AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User Manuel Braeuer joined AbuseIPDB in May 2025 and has reported 3,513 IP addresses.

Standing (weight) is good.

ACTIVE USER

IP	Date	Comment	Categories
🇺🇸 136.80.108.217	06 Oct 2026	136.80.108.217 - - [06/Oct/2026:13:54:38 +0200] "GET /.htpasswd HTTP/2.0" 403 106 "https://winsvr-be ... show more 136.80.108.217 - - [06/Oct/2026:13:54:38 +0200] "GET /.htpasswd HTTP/2.0" 403 106 "https://winsvr-berlin.de/.htpasswd" "Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)" 136.80.108.217 - - [06/Oct/2026:13:54:38 +0200] "GET /.ssh/id_rsa HTTP/2.0" 403 106 "https://winsvr-berlin.de/.ssh/id_rsa" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 136.80.108.217 - - [06/Oct/2026:13:54:39 +0200] "GET /@fs/.env?raw&url?? HTTP/2.0" 403 106 "https://winsvr-berlin.de/@fs/.env?raw&url??" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 136.80.108.217 - - [06/Oct/2026:13:54:40 +0200] "GET /@fs/var/run/secrets/kubernetes.io/serviceaccount/ca.crt?raw?? HTTP/2.0" 403 106 "https://winsvr-berlin.de/@fs/var/run/secrets/kubernetes.io/serviceaccount/ca.crt?raw??" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 136.80.108.217 - - [06/Oct/2026:13:54:43 +0200] "GET /runtime-config.js ... show less	Web App Attack
🇯🇵 34.180.85.36	06 Oct 2026	34.180.85.36 - - [06/Oct/2026:12:51:40 +0200] "GET /.htpasswd HTTP/1.1" 403 9203 "https://dein-fotos ... show more 34.180.85.36 - - [06/Oct/2026:12:51:40 +0200] "GET /.htpasswd HTTP/1.1" 403 9203 "https://dein-fotostart.de/.htpasswd" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; +https://openai.com/searchbot" 34.180.85.36 - - [06/Oct/2026:12:51:49 +0200] "GET /api/v2/config HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/v2/config" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected])" 34.180.85.36 - - [06/Oct/2026:12:51:49 +0200] "GET /api/v1/config HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/v1/config" "Mozilla/5.0 (compatible; Bytespider; [email protected]) AppleWebKit/537.36" 34.180.85.36 - - [06/Oct/2026:12:51:49 +0200] "GET /api/env HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/env" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected])" 34.180.85.36 - ... show less	Web App Attack
🇦🇺 20.211.90.37	06 Oct 2026	20.211.90.37 - - [06/Oct/2026:12:30:54 +0200] "GET /wp-includes/ID3/about.php HTTP/1.1" 403 146 "-" ... show more 20.211.90.37 - - [06/Oct/2026:12:30:54 +0200] "GET /wp-includes/ID3/about.php HTTP/1.1" 403 146 "-" "-" 20.211.90.37 - - [06/Oct/2026:12:30:55 +0200] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 403 6287 "-" "-" 20.211.90.37 - - [06/Oct/2026:12:30:55 +0200] "GET /wp-includes/blocks/audio/ HTTP/1.1" 403 6287 "-" "-" 20.211.90.37 - - [06/Oct/2026:12:31:00 +0200] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 403 146 "-" "-" 20.211.90.37 - - [06/Oct/2026:12:31:02 +0200] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 403 6287 "-" "-" ... show less	Web App Attack
🇧🇷 34.39.221.224	06 Oct 2026	34.39.221.224 - - [06/Oct/2026:12:29:06 +0200] "GET /.htpasswd HTTP/1.1" 403 6275 "-" "Mozilla/5.0 ( ... show more 34.39.221.224 - - [06/Oct/2026:12:29:06 +0200] "GET /.htpasswd HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)" 34.39.221.224 - - [06/Oct/2026:12:29:07 +0200] "GET /@fs/../.env?raw?? HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)" 34.39.221.224 - - [06/Oct/2026:12:29:10 +0200] "GET /@fs/../.env?import&raw?? HTTP/1.1" 403 6275 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected])" 34.39.221.224 - - [06/Oct/2026:12:29:11 +0200] "GET /.env?raw HTTP/1.1" 403 6275 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 34.39.221.224 - - [06/Oct/2026:12:29:11 +0200] "GET /.env?import&raw HTTP/1.1" 403 6275 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)" ... show less	Web App Attack
