|
🇯🇵
40.74.77.37
|
|
40.74.77.37 - - [13/Oct/2026:01:12:01 +0200] "GET /wp-includes/customize/about.php HTTP/1.1" 403 146 ...
show more
40.74.77.37 - - [13/Oct/2026:01:12:01 +0200] "GET /wp-includes/customize/about.php HTTP/1.1" 403 146 "-" "-"
40.74.77.37 - - [13/Oct/2026:01:12:09 +0200] "GET /xmlrpc.php HTTP/1.1" 403 146 "-" "-"
40.74.77.37 - - [13/Oct/2026:01:12:16 +0200] "GET /wp-includes/wp-includes_function.php HTTP/1.1" 403 146 "-" "-"
40.74.77.37 - - [13/Oct/2026:01:12:17 +0200] "GET /wp-includes/ID3/about.php HTTP/1.1" 403 146 "-" "-"
40.74.77.37 - - [13/Oct/2026:01:12:27 +0200] "GET /wp-includes/IXR/index.php HTTP/1.1" 403 146 "-" "-"
...
show less
|
Web App Attack
|
|
🇸🇬
34.143.233.155
|
|
34.143.233.155 - - [12/Oct/2026:23:56:48 +0200] "GET /jk2gwixs0d6jvdwlcm6c HTTP/1.1" 403 5677 "-" "M ...
show more
34.143.233.155 - - [12/Oct/2026:23:56:48 +0200] "GET /jk2gwixs0d6jvdwlcm6c HTTP/1.1" 403 5677 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected])"
34.143.233.155 - - [12/Oct/2026:23:56:48 +0200] "GET /z9x8c7v6b5-debug-trigger-api.dein-fotostart.de HTTP/1.1" 403 5677 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected])"
34.143.233.155 - - [12/Oct/2026:23:56:48 +0200] "GET /credentials.json HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)"
34.143.233.155 - - [12/Oct/2026:23:56:48 +0200] "GET /docker-compose.yaml HTTP/1.1" 403 5677 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected])"
34.143.233.155 - - [12/Oct/2026:23:56:48 +0200] "GET /service-account.json HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/shar
...
show less
|
Web App Attack
|
|
🇧🇪
34.38.113.44
|
|
34.38.113.44 - - [12/Oct/2026:23:05:05 +0200] "GET /.env-example HTTP/1.1" 403 6073 "-" "Mozilla/5.0 ...
show more
34.38.113.44 - - [12/Oct/2026:23:05:05 +0200] "GET /.env-example HTTP/1.1" 403 6073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.38.113.44 - - [12/Oct/2026:23:05:05 +0200] "GET /.env.anthropic HTTP/1.1" 403 6073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.38.113.44 - - [12/Oct/2026:23:05:05 +0200] "GET /.env-sample HTTP/1.1" 403 6073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.38.113.44 - - [12/Oct/2026:23:05:05 +0200] "GET /.env.aws HTTP/1.1" 403 6073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.38.113.44 - - [12/Oct/2026:23:05:05 +0200] "GET /.env HTTP/1.1" 403 6073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
|
Web App Attack
|
|
🇺🇸
34.145.191.169
|
|
34.145.191.169 - - [12/Oct/2026:22:32:23 +0200] "GET /8tm7raf5pvylevzt0x59 HTTP/1.1" 403 5677 "-" "M ...
show more
34.145.191.169 - - [12/Oct/2026:22:32:23 +0200] "GET /8tm7raf5pvylevzt0x59 HTTP/1.1" 403 5677 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected])"
34.145.191.169 - - [12/Oct/2026:22:32:23 +0200] "GET /zms3wac9kso2xs2fpvul HTTP/1.1" 403 5677 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot"
34.145.191.169 - - [12/Oct/2026:22:32:24 +0200] "GET /files../.env HTTP/1.1" 403 5677 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)"
34.145.191.169 - - [12/Oct/2026:22:32:24 +0200] "GET /static//home/user/.env HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
34.145.191.169 - - [12/Oct/2026:22:32:24 +0200] "GET /app/..;/.env HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/cra
...
show less
|
Web App Attack
|
|
🇧🇷
34.151.200.93
|
|
34.151.200.93 - - [12/Oct/2026:22:26:10 +0200] "GET /rxdi3q4md75xu2g6y7jn HTTP/1.1" 403 5677 "-" "Mo ...
