🇫🇷
SpaceHost-Server
2026-09-29 22:17:07
(3 weeks ago)
Brute-Force
Web App Attack
🇩🇪
updown.io
2026-09-29 05:01:45
(3 weeks ago)
{"level":"info","ts":1790658103.1907804,"logger":"http.log.access.log1","msg":"handled request","req ...
show more
{"level":"info","ts":1790658103.1907804,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"136.64.34.189","remote_port":"33360","client_ip":"136.64.34.189","proto":"HTTP/2.0","method":"POST","host":"status.benharri.org","uri":"/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh","headers":{"Accept-Encoding":["gzip"],"Content-Type":["text/plain"],"User-Agent":["Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"],"Content-Length":["90"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"status.benharri.org","ech":false}},"bytes_read":0,"user_id":"","duration":0.000399963,"size":0,"status":429,"resp_headers":{"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"],"Server":["Caddy"]}}
{"level":"info","ts":1790658103.3259273,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"136.64.34.189","remote_port":"33360","client_ip":"136.64.34.189","proto":"HTTP/2.0","method":"POST","h
...
show less
DDoS Attack
Web App Attack
🇩🇪
macrob
2026-09-28 23:33:23
(3 weeks ago)
2026/09/28 23:33:22 [error] 273521#273521: *47078818 access forbidden by rule, client: 136.64.34.189 ...
show more
2026/09/28 23:33:22 [error] 273521#273521: *47078818 access forbidden by rule, client: 136.64.34.189, server: fn.binixo.es, request: "GET /dist/.vite/manifest.json HTTP/2.0", host: "auth-staging.wynspire.org"
2026/09/28 23:33:22 [error] 273521#273521: *47078820 access forbidden by rule, client: 136.64.34.189, server: fn.binixo.es, request: "GET /.vite/manifest.json HTTP/2.0", host: "auth-staging.wynspire.org"
2026/09/28 23:33:22 [error] 273522#273522: *47078828 access forbidden by rule, client: 136.64.34.189, server: fn.binixo.es, request: "GET /config/env/aws_credentials.env HTTP/2.0", host: "auth-staging.wynspire.org"
...
show less
Web App Attack
🇫🇷
SpaceHost-Server
2026-09-28 22:16:30
(3 weeks ago)
Brute-Force
Web App Attack
🇩🇪
macrob
2026-09-28 19:40:15
(3 weeks ago)
2026/09/28 19:40:14 [error] 273522#273522: *46588627 access forbidden by rule, client: 136.64.34.189 ...
show more
2026/09/28 19:40:14 [error] 273522#273522: *46588627 access forbidden by rule, client: 136.64.34.189, server: fn.binixo.es, request: "GET /.vite/manifest.json HTTP/2.0", host: "app-demo.wynspire.org"
2026/09/28 19:40:14 [error] 273518#273518: *46588638 access forbidden by rule, client: 136.64.34.189, server: fn.binixo.es, request: "GET /dist/.vite/manifest.json HTTP/2.0", host: "app-demo.wynspire.org"
2026/09/28 19:40:14 [error] 273522#273522: *46588636 access forbidden by rule, client: 136.64.34.189, server: fn.binixo.es, request: "GET /.dockerenv HTTP/2.0", host: "app-demo.wynspire.org"
...
show less
Web App Attack
🇩🇪
macrob
2026-09-28 17:28:01
(3 weeks ago)
2026/09/28 17:28:00 [error] 273521#273521: *46235829 access forbidden by rule, client: 136.64.34.189 ...
show more
2026/09/28 17:28:00 [error] 273521#273521: *46235829 access forbidden by rule, client: 136.64.34.189, server: fn.binixo.es, request: "GET /.vite/manifest.json HTTP/2.0", host: "api-uat.wynspire.org"
2026/09/28 17:28:00 [error] 273518#273518: *46235832 access forbidden by rule, client: 136.64.34.189, server: fn.binixo.es, request: "GET /dist/.vite/manifest.json HTTP/2.0", host: "api-uat.wynspire.org"
2026/09/28 17:28:00 [error] 273523#273523: *46235820 access forbidden by rule, client: 136.64.34.189, server: fn.binixo.es, request: "GET /config/firebase-admin.json HTTP/2.0", host: "api-uat.wynspire.org"
...
show less
Web App Attack
🇺🇸
EvilTurkey
2026-09-28 14:06:51
(3 weeks ago)
Web app attack against financial institution website.
