|
🇵🇱
45.138.12.30
|
|
45.138.12.30 - - [12/Oct/2026:03:41:36 +0200] "GET /.env-sample HTTP/1.1" 403 6073 "-" "Mozilla/5.0 ...
show more
45.138.12.30 - - [12/Oct/2026:03:41:36 +0200] "GET /.env-sample HTTP/1.1" 403 6073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
45.138.12.30 - - [12/Oct/2026:03:41:36 +0200] "GET /.env.aws HTTP/1.1" 403 6073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
45.138.12.30 - - [12/Oct/2026:03:41:36 +0200] "GET /.docker/laravel/app/.env HTTP/1.1" 403 6073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
45.138.12.30 - - [12/Oct/2026:03:41:36 +0200] "GET /.env.anthropic HTTP/1.1" 403 6073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
45.138.12.30 - - [12/Oct/2026:03:41:36 +0200] "GET /.env-example HTTP/1.1" 403 6073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
|
Web App Attack
|
|
🇫🇷
31.56.58.43
|
|
31.56.58.43 - - [12/Oct/2026:02:51:05 +0200] "GET /wp-json/ HTTP/1.1" 403 6073 "-" "Mozilla/5.0 (Win ...
show more
31.56.58.43 - - [12/Oct/2026:02:51:05 +0200] "GET /wp-json/ HTTP/1.1" 403 6073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
31.56.58.43 - - [12/Oct/2026:02:51:06 +0200] "GET /.env HTTP/1.1" 403 6073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
31.56.58.43 - - [12/Oct/2026:02:51:06 +0200] "GET /.env.bak HTTP/1.1" 403 6073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
31.56.58.43 - - [12/Oct/2026:02:51:06 +0200] "GET /.env.backup HTTP/1.1" 403 6073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
31.56.58.43 - - [12/Oct/2026:02:51:06 +0200] "GET /.env.local HTTP/1.1" 403 6073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
...
show less
|
Web App Attack
|
|
🇧🇪
34.156.249.47
|
|
34.156.249.47 - - [11/Oct/2026:20:49:05 +0200] "GET /.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windo ...
show more
34.156.249.47 - - [11/Oct/2026:20:49:05 +0200] "GET /.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.156.249.47 - - [11/Oct/2026:20:49:05 +0200] "GET /composer.json HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.156.249.47 - - [11/Oct/2026:20:49:05 +0200] "GET /config/.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.156.249.47 - - [11/Oct/2026:20:49:05 +0200] "GET /config/aws.yml HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.156.249.47 - - [11/Oct/2026:20:49:05 +0200] "GET /config/config.js HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
|
Web App Attack
|
|
🇧🇪
34.79.59.9
|
|
34.79.59.9 - - [11/Oct/2026:19:44:58 +0200] "GET /.amplifyrc HTTP/1.1" 403 6260 "-" "Mozilla/5.0 (Wi ...
show more
34.79.59.9 - - [11/Oct/2026:19:44:58 +0200] "GET /.amplifyrc HTTP/1.1" 403 6260 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.79.59.9 - - [11/Oct/2026:19:44:58 +0200] "GET /.aws/.env HTTP/1.1" 403 6260 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.79.59.9 - - [11/Oct/2026:19:44:58 +0200] "GET /.aws/credentials HTTP/1.1" 403 6260 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.79.59.9 - - [11/Oct/2026:19:44:58 +0200] "GET /.aws/credentials.bak HTTP/1.1" 403 6260 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.79.59.9 - - [11/Oct/2026:19:44:58 +0200] "GET /.aws/config HTTP/1.1" 403 6260 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
|
Web App Attack
|
|
🇩🇪
194.45.37.30
|
|
webmail.notification.x0w.de:443 34.53.184.30 - - [11/Oct/2026:19:40:15 +0200] "GET /.amplifyrc HTTP/ ...
