|
🇩🇪
51.77.70.237
|
|
51.77.70.237 - - [26/Oct/2026:07:56:30 +0100] "GET /.git/HEAD HTTP/1.1" 403 5584 "-" "Mozilla/5.0 (W ...
show more
51.77.70.237 - - [26/Oct/2026:07:56:30 +0100] "GET /.git/HEAD HTTP/1.1" 403 5584 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
51.77.70.237 - - [26/Oct/2026:07:56:30 +0100] "GET /.git/index HTTP/1.1" 403 5584 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
51.77.70.237 - - [26/Oct/2026:07:56:30 +0100] "GET /.env HTTP/1.1" 403 5584 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
51.77.70.237 - - [26/Oct/2026:07:56:30 +0100] "GET /.env.bak HTTP/1.1" 403 5584 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
51.77.70.237 - - [26/Oct/2026:07:56:30 +0100] "GET /.env.staging HTTP/1.1" 403 5584 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
...
show less
|
Web App Attack
|
|
🇧🇪
35.241.204.214
|
|
35.241.204.214 - - [26/Oct/2026:05:00:41 +0100] "GET /.env HTTP/1.1" 403 6073 "-" "Mozilla/5.0 (iPho ...
show more
35.241.204.214 - - [26/Oct/2026:05:00:41 +0100] "GET /.env HTTP/1.1" 403 6073 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Mobile/15E148 Safari/604.1"
35.241.204.214 - - [26/Oct/2026:05:00:41 +0100] "GET /.env HTTP/1.1" 403 6073 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Mobile/15E148 Safari/604.1"
35.241.204.214 - - [26/Oct/2026:05:00:42 +0100] "GET /.env.local HTTP/1.1" 403 6073 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0"
35.241.204.214 - - [26/Oct/2026:05:00:42 +0100] "GET /.env.local HTTP/1.1" 403 6073 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_7_2) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Safari/605.1.15"
35.241.204.214 - - [26/Oct/2026:05:00:42 +0100] "GET /.env.production HTTP/1.1" 403 6073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0
...
show less
|
Web App Attack
|
|
10.12.31.101
|
|
Oct 25 10:05:37 web09 postfix/smtpd[1780192]: warning: unknown[10.12.31.101]: SASL CRAM-MD5 authenti ...
show more
Oct 25 10:05:37 web09 postfix/smtpd[1780192]: warning: unknown[10.12.31.101]: SASL CRAM-MD5 authentication failed: authentication failure, [email protected]
Oct 25 10:05:37 web09 postfix/smtpd[1780192]: warning: unknown[10.12.31.101]: SASL CRAM-MD5 authentication failed: authentication failure, [email protected]
Oct 25 10:05:50 web09 postfix/smtpd[1780192]: warning: unknown[10.12.31.101]: SASL CRAM-MD5 authentication failed: authentication failure, [email protected]
Oct 25 10:05:50 web09 postfix/smtpd[1780192]: warning: unknown[10.12.31.101]: SASL CRAM-MD5 authentication failed: authentication failure, [email protected]
Oct 25 10:06:09 web09 postfix/smtpd[1780192]: warning: unknown[10.12.31.101]: SASL CRAM-MD5 authentication failed: authentication failure, [email protected]
...
show less
|
Brute-Force
|
|
10.12.31.102
|
|
Oct 25 10:05:37 web09 postfix/smtpd[1780192]: warning: unknown[10.12.31.102]: SASL CRAM-MD5 authenti ...
show more
Oct 25 10:05:37 web09 postfix/smtpd[1780192]: warning: unknown[10.12.31.102]: SASL CRAM-MD5 authentication failed: authentication failure, [email protected]
Oct 25 10:05:37 web09 postfix/smtpd[1780192]: warning: unknown[10.12.31.102]: SASL CRAM-MD5 authentication failed: authentication failure, [email protected]
Oct 25 10:05:50 web09 postfix/smtpd[1780192]: warning: unknown[10.12.31.102]: SASL CRAM-MD5 authentication failed: authentication failure, [email protected]
Oct 25 10:05:50 web09 postfix/smtpd[1780192]: warning: unknown[10.12.31.102]: SASL CRAM-MD5 authentication failed: authentication failure, [email protected]
Oct 25 10:06:09 web09 postfix/smtpd[1780192]: warning: unknown[10.12.31.102]: SASL CRAM-MD5 authentication failed: authentication failure, [email protected]
...
