowdsecurity/http-crawl-non_statics", "label": "Web Crawl", "category": "web", "count": 9 }, { "scenario": "crowdsecurity/ssh-slow-bf", "label": "SSH Brute Force (lent)", "category": "ssh", "count": 7 }, { "scenario": "crowdsecurity/http-sensitive-files", "label": "Fichiers sensibles", "category": "web", "count": 6 }, { "scenario": "crowdsecurity/http-admin-interface-probing", "label": "Http Admin Interface Probing", "category": "other", "count": 4 }, { "scenario": "crowdsecurity/http-path-traversal-probing", "label": "Path Traversal", "category": "web", "count": 3 }, { "scenario": "unknown", "label": "Unknown", "category": "other", "count": 3 }, { "scenario": "crowdsecurity/http-bad-user-agent", "label": "User-Agent suspect", "category": "web", "count": 2 } ], "attacks": [ { "ip": "135.119.92.178", "country": "US", "country_name": "ร‰tats-Unis", "flag": "๐Ÿ‡บ๐Ÿ‡ธ", "lat": 37.09, "lon": -95.71, "scenario": "crowdsecurity/http-bad-user-agent", "scenario_label": "User-Agent suspect", "category": "web", "last_seen": "2026-10-07T03:18:35", "asn": "AS8075", "asn_name": "MICROSOFT-CORP-MSN-AS-BLOCK", "http_path": "/", "http_verb": "GET", "http_status": "302", "http_ua": "Mozilla/5.0 zgrab/0.x" }, { "ip": "20.213.164.196", "country": "AU", "country_name": "AU", "flag": "๐ŸŒ", "lat": -25.27, "lon": 133.78, "scenario": "crowdsecurity/http-probing", "scenario_label": "HTTP Probing", "category": "web", "last_seen": "2026-10-07T03:17:30", "asn": "AS8075", "asn_name": "MICROSOFT-CORP-MSN-AS-BLOCK", "http_path": "/wp-content/plugins/hellopress/wp_filemanager.php", "http_verb": "GET", "http_status": "404" }, { "ip": "91.92.40.14", "country": "SE", "country_name": "SE", "flag": "๐Ÿ‡ธ๐Ÿ‡ช", "lat": 60.13, "lon": 18.64, "scenario": "crowdsecurity/http-crawl-non_statics", "scenario_label": "Web Crawl", "category": "web", "last_seen": "2026-10-07T01:35:00", "asn": "AS0", "asn_name": "", "http_path": "/..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af.env", "http_verb": "GET" }, { "ip": "91.92.40.14", "country": "SE", "country_name": "SE", "flag": "๐Ÿ‡ธ๐Ÿ‡ช", "lat": 60.13, "lon": 18.64, "scenario": "crowdsecurity/http-backdoors-attempts", "scenario_label": "Http Backdoors Attempts", "category": "other", "last_seen": "2026-10-07T01:34:59", "asn": "AS0", "asn_name": "", "http_path": "/xx.php", "http_verb": "GET", "http_status": "404" }, { "ip": "91.92.40.14", "country": "SE", "country_name": "SE", "flag": "๐Ÿ‡ธ๐Ÿ‡ช", "lat": 60.13, "lon": 18.64, "scenario": "crowdsecurity/CVE-2017-9841", "scenario_label": "CVE-2017-9841", "category": "cve", "last_seen": "2026-10-07T01:34:59", "asn": "AS0", "asn_name": "", "http_path": "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php", "http_verb": "GET", "http_status": "404", "http_ua": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like " }, { "ip": "91.92.40.14", "country": "SE", "country_name": "SE", "flag": "๐Ÿ‡ธ๐Ÿ‡ช", "lat": 60.13, "lon": 18.64, "scenario": "crowdsecurity/http-path-traversal-probing", "scenario_label": "Path