π«π·
SpaceHost-Server
2026-09-15 22:15:03
(1 month ago)
Brute-Force
Web App Attack
πΊπΈ
EvilTurkey
2026-09-14 14:37:58
(1 month ago)
Web app attack against financial institution website.
Web App Attack
Hacking
π©πͺ
macrob
2026-09-14 14:02:38
(1 month ago)
2026/09/14 14:02:36 [error] 1933745#1933745: *11415570 access forbidden by rule, client: 136.107.60.52, server: fn.binixo.es, request: "GET /.vite/manifest.json HTTP/2.0", host: "de.wynspire.org"
2026/09/14 14:02:36 [error] 1933746#1933746: *11415594 ...
show more
2026/09/14 14:02:36 [error] 1933745#1933745: *11415570 access forbidden by rule, client: 136.107.60.52, server: fn.binixo.es, request: "GET /.vite/manifest.json HTTP/2.0", host: "de.wynspire.org"
2026/09/14 14:02:36 [error] 1933746#1933746: *11415594 access forbidden by rule, client: 136.107.60.52, server: fn.binixo.es, request: "GET /dist/.vite/manifest.json HTTP/2.0", host: "de.wynspire.org"
2026/09/14 14:02:36 [error] 1933746#1933746: *11415608 access forbidden by rule, client: 136.107.60.52, server: fn.binixo.es, request: "GET /.aws/credentials HTTP/2.0", host: "de.wynspire.org"
...
show less
Web App Attack
π©πͺ
macrob
2026-09-14 08:33:35
(1 month ago)
2026/09/14 08:33:33 [error] 1743662#1743662: *10438332 access forbidden by rule, client: 136.107.60.52, server: fn.binixo.es, request: "GET /.env.local HTTP/2.0", host: "caslogin.wynspire.org"
2026/09/14 08:33:33 [error] 1743663#1743663: *10438333 ac ...
show more
2026/09/14 08:33:33 [error] 1743662#1743662: *10438332 access forbidden by rule, client: 136.107.60.52, server: fn.binixo.es, request: "GET /.env.local HTTP/2.0", host: "caslogin.wynspire.org"
2026/09/14 08:33:33 [error] 1743663#1743663: *10438333 access forbidden by rule, client: 136.107.60.52, server: fn.binixo.es, request: "GET /.env.backup HTTP/2.0", host: "caslogin.wynspire.org"
2026/09/14 08:33:33 [error] 1743659#1743659: *10438334 access forbidden by rule, client: 136.107.60.52, server: fn.binixo.es, request: "GET /.env.bak HTTP/2.0", host: "caslogin.wynspire.org"
...
show less
Web App Attack
π¬π§
openstrike.co.uk
2026-09-14 05:14:07
(1 month ago)
11 attacks on password/key grabbing URLs:
GET /id_ed25519 HTTP/1.1
Hacking
π«π·
Nicos
2026-09-14 03:10:14
(1 month ago)
2026-09-14T05:10:13.839268+02:00 PhoenixNas 4b557cefc297[1833363]: {"auth_via": "unauthenticated", "domain_url": "Redacted", "event": "/.git-credentials", "host": "Redacted", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 429348 ...
show more
2026-09-14T05:10:13.839268+02:00 PhoenixNas 4b557cefc297[1833363]: {"auth_via": "unauthenticated", "domain_url": "Redacted", "event": "/.git-credentials", "host": "Redacted", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 429348, "remote": "136.107.60.52", "request_id": "f10bdc7e9c9648fe8e3601caaee4c0e7", "runtime": 36, "schema_name": "public", "scheme": "https", "status": 404, "timestamp": "2026-09-14T03:10:13.839070", "user": "", "user_agent": "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"}
2026-09-14T05:10:13.843409+02:00 PhoenixNas 4b557cefc297[1833363]: {"auth_via": "unauthenticated", "domain_url": "Redacted", "event": "/dist/.vite/manifest.json", "host": "Redacted", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 429348, "remote": "136.107.60.52", "request_id": "19ecb0249bf745fd9814fb468b39fed3", "runtime": 44, "schema_name": "public", "scheme": "https", "status": 404, "timestamp": "2026
...