show less
|
Brute-Force
|
|
🇵🇱
130.49.215.84
|
|
130.49.215.84 - - [25/Oct/2026:09:13:36 +0100] "GET /?author=0 HTTP/1.1" 403 177 "-" "Mozilla/5.0 (W ...
show more
130.49.215.84 - - [25/Oct/2026:09:13:36 +0100] "GET /?author=0 HTTP/1.1" 403 177 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.57 Safari/537.36"
130.49.215.84 - - [25/Oct/2026:09:13:36 +0100] "GET /?author=1 HTTP/1.1" 403 177 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.57 Safari/537.36"
130.49.215.84 - - [25/Oct/2026:09:13:36 +0100] "GET /?author=2 HTTP/1.1" 403 177 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.2151.97"
130.49.215.84 - - [25/Oct/2026:09:13:37 +0100] "GET /?author=3 HTTP/1.1" 403 117 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15"
130.49.215.84 - - [25/Oct/2026:09:13:37 +0100] "GET /?author=4 HTTP/1.1" 403 117 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15) Gecko/20100101 Firefox/121.0"
...
show less
|
Web App Attack
|
|
🇰🇷
20.194.17.163
|
|
20.194.17.163 - - [24/Oct/2026:18:55:48 +0200] "GET /wp-includes/ID3/about.php HTTP/1.1" 403 146 "-" ...
show more
20.194.17.163 - - [24/Oct/2026:18:55:48 +0200] "GET /wp-includes/ID3/about.php HTTP/1.1" 403 146 "-" "-"
20.194.17.163 - - [24/Oct/2026:18:55:49 +0200] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 403 6287 "-" "-"
20.194.17.163 - - [24/Oct/2026:18:55:52 +0200] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 403 146 "-" "-"
20.194.17.163 - - [24/Oct/2026:18:55:55 +0200] "GET /wp-content/uploads/ HTTP/1.1" 403 6287 "-" "-"
20.194.17.163 - - [24/Oct/2026:18:56:05 +0200] "GET /wp-includes/images/crystal/ HTTP/1.1" 403 6287 "-" "-"
...
show less
|
Web App Attack
|
|
🇵🇱
45.138.12.178
|
|
45.138.12.178 - - [24/Oct/2026:16:33:13 +0200] "GET /.backup.sql HTTP/1.1" 403 6262 "-" "Mozilla/5.0 ...
show more
45.138.12.178 - - [24/Oct/2026:16:33:13 +0200] "GET /.backup.sql HTTP/1.1" 403 6262 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.138.12.178 - - [24/Oct/2026:16:33:13 +0200] "GET /.database.sql HTTP/1.1" 403 6262 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.138.12.178 - - [24/Oct/2026:16:33:13 +0200] "GET /.db_backup.sql HTTP/1.1" 403 6262 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.138.12.178 - - [24/Oct/2026:16:33:13 +0200] "GET /.dump.sql HTTP/1.1" 403 6262 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.138.12.178 - - [24/Oct/2026:16:33:14 +0200] "GET /.htaccess HTTP/1.1" 403 6262 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safa
...
show less
|
Web App Attack
|
|
🇧🇪
34.62.189.80
|
|
34.62.189.80 - - [24/Oct/2026:12:41:59 +0200] "GET /.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Window ...
show more
34.62.189.80 - - [24/Oct/2026:12:41:59 +0200] "GET /.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.62.189.80 - - [24/Oct/2026:12:41:59 +0200] "GET /composer.json HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.62.189.80 - - [24/Oct/2026:12:41:59 +0200] "GET /config/.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.62.189.80 - - [24/Oct/2026:12:41:59 +0200] "GET /config/config.js HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.62.189.80 - - [24/Oct/2026:12:41:59 +0200] "GET /config/aws.yml HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
|
Web App Attack
|
|
🇩🇪
194.45.37.30
|
|
webmail.notification.x0w.de:443 34.62.116.145 - - [24/Oct/2026:10:28:25 +0200] "GET /.amplifyrc HTTP ...
