🇺🇸
43.173.75.80
2 hours ago
43.173.75.80 - - [16/Sep/2026:13:50:14 +0200] "POST /dns-query HTTP/1.1" 404 162 "-" "-"
43.173.75.8 ...
show more
43.173.75.80 - - [16/Sep/2026:13:50:14 +0200] "POST /dns-query HTTP/1.1" 404 162 "-" "-"
43.173.75.80 - - [16/Sep/2026:13:50:15 +0200] "GET /dns-query?dns=bFoBAAABAAAAAAAAA2RvaAhvdmVyc2VhcwI3OAIyMwIzOAMxNjEIMjAyNjA4MzEEdGVzdAl3aGl0ZWNodW4DeHl6AAABAAE HTTP/1.1" 404 162 "-" "-"
43.173.75.80 - - [16/Sep/2026:13:50:16 +0200] "POST /resolve HTTP/1.1" 404 162 "-" "-"
43.173.75.80 - - [16/Sep/2026:13:50:16 +0200] "GET /resolve?dns=2mABAAABAAAAAAAAA2RvaAhvdmVyc2VhcwI3OAIyMwIzOAMxNjEIMjAyNjA4MzEEdGVzdAl3aGl0ZWNodW4DeHl6AAABAAE HTTP/1.1" 404 162 "-" "-"
43.173.75.80 - - [16/Sep/2026:13:50:17 +0200] "POST /doh HTTP/1.1" 404 162 "-" "-"
...
show less
Web App Attack
🇶🇦
34.18.195.6
8 hours ago
34.18.195.6 - - [16/Sep/2026:08:21:42 +0200] "GET /.git/config HTTP/1.1" 404 196 "-" "Mozilla/5.0 (X ...
show more
34.18.195.6 - - [16/Sep/2026:08:21:42 +0200] "GET /.git/config HTTP/1.1" 404 196 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.18.195.6 - - [16/Sep/2026:08:21:42 +0200] "GET /.env HTTP/1.1" 404 196 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.18.195.6 - - [16/Sep/2026:08:21:42 +0200] "GET /.env.local HTTP/1.1" 404 196 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.18.195.6 - - [16/Sep/2026:08:21:42 +0200] "GET /.env.production HTTP/1.1" 404 196 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.18.195.6 - - [16/Sep/2026:08:21:43 +0200] "GET /.env.staging HTTP/1.1" 404 196 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Web App Attack
🇦🇺
34.116.98.41
8 hours ago
34.116.98.41 - - [16/Sep/2026:08:14:27 +0200] "GET /.git/config HTTP/1.1" 404 196 "-" "Mozilla/5.0 ( ...
show more
34.116.98.41 - - [16/Sep/2026:08:14:27 +0200] "GET /.git/config HTTP/1.1" 404 196 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.116.98.41 - - [16/Sep/2026:08:14:28 +0200] "GET /.env HTTP/1.1" 404 196 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.116.98.41 - - [16/Sep/2026:08:14:28 +0200] "GET /.env.local HTTP/1.1" 404 196 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.116.98.41 - - [16/Sep/2026:08:14:29 +0200] "GET /.env.production HTTP/1.1" 404 196 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.116.98.41 - - [16/Sep/2026:08:14:29 +0200] "GET /.env.staging HTTP/1.1" 404 196 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Web App Attack
🇧🇪
207.175.233.93
17 hours ago
207.175.233.93 - - [15/Sep/2026:23:03:51 +0200] "GET /.env1 HTTP/1.1" 404 134 "-" "Mozilla/5.0 (Wind ...
show more
207.175.233.93 - - [15/Sep/2026:23:03:51 +0200] "GET /.env1 HTTP/1.1" 404 134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
207.175.233.93 - - [15/Sep/2026:23:03:51 +0200] "GET /.env. HTTP/1.1" 404 134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
207.175.233.93 - - [15/Sep/2026:23:03:51 +0200] "GET /_darcs/prefs/binaries HTTP/1.1" 404 134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
207.175.233.93 - - [15/Sep/2026:23:03:51 +0200] "GET /.env2 HTTP/1.1" 404 134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
207.175.233.93 - - [15/Sep/2026:23:03:51 +0200] "GET /CVS/Root HTTP/1.1" 404 134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
Web App Attack
🇬🇧
185.91.69.128
20 hours ago
185.91.69.128 - - [15/Sep/2026:19:45:54 +0200] "{\x22id\x22: 1, \x22method\x22: \x22mining.subscribe ...