🇰🇷 20.214.109.68	06 Oct 2026	20.214.109.68 - - [06/Oct/2026:11:29:44 +0200] "GET /wp-content/uploads/hp2.php HTTP/1.1" 403 146 "- ... show more 20.214.109.68 - - [06/Oct/2026:11:29:44 +0200] "GET /wp-content/uploads/hp2.php HTTP/1.1" 403 146 "-" "-" 20.214.109.68 - - [06/Oct/2026:11:29:45 +0200] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 403 146 "-" "-" 20.214.109.68 - - [06/Oct/2026:11:29:45 +0200] "GET /wp-includes/ID3/about.php HTTP/1.1" 403 146 "-" "-" 20.214.109.68 - - [06/Oct/2026:11:29:46 +0200] "GET /wp-content/uploads/BDKR28_w3zzj7rw.php HTTP/1.1" 403 146 "-" "-" 20.214.109.68 - - [06/Oct/2026:11:29:46 +0200] "GET /wp-includes/config.php HTTP/1.1" 403 146 "-" "-" ... show less	Web App Attack
🇺🇸 35.243.225.103	06 Oct 2026	35.243.225.103 - - [06/Oct/2026:11:03:40 +0200] "GET /.htpasswd HTTP/1.1" 403 9203 "https://dein-fot ... show more 35.243.225.103 - - [06/Oct/2026:11:03:40 +0200] "GET /.htpasswd HTTP/1.1" 403 9203 "https://dein-fotostart.de/.htpasswd" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)" 35.243.225.103 - - [06/Oct/2026:11:03:44 +0200] "GET /api/v2/config HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/v2/config" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 35.243.225.103 - - [06/Oct/2026:11:03:44 +0200] "GET /api/v1/config HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/v1/config" "CCBot/2.0 (https://commoncrawl.org/faq/)" 35.243.225.103 - - [06/Oct/2026:11:03:44 +0200] "GET /api/env HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/env" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)" 35.243.225.103 - - [06/Oct/2026:11:03:44 +0200] "GET /api/v2/settings HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/v2/settings" "Mozilla/5.0 (compatible; Bytespider; [email protected]) AppleWebKit/537.36" ... show less	Web App Attack
🇨🇦 35.203.22.222	06 Oct 2026	35.203.22.222 - - [06/Oct/2026:11:03:01 +0200] "GET /cache/original/%2e%2e/.env HTTP/1.1" 403 6275 " ... show more 35.203.22.222 - - [06/Oct/2026:11:03:01 +0200] "GET /cache/original/%2e%2e/.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)" 35.203.22.222 - - [06/Oct/2026:11:03:01 +0200] "GET /cache/original/%2e%2e/%2e%2e/.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)" 35.203.22.222 - - [06/Oct/2026:11:03:02 +0200] "GET /config/gcp-credentials.json HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)" 35.203.22.222 - - [06/Oct/2026:11:03:02 +0200] "GET /config/firebase-admin.json HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)" 35.203.22.222 - - [06/Oct/2026:11:03:03 +0200] "GET /.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)" ... show less	Web App Attack
🇺🇸 34.27.42.128	06 Oct 2026	34.27.42.128 - - [06/Oct/2026:09:58:37 +0200] "GET //.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Macin ... show more 34.27.42.128 - - [06/Oct/2026:09:58:37 +0200] "GET //.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1)" 34.27.42.128 - - [06/Oct/2026:09:58:37 +0200] "GET /%2eenv HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 34.27.42.128 - - [06/Oct/2026:09:58:38 +0200] "GET /.//.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)" 34.27.42.128 - - [06/Oct/2026:09:58:40 +0200] "GET /cache/original/%2e%2e/.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 34.27.42.128 - - [06/Oct/2026:09:58:40 +0200] "GET /cache/original/%2e%2e/%2e%2e/.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" ... show less	Web App Attack
