|
🇧🇪
35.240.100.200
|
|
35.240.100.200 - - [09/Oct/2026:02:03:54 +0200] "GET /.amplifyrc HTTP/1.1" 403 6260 "-" "Mozilla/5.0 ...
show more
35.240.100.200 - - [09/Oct/2026:02:03:54 +0200] "GET /.amplifyrc HTTP/1.1" 403 6260 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
35.240.100.200 - - [09/Oct/2026:02:03:54 +0200] "GET /.aws/config HTTP/1.1" 403 6260 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
35.240.100.200 - - [09/Oct/2026:02:03:54 +0200] "GET /.aws/credentials.bak HTTP/1.1" 403 6260 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
35.240.100.200 - - [09/Oct/2026:02:03:54 +0200] "GET /.aws/.env HTTP/1.1" 403 6260 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
35.240.100.200 - - [09/Oct/2026:02:03:54 +0200] "GET /.aws/credentials HTTP/1.1" 403 6260 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
|
Web App Attack
|
|
🇨🇦
34.19.223.188
|
|
34.19.223.188 - - [09/Oct/2026:01:56:45 +0200] "GET /.htpasswd HTTP/2.0" 403 106 "https://winsvr-ber ...
show more
34.19.223.188 - - [09/Oct/2026:01:56:45 +0200] "GET /.htpasswd HTTP/2.0" 403 106 "https://winsvr-berlin.de/.htpasswd" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)"
34.19.223.188 - - [09/Oct/2026:01:56:47 +0200] "GET /@fs/proc/self/cwd/.env?raw?? HTTP/2.0" 403 106 "https://winsvr-berlin.de/@fs/proc/self/cwd/.env?raw??" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
34.19.223.188 - - [09/Oct/2026:01:56:52 +0200] "GET /api/v1/keys HTTP/2.0" 403 106 "https://winsvr-berlin.de/api/v1/keys" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
34.19.223.188 - - [09/Oct/2026:01:56:54 +0200] "GET /telescope/requests HTTP/2.0" 403 106 "https://winsvr-berlin.de/telescope/requests" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
34.19.223.188 - - [09/Oct/2026:01:56:54 +0200] "GET /trace.axd HTTP/2.0" 403 106 "https://winsvr-berlin.de/trace.axd" "Mozilla/5.0 (compatible; Bai
...
show less
|
Web App Attack
|
|
🇦🇺
20.213.164.192
|
|
20.213.164.192 - - [09/Oct/2026:01:49:13 +0200] "GET /unaut.php HTTP/1.1" 403 5610 "-" "-"
20.213.16 ...
show more
20.213.164.192 - - [09/Oct/2026:01:49:13 +0200] "GET /unaut.php HTTP/1.1" 403 5610 "-" "-"
20.213.164.192 - - [09/Oct/2026:01:49:14 +0200] "GET /bro.php HTTP/1.1" 403 5610 "-" "-"
20.213.164.192 - - [09/Oct/2026:01:49:14 +0200] "GET /go.php HTTP/1.1" 403 5610 "-" "-"
20.213.164.192 - - [09/Oct/2026:01:49:15 +0200] "GET /bisan.php HTTP/1.1" 403 5610 "-" "-"
20.213.164.192 - - [09/Oct/2026:01:49:16 +0200] "GET /wed.php HTTP/1.1" 403 5610 "-" "-"
...
show less
|
Web App Attack
|
|
🇰🇷
20.194.96.114
|
|
20.194.96.114 - - [09/Oct/2026:01:18:20 +0200] "GET /wp-includes/block-supports/ HTTP/1.1" 403 6287 ...
show more
20.194.96.114 - - [09/Oct/2026:01:18:20 +0200] "GET /wp-includes/block-supports/ HTTP/1.1" 403 6287 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
20.194.96.114 - - [09/Oct/2026:01:18:21 +0200] "GET /wp-admin/css/ HTTP/1.1" 403 6287 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
20.194.96.114 - - [09/Oct/2026:01:18:23 +0200] "GET /wp-includes/js/ HTTP/1.1" 403 6287 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
20.194.96.114 - - [09/Oct/2026:01:18:23 +0200] "GET /wp-admin/css/colors/ HTTP/1.1" 403 6287 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
20.194.96.114 - - [09/Oct/2026:01:18:28 +0200] "GET /wp-includes/html-api/ HTTP/1.1" 403 6287 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (
...
