|
🇺🇸
35.196.116.224
|
|
35.196.116.224 - - [31/Aug/2026:00:17:14 +0200] "GET /.htpasswd HTTP/2.0" 403 129 "-" "Mozilla/5.0 ( ...
show more
35.196.116.224 - - [31/Aug/2026:00:17:14 +0200] "GET /.htpasswd HTTP/2.0" 403 129 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Mobile Safari/537.36"
35.196.116.224 - - [31/Aug/2026:00:17:18 +0200] "GET /wp-config.php.bak HTTP/2.0" 403 129 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Mobile Safari/537.36"
35.196.116.224 - - [31/Aug/2026:00:17:19 +0200] "GET /wp-config.php.old HTTP/2.0" 403 129 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Mobile Safari/537.36"
35.196.116.224 - - [31/Aug/2026:00:17:19 +0200] "GET /storage/logs/laravel.log HTTP/2.0" 403 129 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Mobile Safari/537.36"
35.196.116.224 - - [31/Aug/2026:00:17:19 +0200] "GET /wp-config.php~ HTTP/2.0" 403 129 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chr
...
show less
|
Web App Attack
|
|
🇨🇦
52.139.44.162
|
|
52.139.44.162 - - [31/Aug/2026:00:06:58 +0200] "GET /verox.php HTTP/1.1" 403 5531 "-" "-"
52.139.44. ...
show more
52.139.44.162 - - [31/Aug/2026:00:06:58 +0200] "GET /verox.php HTTP/1.1" 403 5531 "-" "-"
52.139.44.162 - - [31/Aug/2026:00:06:58 +0200] "GET /ba.php?p= HTTP/1.1" 403 5531 "-" "-"
52.139.44.162 - - [31/Aug/2026:00:06:58 +0200] "GET /G.php HTTP/1.1" 403 5531 "-" "-"
52.139.44.162 - - [31/Aug/2026:00:06:59 +0200] "GET /great.php HTTP/1.1" 403 5531 "-" "-"
52.139.44.162 - - [31/Aug/2026:00:06:59 +0200] "GET /dyt8mjxc3yofbkoriukvgjaCdefault.php HTTP/1.1" 403 5531 "-" "-"
...
show less
|
Web App Attack
|
|
🇨🇦
20.48.251.3
|
|
20.48.251.3 - - [30/Aug/2026:21:57:20 +0200] "GET /rem.php HTTP/1.1" 403 5531 "-" "-"
20.48.251.3 - ...
show more
20.48.251.3 - - [30/Aug/2026:21:57:20 +0200] "GET /rem.php HTTP/1.1" 403 5531 "-" "-"
20.48.251.3 - - [30/Aug/2026:21:57:21 +0200] "GET /min.php HTTP/1.1" 403 5531 "-" "-"
20.48.251.3 - - [30/Aug/2026:21:57:21 +0200] "GET /saiga.php HTTP/1.1" 403 5531 "-" "-"
20.48.251.3 - - [30/Aug/2026:21:57:21 +0200] "GET /ammika.php HTTP/1.1" 403 5531 "-" "-"
20.48.251.3 - - [30/Aug/2026:21:57:21 +0200] "GET /broadcasting.php HTTP/1.1" 403 5531 "-" "-"
...
show less
|
Web App Attack
|
|
🇳🇱
213.111.144.104
|
|
213.111.144.104 - - [30/Aug/2026:17:00:36 +0200] "GET /?author=1 HTTP/1.1" 403 97 "-" "Mozilla/5.0 ( ...