show more
webmail.notification.x0w.de:443 34.62.116.145 - - [24/Oct/2026:10:28:25 +0200] "GET /.amplifyrc HTTP/1.1" 403 5673 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
webmail.notification.x0w.de:443 34.62.116.145 - - [24/Oct/2026:10:28:25 +0200] "GET /.env-sample HTTP/1.1" 403 5673 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
webmail.notification.x0w.de:443 34.62.116.145 - - [24/Oct/2026:10:28:25 +0200] "GET /.aws/config HTTP/1.1" 403 5673 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
webmail.notification.x0w.de:443 34.62.116.145 - - [24/Oct/2026:10:28:25 +0200] "GET /.env-example HTTP/1.1" 403 5673 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
webmail.notification.x0w.de:443 34.62.116.145 - - [24/Oct/2026:10:28:25 +0200] "GET /.env HTTP/1.1" 403 5673 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
|
Web App Attack
|
|
10.12.31.101
|
|
Oct 24 10:05:49 web09 postfix/smtpd[1296938]: warning: unknown[10.12.31.101]: SASL CRAM-MD5 authenti ...
show more
Oct 24 10:05:49 web09 postfix/smtpd[1296938]: warning: unknown[10.12.31.101]: SASL CRAM-MD5 authentication failed: authentication failure, [email protected]
Oct 24 10:05:49 web09 postfix/smtpd[1296938]: warning: unknown[10.12.31.101]: SASL CRAM-MD5 authentication failed: authentication failure, [email protected]
Oct 24 10:05:57 web09 postfix/smtpd[1296938]: warning: unknown[10.12.31.101]: SASL CRAM-MD5 authentication failed: authentication failure, [email protected]
Oct 24 10:05:57 web09 postfix/smtpd[1296938]: warning: unknown[10.12.31.101]: SASL CRAM-MD5 authentication failed: authentication failure, [email protected]
Oct 24 10:05:58 web09 postfix/smtpd[1296938]: warning: unknown[10.12.31.101]: SASL CRAM-MD5 authentication failed: authentication failure, [email protected]
...
show less
|
Brute-Force
|
|
10.12.31.102
|
|
Oct 24 10:05:49 web09 postfix/smtpd[1296938]: warning: unknown[10.12.31.102]: SASL CRAM-MD5 authenti ...
show more
Oct 24 10:05:49 web09 postfix/smtpd[1296938]: warning: unknown[10.12.31.102]: SASL CRAM-MD5 authentication failed: authentication failure, [email protected]
Oct 24 10:05:49 web09 postfix/smtpd[1296938]: warning: unknown[10.12.31.102]: SASL CRAM-MD5 authentication failed: authentication failure, [email protected]
Oct 24 10:05:57 web09 postfix/smtpd[1296938]: warning: unknown[10.12.31.102]: SASL CRAM-MD5 authentication failed: authentication failure, [email protected]
Oct 24 10:05:57 web09 postfix/smtpd[1296938]: warning: unknown[10.12.31.102]: SASL CRAM-MD5 authentication failed: authentication failure, [email protected]
Oct 24 10:05:58 web09 postfix/smtpd[1296938]: warning: unknown[10.12.31.102]: SASL CRAM-MD5 authentication failed: authentication failure, [email protected]
...
show less
|
Brute-Force
|
|
🇵🇱
45.138.12.25
|
|
45.138.12.25 - - [24/Oct/2026:09:42:18 +0200] "GET /api/v1/config.json HTTP/1.1" 403 5680 "https://w ...
show more
45.138.12.25 - - [24/Oct/2026:09:42:18 +0200] "GET /api/v1/config.json HTTP/1.1" 403 5680 "https://www.your-photostart.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36"
45.138.12.25 - - [24/Oct/2026:09:42:18 +0200] "GET /api/v4/ci/variables HTTP/1.1" 403 5680 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36"
45.138.12.25 - - [24/Oct/2026:09:42:25 +0200] "GET /api/.env HTTP/1.1" 403 5680 "https://www.your-photostart.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36"
45.138.12.25 - - [24/Oct/2026:09:42:35 +0200] "GET /api/v1/.env HTTP/1.1" 403 5680 "https://www.your-photostart.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36"
45.138.12.25 - - [24/Oct/2026:09:42:35 +0200] "GET /api/.env.production HTTP/1.1" 403 5680
...
show less
|
Web App Attack
|
|
🇵🇱
45.138.12.103
|
|
45.138.12.103 - - [24/Oct/2026:09:17:00 +0200] "GET /api/v1/version HTTP/1.1" 403 5671 "-" "Mozilla/ ...
