๐ฉ๐ช
macrob
2026-09-19 07:13:23
(35 minutes ago)
2026/09/19 07:13:22 [error] 31032#31032: *14084214 access forbidden by rule, client: 34.81.106.194, ...
show more
2026/09/19 07:13:22 [error] 31032#31032: *14084214 access forbidden by rule, client: 34.81.106.194, server: fn.binixo.es, request: "GET /.aws/config HTTP/2.0", host: "apps.wynspire.org"
2026/09/19 07:13:22 [error] 31034#31034: *14084215 access forbidden by rule, client: 34.81.106.194, server: fn.binixo.es, request: "GET /.git/config HTTP/2.0", host: "apps.wynspire.org"
2026/09/19 07:13:22 [error] 31034#31034: *14084215 access forbidden by rule, client: 34.81.106.194, server: fn.binixo.es, request: "GET /dist/.vite/manifest.json HTTP/2.0", host: "apps.wynspire.org"
...
show less
Web App Attack
๐ฉ๐ช
macrob
2026-09-19 05:32:23
(2 hours ago)
2026/09/19 05:32:22 [error] 4160198#4160198: *13840579 access forbidden by rule, client: 34.81.106.1 ...
show more
2026/09/19 05:32:22 [error] 4160198#4160198: *13840579 access forbidden by rule, client: 34.81.106.194, server: fn.binixo.es, request: "GET /.aws/credentials HTTP/2.0", host: "api2.wynspire.org"
2026/09/19 05:32:22 [error] 4160198#4160198: *13840581 access forbidden by rule, client: 34.81.106.194, server: fn.binixo.es, request: "GET /.aws/config HTTP/2.0", host: "api2.wynspire.org"
2026/09/19 05:32:22 [error] 4160198#4160198: *13840571 access forbidden by rule, client: 34.81.106.194, server: fn.binixo.es, request: "GET /project/.env HTTP/2.0", host: "api2.wynspire.org"
...
show less
Web App Attack
๐ฉ๐ช
macrob
2026-09-19 01:28:26
(6 hours ago)
2026/09/19 01:28:24 [error] 3927478#3927478: *13378853 access forbidden by rule, client: 34.81.106.1 ...
show more
2026/09/19 01:28:24 [error] 3927478#3927478: *13378853 access forbidden by rule, client: 34.81.106.194, server: fn.binixo.es, request: "GET /.bash_profile HTTP/2.0", host: "alertmanager.wynspire.org"
2026/09/19 01:28:24 [error] 3927479#3927479: *13378855 access forbidden by rule, client: 34.81.106.194, server: fn.binixo.es, request: "GET /.vite/manifest.json HTTP/2.0", host: "alertmanager.wynspire.org"
2026/09/19 01:28:24 [error] 3927478#3927478: *13378856 access forbidden by rule, client: 34.81.106.194, server: fn.binixo.es, request: "GET /.zshrc HTTP/2.0", host: "alertmanager.wynspire.org"
...
show less
Web App Attack
๐ฉ๐ช
XICTRON
2026-09-18 23:00:06
(8 hours ago)
ModSecurity rule violation detected by Fail2Ban
Web App Attack
๐ฉ๐ช
macrob
2026-09-18 20:35:56
(11 hours ago)
2026/09/18 20:35:54 [error] 3927482#3927482: *12851653 access forbidden by rule, client: 34.81.106.1 ...
show more
2026/09/18 20:35:54 [error] 3927482#3927482: *12851653 access forbidden by rule, client: 34.81.106.194, server: fn.binixo.es, request: "GET /dist/.vite/manifest.json HTTP/2.0", host: "adm.wynspire.org"
2026/09/18 20:35:54 [error] 3927480#3927480: *12851660 access forbidden by rule, client: 34.81.106.194, server: fn.binixo.es, request: "GET /.vite/manifest.json HTTP/2.0", host: "adm.wynspire.org"
2026/09/18 20:35:55 [error] 3927480#3927480: *12851662 access forbidden by rule, client: 34.81.106.194, server: fn.binixo.es, request: "GET /admin HTTP/2.0", host: "adm.wynspire.org"
...
show less
Web App Attack
๐ณ๐ฑ
Alt255
2026-09-18 17:42:43
(14 hours ago)
[ti-05al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-05al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.81.106.194 - - [18/Sep/2026:19:42:37 +0200] "GET /.env.js HTTP/2.0" 404 1920 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot)"
...
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
xmission.com
2026-09-18 17:30:43
(14 hours ago)
Blocked by UFW (TCP on 8080)
Source port: 48646
TTL: 61
Packet length: 60
TOS: 0x00
This report (fo ...
show more
Blocked by UFW (TCP on 8080)
Source port: 48646
TTL: 61
Packet length: 60
TOS: 0x00
This report (for 34.81.106.194) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
Web App Attack
๐บ๐ธ
LotPhantom
2026-09-18 15:54:31
(15 hours ago)
2026-09-18T15:54:30.612895+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1 ...
show more
2026-09-18T15:54:30.612895+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=34.81.106.194 DST=157.230.217.55 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=17443 DF PROTO=TCP SPT=60814 DPT=8443 WINDOW=65320 RES=0x00 SYN URGP=0
2026-09-18T15:54:30.613867+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=34.81.106.194 DST=157.230.217.55 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=26848 DF PROTO=TCP SPT=44500 DPT=8080 WINDOW=65320 RES=0x00 SYN URGP=0
...
show less
Port Scan
Hacking
Anonymous
2026-09-18 13:21:44
(18 hours ago)
Portscan: TCP/8080 (5x), TCP/8443 (5x)
Port Scan
๐ง๐ท
dermatovirtual
2026-09-18 12:29:58
(19 hours ago)
Dermato Virtual CSIRT: Malicious web exploit/scanning probes against app.dermatovirtual.com.br (Web ...
show more
Dermato Virtual CSIRT: Malicious web exploit/scanning probes against app.dermatovirtual.com.br (Web Server Ports 80/443). 31 unauthorized requests recorded between 2026-09-17 12:24:54 UTC and 2026-09-17 12:25:05 UTC (rate: ~31 req/min). Edge perimeter firewall drop active.
Log sample:
[2026-09-17 12:25:05 UTC] IP: 34.81.106.194 - W3C IIS (Port 443): GET /.env -> HTTP 404 [CLIENT: 34.81.106.194]
[2026-09-17 12:25:05 UTC] IP: 34.81.106.194 - W3C IIS (Port 443): GET /static../.env -> HTTP 404 [CLIENT: 34.81.106.194]
[2026-09-17 12:25:05 UTC] IP: 34.81.106.194 - W3C IIS (Port 443): GET /static/.env -> HTTP 404 [CLIENT: 34.81.106.194]
show less
Bad Web Bot
Web App Attack
๐น๐ญ
MWA SOC
2026-09-18 02:47:03
(1 day ago)
Hacking
๐ฌ๐ง
andypiper
2026-09-18 01:02:50
(1 day ago)
CrowdSec ban for AbuseIPDB Top List
Brute-Force
Web App Attack
๐ฉ๐ช
Skyrider
2026-09-18 00:42:44
(1 day ago)
Nginx: HTTP 4xx probe/scan attempts. Automated fail2ban report.
Bad Web Bot
Web App Attack
๐ฎ๐น
CoreTech srl
2026-09-18 00:09:26
(1 day ago)
[DC: IP:151.1.252.27] ntopng alert: blacklisted_server_contact
Hacking
๐ซ๐ท
SpaceHost-Server
2026-09-17 22:21:47
(1 day ago)
Brute-Force
Web App Attack