show less
|
Web App Attack
|
|
🇧🇬
62.60.134.210
|
|
Oct 9 00:36:31 web09 postfix/smtpd[831299]: warning: unknown[62.60.134.210]: SASL LOGIN authenticat ...
show more
Oct 9 00:36:31 web09 postfix/smtpd[831299]: warning: unknown[62.60.134.210]: SASL LOGIN authentication failed: authentication failure, sasl_username=it
Oct 9 00:38:22 web09 postfix/smtpd[831299]: warning: unknown[62.60.134.210]: SASL LOGIN authentication failed: authentication failure, sasl_username=rimma
Oct 9 00:40:08 web09 postfix/smtpd[831299]: warning: unknown[62.60.134.210]: SASL LOGIN authentication failed: authentication failure, sasl_username=ozren
Oct 9 00:41:48 web09 postfix/smtpd[831299]: warning: unknown[62.60.134.210]: SASL LOGIN authentication failed: authentication failure, sasl_username=tactics
Oct 9 00:43:30 web09 postfix/smtpd[831299]: warning: unknown[62.60.134.210]: SASL LOGIN authentication failed: authentication failure, sasl_username=packaging
...
show less
|
Brute-Force
|
|
🇧🇪
34.79.59.9
|
|
34.79.59.9 - - [09/Oct/2026:00:10:31 +0200] "GET /.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows ...
show more
34.79.59.9 - - [09/Oct/2026:00:10:31 +0200] "GET /.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.79.59.9 - - [09/Oct/2026:00:10:31 +0200] "GET /composer.json HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.79.59.9 - - [09/Oct/2026:00:10:31 +0200] "GET /config/.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.79.59.9 - - [09/Oct/2026:00:10:31 +0200] "GET /config/aws.yml HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.79.59.9 - - [09/Oct/2026:00:10:31 +0200] "GET /config/config.js HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
|
Web App Attack
|
|
🇰🇷
20.194.96.114
|
|
20.194.96.114 - - [08/Oct/2026:23:58:15 +0200] "GET /wp-includes/block-supports/ HTTP/1.1" 403 6287 ...
show more
20.194.96.114 - - [08/Oct/2026:23:58:15 +0200] "GET /wp-includes/block-supports/ HTTP/1.1" 403 6287 "https://winsvr-berlin.de/wp-includes/block-supports/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
20.194.96.114 - - [08/Oct/2026:23:58:18 +0200] "GET /wp-admin/css/ HTTP/1.1" 403 6287 "https://winsvr-berlin.de/wp-admin/css/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
20.194.96.114 - - [08/Oct/2026:23:58:21 +0200] "GET /wp-includes/js/ HTTP/1.1" 403 6287 "https://winsvr-berlin.de/wp-includes/js/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
20.194.96.114 - - [08/Oct/2026:23:58:22 +0200] "GET /wp-admin/css/colors/ HTTP/1.1" 403 6287 "https://winsvr-berlin.de/wp-admin/css/colors/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safar
...
show less
|
Web App Attack
|
|
🇧🇪
34.62.189.80
|
|
34.62.189.80 - - [08/Oct/2026:23:36:35 +0200] "GET /.env.aws HTTP/1.1" 403 6256 "-" "Mozilla/5.0 (Wi ...
show more
34.62.189.80 - - [08/Oct/2026:23:36:35 +0200] "GET /.env.aws HTTP/1.1" 403 6256 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.62.189.80 - - [08/Oct/2026:23:36:35 +0200] "GET /.env-sample HTTP/1.1" 403 6256 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.62.189.80 - - [08/Oct/2026:23:36:35 +0200] "GET /.env.anthropic HTTP/1.1" 403 6256 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.62.189.80 - - [08/Oct/2026:23:36:35 +0200] "GET /.env HTTP/1.1" 403 6256 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.62.189.80 - - [08/Oct/2026:23:36:35 +0200] "GET /.docker/laravel/app/.env HTTP/1.1" 403 6256 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
|
Web App Attack
|
|
🇧🇷
34.39.246.207
|
|
34.39.246.207 - - [08/Oct/2026:23:19:41 +0200] "GET /.htpasswd HTTP/1.1" 403 9203 "https://dein-foto ...
