AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User bensmithurst joined AbuseIPDB in February 2026 and has reported 2,227 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER

IP	Date	Comment	Categories
🇺🇸 136.64.93.255	06 Sep 2026	136.64.93.255 - - [06/Sep/2026:12:09:15 +0000] "GET /%2E%2E/%2E%2E/%2E%2E/%2E%2E/.env HTTP/1.1" 400 ... show more 136.64.93.255 - - [06/Sep/2026:12:09:15 +0000] "GET /%2E%2E/%2E%2E/%2E%2E/%2E%2E/.env HTTP/1.1" 400 150 "-" "-" 136.64.93.255 - - [06/Sep/2026:12:09:15 +0000] "GET /%2E%2E/%2E%2E/%2E%2E/%2E%2E/proc/self/environ HTTP/1.1" 400 150 "-" "-" 136.64.93.255 - - [06/Sep/2026:12:09:16 +0000] "GET /public/plugins/alertlist/../../../../../../../../var/run/secrets/kubernetes.io/serviceaccount/token HTTP/1.1" 400 150 "-" "-" 136.64.93.255 - - [06/Sep/2026:12:09:16 +0000] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fvar/run/secrets/kubernetes.io/serviceaccount/token HTTP/1.1" 400 150 "-" "-" 136.64.93.255 - - [06/Sep/2026:12:09:16 +0000] "GET /public/plugins/alertlist/../../../../../../../../proc/self/cmdline HTTP/1.1" 400 150 "-" "-" ... [host=LAN***] show less	Web App Attack
🇺🇸 34.41.100.57	06 Sep 2026	34.41.100.57 - - [06/Sep/2026:07:22:30 +0000] "GET /api/.git/config HTTP/1.1" 400 248 "-" "crusader- ... show more 34.41.100.57 - - [06/Sep/2026:07:22:30 +0000] "GET /api/.git/config HTTP/1.1" 400 248 "-" "crusader-worker/1.0" 34.41.100.57 - - [06/Sep/2026:07:22:30 +0000] "GET /var/www/.git/config HTTP/1.1" 400 248 "-" "crusader-worker/1.0" 34.41.100.57 - - [06/Sep/2026:07:22:30 +0000] "GET /public/.git/config HTTP/1.1" 400 248 "-" "crusader-worker/1.0" 34.41.100.57 - - [06/Sep/2026:07:22:30 +0000] "GET /.git/config HTTP/1.1" 400 248 "-" "crusader-worker/1.0" 34.41.100.57 - - [06/Sep/2026:07:22:30 +0000] "GET /backend/.git/config HTTP/1.1" 400 248 "-" "crusader-worker/1.0" ... [host=LAN***] show less	Web App Attack
🇬🇧 35.203.211.162	05 Sep 2026	35.203.211.162 - - [05/Sep/2026:17:45:14 +0000] "\x00\x00\x001\xFFSMBr\x00\x00\x00\x00\x18Eh\x00\x00 ... show more 35.203.211.162 - - [05/Sep/2026:17:45:14 +0000] "\x00\x00\x001\xFFSMBr\x00\x00\x00\x00\x18Eh\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xB5}\x00\x00\x01\x00\x00\x0E\x00\x02NT LM 0.12\x00\x02\x00" 400 150 "-" "-" 35.203.211.162 - - [05/Sep/2026:17:45:14 +0000] "\x00\x00\x00f\xFESMB@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x001234567890123456$\x00\x01\x00\x01\x00\x00\x00\x00\x00\x00\x001234567890123456\x00\x00\x00\x00\x00\x00\x00\x00\x02\x02" 400 150 "-" "-" 35.203.211.162 - - [05/Sep/2026:17:45:14 +0000] "\x00\x00\x00f\xFESMB@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x001234567890123456$\x00\x01\x00\x01\x00\x00\x00\x00\x00\x00\x001234567890123456\x00\x00\x00\x00\x00\x00\x00\x00\x10\x02" 400 150 "-" "-" 35.203.211.162 - - [0 ... [host=LAN***] show less	Web App Attack