show more
185.91.69.128 - - [15/Sep/2026:19:45:54 +0200] "{\x22id\x22: 1, \x22method\x22: \x22mining.subscribe\x22, \x22params\x22: [\x22cpuminer/2.5.1\x22]}" 400 166 "-" "-"
185.91.69.128 - - [15/Sep/2026:19:45:56 +0200] "{\x22id\x22: 1, \x22method\x22: \x22mining.subscribe\x22, \x22params\x22: [\x22MinerName/1.0.0\x22, \x22EthereumStratum/1.0.0\x22]}" 400 166 "-" "-"
185.91.69.128 - - [15/Sep/2026:19:45:58 +0200] "{\x22id\x22:1,\x22method\x22:\x22eth_submitLogin\x22,\x22worker\x22:\x22igwrcvap\x22,\x22params\x22:[\x220xfa0d33a91d9320e535b859c05736e336969fede9\x22,\x22x\x22],\x22jsonrpc\x22:\x222.0\x22}" 400 166 "-" "-"
185.91.69.128 - - [15/Sep/2026:19:46:00 +0200] "{\x22id\x22:1,\x22jsonrpc\x22:\x222.0\x22,\x22method\x22:\x22login\x22,\x22params\x22:{\x22login\x22:\x2249KVyATncsC5jpajCzkhR1CFYbnN5qfyxBra6GaTH2dTifsFq7fBFZZHwZcGA3ji3vKD3yrXarVZBjQNntoK9BahSG3LVeB\x22,\x22pass\x22:\x22x\x22,\x22agent\x22:\x22XMRig/6.15.3 (Windows NT 10.0; Win64; x64) libuv/1.42.0 msvc/2019\x22,\x22algo\x22:[\x2
...
show less
Web App Attack
🇺🇸
216.180.246.115
15 Sep 2026
216.180.246.115 - - [15/Sep/2026:15:37:27 +0200] "GET / HTTP/1.1" 400 264 "-" "Mozilla/5.0 (compatib ...
show more
216.180.246.115 - - [15/Sep/2026:15:37:27 +0200] "GET / HTTP/1.1" 400 264 "-" "Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)"
216.180.246.115 - - [15/Sep/2026:15:37:31 +0200] "GET /manage/account/login HTTP/1.1" 400 264 "-" "Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)"
216.180.246.115 - - [15/Sep/2026:15:37:35 +0200] "GET /admin/index.html HTTP/1.1" 400 264 "-" "Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)"
216.180.246.115 - - [15/Sep/2026:15:37:40 +0200] "GET /index.html HTTP/1.1" 400 264 "-" "Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)"
216.180.246.115 - - [15/Sep/2026:15:37:41 +0200] "GET /+CSCOE+/logon.html HTTP/1.1" 400 264 "-" "Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)"
...
show less
Web App Attack
🇺🇸
34.123.188.221
15 Sep 2026
34.123.188.221 - - [15/Sep/2026:13:24:55 +0200] "GET /account/login HTTP/1.1" 404 196 "-" "Mozilla/5 ...
show more
34.123.188.221 - - [15/Sep/2026:13:24:55 +0200] "GET /account/login HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
34.123.188.221 - - [15/Sep/2026:13:24:55 +0200] "GET /.git/config HTTP/1.1" 404 134 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
34.123.188.221 - - [15/Sep/2026:13:24:55 +0200] "GET /sign-in HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
34.123.188.221 - - [15/Sep/2026:13:24:55 +0200] "GET /.git-credentials HTTP/1.1" 404 134 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)"
34.123.188.221 - - [15/Sep/2026:13:24:55 +0200] "GET /z9x8c7v6b5-debug-trigger-78-23-38-161.access.telenet.be HTTP/1.1" 404 134 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
...
show less
Web App Attack
🇷🇺
130.49.213.169
15 Sep 2026
130.49.213.169 - - [15/Sep/2026:04:57:44 +0200] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.% ...