show more
34.39.246.207 - - [08/Oct/2026:23:19:41 +0200] "GET /.htpasswd HTTP/1.1" 403 9203 "https://dein-fotostart.de/.htpasswd" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
34.39.246.207 - - [08/Oct/2026:23:19:48 +0200] "GET /api/v1/config HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/v1/config" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
34.39.246.207 - - [08/Oct/2026:23:19:48 +0200] "GET /api/v2/config HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/v2/config" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)"
34.39.246.207 - - [08/Oct/2026:23:19:48 +0200] "GET /api/env HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/env" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
34.39.246.207 - - [08/Oct/2026:23:19:48 +0200] "GET /api/v2/settings HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/v2/settings" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko
...
show less
|
Web App Attack
|
|
🇨🇦
34.47.33.202
|
|
34.47.33.202 - - [08/Oct/2026:22:30:52 +0200] "GET /.htpasswd HTTP/1.1" 403 9203 "https://dein-fotos ...
show more
34.47.33.202 - - [08/Oct/2026:22:30:52 +0200] "GET /.htpasswd HTTP/1.1" 403 9203 "https://dein-fotostart.de/.htpasswd" "Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)"
34.47.33.202 - - [08/Oct/2026:22:30:55 +0200] "GET /api/v2/config HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/v2/config" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; +https://openai.com/searchbot"
34.47.33.202 - - [08/Oct/2026:22:30:55 +0200] "GET /api/v1/config HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/v1/config" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)"
34.47.33.202 - - [08/Oct/2026:22:30:55 +0200] "GET /api/env HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/env" "Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)"
34.47.33.202 - - [08/Oct/2026:22:30:55 +0200] "GET /api/v2/settings HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/v2/
...
show less
|
Web App Attack
|
|
🇧🇷
34.95.148.15
|
|
34.95.148.15 - - [08/Oct/2026:22:23:44 +0200] "GET /.htpasswd HTTP/1.1" 403 9203 "https://dein-fotos ...
show more
34.95.148.15 - - [08/Oct/2026:22:23:44 +0200] "GET /.htpasswd HTTP/1.1" 403 9203 "https://dein-fotostart.de/.htpasswd" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
34.95.148.15 - - [08/Oct/2026:22:23:50 +0200] "GET /api/v2/config HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/v2/config" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"
34.95.148.15 - - [08/Oct/2026:22:23:50 +0200] "GET /api/env HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/env" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
34.95.148.15 - - [08/Oct/2026:22:23:50 +0200] "GET /api/v1/config HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/v1/config" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected])"
34.95.148.15 - - [08/Oct/2026:22:23:50 +0200] "GET /api/v2/settings HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/v2/settings" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +htt
...
show less
|
Web App Attack
|
|
🇩🇪
194.45.37.30
|
|
webmail.notification.x0w.de:443 13.70.107.184 - - [08/Oct/2026:21:59:43 +0200] "GET /wp-admin/css/co ...
show more
webmail.notification.x0w.de:443 13.70.107.184 - - [08/Oct/2026:21:59:43 +0200] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 403 5673 "-" "-"
webmail.notification.x0w.de:443 13.70.107.184 - - [08/Oct/2026:21:59:43 +0200] "GET /wp-includes/blocks/audio/ HTTP/1.1" 403 5673 "-" "-"
webmail.notification.x0w.de:443 13.70.107.184 - - [08/Oct/2026:21:59:48 +0200] "GET /wp-content/ HTTP/1.1" 403 5673 "-" "-"
webmail.notification.x0w.de:443 13.70.107.184 - - [08/Oct/2026:21:59:49 +0200] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 403 5673 "-" "-"
webmail.notification.x0w.de:443 13.70.107.184 - - [08/Oct/2026:21:59:50 +0200] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 403 5673 "-" "-"
...
show less
|
Web App Attack
|
|
🇧🇷
34.95.219.47
|
|
34.95.219.47 - - [08/Oct/2026:21:34:31 +0200] "GET /.htpasswd HTTP/2.0" 403 106 "https://winsvr-berl ...