Traversal", "category": "web", "last_seen": "2026-10-07T01:34:59", "asn": "AS0", "asn_name": "", "http_path": "/console/login/getpwd?p=../.env", "http_verb": "GET", "http_status": "404", "http_ua": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:133.0) Gecko/20100101 Firefox/1" }, { "ip": "91.92.40.14", "country": "SE", "country_name": "SE", "flag": "๐Ÿ‡ธ๐Ÿ‡ช", "lat": 60.13, "lon": 18.64, "scenario": "unknown", "scenario_label": "Unknown", "category": "other", "last_seen": "2026-10-07T01:34:57", "asn": "AS0", "asn_name": "", "http_path": "/info.php", "http_verb": "GET", "http_status": "404" }, { "ip": "91.92.40.14", "country": "SE", "country_name": "SE", "flag": "๐Ÿ‡ธ๐Ÿ‡ช", "lat": 60.13, "lon": 18.64, "scenario": "crowdsecurity/http-crawl-non_statics", "scenario_label": "Web Crawl", "category": "web", "last_seen": "2026-10-07T01:34:56", "asn": "AS0", "asn_name": "", "http_path": "/.env.local.php", "http_verb": "GET", "http_status": "404" }, { "ip": "91.92.40.14", "country": "SE", "country_name": "SE", "flag": "๐Ÿ‡ธ๐Ÿ‡ช", "lat": 60.13, "lon": 18.64, "scenario": "crowdsecurity/http-admin-interface-probing", "scenario_label": "Http Admin Interface Probing", "category": "other", "last_seen": "2026-10-07T01:34:56", "asn": "AS0", "asn_name": "", "http_path": "/admin/.env", "http_verb": "GET", "http_status": "404" }, { "ip": "91.92.40.14", "country": "SE", "country_name": "SE", "flag": "๐Ÿ‡ธ๐Ÿ‡ช", "lat": 60.13, "lon": 18.64, "scenario": "crowdsecurity/http-probing", "scenario_label": "HTTP Probing", "category": "web", "last_seen": "2026-10-07T01:34:56", "asn": "AS0", "asn_name": "", "http_path": "/public/", "http_verb": "POST", "http_status": "404", "http_ua": "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1 like Mac OS X) AppleWebKit/605.1.15 (KHT" }, { "ip": "91.92.40.14", "country": "SE", "country_name": "SE", "flag": "๐Ÿ‡ธ๐Ÿ‡ช", "lat": 60.13, "lon": 18.64, "scenario": "crowdsecurity/http-sensitive-files", "scenario_label": "Fichiers sensibles", "category": "web", "last_seen": "2026-10-07T01:34:56", "asn": "AS0", "asn_name": "", "http_path": "/.env", "http_verb": "GET", "http_status": "403" }, { "ip": "9.234.18.249", "country": "US", "country_name": "ร‰tats-Unis", "flag": "๐Ÿ‡บ๐Ÿ‡ธ", "lat": 37.09, "lon": -95.71, "scenario": "crowdsecurity/http-cve-probing", "scenario_label": "Http Cve Probing", "category": "cve", "last_seen": "2026-10-06T23:54:11", "asn": "AS8075", "asn_name": "MICROSOFT-CORP-MSN-AS-BLOCK", "http_path": "/developmentserver/metadatauploader", "http_verb": "GET", "http_status": "404", "http_ua": "Mozilla/5.0 zgrab/0.x" }, { "ip": "45.156.129.111", "country": "PT", "country_name": "PT", "flag": "๐ŸŒ", "lat": 39.4, "lon": -8.22, "scenario": "crowdsecurity/CVE-2019-18935", "scenario_label": "Cve 2019 18935", "category": "cve", "last_seen": "2026-10-06T23:05:42", "asn": "AS211680", "asn_name": "Sistemas Informaticos, S.A.", "http_path": "/Telerik.Web.UI.WebResource.axd?type=rau", "http_verb": "GET", "http_status": "301", "http_ua": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/5" }, { "ip": "161.118.211.34", "country": "SG", "country_name": "Singapour", "flag": "๐Ÿ‡ธ๐Ÿ‡ฌ", "lat": 