show more
45.138.12.103 - - [24/Oct/2026:09:17:00 +0200] "GET /api/v1/version HTTP/1.1" 403 5671 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36"
45.138.12.103 - - [24/Oct/2026:09:17:01 +0200] "GET /api/v1/health HTTP/1.1" 403 5671 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36"
45.138.12.103 - - [24/Oct/2026:09:17:08 +0200] "GET /api/v1/.env HTTP/1.1" 403 5671 "https://www.tu-fotostart.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36"
45.138.12.103 - - [24/Oct/2026:09:17:09 +0200] "GET /api/.env.production HTTP/1.1" 403 5671 "https://www.tu-fotostart.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36"
45.138.12.103 - - [24/Oct/2026:09:17:09 +0200] "GET /api/v2/.env HTTP/1.1" 403 5671 "https://www.tu-fotostart.com/" "Mozill
...
show less
|
Web App Attack
|
|
🇻🇳
160.187.147.141
|
|
160.187.147.141 - - [24/Oct/2026:04:31:15 +0200] "GET //wp-config.php.bak HTTP/1.1" 403 177 "-" "Moz ...
show more
160.187.147.141 - - [24/Oct/2026:04:31:15 +0200] "GET //wp-config.php.bak HTTP/1.1" 403 177 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"
160.187.147.141 - - [24/Oct/2026:04:31:15 +0200] "GET //wp-config.php.old HTTP/1.1" 403 177 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"
160.187.147.141 - - [24/Oct/2026:04:31:15 +0200] "GET //wp-config.php.save HTTP/1.1" 403 177 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"
160.187.147.141 - - [24/Oct/2026:04:31:15 +0200] "GET //wp-config.php~ HTTP/1.1" 403 177 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"
160.187.147.141 - - [24/Oct/2026:04:31:16 +0200] "GET //wp-config.php.orig HTTP/1.1" 403 177 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KH
...
show less
|
Web App Attack
|
|
🇫🇷
217.60.184.3
|
|
217.60.184.3 - - [24/Oct/2026:02:53:35 +0200] "GET /?author=1 HTTP/1.1" 403 177 "-" "Mozilla/5.0 (Wi ...
show more
217.60.184.3 - - [24/Oct/2026:02:53:35 +0200] "GET /?author=1 HTTP/1.1" 403 177 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
217.60.184.3 - - [24/Oct/2026:02:53:35 +0200] "GET /?author=2 HTTP/1.1" 403 177 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
217.60.184.3 - - [24/Oct/2026:02:53:36 +0200] "GET /?author=3 HTTP/1.1" 403 177 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
217.60.184.3 - - [24/Oct/2026:02:53:36 +0200] "GET /?author=4 HTTP/1.1" 403 177 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
217.60.184.3 - - [24/Oct/2026:02:53:36 +0200] "GET /?author=5 HTTP/1.1" 403 177 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
...
show less
|
Web App Attack
|
|
🇶🇦
34.18.84.58
|
|
34.18.84.58 - - [24/Oct/2026:01:55:31 +0200] "GET /.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Macinto ...
show more
34.18.84.58 - - [24/Oct/2026:01:55:31 +0200] "GET /.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.18.84.58 - - [24/Oct/2026:01:55:35 +0200] "GET /src/.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.18.84.58 - - [24/Oct/2026:01:55:36 +0200] "GET /config/.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.18.84.58 - - [24/Oct/2026:01:55:36 +0200] "GET /database/.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.18.84.58 - - [24/Oct/2026:01:55:36 +0200] "GET /storage/.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/13
...
show less
|
Web App Attack
|
|
🇧🇪
34.52.229.253
|
|
34.52.229.253 - - [24/Oct/2026:00:09:43 +0200] "GET /.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windo ...
show more
34.52.229.253 - - [24/Oct/2026:00:09:43 +0200] "GET /.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.52.229.253 - - [24/Oct/2026:00:09:43 +0200] "GET /composer.json HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.52.229.253 - - [24/Oct/2026:00:09:43 +0200] "GET /config/.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.52.229.253 - - [24/Oct/2026:00:09:43 +0200] "GET /config/aws.yml HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.52.229.253 - - [24/Oct/2026:00:09:43 +0200] "GET /config/config.js HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
|
Web App Attack
|
|
🇧🇪
35.240.100.200
|
|
35.240.100.200 - - [23/Oct/2026:23:49:12 +0200] "GET /.aws/.env HTTP/1.1" 403 6073 "-" "Mozilla/5.0 ...
