๐บ๐ธ
swordlegend228
2026-10-04 04:54:00
(3 weeks ago)
sonde /.next/.env
Bad Web Bot
Web App Attack
๐บ๐ธ
brightenfield
2026-10-02 15:44:03
(3 weeks ago)
Web App Attack
Web App Attack
๐ฉ๐ช
macrob
2026-10-02 15:31:00
(3 weeks ago)
2026/10/02 15:30:58 [error] 2231815#2231815: *9064704 access forbidden by rule, client: 34.21.206.55, server: fn.binixo.es, request: "GET /.vite/manifest.json HTTP/2.0", host: "secure.wynspire.org"
2026/10/02 15:30:58 [error] 2231816#2231816: *906471 ...
show more
2026/10/02 15:30:58 [error] 2231815#2231815: *9064704 access forbidden by rule, client: 34.21.206.55, server: fn.binixo.es, request: "GET /.vite/manifest.json HTTP/2.0", host: "secure.wynspire.org"
2026/10/02 15:30:58 [error] 2231816#2231816: *9064717 access forbidden by rule, client: 34.21.206.55, server: fn.binixo.es, request: "GET /dist/.vite/manifest.json HTTP/2.0", host: "secure.wynspire.org"
2026/10/02 15:30:58 [error] 2231815#2231815: *9064726 access forbidden by rule, client: 34.21.206.55, server: fn.binixo.es, request: "GET /media../.env HTTP/2.0", host: "secure.wynspire.org"
...
show less
Web App Attack
๐บ๐ธ
WellSpring
2026-10-02 14:59:50
(3 weeks ago)
env leak on teachercovenant.org/uploads../.env โ WellSpr.ing/NetSentinel civic-AI security layer
Web App Attack
Anonymous
2026-10-02 14:30:07
(3 weeks ago)
Triggered: repeated knocking on closed ports.
Port Scan
Anonymous
2026-10-02 14:23:17
(3 weeks ago)
34.21.206.55 - - [02/Oct/2026:16:23:15 +0200] "GET / HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.21.206.55 - - [02/Oct/2026:16:23:16 +0200] "GET /wfafmh0ga ...
show more
34.21.206.55 - - [02/Oct/2026:16:23:15 +0200] "GET / HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.21.206.55 - - [02/Oct/2026:16:23:16 +0200] "GET /wfafmh0gawbq41e6yox5 HTTP/1.1" 403 124 "-" "Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)"
34.21.206.55 - - [02/Oct/2026:16:23:16 +0200] "GET /console HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.21.206.55 - - [02/Oct/2026:16:23:16 +0200] "GET /users/login HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.21.206.55 - - [02/Oct/2026:16:23:16 +0200] "GET /signin HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.21.206.55 - - [02/Oct/2026:16:23:16 +0200] "GET /wfaij2obal50roeo4s
...
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
Blexyel
2026-10-02 14:22:19
(3 weeks ago)
34.21.206.55 - - [02/Oct/2026:16:22:18 +0200] "GET /.git/config HTTP/2.0" 200 3069 "-" "Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)"
...
Brute-Force
Web App Attack
๐บ๐ธ
kosada.com
2026-10-02 13:18:54
(3 weeks ago)
Repeated requests for suspicious nonexistent URLs, for example: /graphql (HTTP/2.0 port 443, user agent: "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)")
Web App Attack
Anonymous
2026-10-02 12:23:58
(3 weeks ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
Anonymous
2026-10-02 12:14:21
(3 weeks ago)
[Fri Oct 02 14:14:19.241809 2026] [php:error] [pid 2244098] [client 34.21.206.55:58210] script '/var/www/11spielerinnen.de/public_html/document.php' not found or unable to stat
[Fri Oct 02 14:14:19.288091 2026] [php:error] [pid 2144671] [client 34.21 ...
show more
[Fri Oct 02 14:14:19.241809 2026] [php:error] [pid 2244098] [client 34.21.206.55:58210] script '/var/www/11spielerinnen.de/public_html/document.php' not found or unable to stat
[Fri Oct 02 14:14:19.288091 2026] [php:error] [pid 2144671] [client 34.21.206.55:58178] script '/var/www/11spielerinnen.de/public_html/i.php' not found or unable to stat
[Fri Oct 02 14:14:19.448919 2026] [php:error] [pid 2244098] [client 34.21.206.55:58210] script '/var/www/11spielerinnen.de/public_html/test.php' not found or unable to stat
...
show less
Bad Web Bot
๐ฉ๐ช
macrob
2026-10-02 10:39:27
(3 weeks ago)
2026/10/02 10:39:26 [error] 2231818#2231818: *8230465 access forbidden by rule, client: 34.21.206.55, server: fn.binixo.es, request: "GET /.vite/manifest.json HTTP/2.0", host: "uat.wynspire.org"
2026/10/02 10:39:26 [error] 2231819#2231819: *8230474 a ...
show more
2026/10/02 10:39:26 [error] 2231818#2231818: *8230465 access forbidden by rule, client: 34.21.206.55, server: fn.binixo.es, request: "GET /.vite/manifest.json HTTP/2.0", host: "uat.wynspire.org"
2026/10/02 10:39:26 [error] 2231819#2231819: *8230474 access forbidden by rule, client: 34.21.206.55, server: fn.binixo.es, request: "GET /dist/.vite/manifest.json HTTP/2.0", host: "uat.wynspire.org"
2026/10/02 10:39:26 [error] 2231818#2231818: *8230495 access forbidden by rule, client: 34.21.206.55, server: fn.binixo.es, request: "GET /@fs/app/.env.production?import&raw?? HTTP/2.0", host: "uat.wynspire.org"
...
show less
Web App Attack
Anonymous
2026-10-02 09:37:14
(3 weeks ago)
[Fri Oct 02 11:37:12.913305 2026] [php:error] [pid 2071286] [client 34.21.206.55:51710] script '/var/www/11spielerinnen.de/public_html/document.php' not found or unable to stat
...
Bad Web Bot
๐ท๐บ
olegio
2026-10-02 09:19:51
(3 weeks ago)
34.21.206.55 - - [02/Oct/2026:09:19:48 +0000] "GET /.env.js HTTP/2.0" 403 146 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )"
34.21.206.55 - - [02/Oct/2026:09:19:50 +0000] "GET /js../.en ...
show more
34.21.206.55 - - [02/Oct/2026:09:19:48 +0000] "GET /.env.js HTTP/2.0" 403 146 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )"
34.21.206.55 - - [02/Oct/2026:09:19:50 +0000] "GET /js../.env HTTP/2.0" 403 146 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
...
show less
Brute-Force
Web App Attack
๐ง๐ช
cmbplf
2026-10-02 09:01:50
(3 weeks ago)
2.762 requests from abuseipdb.com blacklisted IP (1yr5mos4w)
Brute-Force
Bad Web Bot
Anonymous
2026-10-02 08:55:15
(3 weeks ago)
[Drupal AbuseIPDB module] Request path is blacklisted. /wp-config.php.bak
Web App Attack