show more
34.151.200.93 - - [12/Oct/2026:22:26:10 +0200] "GET /rxdi3q4md75xu2g6y7jn HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
34.151.200.93 - - [12/Oct/2026:22:26:10 +0200] "GET /media../.env HTTP/1.1" 403 5677 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected])"
34.151.200.93 - - [12/Oct/2026:22:26:10 +0200] "GET /js../.env HTTP/1.1" 403 5677 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)"
34.151.200.93 - - [12/Oct/2026:22:26:10 +0200] "GET /src/.env HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"
34.151.200.93 - - [12/Oct/2026:22:26:10 +0200] "GET /static/..;/..;/..;/..;/proc/self/environ HTTP/1.1" 403 5677 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected])"
...
show less
|
Web App Attack
|
|
🇰🇷
20.214.144.216
|
|
20.214.144.216 - - [12/Oct/2026:22:15:16 +0200] "GET /wp-includes/ID3/about.php HTTP/1.1" 403 146 "- ...
show more
20.214.144.216 - - [12/Oct/2026:22:15:16 +0200] "GET /wp-includes/ID3/about.php HTTP/1.1" 403 146 "-" "-"
20.214.144.216 - - [12/Oct/2026:22:15:16 +0200] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 403 6287 "-" "-"
20.214.144.216 - - [12/Oct/2026:22:15:17 +0200] "GET /wp-includes/blocks/audio/ HTTP/1.1" 403 6287 "-" "-"
20.214.144.216 - - [12/Oct/2026:22:15:21 +0200] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 403 146 "-" "-"
20.214.144.216 - - [12/Oct/2026:22:15:22 +0200] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 403 6287 "-" "-"
...
show less
|
Web App Attack
|
|
🇧🇪
34.156.43.133
|
|
34.156.43.133 - - [12/Oct/2026:21:14:45 +0200] "GET /uploads../.env HTTP/2.0" 403 106 "https://winsv ...
show more
34.156.43.133 - - [12/Oct/2026:21:14:45 +0200] "GET /uploads../.env HTTP/2.0" 403 106 "https://winsvr-berlin.de/uploads../.env" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
34.156.43.133 - - [12/Oct/2026:21:14:45 +0200] "GET //.env HTTP/2.0" 403 106 "https://winsvr-berlin.de//.env" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
34.156.43.133 - - [12/Oct/2026:21:14:45 +0200] "GET /.env?import&url&inline HTTP/2.0" 403 106 "https://winsvr-berlin.de/.env?import&url&inline" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
34.156.43.133 - - [12/Oct/2026:21:14:46 +0200] "GET /.env.development?raw HTTP/2.0" 403 106 "https://winsvr-berlin.de/.env.development?raw" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
34.156.43.133 - - [12/Oct/2026:21:14:46 +0200] "GET /api/..;/.env HTTP/2.0" 403 106 "https://winsvr-berlin.de/api/..;/.env" "Mozilla/5
...
show less
|
Web App Attack
|
|
🇲🇽
158.23.176.177
|
|
158.23.176.177 - - [12/Oct/2026:21:14:12 +0200] "GET /bnmtp.php HTTP/1.1" 403 5610 "-" "-"
158.23.17 ...
show more
158.23.176.177 - - [12/Oct/2026:21:14:12 +0200] "GET /bnmtp.php HTTP/1.1" 403 5610 "-" "-"
158.23.176.177 - - [12/Oct/2026:21:14:12 +0200] "GET /or.php HTTP/1.1" 403 5610 "-" "-"
158.23.176.177 - - [12/Oct/2026:21:14:13 +0200] "GET /date1.php HTTP/1.1" 403 5610 "-" "-"
158.23.176.177 - - [12/Oct/2026:21:14:13 +0200] "GET /opsh.php HTTP/1.1" 403 5610 "-" "-"
158.23.176.177 - - [12/Oct/2026:21:14:13 +0200] "GET /kgb.php HTTP/1.1" 403 5610 "-" "-"
...
show less
|
Web App Attack
|
|
🇩🇪
194.45.37.30
|
|
webmail.notification.x0w.de:443 20.196.208.116 - - [12/Oct/2026:19:34:18 +0200] "GET /wp-content/plu ...
