AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User Manuel Braeuer joined AbuseIPDB in May 2025 and has reported 3,357 IP addresses.

Standing (weight) is good.

ACTIVE USER

IP	Date	Comment	Categories
🇮🇩 103.59.161.224	10 Oct 2026	103.59.161.224 - - [10/Oct/2026:22:26:59 +0200] "GET /wp-admin/css/ HTTP/1.1" 403 6287 "-" "Mozilla/ ... show more 103.59.161.224 - - [10/Oct/2026:22:26:59 +0200] "GET /wp-admin/css/ HTTP/1.1" 403 6287 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)" 103.59.161.224 - - [10/Oct/2026:22:26:59 +0200] "GET /wp-admin/images/ HTTP/1.1" 403 6287 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)" 103.59.161.224 - - [10/Oct/2026:22:27:00 +0200] "GET /wp-admin/includes/ HTTP/1.1" 403 6287 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)" 103.59.161.224 - - [10/Oct/2026:22:27:00 +0200] "GET /wp-admin/js/ HTTP/1.1" 403 6287 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)" 103.59.161.224 - - [10/Oct/2026:22:27:01 +0200] "GET /wp-admin/maint/ HTTP/1.1" 403 6287 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)" ... show less	Web App Attack
🇳🇱 34.91.225.126	10 Oct 2026	34.91.225.126 - - [10/Oct/2026:21:35:25 +0200] "GET /.htpasswd HTTP/1.1" 403 6275 "-" "Mozilla/5.0 A ... show more 34.91.225.126 - - [10/Oct/2026:21:35:25 +0200] "GET /.htpasswd HTTP/1.1" 403 6275 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected])" 34.91.225.126 - - [10/Oct/2026:21:35:25 +0200] "GET /@fs/../.env?raw?? HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)" 34.91.225.126 - - [10/Oct/2026:21:35:25 +0200] "GET /@fs/../.env?import&raw?? HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" 34.91.225.126 - - [10/Oct/2026:21:35:25 +0200] "GET /.env?import&raw HTTP/1.1" 403 6275 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)" 34.91.225.126 - - [10/Oct/2026:21:35:25 +0200] "GET /.env?raw HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)" ... show less	Web App Attack
🇸🇬 136.85.15.220	10 Oct 2026	136.85.15.220 - - [10/Oct/2026:21:25:07 +0200] "GET /pages/index.astro.mjs.map HTTP/2.0" 403 106 "ht ... show more 136.85.15.220 - - [10/Oct/2026:21:25:07 +0200] "GET /pages/index.astro.mjs.map HTTP/2.0" 403 106 "https://winsvr-berlin.de/pages/index.astro.mjs.map" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 136.85.15.220 - - [10/Oct/2026:21:25:08 +0200] "GET /infra/.env HTTP/2.0" 403 106 "https://winsvr-berlin.de/infra/.env" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 136.85.15.220 - - [10/Oct/2026:21:25:08 +0200] "GET /project/.env HTTP/2.0" 403 106 "https://winsvr-berlin.de/project/.env" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 136.85.15.220 - - [10/Oct/2026:21:25:10 +0200] "GET /id_rsa HTTP/2.0" 403 106 "https://winsvr-berlin.de/id_rsa" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 136.85.15.220 - - [10/Oct/2026:21:25:11 +0200] "GET /localhost.key HTTP/2.0" 403 106 "https://winsvr-berlin.de/localhost.key" "Mozilla/5.0 (compatible ... show less	Web App Attack
🇺🇸 136.70.190.4	10 Oct 2026	136.70.190.4 - - [10/Oct/2026:21:18:02 +0200] "GET /.htpasswd HTTP/1.1" 403 9203 "https://dein-fotos ... show more 136.70.190.4 - - [10/Oct/2026:21:18:02 +0200] "GET /.htpasswd HTTP/1.1" 403 9203 "https://dein-fotostart.de/.htpasswd" "CCBot/2.0 (https://commoncrawl.org/faq/)" 136.70.190.4 - - [10/Oct/2026:21:18:10 +0200] "GET /api/console/api_server?sense_version=%40%40SENSE_VERSION&apis=../../../../../../proc/self/environ HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/console/api_server?sense_version=%40%40SENSE_VERSION&apis=../../../../../../proc/self/environ" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)" 136.70.190.4 - - [10/Oct/2026:21:18:10 +0200] "GET /api/console/api_server?sense_version=%40%40SENSE_VERSION&apis=../../../../../../.env HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/console/api_server?sense_version=%40%40SENSE_VERSION&apis=../../../../../../.env" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)" 136.70.190.4 - - [10/Oct/2026:21:18:11 +0200] "GET /api/proc/self/environ HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/w/admins/jobs_u/get_log ... show less	Web App Attack
