AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User Manuel Braeuer joined AbuseIPDB in May 2025 and has reported 3,513 IP addresses.

Standing (weight) is good.

ACTIVE USER

IP	Date	Comment	Categories
🇦🇺 13.70.107.184	05 Oct 2026	13.70.107.184 - - [05/Oct/2026:08:56:18 +0200] "GET /wp-filemanager1_260805194013.php HTTP/1.1" 403 ... show more 13.70.107.184 - - [05/Oct/2026:08:56:18 +0200] "GET /wp-filemanager1_260805194013.php HTTP/1.1" 403 5610 "-" "-" 13.70.107.184 - - [05/Oct/2026:08:56:18 +0200] "GET /wp-fgban13jx3.php HTTP/1.1" 403 5610 "-" "-" 13.70.107.184 - - [05/Oct/2026:08:56:19 +0200] "GET /1ac.php HTTP/1.1" 403 5610 "-" "-" 13.70.107.184 - - [05/Oct/2026:08:56:19 +0200] "GET /flm.php HTTP/1.1" 403 5610 "-" "-" 13.70.107.184 - - [05/Oct/2026:08:56:20 +0200] "GET /40341.php HTTP/1.1" 403 5610 "-" "-" ... show less	Web App Attack
🇧🇪 35.206.164.174	05 Oct 2026	35.206.164.174 - - [05/Oct/2026:07:39:15 +0200] "GET /.git/config HTTP/1.1" 403 5677 "-" "Mozilla/5. ... show more 35.206.164.174 - - [05/Oct/2026:07:39:15 +0200] "GET /.git/config HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.206.164.174 - - [05/Oct/2026:07:39:15 +0200] "GET /.env HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.206.164.174 - - [05/Oct/2026:07:39:15 +0200] "GET /.env.local HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.206.164.174 - - [05/Oct/2026:07:39:15 +0200] "GET /.env.production HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.206.164.174 - - [05/Oct/2026:07:39:15 +0200] "GET /.env.staging HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, li ... show less	Web App Attack
🇧🇪 34.34.160.116	05 Oct 2026	34.34.160.116 - - [05/Oct/2026:04:21:29 +0200] "GET /.amplifyrc HTTP/1.1" 403 6073 "-" "Mozilla/5.0 ... show more 34.34.160.116 - - [05/Oct/2026:04:21:29 +0200] "GET /.amplifyrc HTTP/1.1" 403 6073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 34.34.160.116 - - [05/Oct/2026:04:21:29 +0200] "GET /api/phpinfo.php HTTP/1.1" 403 6079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 34.34.160.116 - - [05/Oct/2026:04:21:29 +0200] "GET /admin/.env HTTP/1.1" 403 6073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 34.34.160.116 - - [05/Oct/2026:04:21:29 +0200] "GET /appsettings.Development.json HTTP/1.1" 403 6073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 34.34.160.116 - - [05/Oct/2026:04:21:29 +0200] "GET /app/.env HTTP/1.1" 403 6073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" ... show less	Web App Attack
🇨🇦 35.203.5.98	05 Oct 2026	35.203.5.98 - - [05/Oct/2026:04:18:17 +0200] "GET /.htpasswd HTTP/1.1" 403 9203 "https://dein-fotost ... show more 35.203.5.98 - - [05/Oct/2026:04:18:17 +0200] "GET /.htpasswd HTTP/1.1" 403 9203 "https://dein-fotostart.de/.htpasswd" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)" 35.203.5.98 - - [05/Oct/2026:04:18:19 +0200] "GET /api/v2/config HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/v2/config" "CCBot/2.0 (https://commoncrawl.org/faq/)" 35.203.5.98 - - [05/Oct/2026:04:18:19 +0200] "GET /api/v1/config HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/v1/config" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 35.203.5.98 - - [05/Oct/2026:04:18:19 +0200] "GET /api/env HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/env" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)" 35.203.5.98 - - [05/Oct/2026:04:18:19 +0200] "GET /api/v2/settings HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/v2/settings" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected])" ... show less	Web App Attack