show more
35.240.100.200 - - [23/Oct/2026:23:49:12 +0200] "GET /.aws/.env HTTP/1.1" 403 6073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
35.240.100.200 - - [23/Oct/2026:23:49:12 +0200] "GET /.amplifyrc HTTP/1.1" 403 6073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
35.240.100.200 - - [23/Oct/2026:23:49:12 +0200] "GET /.boto HTTP/1.1" 403 6073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
35.240.100.200 - - [23/Oct/2026:23:49:12 +0200] "GET /.aws/credentials.bak HTTP/1.1" 403 6073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
35.240.100.200 - - [23/Oct/2026:23:49:12 +0200] "GET /.aws/config HTTP/1.1" 403 6073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
|
Web App Attack
|
|
🇳🇱
34.141.179.216
|
|
34.141.179.216 - - [23/Oct/2026:21:11:24 +0200] "GET /.git/config HTTP/1.1" 403 5651 "-" "Mozilla/5. ...
show more
34.141.179.216 - - [23/Oct/2026:21:11:24 +0200] "GET /.git/config HTTP/1.1" 403 5651 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.141.179.216 - - [23/Oct/2026:21:11:25 +0200] "GET /.env HTTP/1.1" 403 5651 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.141.179.216 - - [23/Oct/2026:21:11:25 +0200] "GET /.env.local HTTP/1.1" 403 5651 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.141.179.216 - - [23/Oct/2026:21:11:25 +0200] "GET /.env.production HTTP/1.1" 403 5651 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.141.179.216 - - [23/Oct/2026:21:11:25 +0200] "GET /.env.staging HTTP/1.1" 403 5651 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Saf
...
show less
|
Web App Attack
|
|
🇳🇱
103.47.145.27
|
|
103.47.145.27 - - [23/Oct/2026:17:59:31 +0200] "GET /?author=1 HTTP/1.1" 403 177 "-" "Mozilla/5.0 (W ...
show more
103.47.145.27 - - [23/Oct/2026:17:59:31 +0200] "GET /?author=1 HTTP/1.1" 403 177 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
103.47.145.27 - - [23/Oct/2026:17:59:32 +0200] "GET /?author=2 HTTP/1.1" 403 177 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
103.47.145.27 - - [23/Oct/2026:17:59:32 +0200] "GET /?author=3 HTTP/1.1" 403 177 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
103.47.145.27 - - [23/Oct/2026:17:59:33 +0200] "GET /?author=4 HTTP/1.1" 403 177 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
103.47.145.27 - - [23/Oct/2026:17:59:33 +0200] "GET /?author=5 HTTP/1.1" 403 177 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
...
show less
|
Web App Attack
|
|
🇯🇵
35.243.120.200
|
|
35.243.120.200 - - [23/Oct/2026:15:47:57 +0200] "GET /@fs/../.env?import&raw?? HTTP/1.1" 403 6275 "- ...
show more
35.243.120.200 - - [23/Oct/2026:15:47:57 +0200] "GET /@fs/../.env?import&raw?? HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
35.243.120.200 - - [23/Oct/2026:15:47:57 +0200] "GET /.env?import&raw HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
35.243.120.200 - - [23/Oct/2026:15:47:57 +0200] "GET /.env?raw HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)"
35.243.120.200 - - [23/Oct/2026:15:47:57 +0200] "GET /.env?import&url&inline HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"
35.243.120.200 - - [23/Oct/2026:15:47:58 +0200] "GET /.env?.svg?.wasm?init HTTP/1.1" 403 6275 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)"
...
show less
|
Web App Attack
|
|
🇵🇱
45.138.12.68
|
|
45.138.12.68 - - [23/Oct/2026:14:20:07 +0200] "GET /.env.ai HTTP/1.1" 403 5651 "-" "Mozilla/5.0 (Win ...