🇧🇪 34.62.116.145	10 Oct 2026	34.62.116.145 - - [10/Oct/2026:20:26:24 +0200] "GET /.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windo ... show more 34.62.116.145 - - [10/Oct/2026:20:26:24 +0200] "GET /.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 34.62.116.145 - - [10/Oct/2026:20:26:24 +0200] "GET /composer.json HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 34.62.116.145 - - [10/Oct/2026:20:26:24 +0200] "GET /config/.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 34.62.116.145 - - [10/Oct/2026:20:26:24 +0200] "GET /config/aws.yml HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 34.62.116.145 - - [10/Oct/2026:20:26:24 +0200] "GET /config/config.js HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" ... show less	Web App Attack
🇺🇸 136.70.242.68	10 Oct 2026	136.70.242.68 - - [10/Oct/2026:20:20:36 +0200] "GET /api/proc/self/environ HTTP/1.1" 403 5701 "https ... show more 136.70.242.68 - - [10/Oct/2026:20:20:36 +0200] "GET /api/proc/self/environ HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/w/admins/jobs_u/get_log_file/../../../../proc/self/environ" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected])" 136.70.242.68 - - [10/Oct/2026:20:20:36 +0200] "GET /api/fs/read?allowOutsideWorkspace=true&path=/proc/self/environ HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/fs/read?allowOutsideWorkspace=true&path=/proc/self/environ" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 136.70.242.68 - - [10/Oct/2026:20:20:37 +0200] "GET /api/system/fileView?file=/proc/self/environ HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/system/fileView?file=/proc/self/environ" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" 136.70.242.68 - - [10/Oct/2026:20:20:37 +0200] "GET /api ... show less	Web App Attack
🇸🇬 136.85.32.9	10 Oct 2026	136.85.32.9 - - [10/Oct/2026:20:19:22 +0200] "GET /.htpasswd HTTP/1.1" 403 9203 "https://dein-fotost ... show more 136.85.32.9 - - [10/Oct/2026:20:19:22 +0200] "GET /.htpasswd HTTP/1.1" 403 9203 "https://dein-fotostart.de/.htpasswd" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)" 136.85.32.9 - - [10/Oct/2026:20:19:26 +0200] "GET /api/console/api_server?sense_version=%40%40SENSE_VERSION&apis=../../../../../../.env HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/console/api_server?sense_version=%40%40SENSE_VERSION&apis=../../../../../../.env" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" 136.85.32.9 - - [10/Oct/2026:20:19:26 +0200] "GET /api/console/api_server?sense_version=%40%40SENSE_VERSION&apis=../../../../../../proc/self/environ HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/console/api_server?sense_version=%40%40SENSE_VERSION&apis=../../../../../../proc/self/environ" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)" 136.85.32.9 - - [10/Oct/2026:20:19:26 +0200] "GET /api/proc/self/environ HT ... show less	Web App Attack
🇸🇬 136.85.110.222	10 Oct 2026	136.85.110.222 - - [10/Oct/2026:20:03:20 +0200] "GET /.htpasswd HTTP/1.1" 403 9203 "https://dein-fot ... show more 136.85.110.222 - - [10/Oct/2026:20:03:20 +0200] "GET /.htpasswd HTTP/1.1" 403 9203 "https://dein-fotostart.de/.htpasswd" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)" 136.85.110.222 - - [10/Oct/2026:20:03:28 +0200] "GET /api/console/api_server?sense_version=%40%40SENSE_VERSION&apis=../../../../../../.env HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/console/api_server?sense_version=%40%40SENSE_VERSION&apis=../../../../../../.env" "CCBot/2.0 (https://commoncrawl.org/faq/)" 136.85.110.222 - - [10/Oct/2026:20:03:28 +0200] "GET /api/console/api_server?sense_version=%40%40SENSE_VERSION&apis=../../../../../../proc/self/environ HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/console/api_server?sense_version=%40%40SENSE_VERSION&apis=../../../../../../proc/self/environ" "Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" 136.85.110.222 - - [10/Oct/2026:20:03:29 +0200] "GET /api/proc/self/environ HTTP ... show less	Web App Attack