1.35, "lon": 103.82, "scenario": "crowdsecurity/http-crawl-non_statics", "scenario_label": "Web Crawl", "category": "web", "last_seen": "2026-10-06T22:39:18", "asn": "AS31898", "asn_name": "ORACLE-BMC-31898", "http_path": "/librechat.yaml", "http_verb": "GET", "http_status": "301", "http_ua": "WebSiphon/next-0.1" }, { "ip": "161.118.211.34", "country": "SG", "country_name": "Singapour", "flag": "๐Ÿ‡ธ๐Ÿ‡ฌ", "lat": 1.35, "lon": 103.82, "scenario": "crowdsecurity/http-sensitive-files", "scenario_label": "Fichiers sensibles", "category": "web", "last_seen": "2026-10-06T22:39:17", "asn": "AS31898", "asn_name": "ORACLE-BMC-31898", "http_path": "/.env.prod", "http_verb": "GET", "http_status": "301", "http_ua": "WebSiphon/next-0.1" }, { "ip": "134.185.90.171", "country": "SG", "country_name": "Singapour", "flag": "๐Ÿ‡ธ๐Ÿ‡ฌ", "lat": 1.35, "lon": 103.82, "scenario": "crowdsecurity/http-crawl-non_statics", "scenario_label": "Web Crawl", "category": "web", "last_seen": "2026-10-06T22:36:22", "asn": "AS31898", "asn_name": "ORACLE-BMC-31898", "http_path": "/config/openai.json", "http_verb": "GET" }, { "ip": "134.185.90.171", "country": "SG", "country_name": "Singapour", "flag": "๐Ÿ‡ธ๐Ÿ‡ฌ", "lat": 1.35, "lon": 103.82, "scenario": "crowdsecurity/http-crawl-non_statics", "scenario_label": "Web Crawl", "category": "web", "last_seen": "2026-10-06T22:36:22", "asn": "AS31898", "asn_name": "ORACLE-BMC-31898", "http_path": "/librechat.yaml", "http_verb": "GET", "http_status": "404", "http_ua": "WebSiphon/next-0.1" }, { "ip": "134.185.90.171", "country": "SG", "country_name": "Singapour", "flag": "๐Ÿ‡ธ๐Ÿ‡ฌ", "lat": 1.35, "lon": 103.82, "scenario": "crowdsecurity/http-probing", "scenario_label": "HTTP Probing", "category": "web", "last_seen": "2026-10-06T22:36:21", "asn": "AS31898", "asn_name": "ORACLE-BMC-31898", "http_path": "/.env.development", "http_verb": "GET", "http_status": "403", "http_ua": "WebSiphon/next-0.1" }, { "ip": "134.185.90.171", "country": "SG", "country_name": "Singapour", "flag": "๐Ÿ‡ธ๐Ÿ‡ฌ", "lat": 1.35, "lon": 103.82, "scenario": "crowdsecurity/http-sensitive-files", "scenario_label": "Fichiers sensibles", "category": "web", "last_seen": "2026-10-06T22:36:21", "asn": "AS31898", "asn_name": "ORACLE-BMC-31898", "http_path": "/.env.development", "http_verb": "GET", "http_status": "403", "http_ua": "WebSiphon/next-0.1" }, { "ip": "103.146.52.157", "country": "HK", "country_name": "Hong Kong", "flag": "๐Ÿ‡ญ๐Ÿ‡ฐ", "lat": 22.3, "lon": 114.18, "scenario": "crowdsecurity/ssh-slow-bf", "scenario_label": "SSH Brute Force (lent)", "category": "ssh", "last_seen": "2026-10-06T22:31:14", "asn": "AS138152", "asn_name": "YISU CLOUD LTD" }, { "ip": "181.188.237.219", "country": "EC", "country_name": "EC", "flag": "๐ŸŒ", "lat": -1.83, "lon": -78.18, "scenario": "crowdsecurity/ssh-slow-bf", "scenario_label": "SSH Brute Force (lent)", "category": "ssh", "last_seen": "2026-10-06T21:39:26", "asn": "AS271936", "asn_name": "SERVICIOS DE TELECOMUNICACIONES ATVCABLE