|
🇳🇱
34.141.179.216
|
|
34.141.179.216 - - [23/Oct/2026:21:11:24 +0200] "GET /.git/config HTTP/1.1" 403 5651 "-" "Mozilla/5. ...
show more
34.141.179.216 - - [23/Oct/2026:21:11:24 +0200] "GET /.git/config HTTP/1.1" 403 5651 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.141.179.216 - - [23/Oct/2026:21:11:25 +0200] "GET /.env HTTP/1.1" 403 5651 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.141.179.216 - - [23/Oct/2026:21:11:25 +0200] "GET /.env.local HTTP/1.1" 403 5651 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.141.179.216 - - [23/Oct/2026:21:11:25 +0200] "GET /.env.production HTTP/1.1" 403 5651 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.141.179.216 - - [23/Oct/2026:21:11:25 +0200] "GET /.env.staging HTTP/1.1" 403 5651 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Saf
...
show less
|
Web App Attack
|
|
🇳🇱
103.47.145.27
|
|
103.47.145.27 - - [23/Oct/2026:17:59:31 +0200] "GET /?author=1 HTTP/1.1" 403 177 "-" "Mozilla/5.0 (W ...
show more
103.47.145.27 - - [23/Oct/2026:17:59:31 +0200] "GET /?author=1 HTTP/1.1" 403 177 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
103.47.145.27 - - [23/Oct/2026:17:59:32 +0200] "GET /?author=2 HTTP/1.1" 403 177 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
103.47.145.27 - - [23/Oct/2026:17:59:32 +0200] "GET /?author=3 HTTP/1.1" 403 177 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
103.47.145.27 - - [23/Oct/2026:17:59:33 +0200] "GET /?author=4 HTTP/1.1" 403 177 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
103.47.145.27 - - [23/Oct/2026:17:59:33 +0200] "GET /?author=5 HTTP/1.1" 403 177 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
...
show less
|
Web App Attack
|
|
🇯🇵
35.243.120.200
|
|
35.243.120.200 - - [23/Oct/2026:15:47:57 +0200] "GET /@fs/../.env?import&raw?? HTTP/1.1" 403 6275 "- ...
show more
35.243.120.200 - - [23/Oct/2026:15:47:57 +0200] "GET /@fs/../.env?import&raw?? HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
35.243.120.200 - - [23/Oct/2026:15:47:57 +0200] "GET /.env?import&raw HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
35.243.120.200 - - [23/Oct/2026:15:47:57 +0200] "GET /.env?raw HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)"
35.243.120.200 - - [23/Oct/2026:15:47:57 +0200] "GET /.env?import&url&inline HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"
35.243.120.200 - - [23/Oct/2026:15:47:58 +0200] "GET /.env?.svg?.wasm?init HTTP/1.1" 403 6275 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)"
...
show less
|
Web App Attack
|
|
🇵🇱
45.138.12.68
|
|
45.138.12.68 - - [23/Oct/2026:14:20:07 +0200] "GET /.env.ai HTTP/1.1" 403 5651 "-" "Mozilla/5.0 (Win ...
show more
45.138.12.68 - - [23/Oct/2026:14:20:07 +0200] "GET /.env.ai HTTP/1.1" 403 5651 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
45.138.12.68 - - [23/Oct/2026:14:20:07 +0200] "GET /.env.openai HTTP/1.1" 403 5651 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
45.138.12.68 - - [23/Oct/2026:14:20:07 +0200] "GET /.env.openai.local HTTP/1.1" 403 5651 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
45.138.12.68 - - [23/Oct/2026:14:20:07 +0200] "GET /.env.gpt HTTP/1.1" 403 5651 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
45.138.12.68 - - [23/Oct/2026:14:20:07 +0200] "GET /.env.llm HTTP/1.1" 403 5651 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
...
show less
|
Web App Attack
|
|
🇺🇸
35.237.115.57
|
|
35.237.115.57 - - [23/Oct/2026:14:05:30 +0200] "GET /.htpasswd HTTP/1.1" 403 6275 "-" "Mozilla/5.0 A ...
show more
35.237.115.57 - - [23/Oct/2026:14:05:30 +0200] "GET /.htpasswd HTTP/1.1" 403 6275 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
35.237.115.57 - - [23/Oct/2026:14:05:33 +0200] "GET /@fs/../.env?raw?? HTTP/1.1" 403 6275 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected])"
35.237.115.57 - - [23/Oct/2026:14:05:34 +0200] "GET /@fs/../.env?import&raw?? HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)"
35.237.115.57 - - [23/Oct/2026:14:05:34 +0200] "GET /.env?import&raw HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
35.237.115.57 - - [23/Oct/2026:14:05:34 +0200] "GET /.env?import&url&inline HTTP/1.1" 403 6275 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0;
...
