AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User Manuel Braeuer joined AbuseIPDB in May 2025 and has reported 3,511 IP addresses.

Standing (weight) is good.

ACTIVE USER

IP	Date	Comment	Categories
🇺🇸 34.138.50.68	10 Oct 2026	34.138.50.68 - - [10/Oct/2026:02:35:38 +0200] "GET /api/console/api_server?sense_version=%40%40SENSE ... show more 34.138.50.68 - - [10/Oct/2026:02:35:38 +0200] "GET /api/console/api_server?sense_version=%40%40SENSE_VERSION&apis=../../../../../../.env HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/console/api_server?sense_version=%40%40SENSE_VERSION&apis=../../../../../../.env" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)" 34.138.50.68 - - [10/Oct/2026:02:35:38 +0200] "GET /api/proc/self/environ HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/w/admins/jobs_u/get_log_file/../../../../proc/self/environ" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot" 34.138.50.68 - - [10/Oct/2026:02:35:38 +0200] "GET /api/v1/config HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/v1/config" "CCBot/2.0 (https://commoncrawl.org/faq/)" 34.138.50.68 - - [10/Oct/2026:02:35:39 +0200] "GET /api/settings HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/settings" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0 ... show less	Web App Attack
🇺🇸 85.239.151.82	10 Oct 2026	85.239.151.82 - - [10/Oct/2026:02:09:10 +0200] "GET /js../.git/config HTTP/1.1" 403 5677 "-" "Mozill ... show more 85.239.151.82 - - [10/Oct/2026:02:09:10 +0200] "GET /js../.git/config HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" 85.239.151.82 - - [10/Oct/2026:02:09:10 +0200] "GET /images../.git/config HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" 85.239.151.82 - - [10/Oct/2026:02:09:10 +0200] "GET /assets../.git/config HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" 85.239.151.82 - - [10/Oct/2026:02:09:10 +0200] "GET /img../.git/config HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" 85.239.151.82 - - [10/Oct/2026:02:09:10 +0200] "GET /.git/index HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like G ... show less	Web App Attack
🇮🇳 20.219.185.206	09 Oct 2026	20.219.185.206 - - [10/Oct/2026:01:41:43 +0200] "GET /wp-includes/ID3/about.php HTTP/1.1" 403 146 "- ... show more 20.219.185.206 - - [10/Oct/2026:01:41:43 +0200] "GET /wp-includes/ID3/about.php HTTP/1.1" 403 146 "-" "-" 20.219.185.206 - - [10/Oct/2026:01:41:43 +0200] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 403 6282 "-" "-" 20.219.185.206 - - [10/Oct/2026:01:41:43 +0200] "GET /wp-includes/blocks/audio/ HTTP/1.1" 403 6282 "-" "-" 20.219.185.206 - - [10/Oct/2026:01:41:45 +0200] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 403 146 "-" "-" 20.219.185.206 - - [10/Oct/2026:01:41:46 +0200] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 403 6282 "-" "-" ... show less	Web App Attack
🇯🇵 34.146.194.7	09 Oct 2026	34.146.194.7 - - [10/Oct/2026:01:06:48 +0200] "GET /static../.env HTTP/2.0" 403 106 "https://winsvr- ... show more 34.146.194.7 - - [10/Oct/2026:01:06:48 +0200] "GET /static../.env HTTP/2.0" 403 106 "https://winsvr-berlin.de/static../.env" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 34.146.194.7 - - [10/Oct/2026:01:06:49 +0200] "GET /api/settings HTTP/2.0" 403 106 "https://winsvr-berlin.de/api/settings" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 34.146.194.7 - - [10/Oct/2026:01:06:52 +0200] "GET /dist../.env HTTP/2.0" 403 106 "https://winsvr-berlin.de/dist../.env" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 34.146.194.7 - - [10/Oct/2026:01:06:59 +0200] "GET /php-cgi/php-cgi.exe?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/2.0" 403 106 "https://winsvr-berlin.de/php-cgi/php-cgi.exe?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input" "CCBot/2.0 (https://commoncrawl.org/faq/)" 34.146.194.7 - - [10/Oct/2026:01:07:00 +0200] "GET /cgi-bin/php-c ... show less	Web App Attack