show more
webmail.notification.x0w.de:443 34.53.184.30 - - [11/Oct/2026:19:40:15 +0200] "GET /.amplifyrc HTTP/1.1" 403 5673 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
webmail.notification.x0w.de:443 34.53.184.30 - - [11/Oct/2026:19:40:15 +0200] "GET /.aws/config HTTP/1.1" 403 5673 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
webmail.notification.x0w.de:443 34.53.184.30 - - [11/Oct/2026:19:40:15 +0200] "GET /.aws/credentials HTTP/1.1" 403 5673 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
webmail.notification.x0w.de:443 34.53.184.30 - - [11/Oct/2026:19:40:15 +0200] "GET /.boto HTTP/1.1" 403 5673 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
webmail.notification.x0w.de:443 34.53.184.30 - - [11/Oct/2026:19:40:15 +0200] "GET /.env HTTP/1.1" 403 5673 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
|
Web App Attack
|
|
🇦🇺
20.213.164.192
|
|
20.213.164.192 - - [11/Oct/2026:16:33:59 +0200] "GET /unaut.php HTTP/1.1" 403 5610 "-" "-"
20.213.16 ...
show more
20.213.164.192 - - [11/Oct/2026:16:33:59 +0200] "GET /unaut.php HTTP/1.1" 403 5610 "-" "-"
20.213.164.192 - - [11/Oct/2026:16:33:59 +0200] "GET /bro.php HTTP/1.1" 403 5610 "-" "-"
20.213.164.192 - - [11/Oct/2026:16:34:00 +0200] "GET /go.php HTTP/1.1" 403 5610 "-" "-"
20.213.164.192 - - [11/Oct/2026:16:34:00 +0200] "GET /bisan.php HTTP/1.1" 403 5610 "-" "-"
20.213.164.192 - - [11/Oct/2026:16:34:01 +0200] "GET /wed.php HTTP/1.1" 403 5610 "-" "-"
...
show less
|
Web App Attack
|
|
🇧🇪
34.53.184.30
|
|
34.53.184.30 - - [11/Oct/2026:16:27:43 +0200] "GET /.env.anthropic HTTP/1.1" 403 6256 "-" "Mozilla/5 ...
show more
34.53.184.30 - - [11/Oct/2026:16:27:43 +0200] "GET /.env.anthropic HTTP/1.1" 403 6256 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.53.184.30 - - [11/Oct/2026:16:27:43 +0200] "GET /.env-example HTTP/1.1" 403 6256 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.53.184.30 - - [11/Oct/2026:16:27:43 +0200] "GET /.env.aws HTTP/1.1" 403 6256 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.53.184.30 - - [11/Oct/2026:16:27:43 +0200] "GET /.env-sample HTTP/1.1" 403 6256 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.53.184.30 - - [11/Oct/2026:16:27:43 +0200] "GET /.docker/config.json HTTP/1.1" 403 6256 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
|
Web App Attack
|
|
🇱🇹
62.60.134.210
|
|
Oct 11 15:05:42 web09 postfix/smtpd[2058884]: warning: unknown[62.60.134.210]: SASL LOGIN authentica ...
show more
Oct 11 15:05:42 web09 postfix/smtpd[2058884]: warning: unknown[62.60.134.210]: SASL LOGIN authentication failed: authentication failure, sasl_username=slash
Oct 11 15:07:28 web09 postfix/smtpd[2058884]: warning: unknown[62.60.134.210]: SASL LOGIN authentication failed: authentication failure, sasl_username=vica
Oct 11 15:09:15 web09 postfix/smtpd[2058884]: warning: unknown[62.60.134.210]: SASL LOGIN authentication failed: authentication failure, sasl_username=veranstaltungen
Oct 11 15:11:49 web09 postfix/smtpd[2058884]: warning: unknown[62.60.134.210]: SASL LOGIN authentication failed: authentication failure, sasl_username=ya
Oct 11 15:13:31 web09 postfix/smtpd[2055670]: warning: unknown[62.60.134.210]: SASL LOGIN authentication failed: authentication failure, sasl_username=opinion
...
show less
|
Brute-Force
|
|
🇰🇷
20.214.144.216
|
|
20.214.144.216 - - [11/Oct/2026:14:23:54 +0200] "GET /wp-includes/ID3/about.php HTTP/1.1" 403 146 "- ...
show more
20.214.144.216 - - [11/Oct/2026:14:23:54 +0200] "GET /wp-includes/ID3/about.php HTTP/1.1" 403 146 "-" "-"
20.214.144.216 - - [11/Oct/2026:14:23:54 +0200] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 403 6287 "-" "-"
20.214.144.216 - - [11/Oct/2026:14:23:55 +0200] "GET /wp-includes/blocks/audio/ HTTP/1.1" 403 6287 "-" "-"
20.214.144.216 - - [11/Oct/2026:14:23:59 +0200] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 403 146 "-" "-"
20.214.144.216 - - [11/Oct/2026:14:24:00 +0200] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 403 6287 "-" "-"
...