show less
|
Web App Attack
|
|
🇩🇪
194.45.37.30
|
|
webmail.notification.x0w.de:443 169.197.141.186 - - [23/Oct/2026:12:06:26 +0200] "GET /_fragment?_pa ...
show more
webmail.notification.x0w.de:443 169.197.141.186 - - [23/Oct/2026:12:06:26 +0200] "GET /_fragment?_path=what%3D-1%26_controller%3Dphpinfo&_hash=oAGLWJUh7B6rcGSqxp21DhrW5TA%3D HTTP/1.1" 403 5673 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:115.0) Gecko/20100101 Firefox/115.0"
webmail.notification.x0w.de:443 169.197.141.186 - - [23/Oct/2026:12:06:26 +0200] "GET /_fragment?_path=what%3D-1%26_controller%3Dphpinfo&_hash=fswuEDuriTxinVs%2FX%2Fs3IZASt4XwV%2F78Fva9QYQtonM%3D HTTP/1.1" 403 5673 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:115.0) Gecko/20100101 Firefox/115.0"
webmail.notification.x0w.de:443 169.197.141.186 - - [23/Oct/2026:12:06:26 +0200] "GET /_fragment?_path=what%3D-1%26_controller%3Dphpinfo&_hash=Q7oEvU7%2BZ1v4pcQaYDsiTWXvA1OAGuvYNAvD057vv0A%3D HTTP/1.1" 403 5673 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:115.0) Gecko/20100101 Firefox/115.0"
webmail.notification.x0w.de:443 169.197.141.186 - - [23/Oct/2026:12:06:26 +0200] "GET /_fragment?_path=what%3D-1%26_cont
...
show less
|
Web App Attack
|
|
10.12.31.101
|
|
Oct 23 10:05:50 web09 postfix/smtpd[822729]: warning: unknown[10.12.31.101]: SASL CRAM-MD5 authentic ...
show more
Oct 23 10:05:50 web09 postfix/smtpd[822729]: warning: unknown[10.12.31.101]: SASL CRAM-MD5 authentication failed: authentication failure, [email protected]
Oct 23 10:05:50 web09 postfix/smtpd[822729]: warning: unknown[10.12.31.101]: SASL CRAM-MD5 authentication failed: authentication failure, [email protected]
Oct 23 10:05:53 web09 postfix/smtpd[822729]: warning: unknown[10.12.31.101]: SASL CRAM-MD5 authentication failed: authentication failure, [email protected]
Oct 23 10:05:53 web09 postfix/smtpd[822729]: warning: unknown[10.12.31.101]: SASL CRAM-MD5 authentication failed: authentication failure, [email protected]
Oct 23 10:05:55 web09 postfix/smtpd[822729]: warning: unknown[10.12.31.101]: SASL CRAM-MD5 authentication failed: authentication failure, [email protected]
...
show less
|
Brute-Force
|
|
10.12.31.102
|
|
Oct 23 10:05:50 web09 postfix/smtpd[822729]: warning: unknown[10.12.31.102]: SASL CRAM-MD5 authentic ...
show more
Oct 23 10:05:50 web09 postfix/smtpd[822729]: warning: unknown[10.12.31.102]: SASL CRAM-MD5 authentication failed: authentication failure, [email protected]
Oct 23 10:05:50 web09 postfix/smtpd[822729]: warning: unknown[10.12.31.102]: SASL CRAM-MD5 authentication failed: authentication failure, [email protected]
Oct 23 10:05:53 web09 postfix/smtpd[822729]: warning: unknown[10.12.31.102]: SASL CRAM-MD5 authentication failed: authentication failure, [email protected]
Oct 23 10:05:53 web09 postfix/smtpd[822729]: warning: unknown[10.12.31.102]: SASL CRAM-MD5 authentication failed: authentication failure, [email protected]
Oct 23 10:05:55 web09 postfix/smtpd[822729]: warning: unknown[10.12.31.102]: SASL CRAM-MD5 authentication failed: authentication failure, [email protected]
...