show more
45.138.12.68 - - [23/Oct/2026:14:20:07 +0200] "GET /.env.ai HTTP/1.1" 403 5651 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
45.138.12.68 - - [23/Oct/2026:14:20:07 +0200] "GET /.env.openai HTTP/1.1" 403 5651 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
45.138.12.68 - - [23/Oct/2026:14:20:07 +0200] "GET /.env.openai.local HTTP/1.1" 403 5651 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
45.138.12.68 - - [23/Oct/2026:14:20:07 +0200] "GET /.env.gpt HTTP/1.1" 403 5651 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
45.138.12.68 - - [23/Oct/2026:14:20:07 +0200] "GET /.env.llm HTTP/1.1" 403 5651 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
...
show less
|
Web App Attack
|
|
🇺🇸
35.237.115.57
|
|
35.237.115.57 - - [23/Oct/2026:14:05:30 +0200] "GET /.htpasswd HTTP/1.1" 403 6275 "-" "Mozilla/5.0 A ...
show more
35.237.115.57 - - [23/Oct/2026:14:05:30 +0200] "GET /.htpasswd HTTP/1.1" 403 6275 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
35.237.115.57 - - [23/Oct/2026:14:05:33 +0200] "GET /@fs/../.env?raw?? HTTP/1.1" 403 6275 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected])"
35.237.115.57 - - [23/Oct/2026:14:05:34 +0200] "GET /@fs/../.env?import&raw?? HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)"
35.237.115.57 - - [23/Oct/2026:14:05:34 +0200] "GET /.env?import&raw HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
35.237.115.57 - - [23/Oct/2026:14:05:34 +0200] "GET /.env?import&url&inline HTTP/1.1" 403 6275 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0;
...
show less
|
Web App Attack
|
|
🇩🇪
194.45.37.30
|
|
webmail.notification.x0w.de:443 169.197.141.186 - - [23/Oct/2026:12:06:26 +0200] "GET /_fragment?_pa ...
show more
webmail.notification.x0w.de:443 169.197.141.186 - - [23/Oct/2026:12:06:26 +0200] "GET /_fragment?_path=what%3D-1%26_controller%3Dphpinfo&_hash=oAGLWJUh7B6rcGSqxp21DhrW5TA%3D HTTP/1.1" 403 5673 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:115.0) Gecko/20100101 Firefox/115.0"
webmail.notification.x0w.de:443 169.197.141.186 - - [23/Oct/2026:12:06:26 +0200] "GET /_fragment?_path=what%3D-1%26_controller%3Dphpinfo&_hash=fswuEDuriTxinVs%2FX%2Fs3IZASt4XwV%2F78Fva9QYQtonM%3D HTTP/1.1" 403 5673 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:115.0) Gecko/20100101 Firefox/115.0"
webmail.notification.x0w.de:443 169.197.141.186 - - [23/Oct/2026:12:06:26 +0200] "GET /_fragment?_path=what%3D-1%26_controller%3Dphpinfo&_hash=Q7oEvU7%2BZ1v4pcQaYDsiTWXvA1OAGuvYNAvD057vv0A%3D HTTP/1.1" 403 5673 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:115.0) Gecko/20100101 Firefox/115.0"
webmail.notification.x0w.de:443 169.197.141.186 - - [23/Oct/2026:12:06:26 +0200] "GET /_fragment?_path=what%3D-1%26_cont
...
show less
|
Web App Attack
|
|
10.12.31.101
|
|
Oct 23 10:05:50 web09 postfix/smtpd[822729]: warning: unknown[10.12.31.101]: SASL CRAM-MD5 authentic ...
show more
Oct 23 10:05:50 web09 postfix/smtpd[822729]: warning: unknown[10.12.31.101]: SASL CRAM-MD5 authentication failed: authentication failure, [email protected]
Oct 23 10:05:50 web09 postfix/smtpd[822729]: warning: unknown[10.12.31.101]: SASL CRAM-MD5 authentication failed: authentication failure, [email protected]
Oct 23 10:05:53 web09 postfix/smtpd[822729]: warning: unknown[10.12.31.101]: SASL CRAM-MD5 authentication failed: authentication failure, [email protected]
Oct 23 10:05:53 web09 postfix/smtpd[822729]: warning: unknown[10.12.31.101]: SASL CRAM-MD5 authentication failed: authentication failure, [email protected]
Oct 23 10:05:55 web09 postfix/smtpd[822729]: warning: unknown[10.12.31.101]: SASL CRAM-MD5 authentication failed: authentication failure, [email protected]
...
show less
|
Brute-Force
|