show more
130.49.213.169 - - [15/Sep/2026:04:57:44 +0200] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 166 "-" "-"
130.49.213.169 - - [15/Sep/2026:04:57:49 +0200] "POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1" 400 166 "-" "-"
...
show less
Web App Attack
🇸🇬
161.118.211.119
14 Sep 2026
161.118.211.119 - - [14/Sep/2026:10:40:43 +0200] "GET /config.json HTTP/1.1" 404 196 "-" "Mozilla/5. ...
show more
161.118.211.119 - - [14/Sep/2026:10:40:43 +0200] "GET /config.json HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
161.118.211.119 - - [14/Sep/2026:10:40:43 +0200] "GET /config.js HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
...
show less
Web App Attack
🇫🇷
157.173.100.49
13 Sep 2026
157.173.100.49 - - [14/Sep/2026:00:42:31 +0200] "GET /.env HTTP/1.1" 404 134 "-" "Mozilla/5.0 (Macin ...
show more
157.173.100.49 - - [14/Sep/2026:00:42:31 +0200] "GET /.env HTTP/1.1" 404 134 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Safari/605.1.15"
157.173.100.49 - - [14/Sep/2026:00:42:31 +0200] "GET /.env.local HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
157.173.100.49 - - [14/Sep/2026:00:42:31 +0200] "GET /.env.production HTTP/1.1" 404 134 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3 Safari/605.1.15"
157.173.100.49 - - [14/Sep/2026:00:42:31 +0200] "GET /.env.staging HTTP/1.1" 404 134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:135.0) Gecko/20100101 Firefox/135.0"
157.173.100.49 - - [14/Sep/2026:00:42:31 +0200] "GET /.env.development HTTP/1.1" 404 134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0"
...
show less
Web App Attack
🇺🇸
34.121.254.6
13 Sep 2026
34.121.254.6 - - [14/Sep/2026:00:17:19 +0200] "GET /rclone.conf HTTP/1.1" 404 134 "-" "Mozilla/5.0 A ...
show more
34.121.254.6 - - [14/Sep/2026:00:17:19 +0200] "GET /rclone.conf HTTP/1.1" 404 134 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )"
34.121.254.6 - - [14/Sep/2026:00:17:19 +0200] "GET /reset-password HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
34.121.254.6 - - [14/Sep/2026:00:17:19 +0200] "GET /backoffice HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
34.121.254.6 - - [14/Sep/2026:00:17:19 +0200] "GET /z9x8c7v6b5-debug-trigger-download.delabiemedia.be HTTP/1.1" 404 134 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
34.121.254.6 - - [14/Sep/2026:00:17:19 +0200] "GET /admin%2F.env HTTP/1.1" 404 134 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
...
show less
Web App Attack
🇻🇳
124.158.13.4
13 Sep 2026
124.158.13.4 - - [13/Sep/2026:20:41:17 +0200] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e ...
show more
124.158.13.4 - - [13/Sep/2026:20:41:17 +0200] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 166 "-" "-"
124.158.13.4 - - [13/Sep/2026:20:41:20 +0200] "POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1" 400 166 "-" "-"
...
show less
Web App Attack
🇺🇸
34.121.254.6
13 Sep 2026
34.121.254.6 - - [13/Sep/2026:10:45:29 +0200] "GET /.git/config HTTP/1.1" 404 134 "-" "Mozilla/5.0 ( ...
show more
34.121.254.6 - - [13/Sep/2026:10:45:29 +0200] "GET /.git/config HTTP/1.1" 404 134 "-" "Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)"
34.121.254.6 - - [13/Sep/2026:10:45:29 +0200] "GET /.git/HEAD HTTP/1.1" 404 134 "-" "Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)"
34.121.254.6 - - [13/Sep/2026:10:45:30 +0200] "GET /auth HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
34.121.254.6 - - [13/Sep/2026:10:45:30 +0200] "GET /secure HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
34.121.254.6 - - [13/Sep/2026:10:45:30 +0200] "GET /admin/login HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
...
show less
Web App Attack
🇺🇸
136.67.199.127
12 Sep 2026
136.67.199.127 - - [13/Sep/2026:01:40:55 +0200] "GET /__aws_leak_probe_9c3fa08d__ HTTP/1.1" 404 134 ...