show less
|
Brute-Force
|
|
🇵🇱
45.138.12.45
|
|
45.138.12.45 - - [23/Oct/2026:09:29:08 +0200] "GET / HTTP/1.1" 403 6497 "-" "Go-http-client/1.1"
45. ...
show more
45.138.12.45 - - [23/Oct/2026:09:29:08 +0200] "GET / HTTP/1.1" 403 6497 "-" "Go-http-client/1.1"
45.138.12.45 - - [23/Oct/2026:09:29:09 +0200] "GET / HTTP/1.1" 403 6497 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Mobile/15E148 Safari/604.1"
45.138.12.45 - - [23/Oct/2026:09:29:09 +0200] "GET /?feed=rss2 HTTP/1.1" 403 6497 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
45.138.12.45 - - [23/Oct/2026:09:29:09 +0200] "GET / HTTP/1.1" 403 6497 "http://devel-aim.x0w.de/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 Edg/126.0.0.0"
45.138.12.45 - - [23/Oct/2026:09:29:09 +0200] "GET /?feed=rss2 HTTP/1.1" 403 6497 "http://devel-aim.x0w.de/?feed=rss2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 Edg/126.0.0.0"
...
show less
|
Web App Attack
|
|
🇵🇱
45.138.12.68
|
|
45.138.12.68 - - [23/Oct/2026:07:30:25 +0200] "GET /.env.ai HTTP/1.1" 403 5651 "-" "Mozilla/5.0 (Win ...
show more
45.138.12.68 - - [23/Oct/2026:07:30:25 +0200] "GET /.env.ai HTTP/1.1" 403 5651 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
45.138.12.68 - - [23/Oct/2026:07:30:25 +0200] "GET /.env.openai HTTP/1.1" 403 5651 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
45.138.12.68 - - [23/Oct/2026:07:30:25 +0200] "GET /.env.openai.local HTTP/1.1" 403 5651 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
45.138.12.68 - - [23/Oct/2026:07:30:25 +0200] "GET /.env.gpt HTTP/1.1" 403 5651 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
45.138.12.68 - - [23/Oct/2026:07:30:25 +0200] "GET /.aws/config HTTP/1.1" 403 5651 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.
...
show less
|
Web App Attack
|
|
🇧🇪
207.175.189.3
|
|
207.175.189.3 - - [23/Oct/2026:04:49:13 +0200] "GET /.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windo ...
show more
207.175.189.3 - - [23/Oct/2026:04:49:13 +0200] "GET /.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
207.175.189.3 - - [23/Oct/2026:04:49:13 +0200] "GET /composer.json HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
207.175.189.3 - - [23/Oct/2026:04:49:13 +0200] "GET /vendor/composer/installed.json HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
207.175.189.3 - - [23/Oct/2026:04:49:13 +0200] "GET /config/.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
207.175.189.3 - - [23/Oct/2026:04:49:13 +0200] "GET /src/.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
|
Web App Attack
|
|
🇵🇱
45.138.12.68
|
|
45.138.12.68 - - [23/Oct/2026:04:00:00 +0200] "GET /.env.openai HTTP/1.1" 403 5651 "-" "Mozilla/5.0 ...
show more
45.138.12.68 - - [23/Oct/2026:04:00:00 +0200] "GET /.env.openai HTTP/1.1" 403 5651 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
45.138.12.68 - - [23/Oct/2026:04:00:00 +0200] "GET /.env.openai.local HTTP/1.1" 403 5651 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
45.138.12.68 - - [23/Oct/2026:04:00:00 +0200] "GET /.env.gpt HTTP/1.1" 403 5651 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
45.138.12.68 - - [23/Oct/2026:04:00:00 +0200] "GET /.env.llm HTTP/1.1" 403 5651 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
45.138.12.68 - - [23/Oct/2026:04:00:00 +0200] "GET /.aws/config HTTP/1.1" 403 5651 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537
...
show less
|
Web App Attack
|
|
🇩🇪
194.45.37.30
|
|
webmail.notification.x0w.de:443 20.211.97.120 - - [23/Oct/2026:03:10:26 +0200] "GET /wp-admin/css/co ...