🇭🇰 104.208.73.227	09 Oct 2026	104.208.73.227 - - [10/Oct/2026:00:21:44 +0200] "GET /dodo.php HTTP/1.1" 403 5610 "-" "-" 104.208.73 ... show more 104.208.73.227 - - [10/Oct/2026:00:21:44 +0200] "GET /dodo.php HTTP/1.1" 403 5610 "-" "-" 104.208.73.227 - - [10/Oct/2026:00:21:44 +0200] "GET /mails.php HTTP/1.1" 403 5610 "-" "-" 104.208.73.227 - - [10/Oct/2026:00:21:45 +0200] "GET /go.php HTTP/1.1" 403 5610 "-" "-" 104.208.73.227 - - [10/Oct/2026:00:21:45 +0200] "GET /wp-fgban13jx3.php HTTP/1.1" 403 5610 "-" "-" 104.208.73.227 - - [10/Oct/2026:00:21:45 +0200] "GET /1ac.php HTTP/1.1" 403 5610 "-" "-" ... show less	Web App Attack
🇺🇸 34.138.50.68	09 Oct 2026	34.138.50.68 - - [09/Oct/2026:23:56:02 +0200] "GET /api/v1/settings HTTP/1.1" 403 5701 "https://dein ... show more 34.138.50.68 - - [09/Oct/2026:23:56:02 +0200] "GET /api/v1/settings HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/v1/settings" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 34.138.50.68 - - [09/Oct/2026:23:56:03 +0200] "GET /api/v2/config HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/v2/config" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)" 34.138.50.68 - - [09/Oct/2026:23:56:03 +0200] "GET /api/v1/config HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/v1/config" "Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)" 34.138.50.68 - - [09/Oct/2026:23:56:03 +0200] "GET /api/proc/self/environ HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/w/admins/jobs_u/get_log_file/../../../../proc/self/environ" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)" 34.138.50.68 - - [09/Oct/2026:23:56:03 +0200] "GET /api/env HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/en ... show less	Web App Attack
🇸🇬 34.143.191.139	09 Oct 2026	34.143.191.139 - - [09/Oct/2026:23:30:26 +0200] "GET /.htpasswd HTTP/2.0" 403 106 "https://winsvr-be ... show more 34.143.191.139 - - [09/Oct/2026:23:30:26 +0200] "GET /.htpasswd HTTP/2.0" 403 106 "https://winsvr-berlin.de/.htpasswd" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot" 34.143.191.139 - - [09/Oct/2026:23:30:26 +0200] "GET /wp-json HTTP/2.0" 403 106 "https://winsvr-berlin.de/wp-json" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 34.143.191.139 - - [09/Oct/2026:23:30:27 +0200] "GET /.bashrc HTTP/2.0" 403 106 "https://winsvr-berlin.de/.bashrc" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 34.143.191.139 - - [09/Oct/2026:23:30:28 +0200] "GET /@fs/.env?raw&url?? HTTP/2.0" 403 106 "https://winsvr-berlin.de/@fs/.env?raw&url??" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 34.143.191.139 - - [09/Oct/2026:23:30:29 +0200] "GET /.env?import&raw?? HTTP/2.0" 403 106 "https://winsvr-berlin.de/@fs/../.env?import&raw??" "Mozilla/ ... show less	Web App Attack
🇯🇵 20.210.166.54	09 Oct 2026	20.210.166.54 - - [09/Oct/2026:23:16:15 +0200] "GET /z70.php HTTP/1.1" 403 5610 "-" "-" 20.210.166.5 ... show more 20.210.166.54 - - [09/Oct/2026:23:16:15 +0200] "GET /z70.php HTTP/1.1" 403 5610 "-" "-" 20.210.166.54 - - [09/Oct/2026:23:16:16 +0200] "GET /adminfuns.php HTTP/1.1" 403 5610 "-" "-" 20.210.166.54 - - [09/Oct/2026:23:16:16 +0200] "GET //av.php HTTP/1.1" 403 5610 "-" "-" 20.210.166.54 - - [09/Oct/2026:23:16:17 +0200] "GET /chosen.php HTTP/1.1" 403 5610 "-" "-" 20.210.166.54 - - [09/Oct/2026:23:16:18 +0200] "GET /1.php?p= HTTP/1.1" 403 5610 "-" "-" ... show less	Web App Attack