🇹🇼 35.236.156.173	05 Oct 2026	35.236.156.173 - - [05/Oct/2026:03:24:39 +0200] "GET /.htpasswd HTTP/2.0" 403 106 "https://winsvr-be ... show more 35.236.156.173 - - [05/Oct/2026:03:24:39 +0200] "GET /.htpasswd HTTP/2.0" 403 106 "https://winsvr-berlin.de/.htpasswd" "Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)" 35.236.156.173 - - [05/Oct/2026:03:24:44 +0200] "GET /@fs/proc/self/environ?import&raw?? HTTP/2.0" 403 106 "https://winsvr-berlin.de/@fs/proc/self/environ?import&raw??" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 35.236.156.173 - - [05/Oct/2026:03:24:46 +0200] "GET /%2Fsettings HTTP/2.0" 403 106 "https://winsvr-berlin.de/%2Fsettings" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 35.236.156.173 - - [05/Oct/2026:03:24:48 +0200] "GET /settings.js HTTP/2.0" 403 106 "https://winsvr-berlin.de/settings.js" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 35.236.156.173 - - [05/Oct/2026:03:24:49 +0200] "GET /console HTTP/2.0" 403 106 "https://winsvr-berlin.de/console" "Mozilla/5.0 (co ... show less	Web App Attack
🇺🇸 34.11.7.99	05 Oct 2026	34.11.7.99 - - [05/Oct/2026:03:09:44 +0200] "GET /public/.env HTTP/2.0" 403 106 "https://winsvr-berl ... show more 34.11.7.99 - - [05/Oct/2026:03:09:44 +0200] "GET /public/.env HTTP/2.0" 403 106 "https://winsvr-berlin.de/public/.env" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 34.11.7.99 - - [05/Oct/2026:03:09:46 +0200] "GET //.env HTTP/2.0" 403 106 "https://winsvr-berlin.de/.//.env" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 34.11.7.99 - - [05/Oct/2026:03:09:47 +0200] "GET /api/config HTTP/2.0" 403 106 "https://winsvr-berlin.de/api/config" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 34.11.7.99 - - [05/Oct/2026:03:09:47 +0200] "GET /api/proc/self/environ HTTP/2.0" 403 106 "https://winsvr-berlin.de/api/w/admins/jobs_u/get_log_file/../../../../proc/self/environ" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 34.11.7.99 - - [05/Oct/2026:03:09:47 +0200] "GET /proc/self/cgroup HTTP/2.0" 403 106 "https://winsvr-berlin.de/proc/self/cgroup" "M ... show less	Web App Attack
🇺🇸 34.22.37.151	05 Oct 2026	34.22.37.151 - - [05/Oct/2026:02:50:50 +0200] "GET /.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Window ... show more 34.22.37.151 - - [05/Oct/2026:02:50:50 +0200] "GET /.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.22.37.151 - - [05/Oct/2026:02:50:58 +0200] "GET /src/.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.22.37.151 - - [05/Oct/2026:02:50:58 +0200] "GET /config/.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.22.37.151 - - [05/Oct/2026:02:50:59 +0200] "GET /database/.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.22.37.151 - - [05/Oct/2026:02:50:59 +0200] "GET /storage/.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Web App Attack
🇺🇸 34.11.81.227	05 Oct 2026	34.11.81.227 - - [05/Oct/2026:02:31:34 +0200] "GET /api/proc/self/environ HTTP/1.1" 403 5701 "https: ... show more 34.11.81.227 - - [05/Oct/2026:02:31:34 +0200] "GET /api/proc/self/environ HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/w/default/jobs_u/get_log_file/../../../../proc/self/environ" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot" 34.11.81.227 - - [05/Oct/2026:02:31:34 +0200] "GET /api/proc/self/environ HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/w/starter/jobs_u/get_log_file/../../../../proc/self/environ" "Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)" 34.11.81.227 - - [05/Oct/2026:02:31:34 +0200] "GET /api/fs/read?allowOutsideWorkspace=true&path=/proc/self/environ HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/fs/read?allowOutsideWorkspace=true&path=/proc/self/environ" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)" 34.11.81.227 - - [05/Oct/2026:02:31:34 +0200] "GET /api/fs/read?allowOutsideWorkspace=true&path=/app/.env HTTP/1.1" 403 5701 "https://dein-fotostart.de/ ... show less	Web App Attack