show more
34.95.219.47 - - [08/Oct/2026:21:34:31 +0200] "GET /.htpasswd HTTP/2.0" 403 106 "https://winsvr-berlin.de/.htpasswd" "Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)"
34.95.219.47 - - [08/Oct/2026:21:34:31 +0200] "GET /.bashrc HTTP/2.0" 403 106 "https://winsvr-berlin.de/.bashrc" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
34.95.219.47 - - [08/Oct/2026:21:34:36 +0200] "GET /api/orders/..%2f..%2f.env HTTP/2.0" 403 106 "https://winsvr-berlin.de/api/orders/..%2f..%2f.env" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
34.95.219.47 - - [08/Oct/2026:21:34:38 +0200] "GET /runtime-config.js HTTP/2.0" 403 106 "https://winsvr-berlin.de/runtime-config.js" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
34.95.219.47 - - [08/Oct/2026:21:34:43 +0200] "GET /php-cgi/php-cgi.exe?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/2.0" 403 106
...
show less
|
Web App Attack
|
|
🇧🇷
34.95.150.221
|
|
34.95.150.221 - - [08/Oct/2026:20:33:59 +0200] "GET /api/proc/self/environ HTTP/1.1" 403 5701 "https ...
show more
34.95.150.221 - - [08/Oct/2026:20:33:59 +0200] "GET /api/proc/self/environ HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/w/default/jobs_u/get_log_file/../../../../proc/self/environ" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
34.95.150.221 - - [08/Oct/2026:20:33:59 +0200] "GET /api/proc/self/environ HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/w/admins/jobs_u/get_log_file/../../../../proc/self/environ" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
34.95.150.221 - - [08/Oct/2026:20:33:59 +0200] "GET /api/proc/self/environ HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/w/starter/jobs_u/get_log_file/../../../../proc/self/environ" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)"
34.95.150.221 - - [08/Oct/2026:20:33:59 +0200] "GET /api/fs/read?allowOutsideWorkspace=true&path=/proc/self/environ HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/fs/read?allowOutsideWorkspace=true&path=/proc/self/environ" "Mozilla/5.0 (compatible; Hunyua
...
show less
|
Web App Attack
|
|
🇧🇷
34.95.228.63
|
|
34.95.228.63 - - [08/Oct/2026:20:19:27 +0200] "GET /.htpasswd HTTP/1.1" 403 9203 "https://dein-fotos ...
show more
34.95.228.63 - - [08/Oct/2026:20:19:27 +0200] "GET /.htpasswd HTTP/1.1" 403 9203 "https://dein-fotostart.de/.htpasswd" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)"
34.95.228.63 - - [08/Oct/2026:20:19:33 +0200] "GET /api/v2/config HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/v2/config" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)"
34.95.228.63 - - [08/Oct/2026:20:19:33 +0200] "GET /api/v1/config HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/v1/config" "Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)"
34.95.228.63 - - [08/Oct/2026:20:19:33 +0200] "GET /api/env HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/env" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot"
34.95.228.63 - - [08/Oct/2026:20:19:33 +0200] "GET /api/v2/settings HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/v2/settings" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Cha
...
show less
|
Web App Attack
|
|
🇧🇷
34.95.208.134
|
|
34.95.208.134 - - [08/Oct/2026:19:29:36 +0200] "GET /.htpasswd HTTP/1.1" 403 9203 "https://dein-foto ...
show more
34.95.208.134 - - [08/Oct/2026:19:29:36 +0200] "GET /.htpasswd HTTP/1.1" 403 9203 "https://dein-fotostart.de/.htpasswd" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)"
34.95.208.134 - - [08/Oct/2026:19:29:42 +0200] "GET /api/v2/config HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/v2/config" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)"
34.95.208.134 - - [08/Oct/2026:19:29:42 +0200] "GET /api/v1/config HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/v1/config" "Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)"
34.95.208.134 - - [08/Oct/2026:19:29:42 +0200] "GET /api/env HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/env" "Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)"
34.95.208.134 - - [08/Oct/2026:19:29:43 +0200] "GET /api/v2/settings HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/v2/settings" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)"
...
show less
|
Web App Attack
|
|
🇩🇪
35.198.186.50
|
|
35.198.186.50 - - [08/Oct/2026:19:02:05 +0200] "GET /config/firebase-admin.json HTTP/1.1" 403 6275 " ...
