|
🇦🇺
13.70.107.184
|
|
13.70.107.184 - - [04/Oct/2026:17:34:07 +0200] "GET /wp-includes/ID3/about.php HTTP/1.1" 403 146 "-" ...
show more
13.70.107.184 - - [04/Oct/2026:17:34:07 +0200] "GET /wp-includes/ID3/about.php HTTP/1.1" 403 146 "-" "-"
13.70.107.184 - - [04/Oct/2026:17:34:08 +0200] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 403 6282 "-" "-"
13.70.107.184 - - [04/Oct/2026:17:34:08 +0200] "GET /wp-includes/blocks/audio/ HTTP/1.1" 403 6282 "-" "-"
13.70.107.184 - - [04/Oct/2026:17:34:13 +0200] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 403 146 "-" "-"
13.70.107.184 - - [04/Oct/2026:17:34:15 +0200] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 403 6282 "-" "-"
...
show less
|
Web App Attack
|
|
🇺🇸
136.65.189.251
|
|
136.65.189.251 - - [03/Oct/2026:23:42:48 +0200] "GET /wp-config.php.bak HTTP/1.1" 403 548 "-" "Mozil ...
show more
136.65.189.251 - - [03/Oct/2026:23:42:48 +0200] "GET /wp-config.php.bak HTTP/1.1" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
136.65.189.251 - - [03/Oct/2026:23:42:48 +0200] "GET /wp-config.php.bak HTTP/1.1" 403 146 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Mobile/15E148 Safari/604.1"
136.65.189.251 - - [03/Oct/2026:23:42:48 +0200] "GET /wp-config.php.old HTTP/1.1" 403 146 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0"
136.65.189.251 - - [03/Oct/2026:23:42:49 +0200] "GET /wp-config.php.old HTTP/1.1" 403 146 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Mobile/15E148 Safari/604.1"
136.65.189.251 - - [03/Oct/2026:23:42:49 +0200] "GET /wp-config.php.save HTTP/1.1" 403 146 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_7_2) AppleWebKit/605.1.
...
show less
|
Web App Attack
|
|
🇩🇪
194.45.37.30
|
|
webmail.notification.x0w.de:443 13.70.107.184 - - [03/Oct/2026:23:16:40 +0200] "GET /wp-admin/css/co ...
show more
webmail.notification.x0w.de:443 13.70.107.184 - - [03/Oct/2026:23:16:40 +0200] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 403 5673 "-" "-"
webmail.notification.x0w.de:443 13.70.107.184 - - [03/Oct/2026:23:16:41 +0200] "GET /wp-includes/blocks/audio/ HTTP/1.1" 403 5673 "-" "-"
webmail.notification.x0w.de:443 13.70.107.184 - - [03/Oct/2026:23:16:46 +0200] "GET /wp-content/ HTTP/1.1" 403 5673 "-" "-"
webmail.notification.x0w.de:443 13.70.107.184 - - [03/Oct/2026:23:16:47 +0200] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 403 5673 "-" "-"
webmail.notification.x0w.de:443 13.70.107.184 - - [03/Oct/2026:23:16:47 +0200] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 403 5673 "-" "-"
...
show less
|
Web App Attack
|
|
🇦🇺
20.92.83.244
|
|
20.92.83.244 - - [03/Oct/2026:20:12:05 +0200] "GET /echkm.php? HTTP/1.1" 403 5610 "-" "-"
20.92.83.2 ...
show more
20.92.83.244 - - [03/Oct/2026:20:12:05 +0200] "GET /echkm.php? HTTP/1.1" 403 5610 "-" "-"
20.92.83.244 - - [03/Oct/2026:20:12:06 +0200] "GET /fpwch.php HTTP/1.1" 403 5610 "-" "-"
20.92.83.244 - - [03/Oct/2026:20:12:07 +0200] "GET /b.php?p= HTTP/1.1" 403 5610 "-" "-"
20.92.83.244 - - [03/Oct/2026:20:12:07 +0200] "GET /wp-content/themes/index.php HTTP/1.1" 403 5610 "-" "-"
20.92.83.244 - - [03/Oct/2026:20:12:08 +0200] "GET /adminfuns.php HTTP/1.1" 403 5610 "-" "-"
...
show less
|
Web App Attack
|
|
🇩🇪
194.45.37.30
|
|
webmail.notification.x0w.de:443 20.211.90.37 - - [03/Oct/2026:19:42:52 +0200] "GET /wp-admin/css/col ...