🇮🇳 20.204.16.113	06 Oct 2026	20.204.16.113 - - [06/Oct/2026:06:33:38 +0200] "GET /wp-admin/includes/ HTTP/1.1" 403 6287 "-" "-" 2 ... show more 20.204.16.113 - - [06/Oct/2026:06:33:38 +0200] "GET /wp-admin/includes/ HTTP/1.1" 403 6287 "-" "-" 20.204.16.113 - - [06/Oct/2026:06:33:39 +0200] "GET /wp-includes/SimplePie/ HTTP/1.1" 403 6287 "-" "-" 20.204.16.113 - - [06/Oct/2026:06:33:39 +0200] "GET /wp-includes/blocks/ HTTP/1.1" 403 6287 "-" "-" 20.204.16.113 - - [06/Oct/2026:06:33:39 +0200] "GET /wp-includes/style-engine/ HTTP/1.1" 403 6287 "-" "-" 20.204.16.113 - - [06/Oct/2026:06:33:39 +0200] "GET /wp-admin/js/widgets/ HTTP/1.1" 403 6287 "-" "-" ... show less	Web App Attack
🇹🇬 102.211.170.38	05 Oct 2026	102.211.170.38 - - [05/Oct/2026:22:39:33 +0200] "GET /.env.staging HTTP/1.1" 403 6256 "-" "Mozilla/5 ... show more 102.211.170.38 - - [05/Oct/2026:22:39:33 +0200] "GET /.env.staging HTTP/1.1" 403 6256 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 102.211.170.38 - - [05/Oct/2026:22:39:33 +0200] "GET /.env.save HTTP/1.1" 403 6256 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 102.211.170.38 - - [05/Oct/2026:22:39:33 +0200] "GET /.env.local HTTP/1.1" 403 6256 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 102.211.170.38 - - [05/Oct/2026:22:39:33 +0200] "GET /.env.dev HTTP/1.1" 403 6256 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 102.211.170.38 - - [05/Oct/2026:22:39:33 +0200] "GET /.env.swp HTTP/1.1" 403 6256 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/5 ... show less	Web App Attack
🇧🇪 35.240.58.49	05 Oct 2026	35.240.58.49 - - [05/Oct/2026:18:58:21 +0200] "GET /composer.json HTTP/1.1" 403 6275 "-" "Mozilla/5. ... show more 35.240.58.49 - - [05/Oct/2026:18:58:21 +0200] "GET /composer.json HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 35.240.58.49 - - [05/Oct/2026:18:58:21 +0200] "GET /config/aws.yml HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 35.240.58.49 - - [05/Oct/2026:18:58:21 +0200] "GET /config/config.js HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 35.240.58.49 - - [05/Oct/2026:18:58:21 +0200] "GET /config/.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 35.240.58.49 - - [05/Oct/2026:18:58:21 +0200] "GET /.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" ... show less	Web App Attack
🇺🇸 34.170.219.156	05 Oct 2026	34.170.219.156 - - [05/Oct/2026:17:45:02 +0200] "GET /.env.staging HTTP/1.1" 403 6256 "-" "Mozilla/5 ... show more 34.170.219.156 - - [05/Oct/2026:17:45:02 +0200] "GET /.env.staging HTTP/1.1" 403 6256 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0" 34.170.219.156 - - [05/Oct/2026:17:45:02 +0200] "GET /.env.dev HTTP/1.1" 403 6256 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0" 34.170.219.156 - - [05/Oct/2026:17:45:02 +0200] "GET /.env.local HTTP/1.1" 403 6256 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 34.170.219.156 - - [05/Oct/2026:17:45:02 +0200] "GET /.env.dev.local HTTP/1.1" 403 6256 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.170.219.156 - - [05/Oct/2026:17:45:02 +0200] "GET /.env.production.local HTTP/1.1" 403 6256 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Mobile/15E148 Safari/604.1" ... show less	Web App Attack