CIA. LTDA." }, { "ip": "158.23.176.177", "country": "MX", "country_name": "MX", "flag": "๐Ÿ‡ฒ๐Ÿ‡ฝ", "lat": 23.63, "lon": -102.55, "scenario": "crowdsecurity/http-probing", "scenario_label": "HTTP Probing", "category": "web", "last_seen": "2026-10-06T20:56:09", "asn": "AS8075", "asn_name": "MICROSOFT-CORP-MSN-AS-BLOCK", "http_path": "/wp-content/plugins/hellopress/wp_filemanager.php", "http_verb": "GET", "http_status": "404" }, { "ip": "159.223.17.67", "country": "DE", "country_name": "Allemagne", "flag": "๐Ÿ‡ฉ๐Ÿ‡ช", "lat": 51.17, "lon": 10.45, "scenario": "crowdsecurity/http-probing", "scenario_label": "HTTP Probing", "category": "web", "last_seen": "2026-10-06T19:57:02", "asn": "AS14061", "asn_name": "DIGITALOCEAN-ASN", "http_path": "/news/", "http_verb": "HEAD", "http_status": "404", "http_ua": "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chro" }, { "ip": "104.208.73.227", "country": "HK", "country_name": "Hong Kong", "flag": "๐Ÿ‡ญ๐Ÿ‡ฐ", "lat": 22.3, "lon": 114.18, "scenario": "crowdsecurity/http-wordpress-scan", "scenario_label": "Http Wordpress Scan", "category": "other", "last_seen": "2026-10-06T18:39:30", "asn": "AS8075", "asn_name": "MICROSOFT-CORP-MSN-AS-BLOCK", "http_path": "/wp-content/plugins/hellopress/wp_filemanager.php", "http_verb": "GET", "http_status": "404" }, { "ip": "104.208.73.227", "country": "HK", "country_name": "Hong Kong", "flag": "๐Ÿ‡ญ๐Ÿ‡ฐ", "lat": 22.3, "lon": 114.18, "scenario": "crowdsecurity/http-probing", "scenario_label": "HTTP Probing", "category": "web", "last_seen": "2026-10-06T18:39:30", "asn": "AS8075", "asn_name": "MICROSOFT-CORP-MSN-AS-BLOCK", "http_path": "/wp-content/plugins/hellopress/wp_filemanager.php", "http_verb": "GET", "http_status": "404" }, { "ip": "35.192.13.221", "country": "US", "country_name": "ร‰tats-Unis", "flag": "๐Ÿ‡บ๐Ÿ‡ธ", "lat": 37.09, "lon": -95.71, "scenario": "crowdsecurity/http-crawl-non_statics", "scenario_label": "Web Crawl", "category": "web", "last_seen": "2026-10-06T17:45:12", "asn": "AS396982", "asn_name": "GOOGLE-CLOUD-PLATFORM", "http_path": "/debug/pprof", "http_verb": "GET", "http_status": "404", "http_ua": "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)" }, { "ip": "35.192.13.221", "country": "US", "country_name": "ร‰tats-Unis", "flag": "๐Ÿ‡บ๐Ÿ‡ธ", "lat": 37.09, "lon": -95.71, "scenario": "crowdsecurity/http-admin-interface-probing", "scenario_label": "Http Admin Interface Probing", "category": "other", "last_seen": "2026-10-06T17:45:11", "asn": "AS396982", "asn_name": "GOOGLE-CLOUD-PLATFORM", "http_path": "/admin%2F.env", "http_verb": "GET", "http_status": "404", "http_ua": "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.ht" }, { "ip": "35.192.13.221", "country": "US", "country_name": "ร‰tats-Unis", "flag": "๐Ÿ‡บ๐Ÿ‡ธ", "lat": 37.09, "lon": -95.71, "scenario": "crowdsecurity/http-cve-2021-41773", "scenario_label": "CVE-2021-41773 (Apache)", "category": "cve", "last_seen": "2026-10-06T17:45:09", "asn": "AS396982", "asn_name": "GOOGLE-CLOUD-PLATFORM", "http_path": "/cache/original/%2e%2e/%2e%2e/.env", "http_verb": "GET" }, { "ip": "35.192.13.221", "country": "US", "country_name": "ร‰tats-Unis", "flag": "๐Ÿ‡บ๐Ÿ‡ธ", "lat": 