show more
136.67.199.127 - - [13/Sep/2026:01:40:55 +0200] "GET /__aws_leak_probe_9c3fa08d__ HTTP/1.1" 404 134 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)"
136.67.199.127 - - [13/Sep/2026:01:40:55 +0200] "GET /static../.env HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.1974.33 Mobile Safari/537.36; compatible; Google-Extended/1.0; +http://www.google.com/bot.html"
136.67.199.127 - - [13/Sep/2026:01:40:56 +0200] "GET /media../.env HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_6_1) AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.2; +https://openai.com/gptbot) Chrome/151.0.3573.42 Safari/537.36"
136.67.199.127 - - [13/Sep/2026:01:40:56 +0200] "GET /@fs/root/.aws/credentials?raw?? HTTP/1.1" 404 134 "-" "Mozilla/5.0 (compatible; Claude-User/1.0; [email protected] )"
136.67.199.127 - - [13/Sep/2026:01:40:56 +0200] "GET /@fs/root/.
...
show less
Web App Attack
🇬🇧
35.203.211.15
12 Sep 2026
35.203.211.15 - - [12/Sep/2026:19:31:37 +0200] "\x00\x00\x001\xFFSMBr\x00\x00\x00\x00\x18Eh\x00\x00\ ...
show more
35.203.211.15 - - [12/Sep/2026:19:31:37 +0200] "\x00\x00\x001\xFFSMBr\x00\x00\x00\x00\x18Eh\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xB5}\x00\x00\x01\x00\x00\x0E\x00\x02NT LM 0.12\x00\x02\x00" 400 166 "-" "-"
35.203.211.15 - - [12/Sep/2026:19:31:37 +0200] "\x00\x00\x00f\xFESMB@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x001234567890123456$\x00\x01\x00\x01\x00\x00\x00\x00\x00\x00\x001234567890123456\x00\x00\x00\x00\x00\x00\x00\x00\x02\x02" 400 166 "-" "-"
35.203.211.15 - - [12/Sep/2026:19:31:37 +0200] "\x00\x00\x00f\xFESMB@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x001234567890123456$\x00\x01\x00\x01\x00\x00\x00\x00\x00\x00\x001234567890123456\x00\x00\x00\x00\x00\x00\x00\x00\x10\x02" 400 166 "-" "-"
35.203.211.15 - - [12/Se
...
show less
Web App Attack
🇺🇸
152.32.235.85
11 Sep 2026
152.32.235.85 - - [11/Sep/2026:17:40:05 +0200] "GET / HTTP/1.1" 400 166 "-" "NTRIP GNSSInternetRadio ...
show more
152.32.235.85 - - [11/Sep/2026:17:40:05 +0200] "GET / HTTP/1.1" 400 166 "-" "NTRIP GNSSInternetRadio"
152.32.235.85 - - [11/Sep/2026:17:40:06 +0200] "GET / HTTP/1.1" 400 264 "-" "rawgrab"
152.32.235.85 - - [11/Sep/2026:17:40:06 +0200] "GET /raw HTTP/1.1" 400 264 "-" "rawgrab"
152.32.235.85 - - [11/Sep/2026:17:40:06 +0200] "GET /ws HTTP/1.1" 400 264 "-" "rawgrab"
152.32.235.85 - - [11/Sep/2026:17:40:08 +0200] "GET /socket.io/?EIO=4&transport=websocket HTTP/1.1" 400 264 "-" "rawgrab"
...
show less
Web App Attack
🇸🇬
34.21.166.181
11 Sep 2026
34.21.166.181 - - [11/Sep/2026:06:07:51 +0200] "GET /@fs/.env?raw?? HTTP/1.1" 404 134 "-" "Mozilla/5 ...
