|
🇺🇸
35.208.127.129
|
|
35.208.127.129 - - [08/Oct/2026:11:25:41 +0200] "GET /.git/config HTTP/1.1" 403 5969 "-" "Mozilla/5. ...
show more
35.208.127.129 - - [08/Oct/2026:11:25:41 +0200] "GET /.git/config HTTP/1.1" 403 5969 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.208.127.129 - - [08/Oct/2026:11:25:42 +0200] "GET /.env HTTP/1.1" 403 5969 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.208.127.129 - - [08/Oct/2026:11:25:42 +0200] "GET /.env.local HTTP/1.1" 403 5969 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.208.127.129 - - [08/Oct/2026:11:25:42 +0200] "GET /.env.production HTTP/1.1" 403 5969 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.208.127.129 - - [08/Oct/2026:11:25:42 +0200] "GET /.env.staging HTTP/1.1" 403 5969 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, li
...
show less
|
Web App Attack
|
|
🇩🇪
194.45.37.30
|
|
webmail.notification.x0w.de:443 20.204.16.113 - - [08/Oct/2026:10:38:53 +0200] "GET /config.php? HTT ...
show more
webmail.notification.x0w.de:443 20.204.16.113 - - [08/Oct/2026:10:38:53 +0200] "GET /config.php? HTTP/1.1" 403 5673 "-" "-"
webmail.notification.x0w.de:443 20.204.16.113 - - [08/Oct/2026:10:38:58 +0200] "GET /wp-admin/css/ HTTP/1.1" 403 5673 "-" "-"
webmail.notification.x0w.de:443 20.204.16.113 - - [08/Oct/2026:10:38:58 +0200] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 403 5673 "-" "-"
webmail.notification.x0w.de:443 20.204.16.113 - - [08/Oct/2026:10:38:58 +0200] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 403 5673 "-" "-"
webmail.notification.x0w.de:443 20.204.16.113 - - [08/Oct/2026:10:39:08 +0200] "GET /wp-admin/js/widgets/ HTTP/1.1" 403 5673 "-" "-"
...
show less
|
Web App Attack
|
|
🇦🇺
20.92.83.244
|
|
20.92.83.244 - - [08/Oct/2026:00:38:57 +0200] "GET /wp-admin/css/ HTTP/1.1" 403 6287 "-" "-"
20.92.8 ...
show more
20.92.83.244 - - [08/Oct/2026:00:38:57 +0200] "GET /wp-admin/css/ HTTP/1.1" 403 6287 "-" "-"
20.92.83.244 - - [08/Oct/2026:00:38:59 +0200] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 403 6287 "-" "-"
20.92.83.244 - - [08/Oct/2026:00:38:59 +0200] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 403 6287 "-" "-"
20.92.83.244 - - [08/Oct/2026:00:39:25 +0200] "GET /readme.php HTTP/1.1" 403 146 "-" "-"
20.92.83.244 - - [08/Oct/2026:00:39:40 +0200] "GET /wp-admin/js/widgets/ HTTP/1.1" 403 6287 "-" "-"
...
show less
|
Web App Attack
|
|
🇵🇱
45.138.12.40
|
|
45.138.12.40 - - [07/Oct/2026:20:53:02 +0200] "GET /cms/ HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (compat ...
show more
45.138.12.40 - - [07/Oct/2026:20:53:02 +0200] "GET /cms/ HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
45.138.12.40 - - [07/Oct/2026:20:53:03 +0200] "GET /press/ HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
45.138.12.40 - - [07/Oct/2026:20:53:03 +0200] "GET /wp-json/ HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
45.138.12.40 - - [07/Oct/2026:20:53:03 +0200] "GET /?rest_route=/ HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.2 Safari/605.1.15"
45.138.12.40 - - [07/Oct/2026:20:53:05 +0200] "GET / HTTP/1.1" 403 5677 "http://api.dein-fotostart.de" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
|
Web App Attack
|
|
🇵🇱
45.138.12.47
|
|
45.138.12.47 - - [07/Oct/2026:19:25:46 +0200] "GET /site/ HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (X11; ...