show more
webmail.notification.x0w.de:443 20.211.97.120 - - [23/Oct/2026:03:10:26 +0200] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 403 5673 "-" "-"
webmail.notification.x0w.de:443 20.211.97.120 - - [23/Oct/2026:03:10:31 +0200] "GET //wp-content/plugins/erinyani/ HTTP/1.1" 403 5673 "-" "-"
webmail.notification.x0w.de:443 20.211.97.120 - - [23/Oct/2026:03:10:31 +0200] "GET /wp-content/uploads/ HTTP/1.1" 403 5673 "-" "-"
webmail.notification.x0w.de:443 20.211.97.120 - - [23/Oct/2026:03:10:39 +0200] "GET /wp-includes/images/crystal/ HTTP/1.1" 403 5673 "-" "-"
webmail.notification.x0w.de:443 20.211.97.120 - - [23/Oct/2026:03:10:39 +0200] "GET /wp-includes/js/tinymce/ HTTP/1.1" 403 5673 "-" "-"
...
show less
|
Web App Attack
|
|
🇵🇱
45.138.12.52
|
|
45.138.12.52 - - [23/Oct/2026:02:41:12 +0200] "GET /wordpress/wp-config.php HTTP/2.0" 403 166 "https ...
show more
45.138.12.52 - - [23/Oct/2026:02:41:12 +0200] "GET /wordpress/wp-config.php HTTP/2.0" 403 166 "https://winsvr-berlin.de/wordpress/wp-config.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
45.138.12.52 - - [23/Oct/2026:02:41:16 +0200] "GET /storage/logs/laravel.log HTTP/2.0" 403 166 "https://winsvr-berlin.de/storage/logs/laravel.log" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
45.138.12.52 - - [23/Oct/2026:02:41:16 +0200] "GET /blog/wp-config.php HTTP/2.0" 403 166 "https://winsvr-berlin.de/blog/wp-config.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
45.138.12.52 - - [23/Oct/2026:02:41:18 +0200] "GET /wp-config.php.old HTTP/2.0" 403 166 "https://winsvr-berlin.de/wp-config.php.old" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0
...
show less
|
Web App Attack
|
|
🇵🇱
45.138.12.52
|
|
45.138.12.52 - - [22/Oct/2026:23:19:14 +0200] "GET /.env HTTP/1.1" 403 6073 "-" "Mozilla/5.0 (Window ...
show more
45.138.12.52 - - [22/Oct/2026:23:19:14 +0200] "GET /.env HTTP/1.1" 403 6073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
45.138.12.52 - - [22/Oct/2026:23:19:14 +0200] "GET /.git/config HTTP/1.1" 403 6073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
45.138.12.52 - - [22/Oct/2026:23:19:14 +0200] "GET /.env.example HTTP/1.1" 403 6073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
45.138.12.52 - - [22/Oct/2026:23:19:14 +0200] "GET /_profiler/phpinfo HTTP/1.1" 403 6073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
45.138.12.52 - - [22/Oct/2026:23:19:14 +0200] "GET /api/.env HTTP/1.1" 403 6079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36
...
show less
|
Web App Attack
|
|
🇧🇪
34.76.67.19
|
|
34.76.67.19 - - [22/Oct/2026:21:04:12 +0200] "GET /.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows ...
show more
34.76.67.19 - - [22/Oct/2026:21:04:12 +0200] "GET /.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.76.67.19 - - [22/Oct/2026:21:04:12 +0200] "GET /composer.json HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.76.67.19 - - [22/Oct/2026:21:04:12 +0200] "GET /vendor/composer/installed.json HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.76.67.19 - - [22/Oct/2026:21:04:12 +0200] "GET /config/.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.76.67.19 - - [22/Oct/2026:21:04:13 +0200] "GET /src/.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
|
Web App Attack
|
|
🇧🇪
34.79.59.9
|
|
34.79.59.9 - - [22/Oct/2026:20:32:59 +0200] "GET /.git/logs/HEAD HTTP/1.1" 403 6073 "-" "Mozilla/5.0 ...
show more
34.79.59.9 - - [22/Oct/2026:20:32:59 +0200] "GET /.git/logs/HEAD HTTP/1.1" 403 6073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.79.59.9 - - [22/Oct/2026:20:32:59 +0200] "GET /.env HTTP/1.1" 403 6073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.79.59.9 - - [22/Oct/2026:20:32:59 +0200] "GET /.env.example HTTP/1.1" 403 6073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.79.59.9 - - [22/Oct/2026:20:32:59 +0200] "GET /.git/config HTTP/1.1" 403 6073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.79.59.9 - - [22/Oct/2026:20:32:59 +0200] "GET /config.js HTTP/1.1" 403 6073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
|
Web App Attack
|
|
🇵🇱
45.138.12.52
|
|
45.138.12.52 - - [22/Oct/2026:19:27:13 +0200] "GET /wordpress/wp-config.php HTTP/2.0" 403 166 "https ...