show less
|
Web App Attack
|
|
🇱🇹
62.60.134.210
|
|
Oct 11 13:24:11 web09 postfix/smtpd[2046042]: warning: unknown[62.60.134.210]: SASL LOGIN authentica ...
show more
Oct 11 13:24:11 web09 postfix/smtpd[2046042]: warning: unknown[62.60.134.210]: SASL LOGIN authentication failed: authentication failure, sasl_username=randy
Oct 11 13:26:12 web09 postfix/smtpd[2041616]: warning: unknown[62.60.134.210]: SASL LOGIN authentication failed: authentication failure, sasl_username=profkom
Oct 11 13:27:42 web09 postfix/smtpd[2046042]: warning: unknown[62.60.134.210]: SASL LOGIN authentication failed: authentication failure, sasl_username=k7
Oct 11 13:30:03 web09 postfix/smtpd[2041616]: warning: unknown[62.60.134.210]: SASL LOGIN authentication failed: authentication failure, sasl_username=goto
Oct 11 13:32:21 web09 postfix/smtpd[2041616]: warning: unknown[62.60.134.210]: SASL LOGIN authentication failed: authentication failure, sasl_username=asf
...
show less
|
Brute-Force
|
|
🇱🇹
62.60.134.210
|
|
Oct 11 12:32:13 web09 postfix/smtpd[2030069]: warning: unknown[62.60.134.210]: SASL LOGIN authentica ...
show more
Oct 11 12:32:13 web09 postfix/smtpd[2030069]: warning: unknown[62.60.134.210]: SASL LOGIN authentication failed: authentication failure, sasl_username=www02
Oct 11 12:33:41 web09 postfix/smtpd[2026042]: warning: unknown[62.60.134.210]: SASL LOGIN authentication failed: authentication failure, sasl_username=moh'd
Oct 11 12:35:57 web09 postfix/smtpd[2030069]: warning: unknown[62.60.134.210]: SASL LOGIN authentication failed: authentication failure, sasl_username=smarthost
Oct 11 12:38:19 web09 postfix/smtpd[2026042]: warning: unknown[62.60.134.210]: SASL LOGIN authentication failed: authentication failure, sasl_username=testx
Oct 11 12:40:07 web09 postfix/smtpd[2030069]: warning: unknown[62.60.134.210]: SASL LOGIN authentication failed: authentication failure, sasl_username=abc12345
...
show less
|
Brute-Force
|
|
🇧🇪
34.156.206.32
|
|
34.156.206.32 - - [11/Oct/2026:12:25:00 +0200] "GET /.env.aws HTTP/1.1" 403 6073 "-" "Mozilla/5.0 (W ...
show more
34.156.206.32 - - [11/Oct/2026:12:25:00 +0200] "GET /.env.aws HTTP/1.1" 403 6073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.156.206.32 - - [11/Oct/2026:12:25:00 +0200] "GET /.env-sample HTTP/1.1" 403 6073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.156.206.32 - - [11/Oct/2026:12:25:00 +0200] "GET /.env.anthropic HTTP/1.1" 403 6073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.156.206.32 - - [11/Oct/2026:12:25:00 +0200] "GET /.env-example HTTP/1.1" 403 6073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.156.206.32 - - [11/Oct/2026:12:25:00 +0200] "GET /.docker/config.json HTTP/1.1" 403 6073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
|
Web App Attack
|
|
🇵🇱
45.138.12.24
|
|
45.138.12.24 - - [11/Oct/2026:11:28:25 +0200] "GET /.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Window ...
show more
45.138.12.24 - - [11/Oct/2026:11:28:25 +0200] "GET /.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
45.138.12.24 - - [11/Oct/2026:11:28:26 +0200] "GET /composer.json HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
45.138.12.24 - - [11/Oct/2026:11:28:26 +0200] "GET /config/.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
45.138.12.24 - - [11/Oct/2026:11:28:26 +0200] "GET /config/aws.yml HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
45.138.12.24 - - [11/Oct/2026:11:28:26 +0200] "GET /config/config.js HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
|
Web App Attack
|
|
🇲🇽
158.23.176.177
|
|
158.23.176.177 - - [11/Oct/2026:10:04:06 +0200] "GET /z70.php HTTP/1.1" 403 5610 "-" "-"
158.23.176. ...