show more
webmail.notification.x0w.de:443 20.211.90.37 - - [03/Oct/2026:19:42:52 +0200] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 403 5673 "-" "-"
webmail.notification.x0w.de:443 20.211.90.37 - - [03/Oct/2026:19:42:53 +0200] "GET /wp-includes/blocks/audio/ HTTP/1.1" 403 5673 "-" "-"
webmail.notification.x0w.de:443 20.211.90.37 - - [03/Oct/2026:19:42:58 +0200] "GET /wp-content/ HTTP/1.1" 403 5673 "-" "-"
webmail.notification.x0w.de:443 20.211.90.37 - - [03/Oct/2026:19:42:58 +0200] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 403 5673 "-" "-"
webmail.notification.x0w.de:443 20.211.90.37 - - [03/Oct/2026:19:42:59 +0200] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 403 5673 "-" "-"
...
show less
|
Web App Attack
|
|
🇩🇪
87.106.141.44
|
|
Oct 3 18:31:13 web09 postfix/smtpd[2743404]: warning: unknown[87.106.141.44]: SASL login authentica ...
show more
Oct 3 18:31:13 web09 postfix/smtpd[2743404]: warning: unknown[87.106.141.44]: SASL login authentication failed: authentication failure, sasl_username=noauth
Oct 3 18:31:13 web09 postfix/smtpd[2743404]: warning: unknown[87.106.141.44]: SASL login authentication failed: authentication failure, sasl_username=spam
Oct 3 18:31:13 web09 postfix/smtpd[2743404]: warning: unknown[87.106.141.44]: SASL login authentication failed: authentication failure, sasl_username=test
Oct 3 18:31:14 web09 postfix/smtpd[2743404]: warning: unknown[87.106.141.44]: SASL login authentication failed: authentication failure, sasl_username=info
Oct 3 18:31:14 web09 postfix/smtpd[2743404]: warning: unknown[87.106.141.44]: SASL login authentication failed: authentication failure, sasl_username=admin
...
show less
|
Brute-Force
|
|
🇭🇰
104.208.73.227
|
|
104.208.73.227 - - [03/Oct/2026:15:05:10 +0200] "GET /go.php HTTP/1.1" 403 5610 "-" "-"
104.208.73.2 ...
show more
104.208.73.227 - - [03/Oct/2026:15:05:10 +0200] "GET /go.php HTTP/1.1" 403 5610 "-" "-"
104.208.73.227 - - [03/Oct/2026:15:05:10 +0200] "GET /wp-filemanager1_260805194013.php HTTP/1.1" 403 5610 "-" "-"
104.208.73.227 - - [03/Oct/2026:15:05:11 +0200] "GET /wp-fgban13jx3.php HTTP/1.1" 403 5610 "-" "-"
104.208.73.227 - - [03/Oct/2026:15:05:11 +0200] "GET /1ac.php HTTP/1.1" 403 5610 "-" "-"
104.208.73.227 - - [03/Oct/2026:15:05:12 +0200] "GET /flm.php HTTP/1.1" 403 5610 "-" "-"
...
show less
|
Web App Attack
|
|
🇩🇪
31.70.83.197
|
|
Oct 3 03:51:49 web09 postfix/smtpd[2522695]: warning: ip31-70-83-197.pbiaas.com[31.70.83.197]: SASL ...
show more
Oct 3 03:51:49 web09 postfix/smtpd[2522695]: warning: ip31-70-83-197.pbiaas.com[31.70.83.197]: SASL login authentication failed: authentication failure, sasl_username=noauth
Oct 3 03:51:49 web09 postfix/smtpd[2532117]: warning: ip31-70-83-197.pbiaas.com[31.70.83.197]: SASL login authentication failed: authentication failure, sasl_username=spam
Oct 3 03:51:49 web09 postfix/smtpd[2522695]: warning: ip31-70-83-197.pbiaas.com[31.70.83.197]: SASL login authentication failed: authentication failure, sasl_username=test
Oct 3 03:51:49 web09 postfix/smtpd[2532117]: warning: ip31-70-83-197.pbiaas.com[31.70.83.197]: SASL login authentication failed: authentication failure, sasl_username=info
Oct 3 03:51:49 web09 postfix/smtpd[2522695]: warning: ip31-70-83-197.pbiaas.com[31.70.83.197]: SASL login authentication failed: authentication failure, sasl_username=admin
...