show more
45.138.12.47 - - [07/Oct/2026:19:25:46 +0200] "GET /site/ HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"
45.138.12.47 - - [07/Oct/2026:19:25:51 +0200] "GET /news/ HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
45.138.12.47 - - [07/Oct/2026:19:25:53 +0200] "GET /cms/ HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
45.138.12.47 - - [07/Oct/2026:19:25:58 +0200] "GET /press/ HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
45.138.12.47 - - [07/Oct/2026:19:26:01 +0200] "GET /wp-json/ HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
...
show less
|
Web App Attack
|
|
🇩🇪
194.45.37.30
|
|
webmail.notification.x0w.de:443 13.70.107.184 - - [07/Oct/2026:17:06:37 +0200] "GET /wp-admin/css/co ...
show more
webmail.notification.x0w.de:443 13.70.107.184 - - [07/Oct/2026:17:06:37 +0200] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 403 5673 "-" "-"
webmail.notification.x0w.de:443 13.70.107.184 - - [07/Oct/2026:17:06:37 +0200] "GET /wp-includes/blocks/audio/ HTTP/1.1" 403 5673 "-" "-"
webmail.notification.x0w.de:443 13.70.107.184 - - [07/Oct/2026:17:06:43 +0200] "GET /wp-content/ HTTP/1.1" 403 5673 "-" "-"
webmail.notification.x0w.de:443 13.70.107.184 - - [07/Oct/2026:17:06:43 +0200] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 403 5673 "-" "-"
webmail.notification.x0w.de:443 13.70.107.184 - - [07/Oct/2026:17:06:44 +0200] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 403 5673 "-" "-"
...
show less
|
Web App Attack
|
|
🇦🇺
20.58.177.98
|
|
20.58.177.98 - - [07/Oct/2026:15:23:53 +0200] "GET /z70.php HTTP/1.1" 403 5610 "-" "-"
20.58.177.98 ...
show more
20.58.177.98 - - [07/Oct/2026:15:23:53 +0200] "GET /z70.php HTTP/1.1" 403 5610 "-" "-"
20.58.177.98 - - [07/Oct/2026:15:23:54 +0200] "GET /adminfuns.php HTTP/1.1" 403 5610 "-" "-"
20.58.177.98 - - [07/Oct/2026:15:23:55 +0200] "GET //av.php HTTP/1.1" 403 5610 "-" "-"
20.58.177.98 - - [07/Oct/2026:15:23:55 +0200] "GET /chosen.php HTTP/1.1" 403 5610 "-" "-"
20.58.177.98 - - [07/Oct/2026:15:23:56 +0200] "GET /1.php?p= HTTP/1.1" 403 5610 "-" "-"
...
show less
|
Web App Attack
|
|
🇺🇸
35.212.48.236
|
|
35.212.48.236 - - [07/Oct/2026:15:01:33 +0200] "GET /.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Macin ...
show more
35.212.48.236 - - [07/Oct/2026:15:01:33 +0200] "GET /.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.212.48.236 - - [07/Oct/2026:15:01:39 +0200] "GET /src/.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.212.48.236 - - [07/Oct/2026:15:01:40 +0200] "GET /config/.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.212.48.236 - - [07/Oct/2026:15:01:41 +0200] "GET /database/.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.212.48.236 - - [07/Oct/2026:15:01:41 +0200] "GET /storage/.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko)
...
show less
|
Web App Attack
|
|
🇩🇪
213.61.141.220
|
|
213.61.141.220 - - [07/Oct/2026:13:19:32 +0200] "GET /htmlSascha/data/mk.db HTTP/1.1" 403 6443 "-" " ...
show more
213.61.141.220 - - [07/Oct/2026:13:19:32 +0200] "GET /htmlSascha/data/mk.db HTTP/1.1" 403 6443 "-" "curl/8.7.1"
213.61.141.220 - - [07/Oct/2026:13:19:33 +0200] "GET /htmlSascha/data/ HTTP/1.1" 403 6443 "-" "curl/8.7.1"
213.61.141.220 - - [07/Oct/2026:13:19:38 +0200] "GET /htmlSascha/cron/send-reminders.php HTTP/1.1" 403 6443 "-" "curl/8.7.1"
213.61.141.220 - - [07/Oct/2026:13:19:45 +0200] "GET /htmlSascha/CHANGELOG.md HTTP/1.1" 403 6443 "-" "curl/8.7.1"
213.61.141.220 - - [07/Oct/2026:13:19:47 +0200] "GET /htmlSascha/uploads/.htaccess HTTP/1.1" 403 6443 "-" "curl/8.7.1"
...