show more
213.111.144.104 - - [30/Aug/2026:17:00:36 +0200] "GET /?author=1 HTTP/1.1" 403 97 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1; rv:118.0) Gecko/20100101 Firefox/118.0"
213.111.144.104 - - [30/Aug/2026:17:00:36 +0200] "GET /?author=2 HTTP/1.1" 403 97 "https://www.facebook.com/" "Mozilla/5.0 (Windows NT 11.0; Win64; x64; rv:118.0) Gecko/20100101 Firefox/118.0"
213.111.144.104 - - [30/Aug/2026:17:00:36 +0200] "GET /?author=3 HTTP/1.1" 403 97 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1; rv:121.0) Gecko/20100101 Firefox/121.0"
213.111.144.104 - - [30/Aug/2026:17:00:36 +0200] "GET /?author=4 HTTP/1.1" 403 97 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:120.0) Gecko/20100101 Firefox/120.0"
213.111.144.104 - - [30/Aug/2026:17:00:36 +0200] "GET /?author=5 HTTP/1.1" 403 140 "https://t.co/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
...
show less
|
Web App Attack
|
|
🇨🇦
20.151.10.161
|
|
20.151.10.161 - - [30/Aug/2026:16:37:32 +0200] "GET /wp-includes/ID3/about.php HTTP/1.1" 403 146 "-" ...
show more
20.151.10.161 - - [30/Aug/2026:16:37:32 +0200] "GET /wp-includes/ID3/about.php HTTP/1.1" 403 146 "-" "-"
20.151.10.161 - - [30/Aug/2026:16:37:32 +0200] "GET /wp-admin/css/ HTTP/1.1" 403 6287 "-" "-"
20.151.10.161 - - [30/Aug/2026:16:37:32 +0200] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 403 6287 "-" "-"
20.151.10.161 - - [30/Aug/2026:16:37:32 +0200] "GET /wp-includes/blocks/details/ HTTP/1.1" 403 6287 "-" "-"
20.151.10.161 - - [30/Aug/2026:16:37:33 +0200] "GET /wp-includes/blocks/audio/ HTTP/1.1" 403 6287 "-" "-"
...
show less
|
Web App Attack
|
|
🇶🇦
34.18.225.174
|
|
34.18.225.174 - - [30/Aug/2026:13:42:50 +0200] "GET /.git/config HTTP/1.1" 403 6257 "-" "Mozilla/5.0 ...
show more
34.18.225.174 - - [30/Aug/2026:13:42:50 +0200] "GET /.git/config HTTP/1.1" 403 6257 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.18.225.174 - - [30/Aug/2026:13:42:51 +0200] "GET /.env HTTP/1.1" 403 6257 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.18.225.174 - - [30/Aug/2026:13:42:51 +0200] "GET /.env.local HTTP/1.1" 403 6257 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.18.225.174 - - [30/Aug/2026:13:42:51 +0200] "GET /.env.production HTTP/1.1" 403 6257 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.18.225.174 - - [30/Aug/2026:13:42:51 +0200] "GET /.env.staging HTTP/1.1" 403 6257 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Ge
...
show less
|
Web App Attack
|
|
🇨🇦
20.151.8.82
|
|
20.151.8.82 - - [30/Aug/2026:12:47:42 +0200] "GET /wp-includes/blocks/query-title/footer.php HTTP/1. ...
show more
20.151.8.82 - - [30/Aug/2026:12:47:42 +0200] "GET /wp-includes/blocks/query-title/footer.php HTTP/1.1" 403 146 "-" "-"
20.151.8.82 - - [30/Aug/2026:12:47:42 +0200] "GET /wp-content/uploads/indoex.php HTTP/1.1" 403 146 "-" "-"
20.151.8.82 - - [30/Aug/2026:12:47:45 +0200] "GET /wp-includes/images/crystal/option.php HTTP/1.1" 403 146 "-" "-"
20.151.8.82 - - [30/Aug/2026:12:47:45 +0200] "GET /wp-includes/pomo/xxx.php HTTP/1.1" 403 146 "-" "-"
20.151.8.82 - - [30/Aug/2026:12:47:46 +0200] "GET /wp-includes/interactivity-api/flower.php HTTP/1.1" 403 146 "-" "-"
...
show less
|
Web App Attack
|
|
🇺🇸
34.173.208.225
|
|
34.173.208.225 - - [30/Aug/2026:12:19:36 +0200] "GET /.env HTTP/1.1" 403 6274 "-" "Mozilla/5.0 (Maci ...