show less
Hacking
Brute-Force
π©πͺ
macrob
2026-09-13 23:34:15
(1 month ago)
2026/09/13 23:34:13 [error] 1442486#1442486: *9125465 access forbidden by rule, client: 136.107.60.52, server: fn.binixo.es, request: "GET /api%2F.env HTTP/2.0", host: "adminlogin.wynspire.org"
2026/09/13 23:34:13 [error] 1442486#1442486: *9125466 ac ...
show more
2026/09/13 23:34:13 [error] 1442486#1442486: *9125465 access forbidden by rule, client: 136.107.60.52, server: fn.binixo.es, request: "GET /api%2F.env HTTP/2.0", host: "adminlogin.wynspire.org"
2026/09/13 23:34:13 [error] 1442486#1442486: *9125466 access forbidden by rule, client: 136.107.60.52, server: fn.binixo.es, request: "GET /settings%2F.env HTTP/2.0", host: "adminlogin.wynspire.org"
2026/09/13 23:34:13 [error] 1442486#1442486: *9125467 access forbidden by rule, client: 136.107.60.52, server: fn.binixo.es, request: "GET /@fs/.env?raw&url?? HTTP/2.0", host: "adminlogin.wynspire.org"
...
show less
Web App Attack
π«π·
SpaceHost-Server
2026-09-13 22:15:09
(1 month ago)
Brute-Force
Web App Attack
π«π·
dynamix
2026-09-13 21:48:38
(1 month ago)
Multiple WAF Violations
Web App Attack
π©πͺ
macrob
2026-09-13 21:28:00
(1 month ago)
2026/09/13 21:27:58 [error] 1442486#1442486: *8885704 access forbidden by rule, client: 136.107.60.52, server: fn.binixo.es, request: "GET /dist/.vite/manifest.json HTTP/2.0", host: "accountcenter.wynspire.org"
2026/09/13 21:27:58 [error] 1442486#144 ...
show more
2026/09/13 21:27:58 [error] 1442486#1442486: *8885704 access forbidden by rule, client: 136.107.60.52, server: fn.binixo.es, request: "GET /dist/.vite/manifest.json HTTP/2.0", host: "accountcenter.wynspire.org"
2026/09/13 21:27:58 [error] 1442486#1442486: *8885695 access forbidden by rule, client: 136.107.60.52, server: fn.binixo.es, request: "GET /.vite/manifest.json HTTP/2.0", host: "accountcenter.wynspire.org"
2026/09/13 21:27:59 [error] 1442486#1442486: *8885712 access forbidden by rule, client: 136.107.60.52, server: fn.binixo.es, request: "GET /admin HTTP/2.0", host: "accountcenter.wynspire.org"
...
show less
Web App Attack
π©πͺ
macrob
2026-09-13 18:45:30
(1 month ago)
2026/09/13 18:45:28 [error] 1442487#1442487: *8532231 access forbidden by rule, client: 136.107.60.52, server: fn.binixo.es, request: "GET /.vite/manifest.json HTTP/2.0", host: "11st.wynspire.org"
2026/09/13 18:45:29 [error] 1442485#1442485: *8532223 ...
show more
2026/09/13 18:45:28 [error] 1442487#1442487: *8532231 access forbidden by rule, client: 136.107.60.52, server: fn.binixo.es, request: "GET /.vite/manifest.json HTTP/2.0", host: "11st.wynspire.org"
2026/09/13 18:45:29 [error] 1442485#1442485: *8532223 access forbidden by rule, client: 136.107.60.52, server: fn.binixo.es, request: "GET /.aws/credentials HTTP/2.0", host: "11st.wynspire.org"
2026/09/13 18:45:29 [error] 1442487#1442487: *8532233 access forbidden by rule, client: 136.107.60.52, server: fn.binixo.es, request: "GET /.aws/config HTTP/2.0", host: "11st.wynspire.org"
...