show more
webmail.notification.x0w.de:443 20.196.208.116 - - [12/Oct/2026:19:34:18 +0200] "GET /wp-content/plugins/xt/php HTTP/1.1" 403 5673 "-" "-"
webmail.notification.x0w.de:443 20.196.208.116 - - [12/Oct/2026:19:34:29 +0200] "GET /wp-admin/maint/php HTTP/1.1" 403 5673 "-" "-"
webmail.notification.x0w.de:443 20.196.208.116 - - [12/Oct/2026:19:34:45 +0200] "GET /config.php HTTP/1.1" 403 5673 "-" "-"
webmail.notification.x0w.de:443 20.196.208.116 - - [12/Oct/2026:19:35:01 +0200] "GET /wp-content/uploads/ HTTP/1.1" 403 5673 "-" "-"
webmail.notification.x0w.de:443 20.196.208.116 - - [12/Oct/2026:19:35:11 +0200] "GET /search/label/PHP-Shells HTTP/1.1" 403 5673 "-" "-"
...
show less
|
Web App Attack
|
|
🇸🇬
34.143.233.155
|
|
34.143.233.155 - - [12/Oct/2026:18:39:20 +0200] "GET /api/graphql HTTP/1.1" 403 5757 "https://dein-f ...
show more
34.143.233.155 - - [12/Oct/2026:18:39:20 +0200] "GET /api/graphql HTTP/1.1" 403 5757 "https://dein-fotostart.de" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"
34.143.233.155 - - [12/Oct/2026:18:39:20 +0200] "GET /api/proc/self/environ HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/w/admins/jobs_u/get_log_file/../../../../proc/self/environ" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
34.143.233.155 - - [12/Oct/2026:18:39:20 +0200] "GET /api/proc/self/environ HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/w/default/jobs_u/get_log_file/../../../../proc/self/environ" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
34.143.233.155 - - [12/Oct/2026:18:39:20 +0200] "GET /api/..;/.env HTT
...
show less
|
Web App Attack
|
|
🇧🇷
34.151.250.141
|
|
34.151.250.141 - - [12/Oct/2026:17:06:28 +0200] "GET /@fs/src/.env?import&raw?? HTTP/2.0" 403 106 "h ...
show more
34.151.250.141 - - [12/Oct/2026:17:06:28 +0200] "GET /@fs/src/.env?import&raw?? HTTP/2.0" 403 106 "https://winsvr-berlin.de/@fs/src/.env?import&raw??" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
34.151.250.141 - - [12/Oct/2026:17:06:30 +0200] "GET /pages/api/index.astro.mjs.map HTTP/2.0" 403 106 "https://winsvr-berlin.de/pages/api/index.astro.mjs.map" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
34.151.250.141 - - [12/Oct/2026:17:06:32 +0200] "GET /private-key HTTP/2.0" 403 106 "https://winsvr-berlin.de/private-key" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
34.151.250.141 - - [12/Oct/2026:17:06:32 +0200] "GET /.s3cfg HTTP/2.0" 403 106 "https://winsvr-berlin.de/.s3cfg" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
34.151.250.141 - - [12/Oct/2026:17:06:34 +0200] "GET /.terraform.lock.hcl HTTP/2.0" 403 106 "https://winsvr-be
...
show less
|
Web App Attack
|
|
🇺🇸
136.86.213.18
|
|
136.86.213.18 - - [12/Oct/2026:16:29:50 +0200] "GET /media../.env HTTP/2.0" 403 106 "https://winsvr- ...
show more
136.86.213.18 - - [12/Oct/2026:16:29:50 +0200] "GET /media../.env HTTP/2.0" 403 106 "https://winsvr-berlin.de/media../.env" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
136.86.213.18 - - [12/Oct/2026:16:29:50 +0200] "GET /dist../.env HTTP/2.0" 403 106 "https://winsvr-berlin.de/dist../.env" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
136.86.213.18 - - [12/Oct/2026:16:29:51 +0200] "GET /static//home/user/.env HTTP/2.0" 403 106 "https://winsvr-berlin.de/static//home/user/.env" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
136.86.213.18 - - [12/Oct/2026:16:29:51 +0200] "GET /compose.yml HTTP/2.0" 403 106 "https://winsvr-berlin.de/compose.yml" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
136.86.213.18 - - [12/Oct/2026:16:29:52 +0200] "GET /.htpasswd HTTP/2.0" 403 106 "https://winsvr-berlin.de/.htpasswd" "Mozilla/5.0 (Macintosh; I
...