show more
34.21.166.181 - - [11/Sep/2026:06:07:51 +0200] "GET /@fs/.env?raw?? HTTP/1.1" 404 134 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Claude-User/1.0; [email protected] "
34.21.166.181 - - [11/Sep/2026:06:07:51 +0200] "GET /@fs/root/.env?raw?? HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/537.36 (KHTML, like Gecko; compatible; GrokBot/1.0; +https://x.ai/grokbot) Chrome/147.0.7055.69 Safari/537.36 Edg/147.0.7055.69"
34.21.166.181 - - [11/Sep/2026:06:07:51 +0200] "GET /@fs/app/.env?raw?? HTTP/1.1" 404 134 "-" "Mozilla/5.0 (compatible; Twitterbot/1.0)"
34.21.166.181 - - [11/Sep/2026:06:07:51 +0200] "GET /@fs/src/.env?raw?? HTTP/1.1" 404 134 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)"
34.21.166.181 - - [11/Sep/2026:06:07:51 +0200] "GET /@fs/etc/passwd?raw?? HTTP/1.1" 404 134 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +h
...
show less
Web App Attack
🇭🇰
152.32.172.108
10 Sep 2026
152.32.172.108 - - [10/Sep/2026:04:04:46 +0200] "{\x22method\x22:\x22login\x22,\x22params\x22:{\x22l ...
show more
152.32.172.108 - - [10/Sep/2026:04:04:46 +0200] "{\x22method\x22:\x22login\x22,\x22params\x22:{\x22login\x22:\x2245JymPWP1DeQxxMZNJv9w2bTQ2WJDAmw18wUSryDQa3RPrympJPoUSVcFEDv3bhiMJGWaCD4a3KrFCorJHCMqXJUKApSKDV\x22,\x22pass\x22:\x22xxoo\x22,\x22agent\x22:\x22xmr-stak-cpu/1.3.0-1.5.0\x22},\x22id\x22:1}" 400 166 "-" "-"
152.32.172.108 - - [10/Sep/2026:04:04:47 +0200] "{\x22id\x22:1,\x22method\x22:\x22mining.subscribe\x22,\x22params\x22:[]}" 400 166 "-" "-"
152.32.172.108 - - [10/Sep/2026:04:04:48 +0200] "{\x22params\x22: [\x22miner1\x22, \x22password\x22], \x22id\x22: 2, \x22method\x22: \x22mining.authorize\x22}" 400 166 "-" "-"
152.32.172.108 - - [10/Sep/2026:04:04:49 +0200] "{\x22id\x22:1,\x22jsonrpc\x22:\x222.0\x22,\x22method\x22:\x22login\x22,\x22params\x22:{\x22login\x22:\x22blue1\x22,\x22pass\x22:\x22x\x22,\x22agent\x22:\x22Windows NT 6.1; Win64; x64\x22}}" 400 166 "-" "-"
152.32.172.108 - - [10/Sep/2026:04:04:51 +0200] "{\x22params\x22: [\x22miner1\x22, \x22bf\x22, \x2200000001\x22,
...
show less
Web App Attack
🇺🇸
37.19.207.89
09 Sep 2026
37.19.207.89 - - [09/Sep/2026:19:45:36 +0200] "GET /index.php/apps/app_api/proxy/flow/api/w/_/jobs_u ...
show more
37.19.207.89 - - [09/Sep/2026:19:45:36 +0200] "GET /index.php/apps/app_api/proxy/flow/api/w/_/jobs_u/get_log_file/..%25252F..%25252F..%25252F..%25252F..%25252F..%25252Fetc%25252Fpasswd HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2226.0 Safari/537.36"
37.19.207.89 - - [09/Sep/2026:19:45:36 +0200] "GET /index.php/apps/app_api/proxy/flow/api/w/_/jobs_u/get_log_file/..%25252F..%25252F..%25252F..%25252Fetc%25252Fpasswd HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2656.18 Safari/537.36"
...
show less
Web App Attack
🇨🇳
106.75.10.60
08 Sep 2026
106.75.10.60 - - [08/Sep/2026:23:55:52 +0200] "GET / HTTP/1.1" 400 264 "-" "rawgrab"
106.75.10.60 - ...
