|
π«π·
143.244.57.86
|
|
nood.li 143.244.57.86 - - [06/Nov/2026:03:22:33 +0100] "TLSv1.2/ECDHE-ECDSA-AES128-GCM-SHA256" "GET ...
show more
nood.li 143.244.57.86 - - [06/Nov/2026:03:22:33 +0100] "TLSv1.2/ECDHE-ECDSA-AES128-GCM-SHA256" "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 302 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
nood.li 143.244.57.86 - - [06/Nov/2026:03:22:33 +0100] "TLSv1.2/ECDHE-ECDSA-AES128-GCM-SHA256" "GET //xmlrpc.php?rsd HTTP/1.1" 404 302 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
nood.li 143.244.57.86 - - [06/Nov/2026:03:22:33 +0100] "TLSv1.2/ECDHE-ECDSA-AES128-GCM-SHA256" "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 302 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
nood.li 143.244.57.86 - - [06/Nov/2026:03:22:33 +0100] "TLSv1.2/ECDHE-ECDSA-AES128-GCM-SHA256" "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 302 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)
...
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
π§πͺ
35.190.203.157
|
|
0xfc.de 35.190.203.157 - - [06/Nov/2026:01:07:45 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /sitem ...
show more
0xfc.de 35.190.203.157 - - [06/Nov/2026:01:07:45 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /sitemap.xml HTTP/2.0" 404 255 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)"
0xfc.de 35.190.203.157 - - [06/Nov/2026:01:07:46 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /sitemap_index.xml HTTP/2.0" 404 255 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
0xfc.de 35.190.203.157 - - [06/Nov/2026:01:07:46 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /pricing HTTP/2.0" 404 255 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
0xfc.de 35.190.203.157 - - [06/Nov/2026:01:07:46 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /graphql HTTP/2.0" 404 255 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
0xfc.de 35.190.203.157 - - [06/Nov/2026:01:07:46 +0100] "TLSv1.3/TLS_AES_256
...
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
π³π±
195.178.110.159
|
|
0xfc.de 195.178.110.159 - - [06/Nov/2026:00:07:45 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /.git ...
show more
0xfc.de 195.178.110.159 - - [06/Nov/2026:00:07:45 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /.git/config HTTP/1.1" 404 292 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36"
0xfc.de 195.178.110.159 - - [06/Nov/2026:00:07:45 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /.svn/wc.db HTTP/1.1" 404 292 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36"
0xfc.de 195.178.110.159 - - [06/Nov/2026:00:07:45 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /.env HTTP/1.1" 404 292 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36"
0xfc.de 195.178.110.159 - - [06/Nov/2026:00:07:46 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /.git-credentials HTTP/1.1" 404 292 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36"
0xfc.de 195.178.110.159 - - [06/Nov/2026:00:07:46 +0100] "TLSv1.3/TLS_AES_256_GCM_S
...
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
π§π·
34.39.229.209
|
|
llm.0xfc.de 34.39.229.209 - - [05/Nov/2026:19:19:42 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /si ...
show more
llm.0xfc.de 34.39.229.209 - - [05/Nov/2026:19:19:42 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /sitemap.xml HTTP/2.0" 404 255 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected])"
llm.0xfc.de 34.39.229.209 - - [05/Nov/2026:19:19:43 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /sitemap_index.xml HTTP/2.0" 404 255 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected])"
llm.0xfc.de 34.39.229.209 - - [05/Nov/2026:19:19:43 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /console HTTP/2.0" 404 255 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
llm.0xfc.de 34.39.229.209 - - [05/Nov/2026:19:19:44 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /auth HTTP/2.0" 404 255 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
llm.0xfc.de 34.39.229.209 -
...
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
πΈπ¬
35.240.174.244
|
|
mail.0xfc.de 35.240.174.244 - - [05/Nov/2026:19:08:00 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET / ...
show more
mail.0xfc.de 35.240.174.244 - - [05/Nov/2026:19:08:00 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /sitemap.xml HTTP/2.0" 404 146 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot"
mail.0xfc.de 35.240.174.244 - - [05/Nov/2026:19:08:01 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /sitemap_index.xml HTTP/2.0" 404 146 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot"
mail.0xfc.de 35.240.174.244 - - [05/Nov/2026:19:08:02 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /assets/manifest.json HTTP/2.0" 404 167 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
mail.0xfc.de 35.240.174.244 - - [05/Nov/2026:19:08:02 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /manifest.json HTTP/2.0" 404 167 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
mail.