show more
34.173.208.225 - - [30/Aug/2026:12:19:36 +0200] "GET /.env HTTP/1.1" 403 6274 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.173.208.225 - - [30/Aug/2026:12:19:39 +0200] "GET /config/.env HTTP/1.1" 403 6274 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.173.208.225 - - [30/Aug/2026:12:19:40 +0200] "GET /storage/.env HTTP/1.1" 403 6274 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.173.208.225 - - [30/Aug/2026:12:19:41 +0200] "GET /config/config.php HTTP/1.1" 403 6274 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.173.208.225 - - [30/Aug/2026:12:19:41 +0200] "GET /config/app.php HTTP/1.1" 403 6274 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHT
...
show less
|
Web App Attack
|
|
🇨🇭
34.65.137.50
|
|
34.65.137.50 - - [30/Aug/2026:11:57:13 +0200] "GET /.git/config HTTP/1.1" 403 6263 "-" "Mozilla/5.0 ...
show more
34.65.137.50 - - [30/Aug/2026:11:57:13 +0200] "GET /.git/config HTTP/1.1" 403 6263 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.65.137.50 - - [30/Aug/2026:11:57:13 +0200] "GET /.env HTTP/1.1" 403 6263 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.65.137.50 - - [30/Aug/2026:11:57:13 +0200] "GET /.env.local HTTP/1.1" 403 6263 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.65.137.50 - - [30/Aug/2026:11:57:13 +0200] "GET /.env.production HTTP/1.1" 403 6263 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.65.137.50 - - [30/Aug/2026:11:57:13 +0200] "GET /.env.staging HTTP/1.1" 403 6263 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
...
show less
|
Web App Attack
|
|
🇨🇦
20.220.161.127
|
|
20.220.161.127 - - [30/Aug/2026:11:42:17 +0200] "GET /wp-includes/ID3/about.php HTTP/1.1" 403 146 "- ...
show more
20.220.161.127 - - [30/Aug/2026:11:42:17 +0200] "GET /wp-includes/ID3/about.php HTTP/1.1" 403 146 "-" "-"
20.220.161.127 - - [30/Aug/2026:11:42:17 +0200] "GET /wp-admin/css/ HTTP/1.1" 403 6287 "-" "-"
20.220.161.127 - - [30/Aug/2026:11:42:17 +0200] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 403 6287 "-" "-"
20.220.161.127 - - [30/Aug/2026:11:42:17 +0200] "GET /wp-includes/blocks/details/ HTTP/1.1" 403 6287 "-" "-"
20.220.161.127 - - [30/Aug/2026:11:42:17 +0200] "GET /wp-includes/blocks/audio/ HTTP/1.1" 403 6287 "-" "-"
...
show less
|
Web App Attack
|
|
🇨🇦
20.151.200.44
|
|
20.151.200.44 - - [30/Aug/2026:10:52:58 +0200] "GET /4e.php HTTP/1.1" 403 5531 "-" "-"
20.151.200.44 ...
show more
20.151.200.44 - - [30/Aug/2026:10:52:58 +0200] "GET /4e.php HTTP/1.1" 403 5531 "-" "-"
20.151.200.44 - - [30/Aug/2026:10:52:58 +0200] "GET /ssss.php HTTP/1.1" 403 5531 "-" "-"
20.151.200.44 - - [30/Aug/2026:10:52:58 +0200] "GET /zoz.php HTTP/1.1" 403 5531 "-" "-"
20.151.200.44 - - [30/Aug/2026:10:52:58 +0200] "GET /kcs.php HTTP/1.1" 403 5531 "-" "-"
20.151.200.44 - - [30/Aug/2026:10:52:58 +0200] "GET /tajj.php HTTP/1.1" 403 5531 "-" "-"
...
show less
|
Web App Attack
|
|
🇩🇪
194.45.37.30
|
|
webmail.notification.x0w.de:443 34.138.27.236 - - [30/Aug/2026:10:20:08 +0200] "GET /.aws/credential ...
