๐ซ๐ท
SpaceHost-Server
2026-10-07 22:21:04
(2 days ago)
Brute-Force
Web App Attack
๐ซ๐ท
SpaceHost-Server
2026-10-06 22:19:03
(3 days ago)
Brute-Force
Web App Attack
๐ฉ๐ช
Gwyneth Llewelyn
2026-10-06 19:30:50
(3 days ago)
34.104.148.123 - - [06/Oct/2026:20:30:48 +0100] "POST /cgi-bin/php-cgi.exe?%ADd+allow_url_include%3d ...
show more
34.104.148.123 - - [06/Oct/2026:20:30:48 +0100] "POST /cgi-bin/php-cgi.exe?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/2.0" 404 1064 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)"
show less
Bad Web Bot
๐ฆ๐น
Renรฉ Hickersberger
2026-10-06 18:54:59
(3 days ago)
malicious bot detected: violations="ignored-robots-policy"; user_agent="Mozilla/5.0 AppleWebKit/537. ...
show more
malicious bot detected: violations="ignored-robots-policy"; user_agent="Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )"
show less
Bad Web Bot
Anonymous
2026-10-06 18:05:08
(3 days ago)
WAF repeated trigger detected by Fail2Ban
Web App Attack
๐ฉ๐ช
macrob
2026-10-06 17:12:52
(3 days ago)
2026/10/06 17:12:50 [error] 12678#12678: *23474619 access forbidden by rule, client: 34.104.148.123, ...
show more
2026/10/06 17:12:50 [error] 12678#12678: *23474619 access forbidden by rule, client: 34.104.148.123, server: fn.binixo.es, request: "GET /dist/.vite/manifest.json HTTP/2.0", host: "2fa.wellbin.org"
2026/10/06 17:12:50 [error] 12680#12680: *23474620 access forbidden by rule, client: 34.104.148.123, server: fn.binixo.es, request: "GET /.vite/manifest.json HTTP/2.0", host: "2fa.wellbin.org"
2026/10/06 17:12:51 [error] 12680#12680: *23474634 access forbidden by rule, client: 34.104.148.123, server: fn.binixo.es, request: "GET /static//.env HTTP/2.0", host: "2fa.wellbin.org"
...
show less
Web App Attack
๐ช๐ธ
robotstxt
2026-10-06 16:54:19
(3 days ago)
34.104.148.123 - - [06/Oct/2026:16:53:20 +0000] "GET /wp-content/plugins/stop-user-enumeration/front ...
show more
34.104.148.123 - - [06/Oct/2026:16:53:20 +0000] "GET /wp-content/plugins/stop-user-enumeration/frontend/js/frontend.js?ver=1.7.9 HTTP/2.0" 403 9541 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" "-" edge="34.104.148.123"
34.104.148.123 - - [06/Oct/2026:16:53:20 +0000] "GET /dist/.vite/manifest.json HTTP/2.0" 403 9541 "https://wpsearch.org/dist/.vite/manifest.json" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" "-" edge="34.104.148.123"
34.104.148.123 - - [06/Oct/2026:16:53:21 +0000] "GET /dist/manifest.json HTTP/2.0" 403 9541 "https://wpsearch.org/dist/manifest.json" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" "-" edge="34.104.148.123"
34.104.148.123 - - [06/Oct/2026:16:53:21 +0000] "GET /.vite/manifest.json HTTP/2.0" 403 9541 "https://wpsearch.org/.vite/manifest.
...
show less
Web App Attack
๐บ๐ธ
rsa
2026-10-06 16:37:00
(3 days ago)
POST /index.php?-d+allow_url_include%3don+-d+auto_prepend_file%
OST /cgi-bin/php-cgi.exe?%ADd+allow ...
show more
POST /index.php?-d+allow_url_include%3don+-d+auto_prepend_file%
OST /cgi-bin/php-cgi.exe?%ADd+allow_url_include%3d1+%ADd+auto_
show less
DDoS Attack
Exploited Host
Web App Attack
๐บ๐ธ
WellSpring
2026-10-06 16:30:27
(3 days ago)
env leak on wellsign.org/@fs/root/.env โ WellSpr.ing/NetSentinel civic-AI security layer
Web App Attack
Anonymous
2026-10-06 16:15:30
(3 days ago)
34.104.148.123 - - [06/Oct/2026:11:15:25 -0500] "GET /.env.local HTTP/1.1" 403 199 "-" "Mozilla/5.0 ...
show more
34.104.148.123 - - [06/Oct/2026:11:15:25 -0500] "GET /.env.local HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)" 34.104.148.123
34.104.148.123 - - [06/Oct/2026:11:15:25 -0500] "GET /.env.example HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)" 34.104.148.123
34.104.148.123 - - [06/Oct/2026:11:15:25 -0500] "GET /.env.backup HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)" 34.104.148.123
34.104.148.123 - - [06/Oct/2026:11:15:25 -0500] "GET /.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)" 34.104.148.123
34.104.148.123 - - [06/Oct/2026:11:15:25 -0500] "GET /.env.production HTTP/1.1" 403 199 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)" 34.104.148.123
34.104.148.123 - - [06/Oct/2026:11:15:25 -0500] "GET /.env.bak HTTP/1.1" 403 199 "-" "Mo
...
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
paissangroup
2026-10-06 15:39:17
(3 days ago)
Multiple WAF Violations
Web App Attack
๐ณ๐ฑ
debestelapp
2026-10-06 15:30:08
(3 days ago)
Web App Attack
Anonymous
2026-10-06 15:22:13
(3 days ago)
Bot / seems abusive / Apache connections: 21
DDoS Attack
Web Spam
Bad Web Bot
Web App Attack
๐บ๐ธ
chrisj
2026-10-06 15:02:38
(3 days ago)
[Tue Oct 06 15:02:31.133409 2026] [proxy_fcgi:error] [pid 189204:tid 189216] [remote 34.104.148.123: ...
show more
[Tue Oct 06 15:02:31.133409 2026] [proxy_fcgi:error] [pid 189204:tid 189216] [remote 34.104.148.123:46250] AH01071: Got error 'Primary script unknown'
[Tue Oct 06 15:02:37.920893 2026] [proxy_fcgi:error] [pid 189204:tid 189219] [remote 34.104.148.123:46250] AH01071: Got error 'Primary script unknown'
[Tue Oct 06 15:02:37.974092 2026] [proxy_fcgi:error] [pid 189204:tid 189220] [remote 34.104.148.123:46250] AH01071: Got error 'Primary script unknown'
...
show less
Brute-Force
๐บ๐ธ
bigscoots.com
2026-10-06 14:31:39
(3 days ago)
(PERMBLOCK) 34.104.148.123 (US/United States/123.148.104.34.bc.googleusercontent.com) has had more t ...
show more
(PERMBLOCK) 34.104.148.123 (US/United States/123.148.104.34.bc.googleusercontent.com) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: 1; Trigger: LF_PERMBLOCK_COUNT; Logs:
show less
Brute-Force
SSH