🇩🇪 194.45.37.30	05 Oct 2026	webmail.notification.x0w.de:443 20.210.186.186 - - [05/Oct/2026:16:46:45 +0200] "GET /wp-admin/css/c ... show more webmail.notification.x0w.de:443 20.210.186.186 - - [05/Oct/2026:16:46:45 +0200] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 403 5673 "-" "-" webmail.notification.x0w.de:443 20.210.186.186 - - [05/Oct/2026:16:46:46 +0200] "GET /wp-includes/blocks/audio/ HTTP/1.1" 403 5673 "-" "-" webmail.notification.x0w.de:443 20.210.186.186 - - [05/Oct/2026:16:46:50 +0200] "GET /wp-content/ HTTP/1.1" 403 5673 "-" "-" webmail.notification.x0w.de:443 20.210.186.186 - - [05/Oct/2026:16:46:51 +0200] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 403 5673 "-" "-" webmail.notification.x0w.de:443 20.210.186.186 - - [05/Oct/2026:16:46:51 +0200] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 403 5673 "-" "-" ... show less	Web App Attack
🇦🇺 20.28.180.172	05 Oct 2026	20.28.180.172 - - [05/Oct/2026:16:45:22 +0200] "GET /wp-content/uploads/hp2.php HTTP/1.1" 403 146 "- ... show more 20.28.180.172 - - [05/Oct/2026:16:45:22 +0200] "GET /wp-content/uploads/hp2.php HTTP/1.1" 403 146 "-" "-" 20.28.180.172 - - [05/Oct/2026:16:45:23 +0200] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 403 146 "-" "-" 20.28.180.172 - - [05/Oct/2026:16:45:24 +0200] "GET /wp-includes/ID3/about.php HTTP/1.1" 403 146 "-" "-" 20.28.180.172 - - [05/Oct/2026:16:45:25 +0200] "GET /wp-content/uploads/BDKR28_w3zzj7rw.php HTTP/1.1" 403 146 "-" "-" 20.28.180.172 - - [05/Oct/2026:16:45:25 +0200] "GET /wp-includes/config.php HTTP/1.1" 403 146 "-" "-" ... show less	Web App Attack
🇩🇪 194.45.37.30	05 Oct 2026	webmail.notification.x0w.de:443 207.175.220.59 - - [05/Oct/2026:15:31:03 +0200] "GET /.aws/credentia ... show more webmail.notification.x0w.de:443 207.175.220.59 - - [05/Oct/2026:15:31:03 +0200] "GET /.aws/credentials HTTP/1.1" 403 5673 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" webmail.notification.x0w.de:443 207.175.220.59 - - [05/Oct/2026:15:31:03 +0200] "GET /.aws/config HTTP/1.1" 403 5673 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" webmail.notification.x0w.de:443 207.175.220.59 - - [05/Oct/2026:15:31:03 +0200] "GET /.amplifyrc HTTP/1.1" 403 5673 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" webmail.notification.x0w.de:443 207.175.220.59 - - [05/Oct/2026:15:31:03 +0200] "GET /composer.json HTTP/1.1" 403 5673 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" webmail.notification.x0w.de:443 207.175.220.59 - - [05/Oct/2026:15:31:03 +0200] "GET /.boto HTTP/1.1" 403 5673 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" ... show less	Web App Attack
🇺🇸 35.229.56.116	05 Oct 2026	35.229.56.116 - - [05/Oct/2026:15:17:46 +0200] "GET /.htpasswd HTTP/2.0" 403 106 "https://winsvr-ber ... show more 35.229.56.116 - - [05/Oct/2026:15:17:46 +0200] "GET /.htpasswd HTTP/2.0" 403 106 "https://winsvr-berlin.de/.htpasswd" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 35.229.56.116 - - [05/Oct/2026:15:17:47 +0200] "GET /@fs/.env?url&raw?? HTTP/2.0" 403 106 "https://winsvr-berlin.de/@fs/.env?url&raw??" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 35.229.56.116 - - [05/Oct/2026:15:17:48 +0200] "GET /__vite_rsc_findSourceMapURL?filename=file:///root/.aws/credentials&environmentName=rsc HTTP/2.0" 403 106 "https://winsvr-berlin.de/__vite_rsc_findSourceMapURL?filename=file:///root/.aws/credentials&environmentName=rsc" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 35.229.56.116 - - [05/Oct/2026:15:17:49 +0200] "GET /@fs/root/.env?raw?? HTTP/2.0" 403 106 "https://winsvr-berlin.de/@fs/root/.env?raw??" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 35. ... show less	Web App Attack