...
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
π©πͺ
34.179.210.168
|
|
cloud.0xfc.de 34.179.210.168 - - [05/Nov/2026:18:43:17 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET ...
show more
cloud.0xfc.de 34.179.210.168 - - [05/Nov/2026:18:43:17 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /sitemap.xml HTTP/2.0" 404 1746 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
cloud.0xfc.de 34.179.210.168 - - [05/Nov/2026:18:43:18 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /sitemap_index.xml HTTP/2.0" 404 1746 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
cloud.0xfc.de 34.179.210.168 - - [05/Nov/2026:18:43:18 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /9xldfqhca0ikiaf5nlb0 HTTP/2.0" 404 1749 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
cloud.0xfc.de 34.179.210.168 - - [05/Nov/2026:18:43:18 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /w4edcegxc0ygo8nfrlxm HTTP/2.0" 404 1749 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
cloud.0xfc.de 34.179.210.168 - - [05/Nov/2026:18:43:18 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /z9x8c7v6b5-debug-trigger-cloud.0xfc.de HTTP/2.0" 404 1749 "-" "Mozil
...
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
πΊπΈ
34.46.55.5
|
|
mail.0xfc.de 34.46.55.5 - - [05/Nov/2026:18:40:02 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /site ...
show more
mail.0xfc.de 34.46.55.5 - - [05/Nov/2026:18:40:02 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /sitemap.xml HTTP/2.0" 404 146 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)"
mail.0xfc.de 34.46.55.5 - - [05/Nov/2026:18:40:03 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /sitemap_index.xml HTTP/2.0" 404 146 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)"
mail.0xfc.de 34.46.55.5 - - [05/Nov/2026:18:40:03 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /static/manifest.json HTTP/2.0" 404 167 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
mail.0xfc.de 34.46.55.5 - - [05/Nov/2026:18:40:03 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /povw57ua16hgwepsqnwf HTTP/2.0" 404 146 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected])"
mail.0xfc.de 34.46.55.5 - - [05/
...
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
π―π΅
34.146.152.29
|
|
0xfc.de 34.146.152.29 - - [05/Nov/2026:18:27:52 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /sitema ...
show more
0xfc.de 34.146.152.29 - - [05/Nov/2026:18:27:52 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /sitemap.xml HTTP/2.0" 404 255 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
0xfc.de 34.146.152.29 - - [05/Nov/2026:18:27:54 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /sitemap_index.xml HTTP/2.0" 404 255 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"
0xfc.de 34.146.152.29 - - [05/Nov/2026:18:27:54 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /pn2cnzmyicu4cw0chywk HTTP/2.0" 404 255 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)"
0xfc.de 34.146.152.29 - - [05/Nov/2026:18:27:54 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /admin HTTP/2.0" 404 255 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
0xfc.de 34.146.152.29 - - [05/Nov/2026:18:27:54 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /pricing HTTP/2.0" 404 255 "-" "Mozilla/5.0
...
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
π¨π¦
34.118.178.178
|
|
id.0xfc.de 34.118.178.178 - - [05/Nov/2026:17:21:14 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /si ...
show more
id.0xfc.de 34.118.178.178 - - [05/Nov/2026:17:21:14 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /sitemap.xml HTTP/2.0" 404 1840 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
id.0xfc.de 34.118.178.178 - - [05/Nov/2026:17:21:15 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /sitemap_index.xml HTTP/2.0" 404 1843 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)"
id.0xfc.de 34.118.178.178 - - [05/Nov/2026:17:21:15 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /build/manifest.json HTTP/2.0" 404 1841 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
id.0xfc.de 34.118.178.178 - - [05/Nov/2026:17:21:16 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /wfyh8wp36tgeoujzonkr HTTP/2.0" 404 1842 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
id.0xfc.de 34.118.178.178 - - [05/Nov/2026:17:21:16 +0100] "TLSv1.3/TLS_AES_256_GCM_SH
...