show more
webmail.notification.x0w.de:443 34.138.27.236 - - [30/Aug/2026:10:20:08 +0200] "GET /.aws/credentials HTTP/1.1" 403 5672 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36"
webmail.notification.x0w.de:443 34.138.27.236 - - [30/Aug/2026:10:20:08 +0200] "GET /wp-json HTTP/1.1" 403 5672 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36"
webmail.notification.x0w.de:443 34.138.27.236 - - [30/Aug/2026:10:20:09 +0200] "GET /.git/config HTTP/1.1" 403 5672 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36"
webmail.notification.x0w.de:443 34.138.27.236 - - [30/Aug/2026:10:20:09 +0200] "GET /.aws/config HTTP/1.1" 403 5672 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36"
webmail.notification.x0w.de:443 34.138.27.236 - - [30/Aug/2026:
...
show less
|
Web App Attack
|
|
🇩🇪
31.70.107.46
|
|
Aug 30 06:44:49 web09 postfix/smtpd[3832441]: warning: ip31-70-107-46.pbiaas.com[31.70.107.46]: SASL ...
show more
Aug 30 06:44:49 web09 postfix/smtpd[3832441]: warning: ip31-70-107-46.pbiaas.com[31.70.107.46]: SASL login authentication failed: authentication failure, sasl_username=noauth
Aug 30 06:44:49 web09 postfix/smtpd[3832441]: warning: ip31-70-107-46.pbiaas.com[31.70.107.46]: SASL login authentication failed: authentication failure, sasl_username=spam
Aug 30 06:44:49 web09 postfix/smtpd[3832441]: warning: ip31-70-107-46.pbiaas.com[31.70.107.46]: SASL login authentication failed: authentication failure, sasl_username=test
Aug 30 06:44:50 web09 postfix/smtpd[3832441]: warning: ip31-70-107-46.pbiaas.com[31.70.107.46]: SASL login authentication failed: authentication failure, sasl_username=info
Aug 30 06:44:50 web09 postfix/smtpd[3832441]: warning: ip31-70-107-46.pbiaas.com[31.70.107.46]: SASL login authentication failed: authentication failure, sasl_username=admin
...
show less
|
Brute-Force
|
|
🇳🇱
34.141.172.11
|
|
34.141.172.11 - - [30/Aug/2026:06:08:25 +0200] "GET / HTTP/1.1" 403 6281 "-" "Mozilla/5.0 (Windows N ...
show more
34.141.172.11 - - [30/Aug/2026:06:08:25 +0200] "GET / HTTP/1.1" 403 6281 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0"
34.141.172.11 - - [30/Aug/2026:06:08:29 +0200] "GET / HTTP/1.1" 403 6281 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.5; rv:127.0) Gecko/20100101 Firefox/127.0"
34.141.172.11 - - [30/Aug/2026:06:09:07 +0200] "GET /.htpasswd HTTP/1.1" 403 6281 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_6_1) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user) Chrome/114.0.4352.152 Safari/537.36 Edg/114.0.4352.152"
34.141.172.11 - - [30/Aug/2026:06:09:53 +0200] "GET /?exec=%3B+echo+GSCAN_CMDI+%23 HTTP/1.1" 403 6281 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; LinkedInBot/1.0; +http://www.linkedin.com)"
34.141.172.11 - - [30/Aug/2026:06:09:53 +0200] "GET /?cmd=%3B+echo+GSCAN_CMDI+%23 HTTP/1.1" 403 6281 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://op
...
show less
|
Web App Attack
|
|
🇨🇦
20.48.179.39
|
|
20.48.179.39 - - [30/Aug/2026:04:18:06 +0200] "GET /verox.php HTTP/1.1" 403 5531 "-" "-"
20.48.179.3 ...