show less
|
Brute-Force
|
|
🇺🇸
107.148.223.239
|
|
Oct 2 23:14:26 web09 postfix/smtpd[2357886]: warning: unknown[107.148.223.239]: SASL login authenti ...
show more
Oct 2 23:14:26 web09 postfix/smtpd[2357886]: warning: unknown[107.148.223.239]: SASL login authentication failed: authentication failure, sasl_username=noauth
Oct 2 23:14:42 web09 postfix/smtpd[2357886]: warning: unknown[107.148.223.239]: SASL login authentication failed: authentication failure, sasl_username=info
Oct 2 23:14:48 web09 postfix/smtpd[2357886]: warning: unknown[107.148.223.239]: SASL login authentication failed: authentication failure, sasl_username=admin
Oct 2 23:14:54 web09 postfix/smtpd[2357886]: warning: unknown[107.148.223.239]: SASL login authentication failed: authentication failure, sasl_username=postmaster
Oct 2 23:15:02 web09 postfix/smtpd[2357886]: warning: unknown[107.148.223.239]: SASL login authentication failed: authentication failure, sasl_username=support
...
show less
|
Brute-Force
|
|
🇰🇷
20.249.5.100
|
|
20.249.5.100 - - [02/Oct/2026:21:17:22 +0200] "GET /wp-includes/ID3/about.php HTTP/1.1" 403 146 "-" ...
show more
20.249.5.100 - - [02/Oct/2026:21:17:22 +0200] "GET /wp-includes/ID3/about.php HTTP/1.1" 403 146 "-" "-"
20.249.5.100 - - [02/Oct/2026:21:17:22 +0200] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 403 6282 "-" "-"
20.249.5.100 - - [02/Oct/2026:21:17:23 +0200] "GET /wp-includes/blocks/audio/ HTTP/1.1" 403 6282 "-" "-"
20.249.5.100 - - [02/Oct/2026:21:17:26 +0200] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 403 146 "-" "-"
20.249.5.100 - - [02/Oct/2026:21:17:28 +0200] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 403 6282 "-" "-"
...
show less
|
Web App Attack
|
|
🇺🇸
34.67.93.218
|
|
34.67.93.218 - - [02/Oct/2026:17:42:55 +0200] "GET /wp-config.php.bak HTTP/1.1" 403 146 "-" "Mozilla ...
show more
34.67.93.218 - - [02/Oct/2026:17:42:55 +0200] "GET /wp-config.php.bak HTTP/1.1" 403 146 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_7_2) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Safari/605.1.15"
34.67.93.218 - - [02/Oct/2026:17:42:56 +0200] "GET /wp-config.php.bak HTTP/1.1" 403 146 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_7_2) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Safari/605.1.15"
34.67.93.218 - - [02/Oct/2026:17:42:56 +0200] "GET /wp-config.php.old HTTP/1.1" 403 146 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_7_2) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Safari/605.1.15"
34.67.93.218 - - [02/Oct/2026:17:42:56 +0200] "GET /wp-config.php.old HTTP/1.1" 403 146 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0"
34.67.93.218 - - [02/Oct/2026:17:42:56 +0200] "GET /wp-config.php.save HTTP/1.1" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537
...
show less
|
Web App Attack
|
|
🇧🇪
35.240.100.200
|
|
35.240.100.200 - - [02/Oct/2026:14:12:16 +0200] "GET /vendor/composer/installed.json HTTP/1.1" 403 6 ...
show more
35.240.100.200 - - [02/Oct/2026:14:12:16 +0200] "GET /vendor/composer/installed.json HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
35.240.100.200 - - [02/Oct/2026:14:12:16 +0200] "GET /src/.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
35.240.100.200 - - [02/Oct/2026:14:12:16 +0200] "GET /config/config.js HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
35.240.100.200 - - [02/Oct/2026:14:12:16 +0200] "GET /config/aws.yml HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
35.240.100.200 - - [02/Oct/2026:14:12:16 +0200] "GET /config/.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
|
Web App Attack
|
|
🇹🇼
104.199.183.206
|
|
104.199.183.206 - - [02/Oct/2026:13:43:49 +0200] "GET /model/info HTTP/1.1" 403 5677 "-" "Mozilla/5. ...