🇸🇬 34.142.148.4	09 Oct 2026	34.142.148.4 - - [09/Oct/2026:20:38:30 +0200] "GET /.htpasswd HTTP/2.0" 403 106 "https://winsvr-berl ... show more 34.142.148.4 - - [09/Oct/2026:20:38:30 +0200] "GET /.htpasswd HTTP/2.0" 403 106 "https://winsvr-berlin.de/.htpasswd" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)" 34.142.148.4 - - [09/Oct/2026:20:38:31 +0200] "GET /server.key HTTP/2.0" 403 106 "https://winsvr-berlin.de/server.key" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 34.142.148.4 - - [09/Oct/2026:20:38:36 +0200] "GET /.env?.svg?.wasm?init HTTP/2.0" 403 106 "https://winsvr-berlin.de/.env?.svg?.wasm?init" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 34.142.148.4 - - [09/Oct/2026:20:38:38 +0200] "GET /api/fs/read?allowOutsideWorkspace=true&path=/app/.env HTTP/2.0" 403 106 "https://winsvr-berlin.de/api/fs/read?allowOutsideWorkspace=true&path=/app/.env" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 34.142.148.4 - - [09/Oct/2026:20:38:39 +0200] "GET /%2Fsettings HTTP/2.0" 403 106 "https://wi ... show less	Web App Attack
🇰🇷 20.249.5.100	09 Oct 2026	20.249.5.100 - - [09/Oct/2026:19:35:06 +0200] "GET /wp-includes/ID3/about.php HTTP/1.1" 403 146 "-" ... show more 20.249.5.100 - - [09/Oct/2026:19:35:06 +0200] "GET /wp-includes/ID3/about.php HTTP/1.1" 403 146 "-" "-" 20.249.5.100 - - [09/Oct/2026:19:35:07 +0200] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 403 6287 "-" "-" 20.249.5.100 - - [09/Oct/2026:19:35:07 +0200] "GET /wp-includes/blocks/audio/ HTTP/1.1" 403 6287 "-" "-" 20.249.5.100 - - [09/Oct/2026:19:35:12 +0200] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 403 146 "-" "-" 20.249.5.100 - - [09/Oct/2026:19:35:13 +0200] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 403 6287 "-" "-" ... show less	Web App Attack
🇳🇱 34.187.50.143	09 Oct 2026	34.187.50.143 - - [09/Oct/2026:18:37:09 +0200] "GET /.htpasswd HTTP/1.1" 403 6275 "-" "Mozilla/5.0 ( ... show more 34.187.50.143 - - [09/Oct/2026:18:37:09 +0200] "GET /.htpasswd HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)" 34.187.50.143 - - [09/Oct/2026:18:37:10 +0200] "GET /@fs/../.env?raw?? HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 34.187.50.143 - - [09/Oct/2026:18:37:11 +0200] "GET /@fs/../.env?import&raw?? HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)" 34.187.50.143 - - [09/Oct/2026:18:37:11 +0200] "GET /.env?import&raw HTTP/1.1" 403 6275 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected])" 34.187.50.143 - - [09/Oct/2026:18:37:11 +0200] "GET /.env?import&url&inline HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected]) AppleWebKit/537.36" ... show less	Web App Attack
🇧🇪 34.14.4.116	09 Oct 2026	34.14.4.116 - - [09/Oct/2026:18:35:35 +0200] "GET /.htpasswd HTTP/1.1" 403 9203 "https://dein-fotost ... show more 34.14.4.116 - - [09/Oct/2026:18:35:35 +0200] "GET /.htpasswd HTTP/1.1" 403 9203 "https://dein-fotostart.de/.htpasswd" "CCBot/2.0 (https://commoncrawl.org/faq/)" 34.14.4.116 - - [09/Oct/2026:18:35:36 +0200] "GET /api/v2/config HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/v2/config" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 34.14.4.116 - - [09/Oct/2026:18:35:36 +0200] "GET /api/v1/config HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/v1/config" "Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)" 34.14.4.116 - - [09/Oct/2026:18:35:36 +0200] "GET /api/v2/settings HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/v2/settings" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 34.14.4.116 - - [09/Oct/2026:18:35:36 +0200] "GET /api/env HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/env" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)" ... show less	Web App Attack