Web App Attack
Hacking
🇩🇪
macrob
2026-09-28 08:34:56
(3 weeks ago)
2026/09/28 08:34:54 [error] 88274#88274: *44606883 access forbidden by rule, client: 136.64.34.189, ...
show more
2026/09/28 08:34:54 [error] 88274#88274: *44606883 access forbidden by rule, client: 136.64.34.189, server: fn.binixo.es, request: "GET /z9x8c7v6b5-debug-trigger-admin-staging.wynspire.org HTTP/2.0", host: "admin-staging.wynspire.org"
2026/09/28 08:34:54 [error] 88274#88274: *44606894 access forbidden by rule, client: 136.64.34.189, server: fn.binixo.es, request: "GET /dist/.vite/manifest.json HTTP/2.0", host: "admin-staging.wynspire.org"
2026/09/28 08:34:54 [error] 88274#88274: *44606883 access forbidden by rule, client: 136.64.34.189, server: fn.binixo.es, request: "GET /.vite/manifest.json HTTP/2.0", host: "admin-staging.wynspire.org"
...
show less
Web App Attack
🇩🇪
macrob
2026-09-28 06:09:35
(3 weeks ago)
2026/09/28 06:09:33 [error] 17010#17010: *44196419 access forbidden by rule, client: 136.64.34.189, ...
show more
2026/09/28 06:09:33 [error] 17010#17010: *44196419 access forbidden by rule, client: 136.64.34.189, server: fn.binixo.es, request: "GET /dist/.vite/manifest.json HTTP/2.0", host: "admin-beta.wynspire.org"
2026/09/28 06:09:33 [error] 17010#17010: *44196420 access forbidden by rule, client: 136.64.34.189, server: fn.binixo.es, request: "GET /z9x8c7v6b5-debug-trigger-admin-beta.wynspire.org HTTP/2.0", host: "admin-beta.wynspire.org"
2026/09/28 06:09:33 [error] 17006#17006: *44196421 access forbidden by rule, client: 136.64.34.189, server: fn.binixo.es, request: "GET /.vite/manifest.json HTTP/2.0", host: "admin-beta.wynspire.org"
...
show less
Web App Attack
🇩🇪
on-com
2026-09-28 04:41:29
(3 weeks ago)
URL scan
Brute-Force
Web App Attack
🇺🇸
chrisj
2026-09-28 04:23:00
(3 weeks ago)
[Mon Sep 28 04:23:00.543541 2026] [proxy_fcgi:error] [pid 265244:tid 265258] [remote 136.64.34.189:4 ...
show more
[Mon Sep 28 04:23:00.543541 2026] [proxy_fcgi:error] [pid 265244:tid 265258] [remote 136.64.34.189:48624] AH01071: Got error 'Primary script unknown'
[Mon Sep 28 04:23:00.569758 2026] [proxy_fcgi:error] [pid 265244:tid 265259] [remote 136.64.34.189:48624] AH01071: Got error 'Primary script unknown'
[Mon Sep 28 04:23:00.579101 2026] [proxy_fcgi:error] [pid 265244:tid 265262] [remote 136.64.34.189:48624] AH01071: Got error 'Primary script unknown'
...
show less
Brute-Force
🇺🇸
Mundo Bueno
2026-09-28 02:48:56
(3 weeks ago)
[ISILIA Protection v2.3] Tentative d'accès: /@fs/home/ubuntu/.aws/credentials [RATE LIMITED - 1800s ...
show more
[ISILIA Protection v2.3] Tentative d'accès: /@fs/home/ubuntu/.aws/credentials [RATE LIMITED - 1800s quarantine] | Pays: US | UA: Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)
show less
Hacking
Web App Attack
🇩🇪
crypto i trust, hold i must
2026-09-28 02:40:04
(3 weeks ago)
Web scanner path: /config/env/aws_credentials.env
Web App Attack
🇺🇸
JonathanYoung2161
2026-09-28 02:23:38
(3 weeks ago)
trekgalactic.org 136.64.34.189 - - [27/Sep/2026:21:23:36 -0500] "GET /config/env/aws_credentials.env ...
show more
trekgalactic.org 136.64.34.189 - - [27/Sep/2026:21:23:36 -0500] "GET /config/env/aws_credentials.env HTTP/2.0" 404 3360 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
trekgalactic.org 136.64.34.189 - - [27/Sep/2026:21:23:36 -0500] "GET /.env.development HTTP/2.0" 403 3330 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"
trekgalactic.org 136.64.34.189 - - [27/Sep/2026:21:23:36 -0500] "GET /.env.staging HTTP/2.0" 403 3330 "-" "Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)"
...
show less
Brute-Force
Web App Attack
🇷🇺
olegio
2026-09-28 02:12:48
(3 weeks ago)
136.64.34.189 - - [28/Sep/2026:02:12:47 +0000] "GET /api/console/api_server?sense_version=%40%40SENS ...
show more
136.64.34.189 - - [28/Sep/2026:02:12:47 +0000] "GET /api/console/api_server?sense_version=%40%40SENSE_VERSION&apis=../../../../../../.env HTTP/2.0" 404 2815 "-" "Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)"
136.64.34.189 - - [28/Sep/2026:02:12:47 +0000] "GET /userfiles?path=../../.env HTTP/2.0" 404 2815 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot"
...
show less
Brute-Force
Web App Attack