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
πΊπΈ
136.116.35.32
|
|
mail.0xfc.de 136.116.35.32 - - [05/Nov/2026:13:50:53 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /s ...
show more
mail.0xfc.de 136.116.35.32 - - [05/Nov/2026:13:50:53 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /sitemap.xml HTTP/2.0" 404 146 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
mail.0xfc.de 136.116.35.32 - - [05/Nov/2026:13:50:54 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /sitemap_index.xml HTTP/2.0" 404 146 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
mail.0xfc.de 136.116.35.32 - - [05/Nov/2026:13:50:55 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /webpack-stats.json HTTP/2.0" 404 167 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
mail.0xfc.de 136.116.35.32 - - [05/Nov/2026:13:50:55 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /z9x8c7v6b5-debug-trigger-mail.0xfc.de HTTP/2.0" 404 146 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
mai
...
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
π«π·
85.204.70.106
|
|
nood.li 85.204.70.106 - - [05/Nov/2026:06:04:36 +0100] "TLSv1.2/ECDHE-ECDSA-AES128-GCM-SHA256" "GET ...
show more
nood.li 85.204.70.106 - - [05/Nov/2026:06:04:36 +0100] "TLSv1.2/ECDHE-ECDSA-AES128-GCM-SHA256" "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 302 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
nood.li 85.204.70.106 - - [05/Nov/2026:06:04:36 +0100] "TLSv1.2/ECDHE-ECDSA-AES128-GCM-SHA256" "GET //xmlrpc.php?rsd HTTP/1.1" 404 302 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
nood.li 85.204.70.106 - - [05/Nov/2026:06:04:36 +0100] "TLSv1.2/ECDHE-ECDSA-AES128-GCM-SHA256" "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 302 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
nood.li 85.204.70.106 - - [05/Nov/2026:06:04:36 +0100] "TLSv1.2/ECDHE-ECDSA-AES128-GCM-SHA256" "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 302 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)
...
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
πΊπΈ
136.85.223.113
|
|
0xfc.de 136.85.223.113 - - [05/Nov/2026:03:43:27 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /.git/ ...
show more
0xfc.de 136.85.223.113 - - [05/Nov/2026:03:43:27 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /.git/config HTTP/1.1" 404 266 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
0xfc.de 136.85.223.113 - - [05/Nov/2026:03:43:27 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /.env HTTP/1.1" 404 266 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
0xfc.de 136.85.223.113 - - [05/Nov/2026:03:43:27 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /.env.local HTTP/1.1" 404 266 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
0xfc.de 136.85.223.113 - - [05/Nov/2026:03:43:28 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /.env.production HTTP/1.1" 404 266 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
0xfc.de 136.85.223.113 - - [05/Nov/2026:03:43:28 +0100] "TLSv1.3/TLS_AES
...
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
π¨π¦
34.19.156.210
|
|
nood.li 34.19.156.210 - - [05/Nov/2026:03:17:17 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /.git/c ...
show more
nood.li 34.19.156.210 - - [05/Nov/2026:03:17:17 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /.git/config HTTP/1.1" 404 279 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
nood.li 34.19.156.210 - - [05/Nov/2026:03:17:17 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /.env HTTP/1.1" 404 279 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
nood.li 34.19.156.210 - - [05/Nov/2026:03:17:18 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /.env.local HTTP/1.1" 404 279 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
nood.li 34.19.156.210 - - [05/Nov/2026:03:17:18 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /.env.production HTTP/1.1" 404 279 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
nood.li 34.19.156.210 - - [05/Nov/20
...