show less
|
Web App Attack
|
|
🇮🇳
20.219.160.77
|
|
20.219.160.77 - - [07/Oct/2026:11:02:31 +0200] "GET /wp-content/uploads/hp2.php HTTP/1.1" 403 146 "- ...
show more
20.219.160.77 - - [07/Oct/2026:11:02:31 +0200] "GET /wp-content/uploads/hp2.php HTTP/1.1" 403 146 "-" "-"
20.219.160.77 - - [07/Oct/2026:11:02:31 +0200] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 403 146 "-" "-"
20.219.160.77 - - [07/Oct/2026:11:02:31 +0200] "GET /wp-includes/ID3/about.php HTTP/1.1" 403 146 "-" "-"
20.219.160.77 - - [07/Oct/2026:11:02:32 +0200] "GET /wp-content/uploads/BDKR28_w3zzj7rw.php HTTP/1.1" 403 146 "-" "-"
20.219.160.77 - - [07/Oct/2026:11:02:32 +0200] "GET /wp-includes/config.php HTTP/1.1" 403 146 "-" "-"
...
show less
|
Web App Attack
|
|
🇯🇵
40.74.77.37
|
|
40.74.77.37 - - [07/Oct/2026:10:14:19 +0200] "GET /.well-known/system.php HTTP/1.1" 403 6260 "-" "-" ...
show more
40.74.77.37 - - [07/Oct/2026:10:14:19 +0200] "GET /.well-known/system.php HTTP/1.1" 403 6260 "-" "-"
40.74.77.37 - - [07/Oct/2026:10:14:22 +0200] "GET /.well-known/config.php HTTP/1.1" 403 6260 "-" "-"
40.74.77.37 - - [07/Oct/2026:10:14:31 +0200] "GET /.well-known/aaa.php HTTP/1.1" 403 6260 "-" "-"
40.74.77.37 - - [07/Oct/2026:10:14:56 +0200] "GET /.well-known/1wvekeybd9it2di2vyipgr6Cdefault.php HTTP/1.1" 403 6260 "-" "-"
40.74.77.37 - - [07/Oct/2026:10:14:57 +0200] "GET /.well-known/wp-trackback.php HTTP/1.1" 403 6260 "-" "-"
...
show less
|
Web App Attack
|
|
🇭🇰
40.83.95.41
|
|
40.83.95.41 - - [07/Oct/2026:09:46:46 +0200] "GET /wp-content/uploads/ HTTP/1.1" 403 6287 "-" "-"
40 ...
show more
40.83.95.41 - - [07/Oct/2026:09:46:46 +0200] "GET /wp-content/uploads/ HTTP/1.1" 403 6287 "-" "-"
40.83.95.41 - - [07/Oct/2026:09:47:01 +0200] "GET /wp-content/uploads/2026/08/ HTTP/1.1" 403 6287 "-" "-"
40.83.95.41 - - [07/Oct/2026:09:47:01 +0200] "GET /wp-admin/css/colors/ HTTP/1.1" 403 6287 "-" "-"
40.83.95.41 - - [07/Oct/2026:09:47:02 +0200] "GET /wp-admin/js/ HTTP/1.1" 403 6287 "-" "-"
40.83.95.41 - - [07/Oct/2026:09:47:03 +0200] "GET /wp-includes/css/ HTTP/1.1" 403 6287 "-" "-"
...
show less
|
Web App Attack
|
|
🇮🇳
20.219.160.77
|
|
20.219.160.77 - - [07/Oct/2026:09:00:37 +0200] "GET /wp-admin/css/colors/ectoplasm/customize.php HTT ...
show more
20.219.160.77 - - [07/Oct/2026:09:00:37 +0200] "GET /wp-admin/css/colors/ectoplasm/customize.php HTTP/1.1" 403 5610 "-" "-"
20.219.160.77 - - [07/Oct/2026:09:00:37 +0200] "GET /wp-admin/maint/tura.php HTTP/1.1" 403 5610 "-" "-"
20.219.160.77 - - [07/Oct/2026:09:00:37 +0200] "GET /wp-admin/js/MIimQIHjbM.php HTTP/1.1" 403 5610 "-" "-"
20.219.160.77 - - [07/Oct/2026:09:00:38 +0200] "GET /.well-known/system.php HTTP/1.1" 403 5610 "-" "-"
20.219.160.77 - - [07/Oct/2026:09:00:38 +0200] "GET /wp-content/uploads/hp2.php HTTP/1.1" 403 5610 "-" "-"
...