🇯🇵 34.104.254.36	10 Oct 2026	34.104.254.36 - - [10/Oct/2026:19:53:14 +0200] "GET /cache/original/%2e%2e/.env HTTP/1.1" 403 6275 " ... show more 34.104.254.36 - - [10/Oct/2026:19:53:14 +0200] "GET /cache/original/%2e%2e/.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected])" 34.104.254.36 - - [10/Oct/2026:19:53:14 +0200] "GET /cache/original/%2e%2e/%2e%2e/.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" 34.104.254.36 - - [10/Oct/2026:19:53:15 +0200] "GET /config/firebase-admin.json HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 34.104.254.36 - - [10/Oct/2026:19:53:15 +0200] "GET /config/gcp-credentials.json HTTP/1.1" 403 6275 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected])" 34.104.254.36 - - [10/Oct/2026:19:53:15 +0200] "GET /.env HTTP/1.1" 403 627 ... show less	Web App Attack
🇩🇪 34.107.30.247	10 Oct 2026	34.107.30.247 - - [10/Oct/2026:18:46:10 +0200] "GET /cache/original/%2e%2e/%2e%2e/.env HTTP/1.1" 403 ... show more 34.107.30.247 - - [10/Oct/2026:18:46:10 +0200] "GET /cache/original/%2e%2e/%2e%2e/.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected])" 34.107.30.247 - - [10/Oct/2026:18:46:10 +0200] "GET /cache/original/%2e%2e/.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected]) AppleWebKit/537.36" 34.107.30.247 - - [10/Oct/2026:18:46:10 +0200] "GET /config/gcp-credentials.json HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)" 34.107.30.247 - - [10/Oct/2026:18:46:10 +0200] "GET /config/firebase-admin.json HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected]) AppleWebKit/537.36" 34.107.30.247 - - [10/Oct/2026:18:46:11 +0200] "GET /.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)" ... show less	Web App Attack
🇧🇪 34.52.133.111	10 Oct 2026	34.52.133.111 - - [10/Oct/2026:17:27:44 +0200] "GET /.amplifyrc HTTP/1.1" 403 6260 "-" "Mozilla/5.0 ... show more 34.52.133.111 - - [10/Oct/2026:17:27:44 +0200] "GET /.amplifyrc HTTP/1.1" 403 6260 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 34.52.133.111 - - [10/Oct/2026:17:27:44 +0200] "GET /.aws/.env HTTP/1.1" 403 6260 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 34.52.133.111 - - [10/Oct/2026:17:27:44 +0200] "GET /.aws/config HTTP/1.1" 403 6260 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 34.52.133.111 - - [10/Oct/2026:17:27:44 +0200] "GET /.aws/credentials.bak HTTP/1.1" 403 6260 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 34.52.133.111 - - [10/Oct/2026:17:27:44 +0200] "GET /.aws/credentials HTTP/1.1" 403 6260 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" ... show less	Web App Attack
🇩🇪 194.45.37.30	10 Oct 2026	webmail.notification.x0w.de:443 34.140.132.132 - - [10/Oct/2026:16:50:50 +0200] "GET /.amplifyrc HTT ... show more webmail.notification.x0w.de:443 34.140.132.132 - - [10/Oct/2026:16:50:50 +0200] "GET /.amplifyrc HTTP/1.1" 403 5673 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" webmail.notification.x0w.de:443 34.140.132.132 - - [10/Oct/2026:16:50:50 +0200] "GET /.aws/config HTTP/1.1" 403 5673 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" webmail.notification.x0w.de:443 34.140.132.132 - - [10/Oct/2026:16:50:50 +0200] "GET /.aws/credentials HTTP/1.1" 403 5673 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" webmail.notification.x0w.de:443 34.140.132.132 - - [10/Oct/2026:16:50:50 +0200] "GET /.boto HTTP/1.1" 403 5673 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" webmail.notification.x0w.de:443 34.140.132.132 - - [10/Oct/2026:16:50:50 +0200] "GET /.env-example HTTP/1.1" 403 5673 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" ... show less	Web App Attack