show more
20.48.179.39 - - [30/Aug/2026:04:18:06 +0200] "GET /verox.php HTTP/1.1" 403 5531 "-" "-"
20.48.179.39 - - [30/Aug/2026:04:18:06 +0200] "GET /ba.php?p= HTTP/1.1" 403 5531 "-" "-"
20.48.179.39 - - [30/Aug/2026:04:18:06 +0200] "GET /G.php HTTP/1.1" 403 5531 "-" "-"
20.48.179.39 - - [30/Aug/2026:04:18:07 +0200] "GET /great.php HTTP/1.1" 403 5531 "-" "-"
20.48.179.39 - - [30/Aug/2026:04:18:07 +0200] "GET /dyt8mjxc3yofbkoriukvgjaCdefault.php HTTP/1.1" 403 5531 "-" "-"
...
show less
|
Web App Attack
|
|
🇩🇪
194.45.37.30
|
|
webmail.notification.x0w.de:443 52.139.44.162 - - [30/Aug/2026:04:08:09 +0200] "GET /wp-admin/css/ H ...
show more
webmail.notification.x0w.de:443 52.139.44.162 - - [30/Aug/2026:04:08:09 +0200] "GET /wp-admin/css/ HTTP/1.1" 403 5672 "-" "-"
webmail.notification.x0w.de:443 52.139.44.162 - - [30/Aug/2026:04:08:09 +0200] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 403 5672 "-" "-"
webmail.notification.x0w.de:443 52.139.44.162 - - [30/Aug/2026:04:08:09 +0200] "GET /wp-includes/blocks/details/ HTTP/1.1" 403 5672 "-" "-"
webmail.notification.x0w.de:443 52.139.44.162 - - [30/Aug/2026:04:08:09 +0200] "GET /wp-includes/blocks/audio/ HTTP/1.1" 403 5672 "-" "-"
webmail.notification.x0w.de:443 52.139.44.162 - - [30/Aug/2026:04:08:10 +0200] "GET //wp-includes/Requests/ HTTP/1.1" 403 5672 "-" "-"
...
show less
|
Web App Attack
|
|
🇺🇸
35.229.104.41
|
|
35.229.104.41 - - [30/Aug/2026:03:40:21 +0200] "GET /.htpasswd HTTP/1.1" 403 8332 "https://dein-foto ...
show more
35.229.104.41 - - [30/Aug/2026:03:40:21 +0200] "GET /.htpasswd HTTP/1.1" 403 8332 "https://dein-fotostart.de/.htpasswd" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 Edg/149.0.0.0"
35.229.104.41 - - [30/Aug/2026:03:40:24 +0200] "GET /api/settings HTTP/1.1" 403 5686 "https://dein-fotostart.de/api/settings" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 Edg/149.0.0.0"
35.229.104.41 - - [30/Aug/2026:03:40:24 +0200] "GET /api/v1/settings HTTP/1.1" 403 5686 "https://dein-fotostart.de/api/v1/settings" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 Edg/149.0.0.0"
35.229.104.41 - - [30/Aug/2026:03:40:24 +0200] "GET /api/v1/config HTTP/1.1" 403 5686 "https://dein-fotostart.de/api/v1/config" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chro
...
show less
|
Web App Attack
|
|
🇨🇦
20.48.250.41
|
|
20.48.250.41 - - [30/Aug/2026:03:06:14 +0200] "GET /erty.php HTTP/1.1" 403 5531 "-" "-"
20.48.250.41 ...
show more
20.48.250.41 - - [30/Aug/2026:03:06:14 +0200] "GET /erty.php HTTP/1.1" 403 5531 "-" "-"
20.48.250.41 - - [30/Aug/2026:03:06:14 +0200] "GET /0x.php HTTP/1.1" 403 5531 "-" "-"
20.48.250.41 - - [30/Aug/2026:03:06:14 +0200] "GET /66.php HTTP/1.1" 403 5531 "-" "-"
20.48.250.41 - - [30/Aug/2026:03:06:15 +0200] "GET /f35.php HTTP/1.1" 403 5531 "-" "-"
20.48.250.41 - - [30/Aug/2026:03:06:15 +0200] "GET /wen.php HTTP/1.1" 403 5531 "-" "-"
...