37.09, "lon": -95.71, "scenario": "crowdsecurity/http-path-traversal-probing", "scenario_label": "Path Traversal", "category": "web", "last_seen": "2026-10-06T17:45:09", "asn": "AS396982", "asn_name": "GOOGLE-CLOUD-PLATFORM", "http_path": "/js../.env", "http_verb": "GET", "http_status": "404", "http_ua": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +htt" }, { "ip": "35.192.13.221", "country": "US", "country_name": "ร‰tats-Unis", "flag": "๐Ÿ‡บ๐Ÿ‡ธ", "lat": 37.09, "lon": -95.71, "scenario": "crowdsecurity/http-sensitive-files", "scenario_label": "Fichiers sensibles", "category": "web", "last_seen": "2026-10-06T17:45:09", "asn": "AS396982", "asn_name": "GOOGLE-CLOUD-PLATFORM", "http_path": "/js../.env", "http_verb": "GET", "http_status": "404", "http_ua": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +htt" }, { "ip": "35.192.13.221", "country": "US", "country_name": "ร‰tats-Unis", "flag": "๐Ÿ‡บ๐Ÿ‡ธ", "lat": 37.09, "lon": -95.71, "scenario": "crowdsecurity/http-probing", "scenario_label": "HTTP Probing", "category": "web", "last_seen": "2026-10-06T17:45:08", "asn": "AS396982", "asn_name": "GOOGLE-CLOUD-PLATFORM", "http_path": "/build/manifest.json", "http_verb": "GET", "http_status": "403", "http_ua": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome" }, { "ip": "104.129.54.73", "country": "US", "country_name": "ร‰tats-Unis", "flag": "๐Ÿ‡บ๐Ÿ‡ธ", "lat": 37.09, "lon": -95.71, "scenario": "crowdsecurity/ssh-slow-bf", "scenario_label": "SSH Brute Force (lent)", "category": "ssh", "last_seen": "2026-10-06T15:25:05", "asn": "AS36352", "asn_name": "AS-COLOCROSSING" }, { "ip": "35.192.13.221", "country": "US", "country_name": "ร‰tats-Unis", "flag": "๐Ÿ‡บ๐Ÿ‡ธ", "lat": 37.09, "lon": -95.71, "scenario": "crowdsecurity/http-cve-2021-41773", "scenario_label": "CVE-2021-41773 (Apache)", "category": "cve", "last_seen": "2026-10-06T12:44:59", "asn": "AS396982", "asn_name": "GOOGLE-CLOUD-PLATFORM", "http_path": "/cache/original/%2e%2e/%2e%2e/.env", "http_verb": "GET" }, { "ip": "35.192.13.221", "country": "US", "country_name": "ร‰tats-Unis", "flag": "๐Ÿ‡บ๐Ÿ‡ธ", "lat": 37.09, "lon": -95.71, "scenario": "crowdsecurity/http-admin-interface-probing", "scenario_label": "Http Admin Interface Probing", "category": "other", "last_seen": "2026-10-06T12:44:58", "asn": "AS396982", "asn_name": "GOOGLE-CLOUD-PLATFORM", "http_path": "/phpinfo.php", "http_verb": "GET", "http_status": "404", "http_ua": "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)" }, { "ip": "35.192.13.221", "country": "US", "country_name": "ร‰tats-Unis", "flag": "๐Ÿ‡บ๐Ÿ‡ธ", "lat": 37.09, "lon": -95.71, "scenario": "unknown", "scenario_label": "Unknown", "category": "other", "last_seen": "2026-10-06T12:44:56", "asn": "AS396982", "asn_name": "GOOGLE-CLOUD-PLATFORM", "http_path": "/info.php", "http_verb": "GET", "http_status": "404", "http_ua": "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)" }, { "ip": "35.192.13.221", "country": "US", "country_name": "ร‰tats-Unis", "flag": "๐Ÿ‡บ๐Ÿ‡ธ", "lat": 