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
π΅π±
45.138.12.24
|
|
0xfc.de 45.138.12.24 - - [04/Nov/2026:23:38:14 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /.git/co ...
show more
0xfc.de 45.138.12.24 - - [04/Nov/2026:23:38:14 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /.git/config HTTP/2.0" 404 255 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
0xfc.de 45.138.12.24 - - [04/Nov/2026:23:38:14 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /api/v1/auto_login HTTP/2.0" 404 255 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
0xfc.de 45.138.12.24 - - [04/Nov/2026:23:38:14 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "POST /api/v1/validate/code HTTP/2.0" 404 255 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
0xfc.de 45.138.12.24 - - [04/Nov/2026:23:38:15 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "POST /api HTTP/2.0" 404 255 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
0xfc.de 45.138.12.24 - - [0
...
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
π©πͺ
91.204.46.67
|
|
git.0xfc.de 91.204.46.67 - - [04/Nov/2026:23:06:04 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /api ...
show more
git.0xfc.de 91.204.46.67 - - [04/Nov/2026:23:06:04 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /api/v4/projects/109/repository/files/swagger.md/raw?ref=master HTTP/2.0" 404 11 "-" "-"
git.0xfc.de 91.204.46.67 - - [04/Nov/2026:23:06:04 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /api/v4/projects/109/repository/files/settings%2Fwebhooks.md/raw?ref=master HTTP/2.0" 404 11 "-" "-"
git.0xfc.de 91.204.46.67 - - [04/Nov/2026:23:06:04 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /api/v4/projects/109/repository/files/.next%2Frequired-server-files.json/raw?ref=master HTTP/2.0" 404 11 "-" "-"
git.0xfc.de 91.204.46.67 - - [04/Nov/2026:23:06:04 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /api/v4/projects/109/repository/files/.next%2Froutes-manifest.json/raw?ref=master HTTP/2.0" 404 11 "-" "-"
git.0xfc.de 91.204.46.67 - - [04/Nov/2026:23:06:04 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /api/v4/projects/109/repository/files/.env.common/raw?ref=master HTTP/2.0" 404 11 "-" "-"
git.0xfc.de 91.204.4
...
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
π©πͺ
2a03:4000:0:3c5:d471:bfff:fe20:a63a
|
|
git.0xfc.de 2a03:4000:0:3c5:d471:bfff:fe20:a63a - - [04/Nov/2026:23:06:01 +0100] "TLSv1.3/TLS_AES_25 ...
show more
git.0xfc.de 2a03:4000:0:3c5:d471:bfff:fe20:a63a - - [04/Nov/2026:23:06:01 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /api/v4/projects/109/repository/files/robots.txt/raw?ref=master HTTP/2.0" 404 11 "-" "-"
git.0xfc.de 2a03:4000:0:3c5:d471:bfff:fe20:a63a - - [04/Nov/2026:23:06:01 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /api/v4/projects/109/repository/files/sitemap.xml/raw?ref=master HTTP/2.0" 404 11 "-" "-"
git.0xfc.de 2a03:4000:0:3c5:d471:bfff:fe20:a63a - - [04/Nov/2026:23:06:02 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /api/v4/projects/109/repository/files/sitemap_index.xml/raw?ref=master HTTP/2.0" 404 11 "-" "-"
git.0xfc.de 2a03:4000:0:3c5:d471:bfff:fe20:a63a - - [04/Nov/2026:23:06:02 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /api/v4/projects/109/repository/files/webhooks.md/raw?ref=master HTTP/2.0" 404 11 "-" "-"
git.0xfc.de 2a03:4000:0:3c5:d471:bfff:fe20:a63a - - [04/Nov/2026:23:06:02 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /api/v4/projects/109/repository/files/we
...
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
π΅π±
45.138.12.25
|
|
0xfc.de 45.138.12.25 - - [04/Nov/2026:23:02:50 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /.git/co ...
show more
0xfc.de 45.138.12.25 - - [04/Nov/2026:23:02:50 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /.git/config HTTP/2.0" 404 255 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
0xfc.de 45.138.12.25 - - [04/Nov/2026:23:02:50 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /api/v1/auto_login HTTP/2.0" 404 255 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
0xfc.de 45.138.12.25 - - [04/Nov/2026:23:02:50 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "POST /api/v1/validate/code HTTP/2.0" 404 255 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
0xfc.de 45.138.12.25 - - [04/Nov/2026:23:02:51 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "POST /api HTTP/2.0" 404 255 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
0xfc.de 45.138.12.25 - - [0
...