show less
|
Web App Attack
|
|
🇹🇼
34.80.46.49
|
|
34.80.46.49 - - [30/Aug/2026:02:47:02 +0200] "GET /@fs/var/www/html/wp-config.php?raw?? HTTP/1.1" 40 ...
show more
34.80.46.49 - - [30/Aug/2026:02:47:02 +0200] "GET /@fs/var/www/html/wp-config.php?raw?? HTTP/1.1" 403 117 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Slackbot-LinkExpanding/1.0; +https://api.slack.com/robots)"
34.80.46.49 - - [30/Aug/2026:02:47:40 +0200] "GET /wp-config.php HTTP/1.1" 403 117 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:149.15) Gecko/20100101 Firefox/149.15; compatible; GPTBot/1.2; +https://openai.com/gptbot"
34.80.46.49 - - [30/Aug/2026:02:47:40 +0200] "GET /wp-config.php.bak HTTP/1.1" 403 117 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Slackbot-LinkExpanding/1.0; +https://api.slack.com/robots"
34.80.46.49 - - [30/Aug/2026:02:47:40 +0200] "GET /wp-config.php.old HTTP/1.1" 403 117 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.2; +https://openai.com/gptbot"
34.80.46.49 - - [30/Aug/2026:02:47:55 +0200] "GET /.htpasswd HTTP/1.1" 403 117 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko
...
show less
|
Web App Attack
|
|
🇨🇦
20.48.160.90
|
|
20.48.160.90 - - [29/Aug/2026:23:29:30 +0200] "GET /classwithtostring.php?p= HTTP/1.1" 403 5531 "-" ...
show more
20.48.160.90 - - [29/Aug/2026:23:29:30 +0200] "GET /classwithtostring.php?p= HTTP/1.1" 403 5531 "-" "-"
20.48.160.90 - - [29/Aug/2026:23:29:30 +0200] "GET /3PJcpMFsD8B.php HTTP/1.1" 403 5531 "-" "-"
20.48.160.90 - - [29/Aug/2026:23:29:31 +0200] "GET /5PJcpMFsD8B.php HTTP/1.1" 403 5531 "-" "-"
20.48.160.90 - - [29/Aug/2026:23:29:31 +0200] "GET /4PJcpMFsD8B.php HTTP/1.1" 403 5531 "-" "-"
20.48.160.90 - - [29/Aug/2026:23:29:31 +0200] "GET /wsd.php HTTP/1.1" 403 5531 "-" "-"
...
show less
|
Web App Attack
|
|
🇺🇸
34.73.51.143
|
|
34.73.51.143 - - [29/Aug/2026:22:35:54 +0200] "GET /.htpasswd HTTP/1.1" 403 8332 "-" "Mozilla/5.0 (M ...
show more
34.73.51.143 - - [29/Aug/2026:22:35:54 +0200] "GET /.htpasswd HTTP/1.1" 403 8332 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 Edg/149.0.0.0"
34.73.51.143 - - [29/Aug/2026:22:36:01 +0200] "GET /api/config HTTP/1.1" 403 5686 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 Edg/149.0.0.0"
34.73.51.143 - - [29/Aug/2026:22:36:01 +0200] "GET /api/v2/config HTTP/1.1" 403 5686 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 Edg/149.0.0.0"
34.73.51.143 - - [29/Aug/2026:22:36:02 +0200] "GET /api/v1/config HTTP/1.1" 403 5686 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 Edg/149.0.0.0"
34.73.51.143 - - [29/Aug/2026:22:36:02 +0200] "GET /api/env HTTP/1.1" 403 5686 "-" "Mozilla/5.0 (Macintosh; Intel M
...
show less
|
Web App Attack
|
|
🇯🇵
35.243.113.133
|
|
35.243.113.133 - - [29/Aug/2026:19:36:07 +0200] "GET /api/config HTTP/1.1" 403 5686 "https://dein-fo ...