show less
|
Web App Attack
|
|
🇭🇰
104.208.73.227
|
|
104.208.73.227 - - [07/Oct/2026:08:44:49 +0200] "GET /go.php HTTP/1.1" 403 5610 "-" "-"
104.208.73.2 ...
show more
104.208.73.227 - - [07/Oct/2026:08:44:49 +0200] "GET /go.php HTTP/1.1" 403 5610 "-" "-"
104.208.73.227 - - [07/Oct/2026:08:44:50 +0200] "GET /wp-fgban13jx3.php HTTP/1.1" 403 5610 "-" "-"
104.208.73.227 - - [07/Oct/2026:08:44:50 +0200] "GET /1ac.php HTTP/1.1" 403 5610 "-" "-"
104.208.73.227 - - [07/Oct/2026:08:44:51 +0200] "GET /flm.php HTTP/1.1" 403 5610 "-" "-"
104.208.73.227 - - [07/Oct/2026:08:44:51 +0200] "GET /40341.php HTTP/1.1" 403 5610 "-" "-"
...
show less
|
Web App Attack
|
|
🇦🇺
20.211.90.37
|
|
20.211.90.37 - - [07/Oct/2026:03:35:35 +0200] "GET /flm.php HTTP/1.1" 403 5610 "-" "-"
20.211.90.37 ...
show more
20.211.90.37 - - [07/Oct/2026:03:35:35 +0200] "GET /flm.php HTTP/1.1" 403 5610 "-" "-"
20.211.90.37 - - [07/Oct/2026:03:35:35 +0200] "GET /40341.php HTTP/1.1" 403 5610 "-" "-"
20.211.90.37 - - [07/Oct/2026:03:35:36 +0200] "GET /wp-log.php HTTP/1.1" 403 5610 "-" "-"
20.211.90.37 - - [07/Oct/2026:03:35:37 +0200] "GET /wp-mails.php HTTP/1.1" 403 5610 "-" "-"
20.211.90.37 - - [07/Oct/2026:03:35:37 +0200] "GET /sehryhv.php HTTP/1.1" 403 5610 "-" "-"
...
show less
|
Web App Attack
|
|
🇹🇼
34.80.101.88
|
|
34.80.101.88 - - [07/Oct/2026:02:11:28 +0200] "GET /static//home/user/.env HTTP/1.1" 403 5677 "-" "M ...
show more
34.80.101.88 - - [07/Oct/2026:02:11:28 +0200] "GET /static//home/user/.env HTTP/1.1" 403 5677 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected])"
34.80.101.88 - - [07/Oct/2026:02:11:28 +0200] "GET /.//.env HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"
34.80.101.88 - - [07/Oct/2026:02:11:28 +0200] "GET /build../.env HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)"
34.80.101.88 - - [07/Oct/2026:02:11:28 +0200] "GET /uploads../.env HTTP/1.1" 403 5677 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected])"
34.80.101.88 - - [07/Oct/2026:02:11:28 +0200] "GET /img../.env HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
...
show less
|
Web App Attack
|
|
🇦🇺
20.92.77.159
|
|
20.92.77.159 - - [06/Oct/2026:20:36:58 +0200] "GET /file.php HTTP/1.1" 403 5610 "-" "-"
20.92.77.159 ...
show more
20.92.77.159 - - [06/Oct/2026:20:36:58 +0200] "GET /file.php HTTP/1.1" 403 5610 "-" "-"
20.92.77.159 - - [06/Oct/2026:20:36:58 +0200] "GET /adminfuns.php HTTP/1.1" 403 5610 "-" "-"
20.92.77.159 - - [06/Oct/2026:20:36:59 +0200] "GET /404.php HTTP/1.1" 403 5610 "-" "-"
20.92.77.159 - - [06/Oct/2026:20:37:00 +0200] "GET /wk/index.php HTTP/1.1" 403 5610 "-" "-"
20.92.77.159 - - [06/Oct/2026:20:37:00 +0200] "GET /about.php HTTP/1.1" 403 5610 "-" "-"
...