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
πΉπΌ
35.229.176.23
|
|
0xfc.de 35.229.176.23 - - [04/Nov/2026:19:59:38 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /sitema ...
show more
0xfc.de 35.229.176.23 - - [04/Nov/2026:19:59:38 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /sitemap.xml HTTP/2.0" 404 255 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected])"
0xfc.de 35.229.176.23 - - [04/Nov/2026:19:59:38 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /sitemap_index.xml HTTP/2.0" 404 255 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot"
0xfc.de 35.229.176.23 - - [04/Nov/2026:19:59:38 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /graphql HTTP/2.0" 404 255 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
0xfc.de 35.229.176.23 - - [04/Nov/2026:19:59:38 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /api-docs HTTP/2.0" 404 255 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
0xfc.de 35.229.176.23 - - [04/Nov/2026:1
...
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
π³π±
45.148.10.21
|
|
nood.li 45.148.10.21 - - [04/Nov/2026:19:55:16 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /.amplif ...
show more
nood.li 45.148.10.21 - - [04/Nov/2026:19:55:16 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /.amplifyrc HTTP/2.0" 404 267 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
nood.li 45.148.10.21 - - [04/Nov/2026:19:55:16 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /.aws/.env HTTP/2.0" 404 267 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
nood.li 45.148.10.21 - - [04/Nov/2026:19:55:16 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /.docker/config.json HTTP/2.0" 404 267 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
nood.li 45.148.10.21 - - [04/Nov/2026:19:55:16 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /.aws/config HTTP/2.0" 404 267 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
nood.li 45.148.10.21 - - [04/Nov/2026:19:55:16 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /.aws/credentials HTTP/2.0" 404 267 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
nood.li 45.148.10.21 - - [04/Nov/2026:19
...
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
π§πͺ
35.187.35.191
|
|
mta-sts.nood.li 35.187.35.191 - - [04/Nov/2026:15:50:11 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET ...
show more
mta-sts.nood.li 35.187.35.191 - - [04/Nov/2026:15:50:11 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /.amplifyrc HTTP/2.0" 404 146 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
mta-sts.nood.li 35.187.35.191 - - [04/Nov/2026:15:50:11 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /.boto HTTP/2.0" 404 146 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
mta-sts.nood.li 35.187.35.191 - - [04/Nov/2026:15:50:11 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /.docker/config.json HTTP/2.0" 404 146 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
mta-sts.nood.li 35.187.35.191 - - [04/Nov/2026:15:50:11 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /.claude/settings.local.json HTTP/2.0" 404 146 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
mta-sts.nood.li 35.187.35.191 - - [04/Nov/2026:15:50:11 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /.cursor/mcp.json HTTP/2.0" 404 146 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) App
...
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
πΊπΈ
67.205.34.167
|
|
0xfc.de 67.205.34.167 - - [04/Nov/2026:15:46:28 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "HEAD /admin ...
show more
0xfc.de 67.205.34.167 - - [04/Nov/2026:15:46:28 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "HEAD /admin/wp-login.php HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
0xfc.de 67.205.34.167 - - [04/Nov/2026:15:46:28 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "HEAD /wp/wp-login.php HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
0xfc.de 67.205.34.167 - - [04/Nov/2026:15:46:28 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "HEAD /wordpress/wp-login.php HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
0xfc.de 67.205.34.167 - - [04/Nov/2026:15:46:28 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "HEAD /blog/wp-login.php HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
0xfc.de
...
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
π§πͺ
34.62.246.24
|
|
mta-sts.0xfc.de 34.62.246.24 - - [04/Nov/2026:15:26:22 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET ...
show more
mta-sts.0xfc.de 34.62.246.24 - - [04/Nov/2026:15:26:22 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /.boto HTTP/2.0" 404 146 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
mta-sts.0xfc.de 34.62.246.24 - - [04/Nov/2026:15:26:22 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /.cursor/mcp.json HTTP/2.0" 404 146 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
mta-sts.0xfc.de 34.62.246.24 - - [04/Nov/2026:15:26:22 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /.amplifyrc HTTP/2.0" 404 146 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
mta-sts.0xfc.de 34.62.246.24 - - [04/Nov/2026:15:26:22 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /.docker/.env HTTP/2.0" 404 146 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
mta-sts.0xfc.de 34.62.246.24 - - [04/Nov/2026:15:26:22 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /.claude/settings.json HTTP/2.0" 404 146 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
m
...