🇧🇪 104.199.36.53	10 Oct 2026	104.199.36.53 - - [10/Oct/2026:14:18:04 +0200] "GET /.aws/config HTTP/1.1" 403 6256 "-" "Mozilla/5.0 ... show more 104.199.36.53 - - [10/Oct/2026:14:18:04 +0200] "GET /.aws/config HTTP/1.1" 403 6256 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 104.199.36.53 - - [10/Oct/2026:14:18:04 +0200] "GET /.amplifyrc HTTP/1.1" 403 6256 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 104.199.36.53 - - [10/Oct/2026:14:18:04 +0200] "GET /.env-sample HTTP/1.1" 403 6256 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 104.199.36.53 - - [10/Oct/2026:14:18:04 +0200] "GET /.claude/settings.json HTTP/1.1" 403 6256 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 104.199.36.53 - - [10/Oct/2026:14:18:04 +0200] "GET /.aws/credentials.bak HTTP/1.1" 403 6256 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" ... show less	Web App Attack
🇮🇳 20.219.160.77	10 Oct 2026	20.219.160.77 - - [10/Oct/2026:13:08:15 +0200] "GET /unaut.php HTTP/1.1" 403 5610 "-" "-" 20.219.160 ... show more 20.219.160.77 - - [10/Oct/2026:13:08:15 +0200] "GET /unaut.php HTTP/1.1" 403 5610 "-" "-" 20.219.160.77 - - [10/Oct/2026:13:08:15 +0200] "GET /bro.php HTTP/1.1" 403 5610 "-" "-" 20.219.160.77 - - [10/Oct/2026:13:08:16 +0200] "GET /go.php HTTP/1.1" 403 5610 "-" "-" 20.219.160.77 - - [10/Oct/2026:13:08:16 +0200] "GET /bisan.php HTTP/1.1" 403 5610 "-" "-" 20.219.160.77 - - [10/Oct/2026:13:08:16 +0200] "GET /wed.php HTTP/1.1" 403 5610 "-" "-" ... show less	Web App Attack
🇺🇸 34.138.50.68	10 Oct 2026	34.138.50.68 - - [10/Oct/2026:12:59:54 +0200] "GET /dw018fowlb5wbahlj6y4 HTTP/1.1" 403 5677 "-" "Moz ... show more 34.138.50.68 - - [10/Oct/2026:12:59:54 +0200] "GET /dw018fowlb5wbahlj6y4 HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)" 34.138.50.68 - - [10/Oct/2026:12:59:54 +0200] "GET /firebase-config.json HTTP/1.1" 403 5677 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected])" 34.138.50.68 - - [10/Oct/2026:12:59:54 +0200] "GET /.well-known/jwks.json HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 34.138.50.68 - - [10/Oct/2026:12:59:54 +0200] "GET /api/account HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)" 34.138.50.68 - - [10/Oct/2026:12:59:54 +0200] "GET /wp-json HTTP/1.1" 403 5677 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)" ... show less	Web App Attack
🇱🇹 62.60.134.210	10 Oct 2026	Oct 10 10:29:25 web09 postfix/smtpd[1547126]: warning: unknown[62.60.134.210]: SASL LOGIN authentica ... show more Oct 10 10:29:25 web09 postfix/smtpd[1547126]: warning: unknown[62.60.134.210]: SASL LOGIN authentication failed: authentication failure, sasl_username=zixvpm Oct 10 10:30:41 web09 postfix/smtpd[1547126]: warning: unknown[62.60.134.210]: SASL LOGIN authentication failed: authentication failure, sasl_username=malotedigital Oct 10 10:31:57 web09 postfix/smtpd[1558668]: warning: unknown[62.60.134.210]: SASL LOGIN authentication failed: authentication failure, sasl_username=annh Oct 10 10:33:13 web09 postfix/smtpd[1558668]: warning: unknown[62.60.134.210]: SASL LOGIN authentication failed: authentication failure, sasl_username=angelia Oct 10 10:34:30 web09 postfix/smtpd[1558668]: warning: unknown[62.60.134.210]: SASL LOGIN authentication failed: authentication failure, sasl_username=lwood ... show less	Brute-Force