37.09, "lon": -95.71, "scenario": "crowdsecurity/http-bad-user-agent", "scenario_label": "User-Agent suspect", "category": "web", "last_seen": "2026-10-06T12:44:55", "asn": "AS396982", "asn_name": "GOOGLE-CLOUD-PLATFORM", "http_path": "/_image?href=/../../../.env", "http_verb": "GET", "http_status": "404", "http_ua": "CCBot/2.0 (https://commoncrawl.org/faq/)" }, { "ip": "35.192.13.221", "country": "US", "country_name": "ร‰tats-Unis", "flag": "๐Ÿ‡บ๐Ÿ‡ธ", "lat": 37.09, "lon": -95.71, "scenario": "crowdsecurity/http-crawl-non_statics", "scenario_label": "Web Crawl", "category": "web", "last_seen": "2026-10-06T12:44:54", "asn": "AS396982", "asn_name": "GOOGLE-CLOUD-PLATFORM", "http_path": "/api/orders/..%2fadmin/config.json", "http_verb": "GET", "http_status": "404", "http_ua": "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)" }, { "ip": "35.192.13.221", "country": "US", "country_name": "ร‰tats-Unis", "flag": "๐Ÿ‡บ๐Ÿ‡ธ", "lat": 37.09, "lon": -95.71, "scenario": "crowdsecurity/http-sensitive-files", "scenario_label": "Fichiers sensibles", "category": "web", "last_seen": "2026-10-06T12:44:53", "asn": "AS396982", "asn_name": "GOOGLE-CLOUD-PLATFORM", "http_path": "/.htpasswd", "http_verb": "GET" }, { "ip": "35.192.13.221", "country": "US", "country_name": "ร‰tats-Unis", "flag": "๐Ÿ‡บ๐Ÿ‡ธ", "lat": 37.09, "lon": -95.71, "scenario": "crowdsecurity/http-path-traversal-probing", "scenario_label": "Path Traversal", "category": "web", "last_seen": "2026-10-06T12:44:53", "asn": "AS396982", "asn_name": "GOOGLE-CLOUD-PLATFORM", "http_path": "/@fs/../.env?raw??", "http_verb": "GET", "http_status": "404", "http_ua": "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)" }, { "ip": "35.192.13.221", "country": "US", "country_name": "ร‰tats-Unis", "flag": "๐Ÿ‡บ๐Ÿ‡ธ", "lat": 37.09, "lon": -95.71, "scenario": "crowdsecurity/http-probing", "scenario_label": "HTTP Probing", "category": "web", "last_seen": "2026-10-06T12:44:52", "asn": "AS396982", "asn_name": "GOOGLE-CLOUD-PLATFORM", "http_path": "/.vite/manifest.json", "http_verb": "GET", "http_status": "403", "http_ua": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)" }, { "ip": "45.148.10.32", "country": "NL", "country_name": "Pays-Bas", "flag": "๐Ÿ‡ณ๐Ÿ‡ฑ", "lat": 52.13, "lon": 5.29, "scenario": "unknown", "scenario_label": "Unknown", "category": "other", "last_seen": "2026-10-06T12:22:10", "asn": "AS48090", "asn_name": "Techoff Srv Limited", "http_path": "/info.php", "http_verb": "GET", "http_status": "404", "http_ua": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)" }, { "ip": "45.148.10.32", "country": "NL", "country_name": "Pays-Bas", "flag": "๐Ÿ‡ณ๐Ÿ‡ฑ", "lat": 52.13, "lon": 5.29, "scenario": "crowdsecurity/http-admin-interface-probing", "scenario_label": "Http Admin Interface Probing", "category": "other", "last_seen": "2026-10-06T12:22:10", "asn": "AS48090", "asn_name": "Techoff Srv