🇺🇸 34.145.165.44	09 Oct 2026	34.145.165.44 - - [09/Oct/2026:18:16:14 +0200] "GET /.htpasswd HTTP/1.1" 403 9203 "https://dein-foto ... show more 34.145.165.44 - - [09/Oct/2026:18:16:14 +0200] "GET /.htpasswd HTTP/1.1" 403 9203 "https://dein-fotostart.de/.htpasswd" "Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)" 34.145.165.44 - - [09/Oct/2026:18:16:18 +0200] "GET /api/v2/config HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/v2/config" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)" 34.145.165.44 - - [09/Oct/2026:18:16:18 +0200] "GET /api/env HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/env" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)" 34.145.165.44 - - [09/Oct/2026:18:16:18 +0200] "GET /api/v1/config HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/v1/config" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)" 34.145.165.44 - - [09/Oct/2026:18:16:18 +0200] "GET /api/openapi.json HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/openapi.json" "Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)" ... show less	Web App Attack
🇵🇱 45.138.12.10	09 Oct 2026	45.138.12.10 - - [09/Oct/2026:18:00:46 +0200] "GET /api/v1/aws/bedrock HTTP/1.1" 403 5701 "https://d ... show more 45.138.12.10 - - [09/Oct/2026:18:00:46 +0200] "GET /api/v1/aws/bedrock HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/v1/aws/bedrock" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.138.12.10 - - [09/Oct/2026:18:00:46 +0200] "GET /api/ai/config HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/ai/config" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.138.12.10 - - [09/Oct/2026:18:00:50 +0200] "GET /api/config/ai HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/config/ai" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.138.12.10 - - [09/Oct/2026:18:00:50 +0200] "GET /api/v1/invoke HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/v1/invoke" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.138.12.10 - - [09/Oct/2 ... show less	Web App Attack
🇸🇬 34.142.210.209	09 Oct 2026	34.142.210.209 - - [09/Oct/2026:17:36:37 +0200] "GET /.htpasswd HTTP/1.1" 403 9203 "https://dein-fot ... show more 34.142.210.209 - - [09/Oct/2026:17:36:37 +0200] "GET /.htpasswd HTTP/1.1" 403 9203 "https://dein-fotostart.de/.htpasswd" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 34.142.210.209 - - [09/Oct/2026:17:36:43 +0200] "GET /api/v2/config HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/v2/config" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 34.142.210.209 - - [09/Oct/2026:17:36:43 +0200] "GET /api/v1/config HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/v1/config" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 34.142.210.209 - - [09/Oct/2026:17:36:43 +0200] "GET /api/env HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/env" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 34.142.210.209 - - [09/Oct/2026:17:36:43 +0200] "GET /api/v2/settings HTTP/ ... show less	Web App Attack
🇫🇷 31.56.58.43	09 Oct 2026	31.56.58.43 - - [09/Oct/2026:13:47:47 +0200] "GET /wp-config.php HTTP/1.1" 403 177 "-" "Mozilla/5.0 ... show more 31.56.58.43 - - [09/Oct/2026:13:47:47 +0200] "GET /wp-config.php HTTP/1.1" 403 177 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 31.56.58.43 - - [09/Oct/2026:13:47:47 +0200] "GET /wp-config.php.bak HTTP/1.1" 403 177 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 31.56.58.43 - - [09/Oct/2026:13:47:47 +0200] "GET /wp-config.php.old HTTP/1.1" 403 177 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 31.56.58.43 - - [09/Oct/2026:13:47:47 +0200] "GET /wp-config.php.save HTTP/1.1" 403 177 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 31.56.58.43 - - [09/Oct/2026:13:47:47 +0200] "GET /wp-config.php.orig HTTP/1.1" 403 177 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/12 ... show less	Web App Attack