🇱🇹 62.60.134.212	10 Oct 2026	Oct 10 10:28:46 web09 postfix/smtpd[1547126]: warning: unknown[62.60.134.212]: SASL LOGIN authentica ... show more Oct 10 10:28:46 web09 postfix/smtpd[1547126]: warning: unknown[62.60.134.212]: SASL LOGIN authentication failed: authentication failure, sasl_username=kurs1 Oct 10 10:29:48 web09 postfix/smtpd[1547126]: warning: unknown[62.60.134.212]: SASL LOGIN authentication failed: authentication failure, sasl_username=singapore Oct 10 10:30:51 web09 postfix/smtpd[1547126]: warning: unknown[62.60.134.212]: SASL LOGIN authentication failed: authentication failure, sasl_username=wlc Oct 10 10:31:53 web09 postfix/smtpd[1547126]: warning: unknown[62.60.134.212]: SASL LOGIN authentication failed: authentication failure, sasl_username=analytics Oct 10 10:32:55 web09 postfix/smtpd[1558668]: warning: unknown[62.60.134.212]: SASL LOGIN authentication failed: authentication failure, sasl_username=dozer ... show less	Brute-Force
🇧🇪 34.79.59.9	10 Oct 2026	34.79.59.9 - - [10/Oct/2026:09:54:02 +0200] "GET /.aws/.env HTTP/1.1" 403 6073 "-" "Mozilla/5.0 (Win ... show more 34.79.59.9 - - [10/Oct/2026:09:54:02 +0200] "GET /.aws/.env HTTP/1.1" 403 6073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 34.79.59.9 - - [10/Oct/2026:09:54:02 +0200] "GET /.env.aws HTTP/1.1" 403 6073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 34.79.59.9 - - [10/Oct/2026:09:54:02 +0200] "GET /.amplifyrc HTTP/1.1" 403 6073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 34.79.59.9 - - [10/Oct/2026:09:54:02 +0200] "GET /.env-sample HTTP/1.1" 403 6073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 34.79.59.9 - - [10/Oct/2026:09:54:02 +0200] "GET /.aws/config HTTP/1.1" 403 6073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" ... show less	Web App Attack
🇺🇸 35.238.129.244	10 Oct 2026	35.238.129.244 - - [10/Oct/2026:07:56:38 +0200] "GET /db/ HTTP/1.1" 403 5610 "-" "Mozilla/5.0 (Windo ... show more 35.238.129.244 - - [10/Oct/2026:07:56:38 +0200] "GET /db/ HTTP/1.1" 403 5610 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/131.0.0.0" 35.238.129.244 - - [10/Oct/2026:07:56:39 +0200] "GET /js/ HTTP/1.1" 403 5610 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/131.0.0.0" 35.238.129.244 - - [10/Oct/2026:07:56:39 +0200] "GET /mt/ HTTP/1.1" 403 5610 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/131.0.0.0" 35.238.129.244 - - [10/Oct/2026:07:56:39 +0200] "GET /up/ HTTP/1.1" 403 5610 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/131.0.0.0" 35.238.129.244 - - [10/Oct/2026:07:56:39 +0200] "GET /wp/ HTTP/1.1" 403 5610 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/131.0.0.0" ... show less	Web App Attack
🇮🇳 20.219.135.120	10 Oct 2026	20.219.135.120 - - [10/Oct/2026:04:23:18 +0200] "GET /radio.php HTTP/1.1" 403 5610 "-" "-" 20.219.13 ... show more 20.219.135.120 - - [10/Oct/2026:04:23:18 +0200] "GET /radio.php HTTP/1.1" 403 5610 "-" "-" 20.219.135.120 - - [10/Oct/2026:04:23:19 +0200] "GET /adminfuns.php HTTP/1.1" 403 5610 "-" "-" 20.219.135.120 - - [10/Oct/2026:04:23:19 +0200] "GET /wp-blink.php HTTP/1.1" 403 5610 "-" "-" 20.219.135.120 - - [10/Oct/2026:04:23:19 +0200] "GET /BDKR28WP.php HTTP/1.1" 403 5610 "-" "-" 20.219.135.120 - - [10/Oct/2026:04:23:19 +0200] "GET /crgio.php HTTP/1.1" 403 5610 "-" "-" ... show less	Web App Attack
🇩🇪 35.198.186.50	10 Oct 2026	35.198.186.50 - - [10/Oct/2026:03:44:07 +0200] "GET /cache/original/%2e%2e/.env HTTP/1.1" 403 6275 " ... show more 35.198.186.50 - - [10/Oct/2026:03:44:07 +0200] "GET /cache/original/%2e%2e/.env HTTP/1.1" 403 6275 "https://www.lumavault.io/cache/original/%2e%2e/.env" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)" 35.198.186.50 - - [10/Oct/2026:03:44:07 +0200] "GET /cache/original/%2e%2e/%2e%2e/.env HTTP/1.1" 403 6275 "https://www.lumavault.io/cache/original/%2e%2e/%2e%2e/.env" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" 35.198.186.50 - - [10/Oct/2026:03:44:11 +0200] "GET /config/gcp-credentials.json HTTP/1.1" 403 6275 "https://www.lumavault.io/config/gcp-credentials.json" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot" 35.198.186.50 - - [10/Oct/2026:03:44:11 +0200] "GET /config/firebase-admin.json HTTP/1.1" 403 6275 "https://www.lumavault.io/config/firebase-admin.json" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/ ... show less	Web App Attack