show less
|
Web App Attack
|
|
🇮🇩
34.101.98.177
|
|
34.101.98.177 - - [06/Oct/2026:19:50:43 +0200] "GET /wp-config.php.bak HTTP/1.1" 403 548 "-" "Mozill ...
show more
34.101.98.177 - - [06/Oct/2026:19:50:43 +0200] "GET /wp-config.php.bak HTTP/1.1" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 Edg/130.0.0.0"
34.101.98.177 - - [06/Oct/2026:19:50:44 +0200] "GET /wp-config.php.bak HTTP/1.1" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 Edg/130.0.0.0"
34.101.98.177 - - [06/Oct/2026:19:50:44 +0200] "GET /wp-config.php.old HTTP/1.1" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 Edg/130.0.0.0"
34.101.98.177 - - [06/Oct/2026:19:50:44 +0200] "GET /wp-config.php.old HTTP/1.1" 403 146 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0"
34.101.98.177 - - [06/Oct/2026:19:50:45 +0200] "GET /wp-config.php.save HTTP/1.1" 403 146 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_7_2) AppleWebKit/605.1.15 (KHTML,
...
show less
|
Web App Attack
|
|
🇦🇺
13.70.107.184
|
|
13.70.107.184 - - [06/Oct/2026:17:56:21 +0200] "GET /wp-includes/ID3/about.php HTTP/1.1" 403 146 "-" ...
show more
13.70.107.184 - - [06/Oct/2026:17:56:21 +0200] "GET /wp-includes/ID3/about.php HTTP/1.1" 403 146 "-" "-"
13.70.107.184 - - [06/Oct/2026:17:56:21 +0200] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 403 6282 "-" "-"
13.70.107.184 - - [06/Oct/2026:17:56:22 +0200] "GET /wp-includes/blocks/audio/ HTTP/1.1" 403 6282 "-" "-"
13.70.107.184 - - [06/Oct/2026:17:56:27 +0200] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 403 146 "-" "-"
13.70.107.184 - - [06/Oct/2026:17:56:28 +0200] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 403 6282 "-" "-"
...
show less
|
Web App Attack
|
|
🇩🇪
34.159.0.93
|
|
34.159.0.93 - - [06/Oct/2026:16:58:30 +0200] "GET /proc/self/cmdline HTTP/2.0" 403 106 "https://wins ...
show more
34.159.0.93 - - [06/Oct/2026:16:58:30 +0200] "GET /proc/self/cmdline HTTP/2.0" 403 106 "https://winsvr-berlin.de/proc/self/cmdline" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
34.159.0.93 - - [06/Oct/2026:16:58:30 +0200] "GET /api/system/fileView?file=/app/.env HTTP/2.0" 403 106 "https://winsvr-berlin.de/api/system/fileView?file=/app/.env" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
34.159.0.93 - - [06/Oct/2026:16:58:30 +0200] "GET /userfiles?path=../../.env HTTP/2.0" 403 106 "https://winsvr-berlin.de/userfiles?path=../../.env" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
34.159.0.93 - - [06/Oct/2026:16:58:34 +0200] "GET /.git/config HTTP/2.0" 403 106 "https://winsvr-berlin.de/.git/config" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
34.159.0.93 - - [06/Oct/2026:16:58:35 +0200] "GET /.htpasswd HTTP/2.0" 403 106 "https://wi
...
show less
|
Web App Attack
|
|
🇹🇼
34.80.101.88
|
|
34.80.101.88 - - [06/Oct/2026:16:04:54 +0200] "GET /.htpasswd HTTP/1.1" 403 9203 "https://dein-fotos ...
show more
34.80.101.88 - - [06/Oct/2026:16:04:54 +0200] "GET /.htpasswd HTTP/1.1" 403 9203 "https://dein-fotostart.de/.htpasswd" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected])"
34.80.101.88 - - [06/Oct/2026:16:05:01 +0200] "GET /api/v2/settings HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/v2/settings" "Mozilla/5.0 (compatible; Bytespider; [email protected]) AppleWebKit/537.36"
34.80.101.88 - - [06/Oct/2026:16:05:01 +0200] "GET /api/fs/read?allowOutsideWorkspace=true&path=/app/.env HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/fs/read?allowOutsideWorkspace=true&path=/app/.env" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1)"
34.80.101.88 - - [06/Oct/2026:16:05:02 +0200] "GET /api/openapi.json HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/openapi.json" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)"
34.80.101.