Limited", "http_path": "/admin/.env", "http_verb": "GET", "http_status": "404", "http_ua": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)" }, { "ip": "45.148.10.32", "country": "NL", "country_name": "Pays-Bas", "flag": "๐Ÿ‡ณ๐Ÿ‡ฑ", "lat": 52.13, "lon": 5.29, "scenario": "crowdsecurity/http-crawl-non_statics", "scenario_label": "Web Crawl", "category": "web", "last_seen": "2026-10-06T12:22:10", "asn": "AS48090", "asn_name": "Techoff Srv Limited", "http_path": "/.env.old", "http_verb": "GET" }, { "ip": "45.148.10.32", "country": "NL", "country_name": "Pays-Bas", "flag": "๐Ÿ‡ณ๐Ÿ‡ฑ", "lat": 52.13, "lon": 5.29, "scenario": "crowdsecurity/http-crawl-non_statics", "scenario_label": "Web Crawl", "category": "web", "last_seen": "2026-10-06T12:22:10", "asn": "AS48090", "asn_name": "Techoff Srv Limited", "http_path": "/.env.local", "http_verb": "GET", "http_status": "403", "http_ua": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)" }, { "ip": "45.148.10.32", "country": "NL", "country_name": "Pays-Bas", "flag": "๐Ÿ‡ณ๐Ÿ‡ฑ", "lat": 52.13, "lon": 5.29, "scenario": "crowdsecurity/http-sensitive-files", "scenario_label": "Fichiers sensibles", "category": "web", "last_seen": "2026-10-06T12:22:10", "asn": "AS48090", "asn_name": "Techoff Srv Limited", "http_path": "/.bash_history", "http_verb": "GET", "http_status": "403", "http_ua": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)" }, { "ip": "45.148.10.32", "country": "NL", "country_name": "Pays-Bas", "flag": "๐Ÿ‡ณ๐Ÿ‡ฑ", "lat": 52.13, "lon": 5.29, "scenario": "crowdsecurity/http-probing", "scenario_label": "HTTP Probing", "category": "web", "last_seen": "2026-10-06T12:22:10", "asn": "AS48090", "asn_name": "Techoff Srv Limited", "http_path": "/kxs-1791289314865228104-nonexistent", "http_verb": "GET", "http_status": "404", "http_ua": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)" }, { "ip": "103.183.75.14", "country": "ID", "country_name": "Indonรฉsie", "flag": "๐Ÿ‡ฎ๐Ÿ‡ฉ", "lat": -0.79, "lon": 113.92, "scenario": "crowdsecurity/ssh-slow-bf", "scenario_label": "SSH Brute Force (lent)", "category": "ssh", "last_seen": "2026-10-06T10:15:32", "asn": "AS136052", "asn_name": "PT Cloud Hosting Indonesia" }, { "ip": "103.183.75.14", "country": "ID", "country_name": "Indonรฉsie", "flag": "๐Ÿ‡ฎ๐Ÿ‡ฉ", "lat": -0.79, "lon": 113.92, "scenario": "crowdsecurity/ssh-slow-bf", "scenario_label": "SSH Brute Force (lent)", "category": "ssh", "last_seen": "2026-10-06T10:07:59", "asn": "AS136052", "asn_name": "PT Cloud Hosting Indonesia" }, { "ip": "103.183.75.14", "country": "ID", "country_name": "Indonรฉsie", "flag": "๐Ÿ‡ฎ๐Ÿ‡ฉ", "lat": -0.79, "lon": 113.92, "scenario": "crowdsecurity/ssh-slow-bf", "scenario_label": "SSH Brute Force (lent)", "category": "ssh", "last_seen": "2026-10-06T10:01:40", "asn": "AS136052", "asn_name": "PT Cloud Hosting Indonesia" }, { "ip": "103.183.75.14", "country": "ID", "country_name": "Indonรฉsie", "flag": "๐Ÿ‡ฎ๐Ÿ‡ฉ", "lat": -0.79, "lon": 113.92, "scenario": "crowdsecurity/ssh-slow-bf", "scenario_label": "SSH Brute Force (lent)", "category": "ssh", "last_seen": "2026-10-06T09:55:29", "asn": "AS136052", "asn_name": "PT Cloud Hosting Indonesia" } ] }