show less
|
Web App Attack
|
|
🇧🇷
35.247.212.91
|
|
35.247.212.91 - - [12/Oct/2026:15:59:15 +0200] "GET /@fs/.env?import&?raw?? HTTP/2.0" 403 106 "https ...
show more
35.247.212.91 - - [12/Oct/2026:15:59:15 +0200] "GET /@fs/.env?import&?raw?? HTTP/2.0" 403 106 "https://winsvr-berlin.de/@fs/.env?import&?raw??" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
35.247.212.91 - - [12/Oct/2026:15:59:18 +0200] "GET /.env.production::$DATA?raw HTTP/2.0" 403 106 "https://winsvr-berlin.de/.env.production::$DATA?raw" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
35.247.212.91 - - [12/Oct/2026:15:59:21 +0200] "GET /dashboard/.env HTTP/2.0" 403 106 "https://winsvr-berlin.de/dashboard/.env" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
35.247.212.91 - - [12/Oct/2026:15:59:22 +0200] "GET /etc/.env HTTP/2.0" 403 106 "https://winsvr-berlin.de/etc/.env" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
35.247.212.91 - - [12/Oct/2026:15:59:25 +0200] "GET /php-cgi/php-cgi.exe?%ADd+allow_url_include%3d1+%ADd+auto_prepen
...
show less
|
Web App Attack
|
|
🇧🇷
34.95.162.126
|
|
34.95.162.126 - - [12/Oct/2026:15:47:02 +0200] "GET /l0lihqlzepm4uifzugxc HTTP/2.0" 403 106 "https:/ ...
show more
34.95.162.126 - - [12/Oct/2026:15:47:02 +0200] "GET /l0lihqlzepm4uifzugxc HTTP/2.0" 403 106 "https://winsvr-berlin.de/l0lihqlzepm4uifzugxc" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
34.95.162.126 - - [12/Oct/2026:15:47:02 +0200] "GET /z9x8c7v6b5-debug-trigger-winsvr-berlin.de HTTP/2.0" 403 106 "https://winsvr-berlin.de/z9x8c7v6b5-debug-trigger-winsvr-berlin.de" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
34.95.162.126 - - [12/Oct/2026:15:47:04 +0200] "GET /serviceAccountKey.json HTTP/2.0" 403 106 "https://winsvr-berlin.de/serviceAccountKey.json" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
34.95.162.126 - - [12/Oct/2026:15:47:04 +0200] "GET /firebase-adminsdk.json HTTP/2.0" 403 106 "https://winsvr-berlin.de/firebase-adminsdk.json" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
34.95.162.126 - - [12/Oct/2026:15:47:05 +0200]
...
show less
|
Web App Attack
|
|
🇺🇸
34.42.150.149
|
|
34.42.150.149 - - [12/Oct/2026:15:36:26 +0200] "GET /_nuxt/../.env HTTP/1.1" 403 6275 "-" "Mozilla/5 ...
show more
34.42.150.149 - - [12/Oct/2026:15:36:26 +0200] "GET /_nuxt/../.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
34.42.150.149 - - [12/Oct/2026:15:36:28 +0200] "GET /config/env/aws_credentials.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
34.42.150.149 - - [12/Oct/2026:15:36:29 +0200] "GET /config/.env.local HTTP/1.1" 403 6275 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
34.42.150.149 - - [12/Oct/2026:15:36:29 +0200] "GET /config/.env.dev HTTP/1.1" 403 6275 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
34.42.150.149 - - [12/Oct/2026:15:36:29 +0200] "GET /config/database.json HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
...
show less
|
Web App Attack
|
|
🇺🇸
34.145.191.169
|
|
34.145.191.169 - - [12/Oct/2026:15:33:39 +0200] "GET /api/.env/public/.env HTTP/1.1" 403 5701 "https ...
show more
34.145.191.169 - - [12/Oct/2026:15:33:39 +0200] "GET /api/.env/public/.env HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/.env/public/.env" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"
34.145.191.169 - - [12/Oct/2026:15:33:39 +0200] "GET /api/..;/.env HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/..;/.env" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
34.145.191.169 - - [12/Oct/2026:15:33:40 +0200] "GET /api/system/fileView?file=/proc/self/environ HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/system/fileView?file=/proc/self/environ" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)"
34.145.191.169 - - [12/Oct/2026:15:33:40 +0200] "GET /api/console/api_server?sense_version=%40%40SENSE_VERSION&apis=../../../../../../proc/self/environ HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/console/api_server?sense_version=%40%40SENSE_VERSION&apis=../.