show more
35.198.186.50 - - [08/Oct/2026:19:02:05 +0200] "GET /config/firebase-admin.json HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)"
35.198.186.50 - - [08/Oct/2026:19:02:05 +0200] "GET /config/gcp-credentials.json HTTP/1.1" 403 6275 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected])"
35.198.186.50 - - [08/Oct/2026:19:02:05 +0200] "GET /.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
35.198.186.50 - - [08/Oct/2026:19:02:05 +0200] "GET /src/.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)"
35.198.186.50 - - [08/Oct/2026:19:02:05 +0200] "GET /config/.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)"
...
show less
|
Web App Attack
|
|
🇰🇷
52.141.3.247
|
|
52.141.3.247 - - [08/Oct/2026:18:05:34 +0200] "GET /wp-includes/images/crystal/wp-login.php HTTP/1.1 ...
show more
52.141.3.247 - - [08/Oct/2026:18:05:34 +0200] "GET /wp-includes/images/crystal/wp-login.php HTTP/1.1" 403 146 "-" "-"
52.141.3.247 - - [08/Oct/2026:18:05:35 +0200] "GET /wp-includes/widgets/class-wp-widget-media-images.php HTTP/1.1" 403 146 "-" "-"
52.141.3.247 - - [08/Oct/2026:18:05:36 +0200] "GET /wp-includes/js/jcrop/atomlib.php HTTP/1.1" 403 146 "-" "-"
52.141.3.247 - - [08/Oct/2026:18:05:37 +0200] "GET /wp-includes/omldzgve.php HTTP/1.1" 403 146 "-" "-"
52.141.3.247 - - [08/Oct/2026:18:05:38 +0200] "GET /wp-includes/about.php HTTP/1.1" 403 146 "-" "-"
...
show less
|
Web App Attack
|
|
🇵🇱
45.138.12.40
|
|
45.138.12.40 - - [08/Oct/2026:17:36:14 +0200] "GET /site/ HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (Windo ...
show more
45.138.12.40 - - [08/Oct/2026:17:36:14 +0200] "GET /site/ HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
45.138.12.40 - - [08/Oct/2026:17:36:14 +0200] "GET /news/ HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
45.138.12.40 - - [08/Oct/2026:17:36:14 +0200] "GET /cms/ HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.2 Safari/605.1.15"
45.138.12.40 - - [08/Oct/2026:17:36:14 +0200] "GET /press/ HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36"
45.138.12.40 - - [08/Oct/2026:17:36:14 +0200] "GET /wp-json/ HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36"
...
show less
|
Web App Attack
|
|
🇧🇪
35.241.202.92
|
|
35.241.202.92 - - [08/Oct/2026:17:00:37 +0200] "GET /.env.aws HTTP/1.1" 403 6073 "-" "Mozilla/5.0 (W ...
show more
35.241.202.92 - - [08/Oct/2026:17:00:37 +0200] "GET /.env.aws HTTP/1.1" 403 6073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
35.241.202.92 - - [08/Oct/2026:17:00:37 +0200] "GET /.env.anthropic HTTP/1.1" 403 6073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
35.241.202.92 - - [08/Oct/2026:17:00:37 +0200] "GET /.env-sample HTTP/1.1" 403 6073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
35.241.202.92 - - [08/Oct/2026:17:00:37 +0200] "GET /.env-example HTTP/1.1" 403 6073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
35.241.202.92 - - [08/Oct/2026:17:00:37 +0200] "GET /.docker/laravel/app/.env HTTP/1.1" 403 6073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
|
Web App Attack
|
|
🇯🇵
40.74.77.37
|
|
40.74.77.37 - - [08/Oct/2026:15:36:12 +0200] "GET /wp-content/uploads/hp2.php HTTP/1.1" 403 146 "-" ...
show more
40.74.77.37 - - [08/Oct/2026:15:36:12 +0200] "GET /wp-content/uploads/hp2.php HTTP/1.1" 403 146 "-" "-"
40.74.77.37 - - [08/Oct/2026:15:36:12 +0200] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 403 146 "-" "-"
40.74.77.37 - - [08/Oct/2026:15:36:12 +0200] "GET /wp-includes/ID3/about.php HTTP/1.1" 403 146 "-" "-"
40.74.77.37 - - [08/Oct/2026:15:36:13 +0200] "GET /wp-content/uploads/BDKR28_w3zzj7rw.php HTTP/1.1" 403 146 "-" "-"
40.74.77.37 - - [08/Oct/2026:15:36:13 +0200] "GET /wp-includes/config.php HTTP/1.1" 403 146 "-" "-"
...
