๐ญ๐บ
NyaljBe
2026-07-30 08:32:00
(16 hours ago)
34.74.92.118 - - [29/Jul/2026:17:56:56 +0200] "GET /wp-config.php.old HTTP/1.1" 404 153 "-" "Mozilla ...
show more
34.74.92.118 - - [29/Jul/2026:17:56:56 +0200] "GET /wp-config.php.old HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)"
34.74.92.118 - - [29/Jul/2026:17:56:56 +0200] "GET /v1/graphql HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)"
34.74.92.118 - - [29/Jul/2026:17:56:56 +0200] "GET /__debug__/ HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)"
34.74.92.118 - - [29/Jul/2026:17:56:56 +0200] "GET /firebase-service-account.json HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)"
34.74.92.118 - - [29/Jul/2026:17:56:56 +0200] "GET /.continue/config.json HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)"
show less
Web App Attack
๐ญ๐บ
DumaNet
2026-07-30 06:56:00
(18 hours ago)
Web app attack attempts, scanning for vulnerability.
Date: 2026 Jul 29. 17:56:55
Source IP: 34.74. ...
show more
Web app attack attempts, scanning for vulnerability.
Date: 2026 Jul 29. 17:56:55
Source IP: 34.74.92.118
Portion of the log(s):
34.74.92.118 - [29/Jul/2026:17:56:55 +0200] "GET /key.json HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)"
34.74.92.118 - [29/Jul/2026:17:56:55 +0200] "GET /backend/.env HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)"
34.74.92.118 - [29/Jul/2026:17:56:55 +0200] "GET /api/health HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)"
34.74.92.118 - [29/Jul/2026:17:56:55 +0200] "GET /credentials.json HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)"
34.74.92.118 - [29/Jul/2026:17:56:55 +0200] "GET /ngsw.json HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like
show less
Web App Attack
๐ฎ๐ณ
evicky2002
2026-07-30 06:00:00
(19 hours ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
๐ญ๐บ
DumaNet
2026-07-30 05:49:00
(19 hours ago)
Web app attack attempts, scanning for vulnerability.
Date: 2026 Jul 29. 17:17:35
Source IP: 34.74. ...
show more
Web app attack attempts, scanning for vulnerability.
Date: 2026 Jul 29. 17:17:35
Source IP: 34.74.92.118
Portion of the log(s):
34.74.92.118 - [29/Jul/2026:17:17:35 +0200] "GET /.well-known/jwks.json HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)"
34.74.92.118 - [29/Jul/2026:17:17:35 +0200] "GET /graphql/console HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)"
34.74.92.118 - [29/Jul/2026:17:17:35 +0200] "GET /wp-json HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)"
34.74.92.118 - [29/Jul/2026:17:17:35 +0200] "GET /env.json HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)"
34.74.92.118 - [29/Jul/2026:17:17:35 +0200] "GET /api/graphql HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KH
show less
Web App Attack
๐ณ๐ฑ
i-turnradio.nl
2026-07-30 05:36:03
(19 hours ago)
2026-07-30 @ 07:36:03 (CET) ~ Blocked for trying to access: /.aws/config
Web App Attack
๐ญ๐บ
DumaNet
2026-07-30 05:21:00
(19 hours ago)
Web app attack attempts, scanning for vulnerability.
Date: 2026 Jul 29. 16:32:03
Source IP: 34.74. ...
show more
Web app attack attempts, scanning for vulnerability.
Date: 2026 Jul 29. 16:32:03
Source IP: 34.74.92.118
Portion of the log(s):
34.74.92.118 - [29/Jul/2026:16:32:03 +0200] "GET /.env HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)"
34.74.92.118 - [29/Jul/2026:16:32:03 +0200] "GET /.env.production HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)"
34.74.92.118 - [29/Jul/2026:16:32:03 +0200] "GET /ssl/localhost.key HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)"
34.74.92.118 - [29/Jul/2026:16:32:03 +0200] "GET /.env.example HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)"
34.74.92.118 - [29/Jul/2026:16:32:03 +0200] "GET /.github/workflows/deploy.yml HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit
show less
Web App Attack
๐ฉ๐ช
Stefan Dreher
2026-07-30 04:59:50
(20 hours ago)
34.74.92.118 - - [30/Jul/2026:06:59:49 +0200] "GET /.git-credentials HTTP/2.0" 404 114 "-" "Mozilla/ ...
show more
34.74.92.118 - - [30/Jul/2026:06:59:49 +0200] "GET /.git-credentials HTTP/2.0" 404 114 "-" "Mozilla/5.0 (compatible; Applebot/0.1; +http://www.apple.com/go/applebot)"
34.74.92.118 - - [30/Jul/2026:06:59:49 +0200] "GET /.aws/credentials HTTP/2.0" 404 114 "-" "Mozilla/5.0 (compatible; Applebot/0.1; +http://www.apple.com/go/applebot)"
34.74.92.118 - - [30/Jul/2026:06:59:49 +0200] "GET /.git/config HTTP/2.0" 404 114 "-" "Mozilla/5.0 (compatible; Applebot/0.1; +http://www.apple.com/go/applebot)"
34.74.92.118 - - [30/Jul/2026:06:59:49 +0200] "GET /.aws/config HTTP/2.0" 404 114 "-" "Mozilla/5.0 (compatible; Applebot/0.1; +http://www.apple.com/go/applebot)"
34.74.92.118 - - [30/Jul/2026:06:59:49 +0200] "GET /.git/HEAD HTTP/2.0" 404 114 "-" "Mozilla/5.0 (compatible; Applebot/0.1; +http://www.apple.com/go/applebot)"
...
show less
Hacking
Brute-Force
๐ฉ๐ช
LRob
2026-07-30 03:51:18
(21 hours ago)
CrowdSec: crowdsecurity/http-bad-user-agent | req: /wp-json | UA: CCBot/2.0 (https://commoncrawl.org ...
show more
CrowdSec: crowdsecurity/http-bad-user-agent | req: /wp-json | UA: CCBot/2.0 (https://commoncrawl.org/faq/)
show less
Bad Web Bot
๐ณ๐ฑ
i-turnradio.nl
2026-07-30 03:50:08
(21 hours ago)
2026-07-30 @ 05:50:08 (CET) ~ Blocked for trying to access: /.aws/credentials
Web App Attack
๐ง๐ช
cmbplf
2026-07-30 02:38:04
(22 hours ago)
133 requests with url.path *.ssh/*
105 requests with url.path *config.json
Brute-Force
Bad Web Bot
๐ณ๐ฑ
i-turnradio.nl
2026-07-30 01:12:44
(23 hours ago)
2026-07-30 @ 03:12:44 (CET) ~ Blocked for trying to access: /api/v2/settings
Web App Attack
๐ณ๐ฑ
WeCloudit-Anti-Abuse
2026-07-30 00:42:11
(1 day ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
๐ณ๐ฑ
i-turnradio.nl
2026-07-29 23:27:41
(1 day ago)
2026-07-30 @ 01:27:41 (CET) ~ Blocked for trying to access: /.github/workflows/deploy.yml
Web App Attack
Anonymous
2026-07-29 22:43:41
(1 day ago)
XSS Attempt
Hacking
๐ณ๐ฑ
i-turnradio.nl
2026-07-29 22:35:34
(1 day ago)
2026-07-30 @ 00:35:33 (CET) ~ Blocked for trying to access: /.env.production
Web App Attack