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
π³π±
85.11.167.138
|
|
0xfc.de 85.11.167.138 - - [04/Nov/2026:13:37:46 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /test.p ...
show more
0xfc.de 85.11.167.138 - - [04/Nov/2026:13:37:46 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /test.php HTTP/1.1" 404 266 "http://0xfc.de/test.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
0xfc.de 85.11.167.138 - - [04/Nov/2026:13:37:46 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /info.php HTTP/1.1" 404 266 "http://0xfc.de/info.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
0xfc.de 85.11.167.138 - - [04/Nov/2026:13:37:46 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /phpinfo.php HTTP/1.1" 404 266 "http://0xfc.de/phpinfo.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0"
0xfc.de 85.11.167.138 - - [04/Nov/2026:13:37:46 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /phpinfo HTTP/1.1" 404 266 "http://0xfc.de/phpinfo" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.
...
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
π©πͺ
2a02:6ea0:cf2e::22
|
|
mail.0xfc.de 2a02:6ea0:cf2e::22 - - [04/Nov/2026:12:21:43 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "G ...
show more
mail.0xfc.de 2a02:6ea0:cf2e::22 - - [04/Nov/2026:12:21:43 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /models HTTP/1.1" 404 146 "-" "authorized-ai-gateway-fingerprint/1.0"
mail.0xfc.de 2a02:6ea0:cf2e::22 - - [04/Nov/2026:12:21:43 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /v1/models HTTP/1.1" 404 146 "-" "authorized-ai-gateway-fingerprint/1.0"
pass.0xfc.de 2a02:6ea0:cf2e::22 - - [04/Nov/2026:12:21:43 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /v1/models HTTP/1.1" 404 1834 "-" "authorized-ai-gateway-fingerprint/1.0"
pass.0xfc.de 2a02:6ea0:cf2e::22 - - [04/Nov/2026:12:21:43 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /models HTTP/1.1" 404 1834 "-" "authorized-ai-gateway-fingerprint/1.0"
git.0xfc.de 2a02:6ea0:cf2e::22 - - [04/Nov/2026:12:21:58 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /api/health/ping HTTP/1.1" 404 10006 "-" "authorized-ai-gateway-fingerprint/1.0"
git.0xfc.de 2a02:6ea0:cf2e::22 - - [04/Nov/2026:12:21:58 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /api/status/cha
...
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
π©πͺ
152.233.61.16
|
|
autoconfig.0xfc.de 152.233.61.16 - - [04/Nov/2026:12:21:43 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" " ...
show more
autoconfig.0xfc.de 152.233.61.16 - - [04/Nov/2026:12:21:43 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /models HTTP/1.1" 404 146 "-" "authorized-ai-gateway-fingerprint/1.0"
autoconfig.0xfc.de 152.233.61.16 - - [04/Nov/2026:12:21:43 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /v1/models HTTP/1.1" 404 146 "-" "authorized-ai-gateway-fingerprint/1.0"
autoconfig.0xfc.de 152.233.61.16 - - [04/Nov/2026:12:21:43 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /models HTTP/1.1" 404 146 "http://autoconfig.0xfc.de/models" "authorized-ai-gateway-fingerprint/1.0"
autoconfig.0xfc.de 152.233.61.16 - - [04/Nov/2026:12:21:43 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /v1/models HTTP/1.1" 404 146 "http://autoconfig.0xfc.de/v1/models" "authorized-ai-gateway-fingerprint/1.0"
autodiscover.0xfc.de 152.233.61.16 - - [04/Nov/2026:12:21:43 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /models HTTP/1.1" 404 146 "-" "authorized-ai-gateway-fingerprint/1.0"
autodiscover.0xfc.de 152.233.61.16 - - [04/Nov/2026:12:21
...
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|