🇺🇸 34.138.50.68	10 Oct 2026	34.138.50.68 - - [10/Oct/2026:02:35:38 +0200] "GET /api/console/api_server?sense_version=%40%40SENSE ... show more 34.138.50.68 - - [10/Oct/2026:02:35:38 +0200] "GET /api/console/api_server?sense_version=%40%40SENSE_VERSION&apis=../../../../../../.env HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/console/api_server?sense_version=%40%40SENSE_VERSION&apis=../../../../../../.env" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)" 34.138.50.68 - - [10/Oct/2026:02:35:38 +0200] "GET /api/proc/self/environ HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/w/admins/jobs_u/get_log_file/../../../../proc/self/environ" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot" 34.138.50.68 - - [10/Oct/2026:02:35:38 +0200] "GET /api/v1/config HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/v1/config" "CCBot/2.0 (https://commoncrawl.org/faq/)" 34.138.50.68 - - [10/Oct/2026:02:35:39 +0200] "GET /api/settings HTTP/1.1" 403 5701 "https://dein-fotostart.de/api/settings" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0 ... show less	Web App Attack
🇺🇸 85.239.151.82	10 Oct 2026	85.239.151.82 - - [10/Oct/2026:02:09:10 +0200] "GET /js../.git/config HTTP/1.1" 403 5677 "-" "Mozill ... show more 85.239.151.82 - - [10/Oct/2026:02:09:10 +0200] "GET /js../.git/config HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" 85.239.151.82 - - [10/Oct/2026:02:09:10 +0200] "GET /images../.git/config HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" 85.239.151.82 - - [10/Oct/2026:02:09:10 +0200] "GET /assets../.git/config HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" 85.239.151.82 - - [10/Oct/2026:02:09:10 +0200] "GET /img../.git/config HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" 85.239.151.82 - - [10/Oct/2026:02:09:10 +0200] "GET /.git/index HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like G ... show less	Web App Attack
🇮🇳 20.219.185.206	09 Oct 2026	20.219.185.206 - - [10/Oct/2026:01:41:43 +0200] "GET /wp-includes/ID3/about.php HTTP/1.1" 403 146 "- ... show more 20.219.185.206 - - [10/Oct/2026:01:41:43 +0200] "GET /wp-includes/ID3/about.php HTTP/1.1" 403 146 "-" "-" 20.219.185.206 - - [10/Oct/2026:01:41:43 +0200] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 403 6282 "-" "-" 20.219.185.206 - - [10/Oct/2026:01:41:43 +0200] "GET /wp-includes/blocks/audio/ HTTP/1.1" 403 6282 "-" "-" 20.219.185.206 - - [10/Oct/2026:01:41:45 +0200] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 403 146 "-" "-" 20.219.185.206 - - [10/Oct/2026:01:41:46 +0200] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 403 6282 "-" "-" ... show less	Web App Attack
🇯🇵 34.146.194.7	09 Oct 2026	34.146.194.7 - - [10/Oct/2026:01:06:48 +0200] "GET /static../.env HTTP/2.0" 403 106 "https://winsvr- ... show more 34.146.194.7 - - [10/Oct/2026:01:06:48 +0200] "GET /static../.env HTTP/2.0" 403 106 "https://winsvr-berlin.de/static../.env" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 34.146.194.7 - - [10/Oct/2026:01:06:49 +0200] "GET /api/settings HTTP/2.0" 403 106 "https://winsvr-berlin.de/api/settings" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 34.146.194.7 - - [10/Oct/2026:01:06:52 +0200] "GET /dist../.env HTTP/2.0" 403 106 "https://winsvr-berlin.de/dist../.env" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 34.146.194.7 - - [10/Oct/2026:01:06:59 +0200] "GET /php-cgi/php-cgi.exe?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/2.0" 403 106 "https://winsvr-berlin.de/php-cgi/php-cgi.exe?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input" "CCBot/2.0 (https://commoncrawl.org/faq/)" 34.146.194.7 - - [10/Oct/2026:01:07:00 +0200] "GET /cgi-bin/php-c ... show less	Web App Attack