2026-10-06 19:20:21
(1 week ago)
Aggressive web scan
Web App Attack
🇩🇪
updown.io
2026-10-06 19:01:16
(1 week ago)
{"level":"info","ts":1791313273.925913,"logger":"http.log.access.log1","msg":"handled request","requ ...
show more
{"level":"info","ts":1791313273.925913,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.90.245.132","remote_port":"52458","client_ip":"34.90.245.132","proto":"HTTP/2.0","method":"GET","host":"blog-status.narrator.ai","uri":"/.npmrc","headers":{"User-Agent":["Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36"],"Accept":["*/*"],"Cookie":["REDACTED"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"X-Nextjs-Data":["1"],"Accept-Encoding":["gzip"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"blog-status.narrator.ai","ech":false}},"bytes_read":0,"user_id":"","duration":0.00015746,"size":0,"status":429,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"]}}
{"level":"info","ts":1791313273.926284,"logger":
...
show less
DDoS Attack
Web App Attack
2026-10-06 14:15:42
(1 week ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
2026-10-06 13:15:55
(1 week ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
2026-10-06 13:04:37
(1 week ago)
Repeated unauthorized connection attempts to restricted service observed.
Web App Attack
🇺🇸
daveoctober
2026-10-06 12:08:42
(1 week ago)
October Sentinel: honeypot triggered
Bad Web Bot
Web App Attack
🇪🇸
robotstxt
2026-10-06 12:06:21
(1 week ago)
34.90.245.132 - - [06/Oct/2026:12:05:34 +0000] "GET / HTTP/2.0" 403 189 "https://noudiari.es/" "Mozi ...
show more
34.90.245.132 - - [06/Oct/2026:12:05:34 +0000] "GET / HTTP/2.0" 403 189 "https://noudiari.es/" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)" "-" edge="34.90.245.132"
34.90.245.132 - - [06/Oct/2026:12:05:34 +0000] "GET /z9x8c7v6b5-debug-trigger-noudiari.es HTTP/2.0" 403 197 "https://noudiari.es/z9x8c7v6b5-debug-trigger-noudiari.es" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; +https://openai.com/searchbot" "-" edge="34.90.245.132"
34.90.245.132 - - [06/Oct/2026:12:05:35 +0000] "GET /auth/login/ HTTP/2.0" 403 165 "https://www.noudiari.es/auth/login" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 Edg/152.0.0.0" "-" edge="34.90.245.132"
34.90.245.132 - - [06/Oct/2026:12:05:35 +0000] "GET /auth/ HTTP/2.0" 403 165 "https://www.noudiari.es/auth" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/5
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-10-06 11:20:49
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.90.245.132 (132.245.90.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.90.245.132 (132.245.90.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 07:20:41.882440 2026] [security2:error] [pid 26759:tid 26759] [client 34.90.245.132:37328] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "madisonmedia.ai"] [uri "/.htpasswd"] [unique_id "asTZibWCImdxbf1iEf_a2QAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇯🇵
Valhalla
2026-10-06 10:48:33
(1 week ago)
/z9x8c7v6b5-debug-trigger-jbn.ai
Hacking
Web App Attack
🇸🇪
vaia.cloud
2026-10-06 10:00:05
(1 week ago)
crowdsecurity/http-cve-2021-41773
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-06 08:31:14
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.90.245.132 (132.245.90.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.90.245.132 (132.245.90.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 04:31:07.608468 2026] [security2:error] [pid 29262:tid 29262] [client 34.90.245.132:52726] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "chatari.ai"] [uri "/api/system/fileView"] [unique_id "asSxy2iMhrbx_9e1cU3llwAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-10-06 07:06:16
(1 week ago)
Excessive 404/403 errors
Brute-Force
🇪🇸
pipeline.es
2026-10-06 07:05:19
(1 week ago)
Web scanning / probing for vulnerable paths | URL: /dist/.env | Evidence: 1001.es 34.90.245.132 - - ...
show more
Web scanning / probing for vulnerable paths | URL: /dist/.env | Evidence: 1001.es 34.90.245.132 - - [06/Oct/2026:09:04:27 +0200] \"GET /dist/.env HTTP/1.1\" 404 4805 \"-\" \"Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)\" GEOIP_COUNTRY_CODE=NL | ASN: GOOGLE-CLOUD-PLATFORM | Country: NL
show less
Port Scan
Web App Attack
🇧🇪
cmbplf
2025-12-30 21:01:16
(9 months ago)
23.618 requests with url.path */xmlrpc.php
1.566 requests with url.path */wp-includes/wlwmanifest. ...
show more
23.618 requests with url.path */xmlrpc.php
1.566 requests with url.path */wp-includes/wlwmanifest.xml
show less
Brute-Force
Bad Web Bot
🇺🇸
mnsf
2025-12-30 20:05:18
(9 months ago)
Too many Status 40X (12)
Brute-Force
Web App Attack
