Threat LevelCRITICAL80/1003 rule types
3 incidents on record · 3 rule types · last seen 18d ago
| PTR | N/A |
| Org / ASN | DigitalOcean, LLC |
| Country | 🇩🇪 Germany |
| City | Frankfurt am Main, Hesse |
| Timezone | Europe/Berlin |
Attack Analysis
Project & Infrastructure Config File Probe
This IP requested a root-level project or infrastructure file — docker-compose.yml, a Terraform state file, package.json, or a generic config/secrets.json — hunting for source code, deployment secrets, or infrastructure details accidentally left reachable over HTTP. No legitimate web visitor needs these.
local blocklist
Bad Bot Flood
This IP generated over 20 HTTP 4xx errors in 60 seconds using a User-Agent identified as a bad bot (scraper, headless browser, or attack proxy). The high error rate indicates automated probing for vulnerabilities while trying to appear as generic traffic. Legitimate services respect robots.txt and do not flood servers with errors.
Reports (3)
| Date | Severity | Description |
|---|---|---|
| 19 Oct 2026 - 04:31 | high | Web: Bad bot 4xx flood — 20+ errors in 60s |
| 19 Oct 2026 - 04:30 | low | local blocklist |
| 19 Oct 2026 - 04:30 | medium | Query Guard — Path Project File Probe |
EagleEye Intelligence