2026-10-01 06:51:46
(1 month ago)
Web Attack Next.js Authorization Bypass Vulnerability
Web App Attack
🇩🇪
macrob
2026-10-01 06:16:17
(1 month ago)
2026/10/01 06:16:15 [error] 1578993#1578993: *3720622 access forbidden by rule, client: 136.110.48.207, server: fn.binixo.es, request: "GET /.vite/manifest.json HTTP/2.0", host: "shop.wellbin.org"
2026/10/01 06:16:15 [error] 1578993#1578993: *3720627 ...
show more
2026/10/01 06:16:15 [error] 1578993#1578993: *3720622 access forbidden by rule, client: 136.110.48.207, server: fn.binixo.es, request: "GET /.vite/manifest.json HTTP/2.0", host: "shop.wellbin.org"
2026/10/01 06:16:15 [error] 1578993#1578993: *3720627 access forbidden by rule, client: 136.110.48.207, server: fn.binixo.es, request: "GET /dist/.vite/manifest.json HTTP/2.0", host: "shop.wellbin.org"
2026/10/01 06:16:16 [error] 1578992#1578992: *3720637 access forbidden by rule, client: 136.110.48.207, server: fn.binixo.es, request: "GET /api/.env/public/.env HTTP/2.0", host: "shop.wellbin.org"
...
show less
Web App Attack
🇩🇪
findlab
2026-10-01 02:25:02
(1 month ago)
Backdrop CMS module - malicious activity detected
Bad Web Bot
Web App Attack
2026-09-30 23:32:17
(1 month ago)
136.110.48.207 - - [01/Oct/2026:01:32:02 +0200] "GET /wp-config.php.old HTTP/2.0" 429 162 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)" "-" "X"
136.110.48.207 - - [01/Oct/2026:01:32:02 +0200] "GET /config/.env.php HTTP/2.0" 429 162 "-" ...
show more
136.110.48.207 - - [01/Oct/2026:01:32:02 +0200] "GET /wp-config.php.old HTTP/2.0" 429 162 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)" "-" "X"
136.110.48.207 - - [01/Oct/2026:01:32:02 +0200] "GET /config/.env.php HTTP/2.0" 429 162 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)" "-" "X"
136.110.48.207 - - [01/Oct/2026:01:32:02 +0200] "GET /wp-config.php.bak HTTP/2.0" 429 162 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)" "-" "X"
136.110.48.207 - - [01/Oct/2026:01:32:02 +0200] "GET /configuration.php.bak HTTP/2.0" 429 162 "-" "Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)" "-" "X"
136.110.48.207 - - [01/Oct/2026:01:32:02 +0200] "GET /.env.php.bak HTTP/2.0" 429 162 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)" "-" "X"
136.110.48.207 - - [01/Oct/2026:01:32:02 +0200] "GET /config.php.bak HTTP/2.0" 429 162 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)" "-" "X"
show less
Brute-Force
🇩🇪
Gwyneth Llewelyn
2026-09-30 22:50:04
(1 month ago)
2026/09/30 23:50:02 [error] 3532288#3532288: *1720196 access forbidden by rule, client: 136.110.48.207, server: simetria.org, request: "GET /admin/.env HTTP/2.0", host: "simetria.org", referrer: "https://www.simetria.org/admin%2F.env"
2026/09/30 23:5 ...
show more
2026/09/30 23:50:02 [error] 3532288#3532288: *1720196 access forbidden by rule, client: 136.110.48.207, server: simetria.org, request: "GET /admin/.env HTTP/2.0", host: "simetria.org", referrer: "https://www.simetria.org/admin%2F.env"
2026/09/30 23:50:02 [error] 3532286#3532286: *1720201 access forbidden by rule, client: 136.110.48.207, server: simetria.org, request: "GET /settings/.env HTTP/2.0", host: "simetria.org", referrer: "https://www.simetria.org/settings%2F.env"
2026/09/30 23:50:02 [error] 3532286#3532286: *1720202 access forbidden by rule, client: 136.110.48.207, server: simetria.org, request: "GET /api/.env HTTP/2.0", host: "simetria.org", referrer: "https://www.simetria.org/api%2F.env"
show less
Brute-Force
Web App Attack
2026-09-30 22:39:31
(1 month ago)
Aggressive web scan
Web App Attack
🇧🇷
radardatelecom
2026-09-30 22:26:02
(1 month ago)
Blocked by Radar da Telecom firewall — abuseipdb
Bad Web Bot
Web App Attack
🇫🇷
SpaceHost-Server
2026-09-30 22:16:24
(1 month ago)
Brute-Force
Web App Attack
2026-09-30 22:09:24
(1 month ago)
Logfile match
Web App Attack
🇧🇪
cmbplf
2026-09-30 22:07:36
(1 month ago)
155 requests with url.path */@fs/*
Brute-Force
Bad Web Bot
🇺🇸
WellSpring
2026-09-30 21:20:49
(1 month ago)
env leak on covenantcaptcha.org/src/.env — WellSpr.ing/NetSentinel civic-AI security layer
Web App Attack
🇯🇵
bokumin.org
2026-09-30 20:59:20
(1 month ago)
[id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [uri "/"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"]
Web App Attack
🇳🇱
melroy89
2026-09-30 20:50:49
(1 month ago)
136.110.48.207 - - [30/Sep/2026:22:50:28 +0200] "GET /assets/manifest.json HTTP/2.0" 403 64 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0" "chat.melroy.org" 0.001
1 ...
show more
136.110.48.207 - - [30/Sep/2026:22:50:28 +0200] "GET /assets/manifest.json HTTP/2.0" 403 64 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0" "chat.melroy.org" 0.001
136.110.48.207 - - [30/Sep/2026:22:50:29 +0200] "POST / HTTP/2.0" 403 93 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36" "chat.melroy.org" 0.000
136.110.48.207 - - [30/Sep/2026:22:50:29 +0200] "GET /hp76gavigrxyzs0tcy6i HTTP/2.0" 403 93 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )" "chat.melroy.org" 0.000
136.110.48.207 - - [30/Sep/2026:22:50:29 +0200] "GET /o6yqwul0p9gmx5vkxkyx HTTP/2.0" 403 93 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )" "chat.melroy.org" 0.001
136.110.48.207 - - [30/Sep/2026:22:50:29 +0200] "POST /graphql HTTP/2.0" 403 64 "https://chat.melroy.or
...
show less
Web App Attack
2026-09-30 20:45:22
(1 month ago)
Fail2Ban apache-noscript
Bad Web Bot
🇺🇸
kosada.com
2026-09-30 20:08:03
(1 month ago)
Repeated requests for suspicious nonexistent URLs, for example: /config/env/aws_credentials.env (HTTP/2.0 port 443, user agent: "CCBot/2.0 (https://commoncrawl.org/faq/)")
Web App Attack