...
show less
|
Web App Attack
|
|
🇨🇦
34.152.45.192
|
|
34.152.45.192 - - [12/Oct/2026:15:10:47 +0200] "GET /api/proc/self/environ HTTP/1.1" 403 5701 "https ...
show more
34.152.45.192 - - [12/Oct/2026:15:10:47 +0200] "GET /api/proc/self/environ HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/w/default/jobs_u/get_log_file/../../../../proc/self/environ" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
34.152.45.192 - - [12/Oct/2026:15:10:47 +0200] "GET /api/proc/self/environ HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/w/starter/jobs_u/get_log_file/../../../../proc/self/environ" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
34.152.45.192 - - [12/Oct/2026:15:10:48 +0200] "GET /api/fs/read?allowOutsideWorkspace=true&path=/proc/self/environ HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/fs/read?allowOutsideWorkspace=true&path=/proc/self/environ" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
34.152.45.192 - - [12/Oct/2026
...
show less
|
Web App Attack
|
|
🇨🇦
34.47.25.12
|
|
34.47.25.12 - - [12/Oct/2026:13:40:23 +0200] "GET /.htpasswd HTTP/1.1" 403 6275 "-" "Mozilla/5.0 App ...
show more
34.47.25.12 - - [12/Oct/2026:13:40:23 +0200] "GET /.htpasswd HTTP/1.1" 403 6275 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected])"
34.47.25.12 - - [12/Oct/2026:13:40:24 +0200] "GET /@fs/../.env?raw?? HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
34.47.25.12 - - [12/Oct/2026:13:40:24 +0200] "GET /@fs/../.env?import&raw?? HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"
34.47.25.12 - - [12/Oct/2026:13:40:24 +0200] "GET /.env?raw HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
34.47.25.12 - - [12/Oct/2026:13:40:25 +0200] "GET /.env?.svg?.wasm?init HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
...
show less
|
Web App Attack
|
|
🇮🇩
103.235.74.104
|
|
103.235.74.104 - - [12/Oct/2026:10:00:02 +0200] "GET /wp-admin/css/ HTTP/1.1" 403 6282 "-" "Mozilla/ ...
show more
103.235.74.104 - - [12/Oct/2026:10:00:02 +0200] "GET /wp-admin/css/ HTTP/1.1" 403 6282 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
103.235.74.104 - - [12/Oct/2026:10:00:02 +0200] "GET /wp-admin/images/ HTTP/1.1" 403 6282 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
103.235.74.104 - - [12/Oct/2026:10:00:03 +0200] "GET /wp-admin/includes/ HTTP/1.1" 403 6282 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
103.235.74.104 - - [12/Oct/2026:10:00:03 +0200] "GET /wp-admin/js/ HTTP/1.1" 403 6282 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
103.235.74.104 - - [12/Oct/2026:10:00:04 +0200] "GET /wp-admin/maint/ HTTP/1.1" 403 6282 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
...
show less
|
Web App Attack
|
|
🇺🇸
136.108.180.169
|
|
136.108.180.169 - - [12/Oct/2026:08:37:55 +0200] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 40 ...
show more
136.108.180.169 - - [12/Oct/2026:08:37:55 +0200] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 403 5610 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
136.108.180.169 - - [12/Oct/2026:08:37:56 +0200] "GET //wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 403 5610 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
136.108.180.169 - - [12/Oct/2026:08:37:56 +0200] "GET //wp/wp-includes/wlwmanifest.xml HTTP/1.1" 403 5610 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
136.108.180.169 - - [12/Oct/2026:08:37:56 +0200] "GET //2020/wp-includes/wlwmanifest.xml HTTP/1.1" 403 5610 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
136.108.180.169 - - [12/Oct/2026:08:37:56 +0200] "GET //2019/wp-includes/wlwmanife
...
show less
|
Web App Attack
|
|
🇱🇹
62.60.134.210
|
|
Oct 12 06:11:57 web09 postfix/smtpd[2349106]: warning: unknown[62.60.134.210]: SASL LOGIN authentica ...