show more
104.199.183.206 - - [02/Oct/2026:13:43:49 +0200] "GET /model/info HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
104.199.183.206 - - [02/Oct/2026:13:43:50 +0200] "GET /.well-known/jwks.json HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; +https://openai.com/searchbot"
104.199.183.206 - - [02/Oct/2026:13:43:50 +0200] "GET /api/config HTTP/1.1" 403 5677 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected])"
104.199.183.206 - - [02/Oct/2026:13:43:50 +0200] "GET /firebase-config.json HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
104.199.183.206 - - [02/Oct/2026:13:43:50 +0200] "GET /wp-json HTTP/1.1" 403 5677 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
...
show less
|
Web App Attack
|
|
🇵🇱
45.138.12.10
|
|
45.138.12.10 - - [02/Oct/2026:12:39:48 +0200] "GET /.env.openai.local HTTP/1.1" 403 5677 "-" "Mozill ...
show more
45.138.12.10 - - [02/Oct/2026:12:39:48 +0200] "GET /.env.openai.local HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
45.138.12.10 - - [02/Oct/2026:12:39:48 +0200] "GET /.env.gpt HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
45.138.12.10 - - [02/Oct/2026:12:39:48 +0200] "GET /.env.llm HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
45.138.12.10 - - [02/Oct/2026:12:39:48 +0200] "GET /.aws/config HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
45.138.12.10 - - [02/Oct/2026:12:39:48 +0200] "GET /.aws/config.json HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safar
...
show less
|
Web App Attack
|
|
🇸🇬
34.87.25.211
|
|
34.87.25.211 - - [02/Oct/2026:09:17:55 +0200] "GET /.ssh/config HTTP/1.1" 403 6256 "-" "Mozilla/5.0 ...
show more
34.87.25.211 - - [02/Oct/2026:09:17:55 +0200] "GET /.ssh/config HTTP/1.1" 403 6256 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
34.87.25.211 - - [02/Oct/2026:09:17:55 +0200] "GET /.ssh/id_ed25519 HTTP/1.1" 403 6256 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
34.87.25.211 - - [02/Oct/2026:09:17:56 +0200] "GET /.bashrc HTTP/1.1" 403 6256 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
34.87.25.211 - - [02/Oct/2026:09:17:56 +0200] "GET /.zshrc HTTP/1.1" 403 6256 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)"
34.87.25.211 - - [02/Oct/2026:09:17:56 +0200] "GET /@fs/../.env?raw?? HTTP/1.1" 403 6256 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected])"
...
show less
|
Web App Attack
|
|
🇩🇪
194.45.37.30
|
|
webmail.notification.x0w.de:443 34.156.22.151 - - [02/Oct/2026:08:05:14 +0200] "GET /vendor/composer ...
show more
webmail.notification.x0w.de:443 34.156.22.151 - - [02/Oct/2026:08:05:14 +0200] "GET /vendor/composer/installed.json HTTP/1.1" 403 5673 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
webmail.notification.x0w.de:443 34.156.22.151 - - [02/Oct/2026:08:05:14 +0200] "GET /phpinfo HTTP/1.1" 403 5673 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
webmail.notification.x0w.de:443 34.156.22.151 - - [02/Oct/2026:08:05:14 +0200] "GET /env HTTP/1.1" 403 5673 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
webmail.notification.x0w.de:443 34.156.22.151 - - [02/Oct/2026:08:05:14 +0200] "GET /credentials HTTP/1.1" 403 5673 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
webmail.notification.x0w.de:443 34.156.22.151 - - [02/Oct/2026:08:05:14 +0200] "GET /config.yaml HTTP/1.1" 403 5673 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
|
Web App Attack
|
|
🇵🇱
45.138.12.25
|
|
45.138.12.25 - - [02/Oct/2026:07:58:48 +0200] "GET /vendor/composer/installed.json HTTP/1.1" 403 626 ...
show more
45.138.12.25 - - [02/Oct/2026:07:58:48 +0200] "GET /vendor/composer/installed.json HTTP/1.1" 403 6260 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
45.138.12.25 - - [02/Oct/2026:07:58:48 +0200] "GET /v1/.env HTTP/1.1" 403 6260 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
45.138.12.25 - - [02/Oct/2026:07:58:48 +0200] "GET /v2/.env HTTP/1.1" 403 6260 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
45.138.12.25 - - [02/Oct/2026:07:58:48 +0200] "GET /test/.env HTTP/1.1" 403 6260 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
45.138.12.25 - - [02/Oct/2026:07:58:48 +0200] "GET /web/.env HTTP/1.1" 403 6260 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
|
Web App Attack
|
|
🇸🇬
35.247.129.124
|
|
35.247.129.124 - - [02/Oct/2026:07:47:57 +0200] "GET /.ssh/config HTTP/2.0" 403 106 "https://winsvr- ...