🇨🇦 34.19.168.225	04 Oct 2026	34.19.168.225 - - [04/Oct/2026:23:57:02 +0200] "GET /.htpasswd HTTP/1.1" 403 9203 "https://dein-foto ... show more 34.19.168.225 - - [04/Oct/2026:23:57:02 +0200] "GET /.htpasswd HTTP/1.1" 403 9203 "https://dein-fotostart.de/.htpasswd" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)" 34.19.168.225 - - [04/Oct/2026:23:57:06 +0200] "GET /api/v2/config HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/v2/config" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)" 34.19.168.225 - - [04/Oct/2026:23:57:06 +0200] "GET /api/v1/config HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/v1/config" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)" 34.19.168.225 - - [04/Oct/2026:23:57:06 +0200] "GET /api/env HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/env" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)" 34.19.168.225 - - [04/Oct/2026:23:57:06 +0200] "GET /api/v2/settings HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/v2/settings" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)" ... show less	Web App Attack
🇩🇪 87.192.40.135	04 Oct 2026	87.192.40.135 - - [04/Oct/2026:22:46:39 +0200] "GET /?author=1 HTTP/1.1" 403 140 "https://www.bing.c ... show more 87.192.40.135 - - [04/Oct/2026:22:46:39 +0200] "GET /?author=1 HTTP/1.1" 403 140 "https://www.bing.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 87.192.40.135 - - [04/Oct/2026:22:46:39 +0200] "GET /?author=2 HTTP/1.1" 403 97 "https://duckduckgo.com/" "Mozilla/5.0 (Windows NT 11.0; Win64; x64; rv:119.0) Gecko/20100101 Firefox/119.0" 87.192.40.135 - - [04/Oct/2026:22:46:39 +0200] "GET /?author=3 HTTP/1.1" 403 140 "https://www.google.com/search?q=wordpress" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 87.192.40.135 - - [04/Oct/2026:22:46:39 +0200] "GET /?author=4 HTTP/1.1" 403 140 "https://duckduckgo.com/" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 87.192.40.135 - - [04/Oct/2026:22:46:39 +0200] "GET /?author=5 HTTP/1.1" 403 97 "https://www.facebook.com/" "Mozilla/5.0 (Macintosh; Intel Mac O ... show less	Web App Attack
🇺🇸 34.21.88.134	04 Oct 2026	34.21.88.134 - - [04/Oct/2026:22:12:37 +0200] "GET //.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 AppleW ... show more 34.21.88.134 - - [04/Oct/2026:22:12:37 +0200] "GET //.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot" 34.21.88.134 - - [04/Oct/2026:22:12:37 +0200] "GET /%2eenv HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 34.21.88.134 - - [04/Oct/2026:22:12:38 +0200] "GET /cache/original/%2e%2e/.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" 34.21.88.134 - - [04/Oct/2026:22:12:38 +0200] "GET /cache/original/%2e%2e/%2e%2e/.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)" 34.21.88.134 - - [04/Oct/2026:22:12:39 +0200] "GET /config/firebase-admin.json HTTP/1.1" 403 6275 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)" ... show less	Web App Attack
🇦🇺 13.70.107.184	04 Oct 2026	13.70.107.184 - - [04/Oct/2026:17:34:07 +0200] "GET /wp-includes/ID3/about.php HTTP/1.1" 403 146 "-" ... show more 13.70.107.184 - - [04/Oct/2026:17:34:07 +0200] "GET /wp-includes/ID3/about.php HTTP/1.1" 403 146 "-" "-" 13.70.107.184 - - [04/Oct/2026:17:34:08 +0200] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 403 6282 "-" "-" 13.70.107.184 - - [04/Oct/2026:17:34:08 +0200] "GET /wp-includes/blocks/audio/ HTTP/1.1" 403 6282 "-" "-" 13.70.107.184 - - [04/Oct/2026:17:34:13 +0200] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 403 146 "-" "-" 13.70.107.184 - - [04/Oct/2026:17:34:15 +0200] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 403 6282 "-" "-" ... show less	Web App Attack
