🇫🇷
SpaceHost-Server
2026-10-06 22:19:07
(2 weeks ago)
Brute-Force
Web App Attack
🇧🇷
radardatelecom
2026-10-05 22:27:02
(3 weeks ago)
Blocked by Radar da Telecom firewall — abuseipdb
Bad Web Bot
Web App Attack
🇫🇷
SpaceHost-Server
2026-10-05 22:16:57
(3 weeks ago)
Brute-Force
Web App Attack
🇺🇸
creechy
2026-10-05 18:08:24
(3 weeks ago)
34.124.129.64 - - [05/Oct/2026:11:08:15 -0700] "GET /.ssh/id_rsa HTTP/1.1" 404 767 "-" "Mozilla/5.0 ...
show more
34.124.129.64 - - [05/Oct/2026:11:08:15 -0700] "GET /.ssh/id_rsa HTTP/1.1" 404 767 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)"
...
show less
Hacking
Bad Web Bot
🇩🇪
macrob
2026-10-05 17:30:12
(3 weeks ago)
2026/10/05 17:30:10 [error] 3671659#3671659: *19750568 access forbidden by rule, client: 34.124.129. ...
show more
2026/10/05 17:30:10 [error] 3671659#3671659: *19750568 access forbidden by rule, client: 34.124.129.64, server: fn.binixo.es, request: "GET /dist/.vite/manifest.json HTTP/2.0", host: "api.nuvello.org"
2026/10/05 17:30:10 [error] 3671659#3671659: *19750569 access forbidden by rule, client: 34.124.129.64, server: fn.binixo.es, request: "GET /.vite/manifest.json HTTP/2.0", host: "api.nuvello.org"
2026/10/05 17:30:11 [error] 3671659#3671659: *19750578 access forbidden by rule, client: 34.124.129.64, server: fn.binixo.es, request: "GET /media../.env HTTP/2.0", host: "api.nuvello.org"
...
show less
Web App Attack
2026-10-05 14:05:06
(3 weeks ago)
WAF repeated trigger detected by Fail2Ban
Web App Attack
🇩🇪
macrob
2026-10-05 13:17:18
(3 weeks ago)
2026/10/05 13:17:16 [error] 3671659#3671659: *18978249 access forbidden by rule, client: 34.124.129. ...
show more
2026/10/05 13:17:16 [error] 3671659#3671659: *18978249 access forbidden by rule, client: 34.124.129.64, server: fn.binixo.es, request: "GET /dist/.vite/manifest.json HTTP/2.0", host: "accounts.nuvello.org"
2026/10/05 13:17:16 [error] 3671659#3671659: *18978253 access forbidden by rule, client: 34.124.129.64, server: fn.binixo.es, request: "GET /.vite/manifest.json HTTP/2.0", host: "accounts.nuvello.org"
2026/10/05 13:17:16 [error] 3671657#3671657: *18978266 access forbidden by rule, client: 34.124.129.64, server: fn.binixo.es, request: "GET /.ssh/id_ed25519 HTTP/2.0", host: "accounts.nuvello.org"
...
show less
Web App Attack
2026-10-05 12:24:56
(3 weeks ago)
$f2bV_matches
Brute-Force
Web App Attack
2026-10-05 12:18:27
(3 weeks ago)
Fuzzing/Looking for credentials files.
Brute-Force
Web App Attack
🇩🇪
Gwyneth Llewelyn
2026-10-05 12:14:39
(3 weeks ago)
34.124.129.64 - - [05/Oct/2026:13:14:37 +0100] "POST /cgi-bin/php-cgi.exe?%ADd+allow_url_include%3d1 ...
show more
34.124.129.64 - - [05/Oct/2026:13:14:37 +0100] "POST /cgi-bin/php-cgi.exe?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/2.0" 404 994 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot"
show less
Bad Web Bot
2026-10-05 12:10:53
(3 weeks ago)
[abuseipdb-autoban] 2026-10-05 12:10:53, Client: 34.124.129.64, Protocol: 6 (TCP), Service: HTTP, Ac ...
show more
[abuseipdb-autoban] 2026-10-05 12:10:53, Client: 34.124.129.64, Protocol: 6 (TCP), Service: HTTP, Activity: auto-banned after exceeding AbuseIPDB score threshold on visit to /, likely crawler/bot (User-Agent: CCBot/2.0 (https://commoncrawl.org/faq/)), AbuseIPDB score at ban time: 100% (64 prior reports)
show less
Bad Web Bot
🇦🇲
arm osint
2026-10-05 11:57:04
(3 weeks ago)
Automated web vulnerability scanning: 125 HTTP 4xx probes for sensitive paths (/api/designer/v1/file ...
show more
Automated web vulnerability scanning: 125 HTTP 4xx probes for sensitive paths (/api/designer/v1/file-content, /api/templates/preview, /read-document, /%2Fadmin). Detected by Wazuh HIDS rule 31151 on a self-hosted web server.
show less
Web App Attack
Brute-Force
🇫🇷
geot
2026-10-05 11:56:40
(3 weeks ago)
POST /flowise/api/v1/node-load-method/customMCP HTTP/1.1
GET /.well-known/jwks.json HTTP/1.1
POST /c ...
show more
POST /flowise/api/v1/node-load-method/customMCP HTTP/1.1
GET /.well-known/jwks.json HTTP/1.1
POST /cgi-bin/php-cgi?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp://input HTTP/1.1
GET /_profiler/open HTTP/1.1
GET /api/health HTTP/1.1
POST /login HTTP/1.1
GET /__vite_rsc_findSourceMapURL?filename=file:///proc/self/environ&environmentName=rsc HTTP/1.1
show less
Hacking
Web App Attack
🇷🇺
olegio
2026-10-05 11:55:52
(3 weeks ago)
34.124.129.64 - - [05/Oct/2026:11:55:51 +0000] "GET /api/fs/read?allowOutsideWorkspace=true&path=/ap ...
show more
34.124.129.64 - - [05/Oct/2026:11:55:51 +0000] "GET /api/fs/read?allowOutsideWorkspace=true&path=/app/.env HTTP/2.0" 404 2817 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; +https://openai.com/searchbot"
34.124.129.64 - - [05/Oct/2026:11:55:51 +0000] "GET /cache/original/%2e%2e/.env HTTP/2.0" 403 146 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"
...
show less
Brute-Force
Web App Attack
🇩🇪
Gwyneth Llewelyn
2026-10-05 11:15:41
(3 weeks ago)
2026/10/05 12:15:32 [error] 3069275#3069275: *213790 access forbidden by rule, client: 34.124.129.64 ...
show more
2026/10/05 12:15:32 [error] 3069275#3069275: *213790 access forbidden by rule, client: 34.124.129.64, server: simetria.org, request: "GET /cache/original/%2e%2e/.env HTTP/2.0", host: "simetria.org"
2026/10/05 12:15:32 [error] 3069275#3069275: *213792 access forbidden by rule, client: 34.124.129.64, server: simetria.org, request: "GET /cache/original/%2e%2e/%2e%2e/.env HTTP/2.0", host: "simetria.org"
2026/10/05 12:15:39 [error] 3069275#3069275: *213792 access forbidden by rule, client: 34.124.129.64, server: simetria.org, request: "GET /.env HTTP/2.0", host: "simetria.org"
show less
Brute-Force
Web App Attack