🇵🇱 45.138.12.23	05 Oct 2026	45.138.12.23 - - [05/Oct/2026:13:30:38 +0200] "GET /app/.env HTTP/1.1" 403 6260 "-" "Mozilla/5.0 (Wi ... show more 45.138.12.23 - - [05/Oct/2026:13:30:38 +0200] "GET /app/.env HTTP/1.1" 403 6260 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 45.138.12.23 - - [05/Oct/2026:13:30:38 +0200] "GET /admin/.env HTTP/1.1" 403 6260 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 45.138.12.23 - - [05/Oct/2026:13:30:38 +0200] "GET /.amplifyrc HTTP/1.1" 403 6260 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 45.138.12.23 - - [05/Oct/2026:13:30:38 +0200] "GET /api/.env HTTP/1.1" 403 6260 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 45.138.12.23 - - [05/Oct/2026:13:30:38 +0200] "GET /application/.env HTTP/1.1" 403 6260 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" ... show less	Web App Attack
🇵🇱 45.138.12.46	05 Oct 2026	45.138.12.46 - - [05/Oct/2026:13:02:17 +0200] "GET / HTTP/1.1" 403 6282 "-" "Go-http-client/1.1" 45. ... show more 45.138.12.46 - - [05/Oct/2026:13:02:17 +0200] "GET / HTTP/1.1" 403 6282 "-" "Go-http-client/1.1" 45.138.12.46 - - [05/Oct/2026:13:02:18 +0200] "GET / HTTP/1.1" 403 6282 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0" 45.138.12.46 - - [05/Oct/2026:13:02:18 +0200] "GET /?feed=rss2 HTTP/1.1" 403 6282 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 45.138.12.46 - - [05/Oct/2026:13:02:18 +0200] "GET / HTTP/1.1" 403 6282 "http://static.dein-fotostart.de/" "Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0" 45.138.12.46 - - [05/Oct/2026:13:02:18 +0200] "GET /?feed=rss2 HTTP/1.1" 403 6282 "http://static.dein-fotostart.de/?feed=rss2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" ... show less	Web App Attack
🇺🇸 34.11.81.227	05 Oct 2026	34.11.81.227 - - [05/Oct/2026:12:33:03 +0200] "GET /z9x8c7v6b5-debug-trigger-api.dein-fotostart.de H ... show more 34.11.81.227 - - [05/Oct/2026:12:33:03 +0200] "GET /z9x8c7v6b5-debug-trigger-api.dein-fotostart.de HTTP/1.1" 403 5677 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)" 34.11.81.227 - - [05/Oct/2026:12:33:04 +0200] "GET /google-services.json HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)" 34.11.81.227 - - [05/Oct/2026:12:33:04 +0200] "GET /.env HTTP/1.1" 403 5677 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected])" 34.11.81.227 - - [05/Oct/2026:12:33:04 +0200] "GET /gcp-service.json HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)" 34.11.81.227 - - [05/Oct/2026:12:33:04 +0200] "GET /.env.example HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" ... show less	Web App Attack
🇯🇵 34.180.125.74	05 Oct 2026	34.180.125.74 - - [05/Oct/2026:12:22:47 +0200] "GET /z9x8c7v6b5-debug-trigger-api.dein-fotostart.de ... show more 34.180.125.74 - - [05/Oct/2026:12:22:47 +0200] "GET /z9x8c7v6b5-debug-trigger-api.dein-fotostart.de HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)" 34.180.125.74 - - [05/Oct/2026:12:22:47 +0200] "GET /var/run/secrets/kubernetes.io/serviceaccount/token HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)" 34.180.125.74 - - [05/Oct/2026:12:22:47 +0200] "GET /api/w/starter/jobs_u/get_log_file/../../../../proc/self/environ HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected]) AppleWebKit/537.36" 34.180.125.74 - - [05/Oct/2026:12:22:47 +0200] "GET /.dockerenv HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)" 34.180.125.74 - - [05/Oct/2026:12:22:47 +0200] "GET /proc/self/cmdline HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)" ... show less	Web App Attack