show more
35.247.129.124 - - [02/Oct/2026:07:47:57 +0200] "GET /.ssh/config HTTP/2.0" 403 106 "https://winsvr-berlin.de/.ssh/config" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
35.247.129.124 - - [02/Oct/2026:07:48:02 +0200] "GET /wp-config.php.old HTTP/2.0" 403 106 "https://winsvr-berlin.de/wp-config.php.old" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
35.247.129.124 - - [02/Oct/2026:07:48:02 +0200] "GET /wp-config.php.bak HTTP/2.0" 403 106 "https://winsvr-berlin.de/wp-config.php.bak" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
35.247.129.124 - - [02/Oct/2026:07:48:02 +0200] "GET /storage/logs/laravel.log HTTP/2.0" 403 106 "https://winsvr-berlin.de/storage/logs/laravel.log" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)"
35.247.129.124 - - [02/Oct/2026:07:48:03 +0200] "GET /wp-config.php~ HTTP/2.0" 403 106 "https://winsv
...
show less
|
Web App Attack
|
|
🇵🇱
45.138.12.40
|
|
45.138.12.40 - - [02/Oct/2026:07:42:09 +0200] "GET /wp-login.php HTTP/1.1" 403 5677 "-" "Mozilla/5.0 ...
show more
45.138.12.40 - - [02/Oct/2026:07:42:09 +0200] "GET /wp-login.php HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Mobile/15E148 Safari/604.1"
45.138.12.40 - - [02/Oct/2026:07:42:15 +0200] "GET / HTTP/1.1" 403 5677 "http://api.dein-fotostart.de/" "Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0"
45.138.12.40 - - [02/Oct/2026:07:42:16 +0200] "GET /?feed=rss2 HTTP/1.1" 403 5677 "http://api.dein-fotostart.de/?feed=rss2" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15"
45.138.12.40 - - [02/Oct/2026:07:42:16 +0200] "GET /wp-links-opml.php HTTP/1.1" 403 5677 "http://api.dein-fotostart.de/wp-links-opml.php" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Mobile/15E148 Safari/604.1"
45.138.12.40 - - [02/Oct/2026:07:42:17 +0200] "GET /wp-login.php HTTP/1.1" 40
...
show less
|
Web App Attack
|
|
🇦🇺
20.58.177.98
|
|
20.58.177.98 - - [02/Oct/2026:03:51:18 +0200] "GET /z70.php HTTP/1.1" 403 5610 "-" "-"
20.58.177.98 ...
show more
20.58.177.98 - - [02/Oct/2026:03:51:18 +0200] "GET /z70.php HTTP/1.1" 403 5610 "-" "-"
20.58.177.98 - - [02/Oct/2026:03:51:18 +0200] "GET /adminfuns.php HTTP/1.1" 403 5610 "-" "-"
20.58.177.98 - - [02/Oct/2026:03:51:19 +0200] "GET //av.php HTTP/1.1" 403 5610 "-" "-"
20.58.177.98 - - [02/Oct/2026:03:51:20 +0200] "GET /dex.php HTTP/1.1" 403 5610 "-" "-"
20.58.177.98 - - [02/Oct/2026:03:51:20 +0200] "GET /chosen.php HTTP/1.1" 403 5610 "-" "-"
...
show less
|
Web App Attack
|
|
🇳🇱
185.218.86.27
|
|
185.218.86.27 - - [02/Oct/2026:03:00:14 +0200] "GET / HTTP/1.1" 403 6282 "-" "Mozilla/5.0 (Windows N ...
show more
185.218.86.27 - - [02/Oct/2026:03:00:14 +0200] "GET / HTTP/1.1" 403 6282 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
185.218.86.27 - - [02/Oct/2026:03:00:14 +0200] "GET / HTTP/1.1" 403 6282 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
185.218.86.27 - - [02/Oct/2026:03:00:15 +0200] "GET / HTTP/1.1" 403 6282 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
185.218.86.27 - - [02/Oct/2026:03:00:15 +0200] "GET / HTTP/1.1" 403 6282 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
185.218.86.27 - - [02/Oct/2026:03:00:17 +0200] "GET / HTTP/1.1" 403 6282 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
...