show more
158.23.176.177 - - [11/Oct/2026:10:04:06 +0200] "GET /z70.php HTTP/1.1" 403 5610 "-" "-"
158.23.176.177 - - [11/Oct/2026:10:04:07 +0200] "GET /chosen.php HTTP/1.1" 403 5610 "-" "-"
158.23.176.177 - - [11/Oct/2026:10:04:07 +0200] "GET /1.php?p= HTTP/1.1" 403 5610 "-" "-"
158.23.176.177 - - [11/Oct/2026:10:04:07 +0200] "GET /radio.php HTTP/1.1" 403 5610 "-" "-"
158.23.176.177 - - [11/Oct/2026:10:04:07 +0200] "GET /wp_blog_footer.php HTTP/1.1" 403 5610 "-" "-"
...
show less
|
Web App Attack
|
|
🇩🇪
34.107.30.247
|
|
34.107.30.247 - - [11/Oct/2026:08:06:18 +0200] "GET /cache/original/%2e%2e/.env HTTP/1.1" 403 6275 " ...
show more
34.107.30.247 - - [11/Oct/2026:08:06:18 +0200] "GET /cache/original/%2e%2e/.env HTTP/1.1" 403 6275 "https://www.lumavault.io/cache/original/%2e%2e/.env" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
34.107.30.247 - - [11/Oct/2026:08:06:20 +0200] "GET /cache/original/%2e%2e/%2e%2e/.env HTTP/1.1" 403 6275 "https://www.lumavault.io/cache/original/%2e%2e/%2e%2e/.env" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
34.107.30.247 - - [11/Oct/2026:08:06:26 +0200] "GET /config/gcp-credentials.json HTTP/1.1" 403 6275 "https://www.lumavault.io/config/gcp-credentials.json" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
34.107.30.247 - - [11/Oct/2026:08:06:26 +0200] "GET /config/firebase-admin.json HTTP/1.1" 403 6275 "https://www.lumavault.io/config/firebase-admin.json" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)"
34.107.30.247 - - [11/Oct/2026:08:06:26 +0200] "GET /.env HT
...
show less
|
Web App Attack
|
|
🇸🇬
136.85.32.9
|
|
136.85.32.9 - - [11/Oct/2026:03:15:40 +0200] "GET /images../.env HTTP/1.1" 403 5677 "-" "Mozilla/5.0 ...
show more
136.85.32.9 - - [11/Oct/2026:03:15:40 +0200] "GET /images../.env HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)"
136.85.32.9 - - [11/Oct/2026:03:15:40 +0200] "GET /css../.env HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
136.85.32.9 - - [11/Oct/2026:03:15:40 +0200] "GET /public../.env HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)"
136.85.32.9 - - [11/Oct/2026:03:15:40 +0200] "GET /media../.env HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"
136.85.32.9 - - [11/Oct/2026:03:15:40 +0200] "GET /uploads../.env HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"
...
show less
|
Web App Attack
|
|
🇸🇬
136.85.110.222
|
|
136.85.110.222 - - [11/Oct/2026:01:15:07 +0200] "GET /files../.env HTTP/1.1" 403 5677 "-" "Mozilla/5 ...
show more
136.85.110.222 - - [11/Oct/2026:01:15:07 +0200] "GET /files../.env HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
136.85.110.222 - - [11/Oct/2026:01:15:07 +0200] "GET /media../.env HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"
136.85.110.222 - - [11/Oct/2026:01:15:07 +0200] "GET /api/w/starter/jobs_u/get_log_file/../../../../proc/self/environ HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)"
136.85.110.222 - - [11/Oct/2026:01:15:07 +0200] "GET /images../.env HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
136.85.110.222 - - [11/Oct/2026:01:15:07 +0200] "GET /assets../.env HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
show less
|
Web App Attack
|
|
🇮🇩
103.59.161.217
|
|
103.59.161.217 - - [11/Oct/2026:00:49:10 +0200] "GET /wp-admin/css/ HTTP/1.1" 403 6287 "-" "Mozilla/ ...