🇰🇷 20.249.5.100	09 Oct 2026	20.249.5.100 - - [09/Oct/2026:11:33:38 +0200] "GET /wp-includes/ID3/about.php HTTP/1.1" 403 146 "-" ... show more 20.249.5.100 - - [09/Oct/2026:11:33:38 +0200] "GET /wp-includes/ID3/about.php HTTP/1.1" 403 146 "-" "-" 20.249.5.100 - - [09/Oct/2026:11:33:38 +0200] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 403 6287 "-" "-" 20.249.5.100 - - [09/Oct/2026:11:33:39 +0200] "GET /wp-includes/blocks/audio/ HTTP/1.1" 403 6287 "-" "-" 20.249.5.100 - - [09/Oct/2026:11:33:44 +0200] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 403 146 "-" "-" 20.249.5.100 - - [09/Oct/2026:11:33:46 +0200] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 403 6287 "-" "-" ... show less	Web App Attack
🇵🇱 45.138.12.15	09 Oct 2026	45.138.12.15 - - [09/Oct/2026:11:02:10 +0200] "GET /wp-config.php.bak?v=18dcd0fe96253f46 HTTP/1.1" 4 ... show more 45.138.12.15 - - [09/Oct/2026:11:02:10 +0200] "GET /wp-config.php.bak?v=18dcd0fe96253f46 HTTP/1.1" 403 146 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:47.0) Gecko/20100101 Firefox/47.0" 45.138.12.15 - - [09/Oct/2026:11:02:10 +0200] "GET /wp-config.php.old?v=18dcd0fe939ef5d2 HTTP/1.1" 403 146 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:47.0) Gecko/20100101 Firefox/47.0" 45.138.12.15 - - [09/Oct/2026:11:02:10 +0200] "GET /wp-config.php.save?v=18dcd0fe984c21bb HTTP/1.1" 403 146 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:47.0) Gecko/20100101 Firefox/47.0" 45.138.12.15 - - [09/Oct/2026:11:02:11 +0200] "GET /wp-config.php.txt?v=18dcd0fea2dd73ba HTTP/1.1" 403 146 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:47.0) Gecko/20100101 Firefox/47.0" 45.138.12.15 - - [09/Oct/2026:11:02:20 +0200] "GET /storage/logs/laravel.log?v=18dcd0f8f6861560 HTTP/1.1" 403 146 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:47.0) Gecko/20100101 Firefox/47.0" ... show less	Web App Attack
🇺🇸 132.196.60.168	09 Oct 2026	132.196.60.168 - - [09/Oct/2026:08:11:00 +0200] "GET /samll.php HTTP/1.1" 403 5610 "-" "-" 132.196.6 ... show more 132.196.60.168 - - [09/Oct/2026:08:11:00 +0200] "GET /samll.php HTTP/1.1" 403 5610 "-" "-" 132.196.60.168 - - [09/Oct/2026:08:11:01 +0200] "GET /lock.php HTTP/1.1" 403 5610 "-" "-" 132.196.60.168 - - [09/Oct/2026:08:11:01 +0200] "GET /ccc.php?p= HTTP/1.1" 403 5610 "-" "-" 132.196.60.168 - - [09/Oct/2026:08:11:01 +0200] "GET /b.php?p= HTTP/1.1" 403 5610 "-" "-" 132.196.60.168 - - [09/Oct/2026:08:11:02 +0200] "GET /adminfuns.php HTTP/1.1" 403 5610 "-" "-" ... show less	Web App Attack
🇯🇵 20.210.128.125	09 Oct 2026	20.210.128.125 - - [09/Oct/2026:08:02:38 +0200] "GET /file.php HTTP/1.1" 403 5610 "-" "-" 20.210.128 ... show more 20.210.128.125 - - [09/Oct/2026:08:02:38 +0200] "GET /file.php HTTP/1.1" 403 5610 "-" "-" 20.210.128.125 - - [09/Oct/2026:08:02:39 +0200] "GET /adminfuns.php HTTP/1.1" 403 5610 "-" "-" 20.210.128.125 - - [09/Oct/2026:08:02:39 +0200] "GET /404.php HTTP/1.1" 403 5610 "-" "-" 20.210.128.125 - - [09/Oct/2026:08:02:40 +0200] "GET /wk/index.php HTTP/1.1" 403 5610 "-" "-" 20.210.128.125 - - [09/Oct/2026:08:02:40 +0200] "GET /about.php HTTP/1.1" 403 5610 "-" "-" ... show less	Web App Attack
🇧🇷 34.95.150.221	09 Oct 2026	34.95.150.221 - - [09/Oct/2026:07:51:57 +0200] "GET /api/settings HTTP/1.1" 403 5677 "-" "Mozilla/5. ... show more 34.95.150.221 - - [09/Oct/2026:07:51:57 +0200] "GET /api/settings HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)" 34.95.150.221 - - [09/Oct/2026:07:51:57 +0200] "GET /wp-json HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" 34.95.150.221 - - [09/Oct/2026:07:51:57 +0200] "GET /api/config HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)" 34.95.150.221 - - [09/Oct/2026:07:51:57 +0200] "GET /api/health HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" 34.95.150.221 - - [09/Oct/2026:07:51:57 +0200] "GET /ngsw.json HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected]) AppleWebKit/537.36" ... show less	Web App Attack