show less
|
Web App Attack
|
|
🇵🇱
45.138.12.47
|
|
45.138.12.47 - - [08/Oct/2026:14:50:35 +0200] "GET /news/ HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (X11; ...
show more
45.138.12.47 - - [08/Oct/2026:14:50:35 +0200] "GET /news/ HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
45.138.12.47 - - [08/Oct/2026:14:50:35 +0200] "GET /cms/ HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0"
45.138.12.47 - - [08/Oct/2026:14:50:35 +0200] "GET /press/ HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
45.138.12.47 - - [08/Oct/2026:14:50:35 +0200] "GET /wp-json/ HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
45.138.12.47 - - [08/Oct/2026:14:50:35 +0200] "GET /?rest_route=/ HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
show less
|
Web App Attack
|
|
🇺🇸
34.73.91.3
|
|
34.73.91.3 - - [08/Oct/2026:11:46:37 +0200] "GET /wp-config.php.bak HTTP/1.1" 403 548 "-" "Mozilla/5 ...
show more
34.73.91.3 - - [08/Oct/2026:11:46:37 +0200] "GET /wp-config.php.bak HTTP/1.1" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.73.91.3 - - [08/Oct/2026:11:46:37 +0200] "GET /wp-config.php.bak HTTP/1.1" 403 146 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0"
34.73.91.3 - - [08/Oct/2026:11:46:37 +0200] "GET /wp-config.php.old HTTP/1.1" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.73.91.3 - - [08/Oct/2026:11:46:37 +0200] "GET /wp-config.php.old HTTP/1.1" 403 146 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_7_2) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Safari/605.1.15"
34.73.91.3 - - [08/Oct/2026:11:46:37 +0200] "GET /wp-config.php.save HTTP/1.1" 403 146 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Mobile/15E148 Safar
...
show less
|
Web App Attack
|
|
🇺🇸
35.208.127.129
|
|
35.208.127.129 - - [08/Oct/2026:11:25:41 +0200] "GET /.git/config HTTP/1.1" 403 5969 "-" "Mozilla/5. ...
show more
35.208.127.129 - - [08/Oct/2026:11:25:41 +0200] "GET /.git/config HTTP/1.1" 403 5969 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.208.127.129 - - [08/Oct/2026:11:25:42 +0200] "GET /.env HTTP/1.1" 403 5969 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.208.127.129 - - [08/Oct/2026:11:25:42 +0200] "GET /.env.local HTTP/1.1" 403 5969 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.208.127.129 - - [08/Oct/2026:11:25:42 +0200] "GET /.env.production HTTP/1.1" 403 5969 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.208.127.129 - - [08/Oct/2026:11:25:42 +0200] "GET /.env.staging HTTP/1.1" 403 5969 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, li
...
show less
|
Web App Attack
|
|
🇩🇪
194.45.37.30
|
|
webmail.notification.x0w.de:443 20.204.16.113 - - [08/Oct/2026:10:38:53 +0200] "GET /config.php? HTT ...
show more
webmail.notification.x0w.de:443 20.204.16.113 - - [08/Oct/2026:10:38:53 +0200] "GET /config.php? HTTP/1.1" 403 5673 "-" "-"
webmail.notification.x0w.de:443 20.204.16.113 - - [08/Oct/2026:10:38:58 +0200] "GET /wp-admin/css/ HTTP/1.1" 403 5673 "-" "-"
webmail.notification.x0w.de:443 20.204.16.113 - - [08/Oct/2026:10:38:58 +0200] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 403 5673 "-" "-"
webmail.notification.x0w.de:443 20.204.16.113 - - [08/Oct/2026:10:38:58 +0200] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 403 5673 "-" "-"
webmail.notification.x0w.de:443 20.204.16.113 - - [08/Oct/2026:10:39:08 +0200] "GET /wp-admin/js/widgets/ HTTP/1.1" 403 5673 "-" "-"
...
show less
|
Web App Attack
|