🇺🇸 136.65.189.251	03 Oct 2026	136.65.189.251 - - [03/Oct/2026:23:42:48 +0200] "GET /wp-config.php.bak HTTP/1.1" 403 548 "-" "Mozil ... show more 136.65.189.251 - - [03/Oct/2026:23:42:48 +0200] "GET /wp-config.php.bak HTTP/1.1" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 136.65.189.251 - - [03/Oct/2026:23:42:48 +0200] "GET /wp-config.php.bak HTTP/1.1" 403 146 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Mobile/15E148 Safari/604.1" 136.65.189.251 - - [03/Oct/2026:23:42:48 +0200] "GET /wp-config.php.old HTTP/1.1" 403 146 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0" 136.65.189.251 - - [03/Oct/2026:23:42:49 +0200] "GET /wp-config.php.old HTTP/1.1" 403 146 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Mobile/15E148 Safari/604.1" 136.65.189.251 - - [03/Oct/2026:23:42:49 +0200] "GET /wp-config.php.save HTTP/1.1" 403 146 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_7_2) AppleWebKit/605.1. ... show less	Web App Attack
🇩🇪 194.45.37.30	03 Oct 2026	webmail.notification.x0w.de:443 13.70.107.184 - - [03/Oct/2026:23:16:40 +0200] "GET /wp-admin/css/co ... show more webmail.notification.x0w.de:443 13.70.107.184 - - [03/Oct/2026:23:16:40 +0200] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 403 5673 "-" "-" webmail.notification.x0w.de:443 13.70.107.184 - - [03/Oct/2026:23:16:41 +0200] "GET /wp-includes/blocks/audio/ HTTP/1.1" 403 5673 "-" "-" webmail.notification.x0w.de:443 13.70.107.184 - - [03/Oct/2026:23:16:46 +0200] "GET /wp-content/ HTTP/1.1" 403 5673 "-" "-" webmail.notification.x0w.de:443 13.70.107.184 - - [03/Oct/2026:23:16:47 +0200] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 403 5673 "-" "-" webmail.notification.x0w.de:443 13.70.107.184 - - [03/Oct/2026:23:16:47 +0200] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 403 5673 "-" "-" ... show less	Web App Attack
🇦🇺 20.92.83.244	03 Oct 2026	20.92.83.244 - - [03/Oct/2026:20:12:05 +0200] "GET /echkm.php? HTTP/1.1" 403 5610 "-" "-" 20.92.83.2 ... show more 20.92.83.244 - - [03/Oct/2026:20:12:05 +0200] "GET /echkm.php? HTTP/1.1" 403 5610 "-" "-" 20.92.83.244 - - [03/Oct/2026:20:12:06 +0200] "GET /fpwch.php HTTP/1.1" 403 5610 "-" "-" 20.92.83.244 - - [03/Oct/2026:20:12:07 +0200] "GET /b.php?p= HTTP/1.1" 403 5610 "-" "-" 20.92.83.244 - - [03/Oct/2026:20:12:07 +0200] "GET /wp-content/themes/index.php HTTP/1.1" 403 5610 "-" "-" 20.92.83.244 - - [03/Oct/2026:20:12:08 +0200] "GET /adminfuns.php HTTP/1.1" 403 5610 "-" "-" ... show less	Web App Attack
🇩🇪 194.45.37.30	03 Oct 2026	webmail.notification.x0w.de:443 20.211.90.37 - - [03/Oct/2026:19:42:52 +0200] "GET /wp-admin/css/col ... show more webmail.notification.x0w.de:443 20.211.90.37 - - [03/Oct/2026:19:42:52 +0200] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 403 5673 "-" "-" webmail.notification.x0w.de:443 20.211.90.37 - - [03/Oct/2026:19:42:53 +0200] "GET /wp-includes/blocks/audio/ HTTP/1.1" 403 5673 "-" "-" webmail.notification.x0w.de:443 20.211.90.37 - - [03/Oct/2026:19:42:58 +0200] "GET /wp-content/ HTTP/1.1" 403 5673 "-" "-" webmail.notification.x0w.de:443 20.211.90.37 - - [03/Oct/2026:19:42:58 +0200] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 403 5673 "-" "-" webmail.notification.x0w.de:443 20.211.90.37 - - [03/Oct/2026:19:42:59 +0200] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 403 5673 "-" "-" ... show less	Web App Attack