show less
|
Web App Attack
|
|
🇵🇱
45.138.12.46
|
|
45.138.12.46 - - [02/Oct/2026:02:04:12 +0200] "GET / HTTP/1.1" 403 6282 "-" "Go-http-client/1.1"
45. ...
show more
45.138.12.46 - - [02/Oct/2026:02:04:12 +0200] "GET / HTTP/1.1" 403 6282 "-" "Go-http-client/1.1"
45.138.12.46 - - [02/Oct/2026:02:04:15 +0200] "GET / HTTP/1.1" 403 6282 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15"
45.138.12.46 - - [02/Oct/2026:02:04:16 +0200] "GET /?feed=rss2 HTTP/1.1" 403 6282 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 OPR/111.0.0.0"
45.138.12.46 - - [02/Oct/2026:02:04:22 +0200] "GET / HTTP/1.1" 403 6282 "http://static.dein-fotostart.de/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 OPR/111.0.0.0"
45.138.12.46 - - [02/Oct/2026:02:04:23 +0200] "GET /?feed=rss2 HTTP/1.1" 403 6282 "http://static.dein-fotostart.de/?feed=rss2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 Edg/126.0.0.0"
...
show less
|
Web App Attack
|
|
🇧🇪
34.62.82.165
|
|
34.62.82.165 - - [02/Oct/2026:01:57:46 +0200] "GET /.s3cfg HTTP/1.1" 403 6256 "-" "Mozilla/5.0 (Wind ...
show more
34.62.82.165 - - [02/Oct/2026:01:57:46 +0200] "GET /.s3cfg HTTP/1.1" 403 6256 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.62.82.165 - - [02/Oct/2026:01:57:46 +0200] "GET /.gitmodules HTTP/1.1" 403 6256 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.62.82.165 - - [02/Oct/2026:01:57:46 +0200] "GET /.github/workflows/deploy.yml HTTP/1.1" 403 6256 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.62.82.165 - - [02/Oct/2026:01:57:46 +0200] "GET /.gitlab-ci.yml HTTP/1.1" 403 6256 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.62.82.165 - - [02/Oct/2026:01:57:46 +0200] "GET /.git/logs/HEAD HTTP/1.1" 403 6256 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
|
Web App Attack
|
|
🇩🇪
31.70.83.197
|
|
Oct 2 01:04:38 web09 postfix/smtpd[1992845]: warning: ip31-70-83-197.pbiaas.com[31.70.83.197]: SASL ...
show more
Oct 2 01:04:38 web09 postfix/smtpd[1992845]: warning: ip31-70-83-197.pbiaas.com[31.70.83.197]: SASL login authentication failed: authentication failure, sasl_username=noauth
Oct 2 01:04:39 web09 postfix/smtpd[1978516]: warning: ip31-70-83-197.pbiaas.com[31.70.83.197]: SASL login authentication failed: authentication failure, sasl_username=spam
Oct 2 01:04:39 web09 postfix/smtpd[1992845]: warning: ip31-70-83-197.pbiaas.com[31.70.83.197]: SASL login authentication failed: authentication failure, sasl_username=test
Oct 2 01:04:39 web09 postfix/smtpd[1978516]: warning: ip31-70-83-197.pbiaas.com[31.70.83.197]: SASL login authentication failed: authentication failure, sasl_username=info
Oct 2 01:04:39 web09 postfix/smtpd[1992845]: warning: ip31-70-83-197.pbiaas.com[31.70.83.197]: SASL login authentication failed: authentication failure, sasl_username=admin
...
show less
|
Brute-Force
|
|
🇸🇬
35.247.129.124
|
|
35.247.129.124 - - [01/Oct/2026:22:48:38 +0200] "GET /ty1oux89pstp8o196xhk HTTP/2.0" 403 106 "-" "Mo ...
show more
35.247.129.124 - - [01/Oct/2026:22:48:38 +0200] "GET /ty1oux89pstp8o196xhk HTTP/2.0" 403 106 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
35.247.129.124 - - [01/Oct/2026:22:48:39 +0200] "GET /rclone.conf HTTP/2.0" 403 106 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
35.247.129.124 - - [01/Oct/2026:22:48:40 +0200] "GET /__/firebase/init.json HTTP/2.0" 403 106 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
35.247.129.124 - - [01/Oct/2026:22:48:40 +0200] "GET /.htpasswd HTTP/2.0" 403 106 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
35.247.129.124 - - [01/Oct/2026:22:48:41 +0200] "GET /api/env HTTP/2.0" 403 106 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
...
show less
|
Web App Attack
|