|
๐ซ๐ท
SpaceHost-Server
|
|
|
Brute-Force
Web App Attack
|
|
๐ฌ๐ง
openstrike.co.uk
|
|
7 attacks on password/key grabbing URLs:
GET /__vite_rsc_findSourceMapURL?filename=file:///root/.aws/credentials&environmentName=rsc HTTP/1.1
|
Hacking
|
|
๐ฉ๐ช
macrob
|
|
2026/10/07 04:51:53 [error] 303140#303140: *25093619 access forbidden by rule, client: 34.95.140.37, server: fn.binixo.es, request: "GET /.vite/manifest.json HTTP/2.0", host: "conversations.wellbin.org"
2026/10/07 04:51:53 [error] 303141#303141: *250 ...
show more
2026/10/07 04:51:53 [error] 303140#303140: *25093619 access forbidden by rule, client: 34.95.140.37, server: fn.binixo.es, request: "GET /.vite/manifest.json HTTP/2.0", host: "conversations.wellbin.org"
2026/10/07 04:51:53 [error] 303141#303141: *25093604 access forbidden by rule, client: 34.95.140.37, server: fn.binixo.es, request: "GET /dist/.vite/manifest.json HTTP/2.0", host: "conversations.wellbin.org"
2026/10/07 04:51:53 [error] 303140#303140: *25093618 access forbidden by rule, client: 34.95.140.37, server: fn.binixo.es, request: "GET /files../.env HTTP/2.0", host: "conversations.wellbin.org"
...
show less
|
Web App Attack
|
|
๐ฉ๐ช
macrob
|
|
2026/10/07 01:26:07 [error] 303143#303143: *24622888 access forbidden by rule, client: 34.95.140.37, server: fn.binixo.es, request: "GET /dist/.vite/manifest.json HTTP/2.0", host: "cases.wellbin.org"
2026/10/07 01:26:07 [error] 303141#303141: *246228 ...
show more
2026/10/07 01:26:07 [error] 303143#303143: *24622888 access forbidden by rule, client: 34.95.140.37, server: fn.binixo.es, request: "GET /dist/.vite/manifest.json HTTP/2.0", host: "cases.wellbin.org"
2026/10/07 01:26:07 [error] 303141#303141: *24622889 access forbidden by rule, client: 34.95.140.37, server: fn.binixo.es, request: "GET /.vite/manifest.json HTTP/2.0", host: "cases.wellbin.org"
2026/10/07 01:26:08 [error] 303143#303143: *24622903 access forbidden by rule, client: 34.95.140.37, server: fn.binixo.es, request: "GET /static../.env HTTP/2.0", host: "cases.wellbin.org"
...
show less
|
Web App Attack
|
|
๐ง๐ท
radardatelecom
|
|
Blocked by Radar da Telecom firewall โ abuseipdb
|
Bad Web Bot
Web App Attack
|
|
๐ซ๐ท
SpaceHost-Server
|
|
|
Brute-Force
Web App Attack
|
|
๐ฉ๐ช
macrob
|
|
2026/10/06 21:32:11 [error] 303142#303142: *24132584 access forbidden by rule, client: 34.95.140.37, server: fn.binixo.es, request: "GET /dist/.vite/manifest.json HTTP/2.0", host: "alpha.wellbin.org"
2026/10/06 21:32:11 [error] 303138#303138: *241325 ...
show more
2026/10/06 21:32:11 [error] 303142#303142: *24132584 access forbidden by rule, client: 34.95.140.37, server: fn.binixo.es, request: "GET /dist/.vite/manifest.json HTTP/2.0", host: "alpha.wellbin.org"
2026/10/06 21:32:11 [error] 303138#303138: *24132585 access forbidden by rule, client: 34.95.140.37, server: fn.binixo.es, request: "GET /.vite/manifest.json HTTP/2.0", host: "alpha.wellbin.org"
2026/10/06 21:32:12 [error] 303138#303138: *24132580 access forbidden by rule, client: 34.95.140.37, server: fn.binixo.es, request: "GET /public../.env HTTP/2.0", host: "alpha.wellbin.org"
...
show less
|
Web App Attack
|
|
Anonymous
|
|
34.95.140.37 - - [06/Oct/2026:14:53:11 -0500] "GET /.env.js HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)" 34.95.140.37
34.95.140.37 - - [06/Oct/2026:15:14:02 -0500] "GET /.env?raw HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Mac ...
show more
34.95.140.37 - - [06/Oct/2026:14:53:11 -0500] "GET /.env.js HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)" 34.95.140.37
34.95.140.37 - - [06/Oct/2026:15:14:02 -0500] "GET /.env?raw HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; +https://openai.com/searchbot" 34.95.140.37
34.95.140.37 - - [06/Oct/2026:15:14:02 -0500] "GET /.env?import&raw HTTP/1.1" 403 199 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)" 34.95.140.37
34.95.140.37 - - [06/Oct/2026:15:14:02 -0500] "GET /.env?import&url&inline HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)" 34.95.140.37
34.95.140.37 - - [06/Oct/2026:15:14:02 -0500] "GET /.env.local?raw HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 34.95.140.37
34.95.140.37 - - [06/Oct/2026:15:14:02 -0500] "GET /.env.production?
...
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
Anonymous
|
|
WAF repeated trigger detected by Fail2Ban
|
Web App Attack
|
|
๐ฉ๐ช
macrob
|
|
2026/10/06 19:41:49 [error] 12683#12683: *23873497 access forbidden by rule, client: 34.95.140.37, server: fn.binixo.es, request: "GET /dist/.vite/manifest.json HTTP/2.0", host: "2fa.wellbin.org"
2026/10/06 19:41:49 [error] 12683#12683: *23873512 acc ...
show more
2026/10/06 19:41:49 [error] 12683#12683: *23873497 access forbidden by rule, client: 34.95.140.37, server: fn.binixo.es, request: "GET /dist/.vite/manifest.json HTTP/2.0", host: "2fa.wellbin.org"
2026/10/06 19:41:49 [error] 12683#12683: *23873512 access forbidden by rule, client: 34.95.140.37, server: fn.binixo.es, request: "GET /.vite/manifest.json HTTP/2.0", host: "2fa.wellbin.org"
2026/10/06 19:41:49 [error] 12680#12680: *23873524 access forbidden by rule, client: 34.95.140.37, server: fn.binixo.es, request: "GET /.npmrc HTTP/2.0", host: "2fa.wellbin.org"
...
show less
|
Web App Attack
|
|
๐ฉ๐ช
paissangroup
|
|
Multiple WAF Violations
|
Web App Attack
|
|
๐ฉ๐ช
Gwyneth Llewelyn
|
|
34.95.140.37 - - [06/Oct/2026:17:46:25 +0100] "POST /cgi-bin/php-cgi.exe?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/2.0" 404 994 "-" "Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)"
|
Bad Web Bot
|
|
๐ณ๐ฑ
debestelapp
|
|
|
Web App Attack
|
|
Anonymous
|
|
34.95.140.37 detected on srv01
|
Brute-Force
|
|
Anonymous
|
|
[honeypot-scan] 2026-10-06 16:22:14, Client: 34.95.140.37, Protocol: 6 (TCP), Service: HTTP, Activity: bait-path scan (.env/.git probing)
|
Web App Attack
|