show less
Web App Attack
π©πͺ
Gwyneth Llewelyn
2026-09-13 17:43:54
(1 month ago)
2026/09/13 18:43:41 [error] 1459171#1459171: *651784 access forbidden by rule, client: 136.107.60.52, server: simetria.org, request: "GET /_nuxt/../.env HTTP/2.0", host: "simetria.org"
2026/09/13 18:43:41 [error] 1459171#1459171: *651785 access forbi ...
show more
2026/09/13 18:43:41 [error] 1459171#1459171: *651784 access forbidden by rule, client: 136.107.60.52, server: simetria.org, request: "GET /_nuxt/../.env HTTP/2.0", host: "simetria.org"
2026/09/13 18:43:41 [error] 1459171#1459171: *651785 access forbidden by rule, client: 136.107.60.52, server: simetria.org, request: "GET /static../.env HTTP/2.0", host: "simetria.org"
2026/09/13 18:43:41 [error] 1459171#1459171: *651786 access forbidden by rule, client: 136.107.60.52, server: simetria.org, request: "GET /media../.env HTTP/2.0", host: "simetria.org"
show less
Brute-Force
Web App Attack
π³π±
middelkoopcc
2026-09-13 17:43:00
(1 month ago)
2026-09-13 19:41:08 GET /config/env/aws_credentials.env [301] && 2026-09-13 19:41:11 AH10244: invalid URI path (/%2e%2e/.env) && 2026-09-13 19:41:08 GET /serverless.yml [301] && 101 more within 20 minutes
Web App Attack
Anonymous
2026-09-13 17:34:51
(1 month ago)
136.107.60.52 - - [13/Sep/2026:12:34:50 -0500] "GET /.env?raw HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 136.107.60.52
136.107.60.52 - - [13/Sep/2026:12:34:50 -0500] "GET /.env?import&r ...
show more
136.107.60.52 - - [13/Sep/2026:12:34:50 -0500] "GET /.env?raw HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 136.107.60.52
136.107.60.52 - - [13/Sep/2026:12:34:50 -0500] "GET /.env?import&raw HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)" 136.107.60.52
136.107.60.52 - - [13/Sep/2026:12:34:50 -0500] "GET /.env?import&url&inline HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)" 136.107.60.52
136.107.60.52 - - [13/Sep/2026:12:34:50 -0500] "GET /.env.local?raw HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)" 136.107.60.52
136.107.60.52 - - [13/Sep/2026:12:34:50 -0500] "GET /.env.local?import&raw HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)" 136.107.60.52
136.107.60.52 - - [13/Sep/2026:12:34:50 -0500] "GET /.env.production?raw HTTP/1.1" 403 199 "-" "Mozilla/5.0 AppleWebK
...
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
Rocky Mountain Bioengineering Symposium
2026-09-13 17:30:38
(1 month ago)
[Sun Sep 13 11:30:37.513810 2026] [authz_core:error] [pid 385925:tid 139766385444416] [client 136.107.60.52:57366] AH01630: client denied by server configuration: /var/www/public_html/www/rclone.conf
[Sun Sep 13 11:30:37.515752 2026] [authz_core:erro ...
show more
[Sun Sep 13 11:30:37.513810 2026] [authz_core:error] [pid 385925:tid 139766385444416] [client 136.107.60.52:57366] AH01630: client denied by server configuration: /var/www/public_html/www/rclone.conf
[Sun Sep 13 11:30:37.515752 2026] [authz_core:error] [pid 385925:tid 139766385444416] [client 136.107.60.52:57366] AH01630: client denied by server configuration: /var/www/public_rsrc/assets/RMBS-Server-Error.html
[Sun Sep 13 11:30:38.206938 2026] [authz_core:error] [pid 385925:tid 139766452586048] [client 136.107.60.52:57366] AH01630: client denied by server configuration: /var/www/public_html/www/proc
...
show less
Bad Web Bot