show more
35.243.113.133 - - [29/Aug/2026:19:36:07 +0200] "GET /api/config HTTP/1.1" 403 5686 "https://dein-fotostart.de/api/config" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; LinkedInBot/1.0; +http://www.linkedin.com)"
35.243.113.133 - - [29/Aug/2026:19:36:07 +0200] "GET /api/v1/settings HTTP/1.1" 403 5686 "https://dein-fotostart.de/api/v1/settings" "Mozilla/5.0 (compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot)"
35.243.113.133 - - [29/Aug/2026:19:36:07 +0200] "GET /api/env HTTP/1.1" 403 5686 "https://dein-fotostart.de/api/env" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.1766.31 Safari/537.36; compatible; TelegramBot/1.0"
35.243.113.133 - - [29/Aug/2026:19:36:22 +0200] "GET /api/graphql HTTP/1.1" 403 5686 "https://dein-fotostart.de/api/graphql" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Twitterbot/1.0)"
35.243.113.133 - - [29/Aug/2026:19:36:29 +0200] "GET /.htpasswd HTTP/1.1
...
show less
|
Web App Attack
|
|
🇲🇽
158.23.147.79
|
|
158.23.147.79 - - [29/Aug/2026:19:27:31 +0200] "GET /wp-includes/blocks/post-excerpt/alfa-rex.PHP HT ...
show more
158.23.147.79 - - [29/Aug/2026:19:27:31 +0200] "GET /wp-includes/blocks/post-excerpt/alfa-rex.PHP HTTP/1.1" 403 146 "-" "-"
158.23.147.79 - - [29/Aug/2026:19:27:31 +0200] "GET /wp-includes/blocks/post-excerpt/index.php HTTP/1.1" 403 146 "-" "-"
158.23.147.79 - - [29/Aug/2026:19:27:32 +0200] "GET /wp-content/uploads/index.php HTTP/1.1" 403 146 "-" "-"
158.23.147.79 - - [29/Aug/2026:19:27:37 +0200] "GET /wp-content/uploads/makeasmtp.php?p= HTTP/1.1" 403 146 "-" "-"
158.23.147.79 - - [29/Aug/2026:19:27:37 +0200] "GET /wp-includes/rest-api/about.php HTTP/1.1" 403 146 "-" "-"
...
show less
|
Web App Attack
|
|
🇨🇭
179.43.145.37
|
|
179.43.145.37 - - [29/Aug/2026:19:11:20 +0200] "GET /?author=1 HTTP/1.1" 403 97 "-" "Mozilla/5.0 (Wi ...
show more
179.43.145.37 - - [29/Aug/2026:19:11:20 +0200] "GET /?author=1 HTTP/1.1" 403 97 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0"
179.43.145.37 - - [29/Aug/2026:19:11:20 +0200] "GET /?author=2 HTTP/1.1" 403 140 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
179.43.145.37 - - [29/Aug/2026:19:11:20 +0200] "GET /?author=3 HTTP/1.1" 403 140 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
179.43.145.37 - - [29/Aug/2026:19:11:20 +0200] "GET /?author=4 HTTP/1.1" 403 140 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
179.43.145.37 - - [29/Aug/2026:19:11:20 +0200] "GET /?author=5 HTTP/1.1" 403 140 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
...
show less
|
Web App Attack
|
|
🇫🇷
34.155.186.82
|
|
34.155.186.82 - - [29/Aug/2026:18:17:39 +0200] "GET /.git/config HTTP/1.1" 403 6263 "-" "Mozilla/5.0 ...
show more
34.155.186.82 - - [29/Aug/2026:18:17:39 +0200] "GET /.git/config HTTP/1.1" 403 6263 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.155.186.82 - - [29/Aug/2026:18:17:39 +0200] "GET /.env HTTP/1.1" 403 6263 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.155.186.82 - - [29/Aug/2026:18:17:39 +0200] "GET /.env.local HTTP/1.1" 403 6263 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.155.186.82 - - [29/Aug/2026:18:17:39 +0200] "GET /.env.production HTTP/1.1" 403 6263 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.155.186.82 - - [29/Aug/2026:18:17:39 +0200] "GET /.env.staging HTTP/1.1" 403 6263 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/5
...
show less
|
Web App Attack
|