🇩🇪 87.106.141.44	03 Oct 2026	Oct 3 18:31:13 web09 postfix/smtpd[2743404]: warning: unknown[87.106.141.44]: SASL login authentica ... show more Oct 3 18:31:13 web09 postfix/smtpd[2743404]: warning: unknown[87.106.141.44]: SASL login authentication failed: authentication failure, sasl_username=noauth Oct 3 18:31:13 web09 postfix/smtpd[2743404]: warning: unknown[87.106.141.44]: SASL login authentication failed: authentication failure, sasl_username=spam Oct 3 18:31:13 web09 postfix/smtpd[2743404]: warning: unknown[87.106.141.44]: SASL login authentication failed: authentication failure, sasl_username=test Oct 3 18:31:14 web09 postfix/smtpd[2743404]: warning: unknown[87.106.141.44]: SASL login authentication failed: authentication failure, sasl_username=info Oct 3 18:31:14 web09 postfix/smtpd[2743404]: warning: unknown[87.106.141.44]: SASL login authentication failed: authentication failure, sasl_username=admin ... show less	Brute-Force
🇭🇰 104.208.73.227	03 Oct 2026	104.208.73.227 - - [03/Oct/2026:15:05:10 +0200] "GET /go.php HTTP/1.1" 403 5610 "-" "-" 104.208.73.2 ... show more 104.208.73.227 - - [03/Oct/2026:15:05:10 +0200] "GET /go.php HTTP/1.1" 403 5610 "-" "-" 104.208.73.227 - - [03/Oct/2026:15:05:10 +0200] "GET /wp-filemanager1_260805194013.php HTTP/1.1" 403 5610 "-" "-" 104.208.73.227 - - [03/Oct/2026:15:05:11 +0200] "GET /wp-fgban13jx3.php HTTP/1.1" 403 5610 "-" "-" 104.208.73.227 - - [03/Oct/2026:15:05:11 +0200] "GET /1ac.php HTTP/1.1" 403 5610 "-" "-" 104.208.73.227 - - [03/Oct/2026:15:05:12 +0200] "GET /flm.php HTTP/1.1" 403 5610 "-" "-" ... show less	Web App Attack
🇩🇪 31.70.83.197	03 Oct 2026	Oct 3 03:51:49 web09 postfix/smtpd[2522695]: warning: ip31-70-83-197.pbiaas.com[31.70.83.197]: SASL ... show more Oct 3 03:51:49 web09 postfix/smtpd[2522695]: warning: ip31-70-83-197.pbiaas.com[31.70.83.197]: SASL login authentication failed: authentication failure, sasl_username=noauth Oct 3 03:51:49 web09 postfix/smtpd[2532117]: warning: ip31-70-83-197.pbiaas.com[31.70.83.197]: SASL login authentication failed: authentication failure, sasl_username=spam Oct 3 03:51:49 web09 postfix/smtpd[2522695]: warning: ip31-70-83-197.pbiaas.com[31.70.83.197]: SASL login authentication failed: authentication failure, sasl_username=test Oct 3 03:51:49 web09 postfix/smtpd[2532117]: warning: ip31-70-83-197.pbiaas.com[31.70.83.197]: SASL login authentication failed: authentication failure, sasl_username=info Oct 3 03:51:49 web09 postfix/smtpd[2522695]: warning: ip31-70-83-197.pbiaas.com[31.70.83.197]: SASL login authentication failed: authentication failure, sasl_username=admin ... show less	Brute-Force
🇺🇸 107.148.223.239	02 Oct 2026	Oct 2 23:14:26 web09 postfix/smtpd[2357886]: warning: unknown[107.148.223.239]: SASL login authenti ... show more Oct 2 23:14:26 web09 postfix/smtpd[2357886]: warning: unknown[107.148.223.239]: SASL login authentication failed: authentication failure, sasl_username=noauth Oct 2 23:14:42 web09 postfix/smtpd[2357886]: warning: unknown[107.148.223.239]: SASL login authentication failed: authentication failure, sasl_username=info Oct 2 23:14:48 web09 postfix/smtpd[2357886]: warning: unknown[107.148.223.239]: SASL login authentication failed: authentication failure, sasl_username=admin Oct 2 23:14:54 web09 postfix/smtpd[2357886]: warning: unknown[107.148.223.239]: SASL login authentication failed: authentication failure, sasl_username=postmaster Oct 2 23:15:02 web09 postfix/smtpd[2357886]: warning: unknown[107.148.223.239]: SASL login authentication failed: authentication failure, sasl_username=support ... show less	Brute-Force
🇰🇷 20.249.5.100	02 Oct 2026	20.249.5.100 - - [02/Oct/2026:21:17:22 +0200] "GET /wp-includes/ID3/about.php HTTP/1.1" 403 146 "-" ... show more 20.249.5.100 - - [02/Oct/2026:21:17:22 +0200] "GET /wp-includes/ID3/about.php HTTP/1.1" 403 146 "-" "-" 20.249.5.100 - - [02/Oct/2026:21:17:22 +0200] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 403 6282 "-" "-" 20.249.5.100 - - [02/Oct/2026:21:17:23 +0200] "GET /wp-includes/blocks/audio/ HTTP/1.1" 403 6282 "-" "-" 20.249.5.100 - - [02/Oct/2026:21:17:26 +0200] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 403 146 "-" "-" 20.249.5.100 - - [02/Oct/2026:21:17:28 +0200] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 403 6282 "-" "-" ... show less	Web App Attack