show more
106.75.10.60 - - [08/Sep/2026:23:55:52 +0200] "GET / HTTP/1.1" 400 264 "-" "rawgrab"
106.75.10.60 - - [08/Sep/2026:23:55:53 +0200] "GET /raw HTTP/1.1" 400 264 "-" "rawgrab"
106.75.10.60 - - [08/Sep/2026:23:55:53 +0200] "GET /ws HTTP/1.1" 400 264 "-" "rawgrab"
106.75.10.60 - - [08/Sep/2026:23:55:54 +0200] "GET /socket.io/?EIO=4&transport=websocket HTTP/1.1" 400 264 "-" "rawgrab"
106.75.10.60 - - [08/Sep/2026:23:55:54 +0200] "GET / HTTP/1.1" 400 166 "-" "NTRIP GNSSInternetRadio"
...
show less
Web App Attack
🇺🇸
172.104.30.66
08 Sep 2026
172.104.30.66 - - [08/Sep/2026:17:09:17 +0200] "POST /sdk HTTP/1.1" 404 162 "-" "Mozilla/5.0 (iPhone ...
show more
172.104.30.66 - - [08/Sep/2026:17:09:17 +0200] "POST /sdk HTTP/1.1" 404 162 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML"
172.104.30.66 - - [08/Sep/2026:17:09:18 +0200] "GET /HNAP1 HTTP/1.1" 404 162 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML"
...
show less
Web App Attack
🇫🇷
157.173.100.49
08 Sep 2026
157.173.100.49 - - [08/Sep/2026:09:48:03 +0200] "GET /.env HTTP/1.1" 404 196 "-" "Mozilla/5.0 (X11; ...
show more
157.173.100.49 - - [08/Sep/2026:09:48:03 +0200] "GET /.env HTTP/1.1" 404 196 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
157.173.100.49 - - [08/Sep/2026:09:48:03 +0200] "GET /.env.local HTTP/1.1" 404 134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0"
157.173.100.49 - - [08/Sep/2026:09:48:04 +0200] "GET /.env.production HTTP/1.1" 404 196 "https://stackoverflow.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36 Edg/132.0.0.0"
157.173.100.49 - - [08/Sep/2026:09:48:04 +0200] "GET /.env.staging HTTP/1.1" 404 196 "https://www.google.com/search?q=site%3A" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36"
157.173.100.49 - - [08/Sep/2026:09:48:04 +0200] "GET /.env.development HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHT
...
show less
Web App Attack
🇳🇱
176.65.148.226
07 Sep 2026
176.65.148.226 - - [08/Sep/2026:00:45:34 +0200] "GET /adminer.php HTTP/1.1" 404 134 "-" "Mozilla/5.0 ...
show more
176.65.148.226 - - [08/Sep/2026:00:45:34 +0200] "GET /adminer.php HTTP/1.1" 404 134 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36"
176.65.148.226 - - [08/Sep/2026:00:45:34 +0200] "GET /adminer.php HTTP/1.1" 400 264 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36"
...
show less
Web App Attack
🇳🇱
91.92.241.196
07 Sep 2026
91.92.241.196 - - [07/Sep/2026:15:13:48 +0200] "GET /.git/HEAD HTTP/1.1" 404 134 "-" "Mozilla/5.0 (W ...
show more
91.92.241.196 - - [07/Sep/2026:15:13:48 +0200] "GET /.git/HEAD HTTP/1.1" 404 134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
91.92.241.196 - - [07/Sep/2026:15:13:49 +0200] "GET /.git/config HTTP/1.1" 404 134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
Web App Attack
🇺🇸
136.113.106.215
07 Sep 2026
136.113.106.215 - - [07/Sep/2026:10:10:06 +0200] "GET /backup.zip HTTP/1.1" 404 564 "-" "Mozilla/5.0 ...
show more
136.113.106.215 - - [07/Sep/2026:10:10:06 +0200] "GET /backup.zip HTTP/1.1" 404 564 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36"
136.113.106.215 - - [07/Sep/2026:10:10:06 +0200] "GET /backup.tar.gz HTTP/1.1" 404 564 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36"
136.113.106.215 - - [07/Sep/2026:10:10:06 +0200] "GET /backup.sql HTTP/1.1" 404 564 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36"
136.113.106.215 - - [07/Sep/2026:10:10:06 +0200] "GET /dump.sql HTTP/1.1" 404 564 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36"
136.113.106.215 - - [07/Sep/2026:10:10:06 +0200] "GET /db.sql HTTP/1.1" 404 564 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36"
...
show less
Web App Attack