🇧🇪 35.241.202.92	09 Oct 2026	35.241.202.92 - - [09/Oct/2026:05:33:39 +0200] "GET /.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windo ... show more 35.241.202.92 - - [09/Oct/2026:05:33:39 +0200] "GET /.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 35.241.202.92 - - [09/Oct/2026:05:33:39 +0200] "GET /composer.json HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 35.241.202.92 - - [09/Oct/2026:05:33:39 +0200] "GET /config/aws.yml HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 35.241.202.92 - - [09/Oct/2026:05:33:39 +0200] "GET /config/.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 35.241.202.92 - - [09/Oct/2026:05:33:39 +0200] "GET /config/config.js HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" ... show less	Web App Attack
🇧🇷 34.95.208.134	09 Oct 2026	34.95.208.134 - - [09/Oct/2026:04:40:10 +0200] "GET /7oha5vkmcd424ilwofx5 HTTP/1.1" 403 5677 "-" "CC ... show more 34.95.208.134 - - [09/Oct/2026:04:40:10 +0200] "GET /7oha5vkmcd424ilwofx5 HTTP/1.1" 403 5677 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)" 34.95.208.134 - - [09/Oct/2026:04:40:10 +0200] "GET /uploads../.env HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)" 34.95.208.134 - - [09/Oct/2026:04:40:10 +0200] "GET /css../.env HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)" 34.95.208.134 - - [09/Oct/2026:04:40:10 +0200] "GET /static//.env HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)" 34.95.208.134 - - [09/Oct/2026:04:40:10 +0200] "GET /static//app/.env HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" ... show less	Web App Attack
🇹🇼 34.80.230.128	09 Oct 2026	34.80.230.128 - - [09/Oct/2026:03:39:25 +0200] "GET /api/proc/self/environ HTTP/2.0" 403 106 "https: ... show more 34.80.230.128 - - [09/Oct/2026:03:39:25 +0200] "GET /api/proc/self/environ HTTP/2.0" 403 106 "https://winsvr-berlin.de/api/w/starter/jobs_u/get_log_file/../../../../proc/self/environ" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 34.80.230.128 - - [09/Oct/2026:03:39:28 +0200] "GET /keys/service-account.json HTTP/2.0" 403 106 "https://winsvr-berlin.de/keys/service-account.json" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 34.80.230.128 - - [09/Oct/2026:03:39:32 +0200] "GET /dist/.env HTTP/2.0" 403 106 "https://winsvr-berlin.de/dist/.env" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 34.80.230.128 - - [09/Oct/2026:03:39:34 +0200] "GET /.htpasswd HTTP/2.0" 403 106 "https://winsvr-berlin.de/.htpasswd" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)" 34.80.230.128 - - [09/Oct/2026:03:39:37 +0200] "GET /php-cgi/php-cgi.exe?%ADd+allow_url_include%3d1+%AD ... show less	Web App Attack
🇧🇷 34.95.148.15	09 Oct 2026	34.95.148.15 - - [09/Oct/2026:02:57:06 +0200] "GET /v0r37gxmwyyyd4tiej59 HTTP/1.1" 403 5677 "-" "Moz ... show more 34.95.148.15 - - [09/Oct/2026:02:57:06 +0200] "GET /v0r37gxmwyyyd4tiej59 HTTP/1.1" 403 5677 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 34.95.148.15 - - [09/Oct/2026:02:57:07 +0200] "GET /wp-json HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)" 34.95.148.15 - - [09/Oct/2026:02:57:07 +0200] "GET /static../.env HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" 34.95.148.15 - - [09/Oct/2026:02:57:07 +0200] "GET /.npmrc HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)" 34.95.148.15 - - [09/Oct/2026:02:57:07 +0200] "GET /media../.env HTTP/1.1" 403 5677 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected])" ... show less	Web App Attack