show more
45.138.12.52 - - [22/Oct/2026:19:27:13 +0200] "GET /wordpress/wp-config.php HTTP/2.0" 403 166 "https://winsvr-berlin.de/wordpress/wp-config.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
45.138.12.52 - - [22/Oct/2026:19:27:13 +0200] "GET /wp-config.php.old HTTP/2.0" 403 166 "https://winsvr-berlin.de/wp-config.php.old" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
45.138.12.52 - - [22/Oct/2026:19:27:14 +0200] "GET /wp-config.php.txt HTTP/2.0" 403 166 "https://winsvr-berlin.de/wp-config.php.txt" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
45.138.12.52 - - [22/Oct/2026:19:27:19 +0200] "GET /storage/logs/laravel.log HTTP/2.0" 403 166 "https://winsvr-berlin.de/storage/logs/laravel.log" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 S
...
show less
|
Web App Attack
|
|
🇵🇾
181.127.93.179
|
|
181.127.93.179 - - [22/Oct/2026:17:37:08 +0200] "GET /?author=1&feed=rss2 HTTP/2.0" 403 129 "-" "Moz ...
show more
181.127.93.179 - - [22/Oct/2026:17:37:08 +0200] "GET /?author=1&feed=rss2 HTTP/2.0" 403 129 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
181.127.93.179 - - [22/Oct/2026:17:37:08 +0200] "GET /?author=2&feed=rss2 HTTP/2.0" 403 129 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
181.127.93.179 - - [22/Oct/2026:17:37:09 +0200] "GET /?author=3&feed=rss2 HTTP/2.0" 403 129 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
181.127.93.179 - - [22/Oct/2026:17:37:10 +0200] "GET /?author=4&feed=rss2 HTTP/2.0" 403 129 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
181.127.93.179 - - [22/Oct/2026:17:37:11 +0200] "GET /?author=5&feed=rss2 HTTP/2.0" 403 129 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (K
...
show less
|
Web App Attack
|
|
🇧🇪
34.79.40.175
|
|
34.79.40.175 - - [22/Oct/2026:16:39:57 +0200] "GET /.htpasswd HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (c ...
show more
34.79.40.175 - - [22/Oct/2026:16:39:57 +0200] "GET /.htpasswd HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)"
34.79.40.175 - - [22/Oct/2026:16:39:58 +0200] "GET /@fs/../.env?raw?? HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
34.79.40.175 - - [22/Oct/2026:16:39:59 +0200] "GET /@fs/../.env?import&raw?? HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"
34.79.40.175 - - [22/Oct/2026:16:40:00 +0200] "GET /.env?import&url&inline HTTP/1.1" 403 6275 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected])"
34.79.40.175 - - [22/Oct/2026:16:40:00 +0200] "GET /.env?import&raw HTTP/1.1" 403 6275 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
...
show less
|
Web App Attack
|
|
🇺🇦
91.214.208.232
|
|
91.214.208.232 - - [22/Oct/2026:15:22:40 +0200] "GET /?author=1&feed=rss2 HTTP/2.0" 403 129 "-" "Moz ...
show more
91.214.208.232 - - [22/Oct/2026:15:22:40 +0200] "GET /?author=1&feed=rss2 HTTP/2.0" 403 129 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
91.214.208.232 - - [22/Oct/2026:15:22:40 +0200] "GET /?author=2&feed=rss2 HTTP/2.0" 403 129 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
91.214.208.232 - - [22/Oct/2026:15:22:40 +0200] "GET /?author=3&feed=rss2 HTTP/2.0" 403 129 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
91.214.208.232 - - [22/Oct/2026:15:22:40 +0200] "GET /?author=4&feed=rss2 HTTP/2.0" 403 129 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
91.214.208.232 - - [22/Oct/2026:15:22:40 +0200] "GET /?author=5&feed=rss2 HTTP/2.0" 403 129 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (K
...
show less
|
Web App Attack
|
|
10.12.31.101
|
|
Oct 22 10:05:42 web09 postfix/smtpd[369469]: warning: unknown[10.12.31.101]: SASL CRAM-MD5 authentic ...