🇧🇪 35.241.239.86	05 Oct 2026	35.241.239.86 - - [05/Oct/2026:12:09:38 +0200] "GET /.aws/.env HTTP/1.1" 403 6256 "-" "Mozilla/5.0 ( ... show more 35.241.239.86 - - [05/Oct/2026:12:09:38 +0200] "GET /.aws/.env HTTP/1.1" 403 6256 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 35.241.239.86 - - [05/Oct/2026:12:09:38 +0200] "GET /.aws/config HTTP/1.1" 403 6256 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 35.241.239.86 - - [05/Oct/2026:12:09:38 +0200] "GET /.aws/credentials HTTP/1.1" 403 6256 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 35.241.239.86 - - [05/Oct/2026:12:09:38 +0200] "GET /.aws/credentials.bak HTTP/1.1" 403 6256 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 35.241.239.86 - - [05/Oct/2026:12:09:38 +0200] "GET /.amplifyrc HTTP/1.1" 403 6256 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" ... show less	Web App Attack
🇧🇪 35.240.58.49	05 Oct 2026	35.240.58.49 - - [05/Oct/2026:11:26:12 +0200] "GET /composer.json HTTP/1.1" 403 6275 "-" "Mozilla/5. ... show more 35.240.58.49 - - [05/Oct/2026:11:26:12 +0200] "GET /composer.json HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 35.240.58.49 - - [05/Oct/2026:11:26:12 +0200] "GET /config/aws.yml HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 35.240.58.49 - - [05/Oct/2026:11:26:12 +0200] "GET /config/config.js HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 35.240.58.49 - - [05/Oct/2026:11:26:12 +0200] "GET /config/.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 35.240.58.49 - - [05/Oct/2026:11:26:12 +0200] "GET /.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" ... show less	Web App Attack
🇦🇺 20.92.77.159	05 Oct 2026	20.92.77.159 - - [05/Oct/2026:10:49:27 +0200] "GET /simple.php HTTP/1.1" 403 5610 "-" "-" 20.92.77.1 ... show more 20.92.77.159 - - [05/Oct/2026:10:49:27 +0200] "GET /simple.php HTTP/1.1" 403 5610 "-" "-" 20.92.77.159 - - [05/Oct/2026:10:49:27 +0200] "GET /f35.update.php HTTP/1.1" 403 5610 "-" "-" 20.92.77.159 - - [05/Oct/2026:10:49:28 +0200] "GET /aboutt.php HTTP/1.1" 403 5610 "-" "-" 20.92.77.159 - - [05/Oct/2026:10:49:29 +0200] "GET /sm.php HTTP/1.1" 403 5610 "-" "-" 20.92.77.159 - - [05/Oct/2026:10:49:29 +0200] "GET /b8.php HTTP/1.1" 403 5610 "-" "-" ... show less	Web App Attack
🇰🇷 20.214.145.90	05 Oct 2026	20.214.145.90 - - [05/Oct/2026:09:49:00 +0200] "GET /wp-includes/ID3/about.php HTTP/1.1" 403 146 "-" ... show more 20.214.145.90 - - [05/Oct/2026:09:49:00 +0200] "GET /wp-includes/ID3/about.php HTTP/1.1" 403 146 "-" "-" 20.214.145.90 - - [05/Oct/2026:09:49:01 +0200] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 403 6287 "-" "-" 20.214.145.90 - - [05/Oct/2026:09:49:01 +0200] "GET /wp-includes/blocks/audio/ HTTP/1.1" 403 6287 "-" "-" 20.214.145.90 - - [05/Oct/2026:09:49:05 +0200] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 403 146 "-" "-" 20.214.145.90 - - [05/Oct/2026:09:49:07 +0200] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 403 6287 "-" "-" ... show less	Web App Attack
🇰🇷 20.214.109.68	05 Oct 2026	20.214.109.68 - - [05/Oct/2026:09:23:10 +0200] "GET /wp-content/uploads/hp2.php HTTP/1.1" 403 146 "- ... show more 20.214.109.68 - - [05/Oct/2026:09:23:10 +0200] "GET /wp-content/uploads/hp2.php HTTP/1.1" 403 146 "-" "-" 20.214.109.68 - - [05/Oct/2026:09:23:11 +0200] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 403 146 "-" "-" 20.214.109.68 - - [05/Oct/2026:09:23:11 +0200] "GET /wp-includes/ID3/about.php HTTP/1.1" 403 146 "-" "-" 20.214.109.68 - - [05/Oct/2026:09:23:12 +0200] "GET /wp-content/uploads/BDKR28_w3zzj7rw.php HTTP/1.1" 403 146 "-" "-" 20.214.109.68 - - [05/Oct/2026:09:23:13 +0200] "GET /wp-includes/config.php HTTP/1.1" 403 146 "-" "-" ... show less	Web App Attack