show more
103.59.161.217 - - [11/Oct/2026:00:49:10 +0200] "GET /wp-admin/css/ HTTP/1.1" 403 6287 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
103.59.161.217 - - [11/Oct/2026:00:49:11 +0200] "GET /wp-admin/images/ HTTP/1.1" 403 6287 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
103.59.161.217 - - [11/Oct/2026:00:49:12 +0200] "GET /wp-admin/includes/ HTTP/1.1" 403 6287 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
103.59.161.217 - - [11/Oct/2026:00:49:13 +0200] "GET /wp-admin/js/ HTTP/1.1" 403 6287 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
103.59.161.217 - - [11/Oct/2026:00:49:13 +0200] "GET /wp-admin/maint/ HTTP/1.1" 403 6287 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
...
show less
|
Web App Attack
|
|
🇺🇸
136.70.190.4
|
|
136.70.190.4 - - [11/Oct/2026:00:48:09 +0200] "GET /api/system/fileView?file=/proc/self/environ HTTP ...
show more
136.70.190.4 - - [11/Oct/2026:00:48:09 +0200] "GET /api/system/fileView?file=/proc/self/environ HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"
136.70.190.4 - - [11/Oct/2026:00:48:09 +0200] "GET /userfiles?path=../../../../.env HTTP/1.1" 403 5677 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot"
136.70.190.4 - - [11/Oct/2026:00:48:09 +0200] "GET /userfiles?path=../../.env HTTP/1.1" 403 5677 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
136.70.190.4 - - [11/Oct/2026:00:48:09 +0200] "GET /gcp-credentials.json HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)"
136.70.190.4 - - [11/Oct/2026:00:48:09 +0200] "GET /userfiles/x?path=../../.env HTTP/1.1" 403 5677 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)"
...
show less
|
Web App Attack
|
|
🇺🇸
136.70.242.68
|
|
136.70.242.68 - - [11/Oct/2026:00:34:18 +0200] "GET /@fs/app/.env.production?import&raw?? HTTP/1.1" ...
show more
136.70.242.68 - - [11/Oct/2026:00:34:18 +0200] "GET /@fs/app/.env.production?import&raw?? HTTP/1.1" 403 5677 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
136.70.242.68 - - [11/Oct/2026:00:34:18 +0200] "GET /@fs/..%252f..%252f..%252f..%252f..%252froot/.env?raw?? HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)"
136.70.242.68 - - [11/Oct/2026:00:34:18 +0200] "GET /@fs/root/.aws/credentials?raw?? HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)"
136.70.242.68 - - [11/Oct/2026:00:34:18 +0200] "GET /@fs/var/task/.env?raw?? HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)"
136.70.242.68 - - [11/Oct/2026:00:34:18 +0200] "GET /@fs/.env?import&?raw?? HTTP/1.1" 403 5677 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected])"
...
show less
|
Web App Attack
|
|
🇺🇸
136.80.8.3
|
|
136.80.8.3 - - [10/Oct/2026:22:59:40 +0200] "GET /.git-credentials HTTP/2.0" 403 106 "https://winsvr ...
show more
136.80.8.3 - - [10/Oct/2026:22:59:40 +0200] "GET /.git-credentials HTTP/2.0" 403 106 "https://winsvr-berlin.de/.git-credentials" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
136.80.8.3 - - [10/Oct/2026:22:59:40 +0200] "GET /.aws/config HTTP/2.0" 403 106 "https://winsvr-berlin.de/.aws/config" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
136.80.8.3 - - [10/Oct/2026:22:59:40 +0200] "GET /docker-compose.yaml HTTP/2.0" 403 106 "https://winsvr-berlin.de/docker-compose.yaml" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
136.80.8.3 - - [10/Oct/2026:22:59:40 +0200] "GET /.htpasswd HTTP/2.0" 403 106 "https://winsvr-berlin.de/.htpasswd" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
136.80.8.3 - - [10/Oct/2026:22:59:41 +0200] "GET /@fs/.env?url&raw?? HTTP/2.0" 403 106 "https://winsvr-berlin.de/@fs/.env?url&raw??" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://w
...
show less
|
Web App Attack
|
|
🇮🇩
103.59.161.224
|
|
103.59.161.224 - - [10/Oct/2026:22:26:59 +0200] "GET /wp-admin/css/ HTTP/1.1" 403 6287 "-" "Mozilla/ ...