🇺🇸 34.67.93.218	02 Oct 2026	34.67.93.218 - - [02/Oct/2026:17:42:55 +0200] "GET /wp-config.php.bak HTTP/1.1" 403 146 "-" "Mozilla ... show more 34.67.93.218 - - [02/Oct/2026:17:42:55 +0200] "GET /wp-config.php.bak HTTP/1.1" 403 146 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_7_2) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Safari/605.1.15" 34.67.93.218 - - [02/Oct/2026:17:42:56 +0200] "GET /wp-config.php.bak HTTP/1.1" 403 146 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_7_2) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Safari/605.1.15" 34.67.93.218 - - [02/Oct/2026:17:42:56 +0200] "GET /wp-config.php.old HTTP/1.1" 403 146 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_7_2) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Safari/605.1.15" 34.67.93.218 - - [02/Oct/2026:17:42:56 +0200] "GET /wp-config.php.old HTTP/1.1" 403 146 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0" 34.67.93.218 - - [02/Oct/2026:17:42:56 +0200] "GET /wp-config.php.save HTTP/1.1" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537 ... show less	Web App Attack
🇧🇪 35.240.100.200	02 Oct 2026	35.240.100.200 - - [02/Oct/2026:14:12:16 +0200] "GET /vendor/composer/installed.json HTTP/1.1" 403 6 ... show more 35.240.100.200 - - [02/Oct/2026:14:12:16 +0200] "GET /vendor/composer/installed.json HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 35.240.100.200 - - [02/Oct/2026:14:12:16 +0200] "GET /src/.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 35.240.100.200 - - [02/Oct/2026:14:12:16 +0200] "GET /config/config.js HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 35.240.100.200 - - [02/Oct/2026:14:12:16 +0200] "GET /config/aws.yml HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 35.240.100.200 - - [02/Oct/2026:14:12:16 +0200] "GET /config/.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" ... show less	Web App Attack
🇹🇼 104.199.183.206	02 Oct 2026	104.199.183.206 - - [02/Oct/2026:13:43:49 +0200] "GET /model/info HTTP/1.1" 403 5677 "-" "Mozilla/5. ... show more 104.199.183.206 - - [02/Oct/2026:13:43:49 +0200] "GET /model/info HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)" 104.199.183.206 - - [02/Oct/2026:13:43:50 +0200] "GET /.well-known/jwks.json HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; +https://openai.com/searchbot" 104.199.183.206 - - [02/Oct/2026:13:43:50 +0200] "GET /api/config HTTP/1.1" 403 5677 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected])" 104.199.183.206 - - [02/Oct/2026:13:43:50 +0200] "GET /firebase-config.json HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 104.199.183.206 - - [02/Oct/2026:13:43:50 +0200] "GET /wp-json HTTP/1.1" 403 5677 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)" ... show less	Web App Attack
🇵🇱 45.138.12.10	02 Oct 2026	45.138.12.10 - - [02/Oct/2026:12:39:48 +0200] "GET /.env.openai.local HTTP/1.1" 403 5677 "-" "Mozill ... show more 45.138.12.10 - - [02/Oct/2026:12:39:48 +0200] "GET /.env.openai.local HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.138.12.10 - - [02/Oct/2026:12:39:48 +0200] "GET /.env.gpt HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.138.12.10 - - [02/Oct/2026:12:39:48 +0200] "GET /.env.llm HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.138.12.10 - - [02/Oct/2026:12:39:48 +0200] "GET /.aws/config HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 45.138.12.10 - - [02/Oct/2026:12:39:48 +0200] "GET /.aws/config.json HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safar ... show less	Web App Attack