show more
Oct 12 06:11:57 web09 postfix/smtpd[2349106]: warning: unknown[62.60.134.210]: SASL LOGIN authentication failed: authentication failure, sasl_username=builder
Oct 12 06:15:41 web09 postfix/smtpd[2349106]: warning: unknown[62.60.134.210]: SASL LOGIN authentication failed: authentication failure, sasl_username=bridge1
Oct 12 06:18:08 web09 postfix/smtpd[2348190]: warning: unknown[62.60.134.210]: SASL LOGIN authentication failed: authentication failure, sasl_username=opt
Oct 12 06:20:05 web09 postfix/smtpd[2348190]: warning: unknown[62.60.134.210]: SASL LOGIN authentication failed: authentication failure, sasl_username=dolgov
Oct 12 06:21:53 web09 postfix/smtpd[2349106]: warning: unknown[62.60.134.210]: SASL LOGIN authentication failed: authentication failure, sasl_username=fritz
...
show less
|
Brute-Force
|
|
🇵🇱
45.138.12.30
|
|
45.138.12.30 - - [12/Oct/2026:03:41:36 +0200] "GET /.env-sample HTTP/1.1" 403 6073 "-" "Mozilla/5.0 ...
show more
45.138.12.30 - - [12/Oct/2026:03:41:36 +0200] "GET /.env-sample HTTP/1.1" 403 6073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
45.138.12.30 - - [12/Oct/2026:03:41:36 +0200] "GET /.env.aws HTTP/1.1" 403 6073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
45.138.12.30 - - [12/Oct/2026:03:41:36 +0200] "GET /.docker/laravel/app/.env HTTP/1.1" 403 6073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
45.138.12.30 - - [12/Oct/2026:03:41:36 +0200] "GET /.env.anthropic HTTP/1.1" 403 6073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
45.138.12.30 - - [12/Oct/2026:03:41:36 +0200] "GET /.env-example HTTP/1.1" 403 6073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
|
Web App Attack
|
|
🇫🇷
31.56.58.43
|
|
31.56.58.43 - - [12/Oct/2026:02:51:05 +0200] "GET /wp-json/ HTTP/1.1" 403 6073 "-" "Mozilla/5.0 (Win ...
show more
31.56.58.43 - - [12/Oct/2026:02:51:05 +0200] "GET /wp-json/ HTTP/1.1" 403 6073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
31.56.58.43 - - [12/Oct/2026:02:51:06 +0200] "GET /.env HTTP/1.1" 403 6073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
31.56.58.43 - - [12/Oct/2026:02:51:06 +0200] "GET /.env.bak HTTP/1.1" 403 6073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
31.56.58.43 - - [12/Oct/2026:02:51:06 +0200] "GET /.env.backup HTTP/1.1" 403 6073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
31.56.58.43 - - [12/Oct/2026:02:51:06 +0200] "GET /.env.local HTTP/1.1" 403 6073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
...
show less
|
Web App Attack
|
|
🇧🇪
34.156.249.47
|
|
34.156.249.47 - - [11/Oct/2026:20:49:05 +0200] "GET /.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windo ...
show more
34.156.249.47 - - [11/Oct/2026:20:49:05 +0200] "GET /.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.156.249.47 - - [11/Oct/2026:20:49:05 +0200] "GET /composer.json HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.156.249.47 - - [11/Oct/2026:20:49:05 +0200] "GET /config/.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.156.249.47 - - [11/Oct/2026:20:49:05 +0200] "GET /config/aws.yml HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.156.249.47 - - [11/Oct/2026:20:49:05 +0200] "GET /config/config.js HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
|
Web App Attack
|
|
🇧🇪
34.79.59.9
|
|
34.79.59.9 - - [11/Oct/2026:19:44:58 +0200] "GET /.amplifyrc HTTP/1.1" 403 6260 "-" "Mozilla/5.0 (Wi ...
show more
34.79.59.9 - - [11/Oct/2026:19:44:58 +0200] "GET /.amplifyrc HTTP/1.1" 403 6260 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.79.59.9 - - [11/Oct/2026:19:44:58 +0200] "GET /.aws/.env HTTP/1.1" 403 6260 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.79.59.9 - - [11/Oct/2026:19:44:58 +0200] "GET /.aws/credentials HTTP/1.1" 403 6260 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.79.59.9 - - [11/Oct/2026:19:44:58 +0200] "GET /.aws/credentials.bak HTTP/1.1" 403 6260 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.79.59.9 - - [11/Oct/2026:19:44:58 +0200] "GET /.aws/config HTTP/1.1" 403 6260 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
|
Web App Attack
|