show more
103.59.161.224 - - [10/Oct/2026:22:26:59 +0200] "GET /wp-admin/css/ HTTP/1.1" 403 6287 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
103.59.161.224 - - [10/Oct/2026:22:26:59 +0200] "GET /wp-admin/images/ HTTP/1.1" 403 6287 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
103.59.161.224 - - [10/Oct/2026:22:27:00 +0200] "GET /wp-admin/includes/ HTTP/1.1" 403 6287 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
103.59.161.224 - - [10/Oct/2026:22:27:00 +0200] "GET /wp-admin/js/ HTTP/1.1" 403 6287 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
103.59.161.224 - - [10/Oct/2026:22:27:01 +0200] "GET /wp-admin/maint/ HTTP/1.1" 403 6287 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
...
show less
|
Web App Attack
|
|
🇳🇱
34.91.225.126
|
|
34.91.225.126 - - [10/Oct/2026:21:35:25 +0200] "GET /.htpasswd HTTP/1.1" 403 6275 "-" "Mozilla/5.0 A ...
show more
34.91.225.126 - - [10/Oct/2026:21:35:25 +0200] "GET /.htpasswd HTTP/1.1" 403 6275 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected])"
34.91.225.126 - - [10/Oct/2026:21:35:25 +0200] "GET /@fs/../.env?raw?? HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
34.91.225.126 - - [10/Oct/2026:21:35:25 +0200] "GET /@fs/../.env?import&raw?? HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
34.91.225.126 - - [10/Oct/2026:21:35:25 +0200] "GET /.env?import&raw HTTP/1.1" 403 6275 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
34.91.225.126 - - [10/Oct/2026:21:35:25 +0200] "GET /.env?raw HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)"
...
show less
|
Web App Attack
|
|
🇸🇬
136.85.15.220
|
|
136.85.15.220 - - [10/Oct/2026:21:25:07 +0200] "GET /pages/index.astro.mjs.map HTTP/2.0" 403 106 "ht ...
show more
136.85.15.220 - - [10/Oct/2026:21:25:07 +0200] "GET /pages/index.astro.mjs.map HTTP/2.0" 403 106 "https://winsvr-berlin.de/pages/index.astro.mjs.map" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
136.85.15.220 - - [10/Oct/2026:21:25:08 +0200] "GET /infra/.env HTTP/2.0" 403 106 "https://winsvr-berlin.de/infra/.env" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
136.85.15.220 - - [10/Oct/2026:21:25:08 +0200] "GET /project/.env HTTP/2.0" 403 106 "https://winsvr-berlin.de/project/.env" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
136.85.15.220 - - [10/Oct/2026:21:25:10 +0200] "GET /id_rsa HTTP/2.0" 403 106 "https://winsvr-berlin.de/id_rsa" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
136.85.15.220 - - [10/Oct/2026:21:25:11 +0200] "GET /localhost.key HTTP/2.0" 403 106 "https://winsvr-berlin.de/localhost.key" "Mozilla/5.0 (compatible
...
show less
|
Web App Attack
|
|
🇺🇸
136.70.190.4
|
|
136.70.190.4 - - [10/Oct/2026:21:18:02 +0200] "GET /.htpasswd HTTP/1.1" 403 9203 "https://dein-fotos ...
show more
136.70.190.4 - - [10/Oct/2026:21:18:02 +0200] "GET /.htpasswd HTTP/1.1" 403 9203 "https://dein-fotostart.de/.htpasswd" "CCBot/2.0 (https://commoncrawl.org/faq/)"
136.70.190.4 - - [10/Oct/2026:21:18:10 +0200] "GET /api/console/api_server?sense_version=%40%40SENSE_VERSION&apis=../../../../../../proc/self/environ HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/console/api_server?sense_version=%40%40SENSE_VERSION&apis=../../../../../../proc/self/environ" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
136.70.190.4 - - [10/Oct/2026:21:18:10 +0200] "GET /api/console/api_server?sense_version=%40%40SENSE_VERSION&apis=../../../../../../.env HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/console/api_server?sense_version=%40%40SENSE_VERSION&apis=../../../../../../.env" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
136.70.190.4 - - [10/Oct/2026:21:18:11 +0200] "GET /api/proc/self/environ HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/w/admins/jobs_u/get_log
...
show less
|
Web App Attack
|