...
show less
|
Web App Attack
|
|
🇰🇷
20.249.5.100
|
|
20.249.5.100 - - [06/Oct/2026:15:40:44 +0200] "GET /wp-includes/ID3/about.php HTTP/1.1" 403 146 "-" ...
show more
20.249.5.100 - - [06/Oct/2026:15:40:44 +0200] "GET /wp-includes/ID3/about.php HTTP/1.1" 403 146 "-" "-"
20.249.5.100 - - [06/Oct/2026:15:40:45 +0200] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 403 6287 "-" "-"
20.249.5.100 - - [06/Oct/2026:15:40:45 +0200] "GET /wp-includes/blocks/audio/ HTTP/1.1" 403 6287 "-" "-"
20.249.5.100 - - [06/Oct/2026:15:40:50 +0200] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 403 146 "-" "-"
20.249.5.100 - - [06/Oct/2026:15:40:51 +0200] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 403 6287 "-" "-"
...
show less
|
Web App Attack
|
|
🇯🇵
20.210.186.186
|
|
20.210.186.186 - - [06/Oct/2026:15:29:50 +0200] "GET /wp-includes/ID3/about.php HTTP/1.1" 403 146 "- ...
show more
20.210.186.186 - - [06/Oct/2026:15:29:50 +0200] "GET /wp-includes/ID3/about.php HTTP/1.1" 403 146 "-" "-"
20.210.186.186 - - [06/Oct/2026:15:29:50 +0200] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 403 6282 "-" "-"
20.210.186.186 - - [06/Oct/2026:15:29:51 +0200] "GET /wp-includes/blocks/audio/ HTTP/1.1" 403 6282 "-" "-"
20.210.186.186 - - [06/Oct/2026:15:29:55 +0200] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 403 146 "-" "-"
20.210.186.186 - - [06/Oct/2026:15:29:57 +0200] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 403 6282 "-" "-"
...
show less
|
Web App Attack
|
|
🇺🇸
136.80.108.217
|
|
136.80.108.217 - - [06/Oct/2026:13:54:38 +0200] "GET /.htpasswd HTTP/2.0" 403 106 "https://winsvr-be ...
show more
136.80.108.217 - - [06/Oct/2026:13:54:38 +0200] "GET /.htpasswd HTTP/2.0" 403 106 "https://winsvr-berlin.de/.htpasswd" "Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)"
136.80.108.217 - - [06/Oct/2026:13:54:38 +0200] "GET /.ssh/id_rsa HTTP/2.0" 403 106 "https://winsvr-berlin.de/.ssh/id_rsa" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
136.80.108.217 - - [06/Oct/2026:13:54:39 +0200] "GET /@fs/.env?raw&url?? HTTP/2.0" 403 106 "https://winsvr-berlin.de/@fs/.env?raw&url??" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
136.80.108.217 - - [06/Oct/2026:13:54:40 +0200] "GET /@fs/var/run/secrets/kubernetes.io/serviceaccount/ca.crt?raw?? HTTP/2.0" 403 106 "https://winsvr-berlin.de/@fs/var/run/secrets/kubernetes.io/serviceaccount/ca.crt?raw??" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
136.80.108.217 - - [06/Oct/2026:13:54:43 +0200] "GET /runtime-config.js
...
show less
|
Web App Attack
|
|
🇯🇵
34.180.85.36
|
|
34.180.85.36 - - [06/Oct/2026:12:51:40 +0200] "GET /.htpasswd HTTP/1.1" 403 9203 "https://dein-fotos ...
show more
34.180.85.36 - - [06/Oct/2026:12:51:40 +0200] "GET /.htpasswd HTTP/1.1" 403 9203 "https://dein-fotostart.de/.htpasswd" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; +https://openai.com/searchbot"
34.180.85.36 - - [06/Oct/2026:12:51:49 +0200] "GET /api/v2/config HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/v2/config" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected])"
34.180.85.36 - - [06/Oct/2026:12:51:49 +0200] "GET /api/v1/config HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/v1/config" "Mozilla/5.0 (compatible; Bytespider; [email protected]) AppleWebKit/537.36"
34.180.85.36 - - [06/Oct/2026:12:51:49 +0200] "GET /api/env HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/env" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected])"
34.180.85.36 -
...
show less
|
Web App Attack
|