show more
Oct 22 10:05:42 web09 postfix/smtpd[369469]: warning: unknown[10.12.31.101]: SASL CRAM-MD5 authentication failed: authentication failure, [email protected]
Oct 22 10:05:42 web09 postfix/smtpd[369469]: warning: unknown[10.12.31.101]: SASL CRAM-MD5 authentication failed: authentication failure, [email protected]
Oct 22 10:05:58 web09 postfix/smtpd[369469]: warning: unknown[10.12.31.101]: SASL CRAM-MD5 authentication failed: authentication failure, [email protected]
Oct 22 10:05:58 web09 postfix/smtpd[369469]: warning: unknown[10.12.31.101]: SASL CRAM-MD5 authentication failed: authentication failure, [email protected]
Oct 22 10:06:07 web09 postfix/smtpd[369469]: warning: unknown[10.12.31.101]: SASL CRAM-MD5 authentication failed: authentication failure, [email protected]
...
show less
|
Brute-Force
|
|
10.12.31.102
|
|
Oct 22 10:05:42 web09 postfix/smtpd[369469]: warning: unknown[10.12.31.102]: SASL CRAM-MD5 authentic ...
show more
Oct 22 10:05:42 web09 postfix/smtpd[369469]: warning: unknown[10.12.31.102]: SASL CRAM-MD5 authentication failed: authentication failure, [email protected]
Oct 22 10:05:42 web09 postfix/smtpd[369469]: warning: unknown[10.12.31.102]: SASL CRAM-MD5 authentication failed: authentication failure, [email protected]
Oct 22 10:05:58 web09 postfix/smtpd[369469]: warning: unknown[10.12.31.102]: SASL CRAM-MD5 authentication failed: authentication failure, [email protected]
Oct 22 10:05:58 web09 postfix/smtpd[369469]: warning: unknown[10.12.31.102]: SASL CRAM-MD5 authentication failed: authentication failure, [email protected]
Oct 22 10:06:06 web09 postfix/smtpd[369469]: warning: unknown[10.12.31.102]: SASL CRAM-MD5 authentication failed: authentication failure, [email protected]
...
show less
|
Brute-Force
|
|
🇦🇺
34.151.167.113
|
|
34.151.167.113 - - [22/Oct/2026:04:53:54 +0200] "GET /.git/config HTTP/1.1" 403 5651 "-" "Mozilla/5. ...
show more
34.151.167.113 - - [22/Oct/2026:04:53:54 +0200] "GET /.git/config HTTP/1.1" 403 5651 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.151.167.113 - - [22/Oct/2026:04:53:55 +0200] "GET /.env HTTP/1.1" 403 5651 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.151.167.113 - - [22/Oct/2026:04:53:55 +0200] "GET /.env.local HTTP/1.1" 403 5651 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.151.167.113 - - [22/Oct/2026:04:53:56 +0200] "GET /.env.production HTTP/1.1" 403 5651 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.151.167.113 - - [22/Oct/2026:04:53:56 +0200] "GET /.env.staging HTTP/1.1" 403 5651 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
|
Web App Attack
|
|
🇸🇬
85.203.23.25
|
|
85.203.23.25 - - [22/Oct/2026:01:36:30 +0200] "GET /wp-includes/SimplePie/write.php?p= HTTP/2.0" 403 ...
show more
85.203.23.25 - - [22/Oct/2026:01:36:30 +0200] "GET /wp-includes/SimplePie/write.php?p= HTTP/2.0" 403 106 "http://winsvr-berlin.de/wp-includes/SimplePie/write.php?p=" "Go-http-client/2.0"
85.203.23.25 - - [22/Oct/2026:01:36:32 +0200] "GET /wp-includes/widgets/chosen.php HTTP/2.0" 403 106 "http://winsvr-berlin.de/wp-includes/widgets/chosen.php" "Go-http-client/2.0"
85.203.23.25 - - [22/Oct/2026:01:36:34 +0200] "GET /wp-includes/sodium_compat/autoload_classmap.php HTTP/2.0" 403 106 "http://winsvr-berlin.de/wp-includes/sodium_compat/autoload_classmap.php" "Go-http-client/2.0"
85.203.23.25 - - [22/Oct/2026:01:36:37 +0200] "GET /wp-includes/blocks/autoload_classmap.php HTTP/2.0" 403 106 "http://winsvr-berlin.de/wp-includes/blocks/autoload_classmap.php" "Go-http-client/2.0"
85.203.23.25 - - [22/Oct/2026:01:36:38 +0200] "GET /wp-includes/IXR/wp-conflg.php HTTP/2.0" 403 106 "http://winsvr-berlin.de/wp-includes/IXR/wp-conflg.php" "Go-http-client/2.0"
...
show less
|
Web App Attack
|