🇬🇧 34.153.181.47	05 Sep 2026	34.153.181.47 - - [05/Sep/2026:10:29:47 +0000] "GET /.git/config HTTP/1.1" 400 248 "-" "crusader-wor ... show more 34.153.181.47 - - [05/Sep/2026:10:29:47 +0000] "GET /.git/config HTTP/1.1" 400 248 "-" "crusader-worker/1.0" 34.153.181.47 - - [05/Sep/2026:10:29:47 +0000] "GET /src/.git/config HTTP/1.1" 400 248 "-" "crusader-worker/1.0" 34.153.181.47 - - [05/Sep/2026:10:29:47 +0000] "GET /backend/.git/config HTTP/1.1" 400 248 "-" "crusader-worker/1.0" 34.153.181.47 - - [05/Sep/2026:10:29:47 +0000] "GET /app/.git/config HTTP/1.1" 400 248 "-" "crusader-worker/1.0" 34.153.181.47 - - [05/Sep/2026:10:29:47 +0000] "GET /api/.git/config HTTP/1.1" 400 248 "-" "crusader-worker/1.0" ... [host=LAN***] show less	Web App Attack
🇸🇬 34.158.50.64	04 Sep 2026	34.158.50.64 - - [04/Sep/2026:13:50:43 +0000] "GET /@fs/../../.env?raw?? HTTP/1.1" 400 150 "-" "-" 3 ... show more 34.158.50.64 - - [04/Sep/2026:13:50:43 +0000] "GET /@fs/../../.env?raw?? HTTP/1.1" 400 150 "-" "-" 34.158.50.64 - - [04/Sep/2026:13:50:43 +0000] "GET /@fs/..%2f..%2f..%2f..%2f..%2fproc/self/environ HTTP/1.1" 400 150 "-" "-" 34.158.50.64 - - [04/Sep/2026:13:50:43 +0000] "GET /@fs/..%2f..%2f..%2f..%2f..%2froot/.env HTTP/1.1" 400 150 "-" "-" 34.158.50.64 - - [04/Sep/2026:13:50:43 +0000] "GET /@fs/..%2f..%2f..%2f..%2f..%2fapp/.env HTTP/1.1" 400 150 "-" "-" 34.158.50.64 - - [04/Sep/2026:13:50:56 +0000] "GET /@fs/../../../../../app/.env?raw?? HTTP/1.1" 400 150 "-" "-" ... [host=LAN***] show less	Web App Attack
🇺🇸 136.70.68.217	02 Sep 2026	136.70.68.217 - - [02/Sep/2026:10:35:35 +0000] "" 400 0 "-" "-" 136.70.68.217 - - [02/Sep/2026:10:35 ... show more 136.70.68.217 - - [02/Sep/2026:10:35:35 +0000] "" 400 0 "-" "-" 136.70.68.217 - - [02/Sep/2026:10:35:35 +0000] "" 400 0 "-" "-" 136.70.68.217 - - [02/Sep/2026:10:35:36 +0000] "" 400 0 "-" "-" 136.70.68.217 - - [02/Sep/2026:10:35:36 +0000] "" 400 0 "-" "-" 136.70.68.217 - - [02/Sep/2026:10:35:38 +0000] "" 400 0 "-" "-" ... [host=LAN***] show less	Web App Attack
🇬🇧 167.172.52.88	01 Sep 2026	2026-09-01T15:05:35.095455+00:00 [TARGET-FQDN] sshd-session[108373]: Invalid user kalshi from 167.17 ... show more 2026-09-01T15:05:35.095455+00:00 [TARGET-FQDN] sshd-session[108373]: Invalid user kalshi from 167.172.52.88 port 34958 2026-09-01T15:05:35.116452+00:00 [TARGET-FQDN] sshd-session[108373]: Connection closed by invalid user kalshi 167.172.52.88 port 34958 [preauth] 2026-09-01T15:07:49.943327+00:00 [TARGET-FQDN] sshd-session[108529]: Invalid user sol from 167.172.52.88 port 58178 2026-09-01T15:07:49.963419+00:00 [TARGET-FQDN] sshd-session[108529]: Connection closed by invalid user sol 167.172.52.88 port 58178 [preauth] 2026-09-01T15:10:05.513546+00:00 [TARGET-FQDN] sshd-session[108557]: Invalid user trader from 167.172.52.88 port 55828 ... [host=MEI***] show less	Brute-Force SSH
🇩🇪 91.107.251.117	01 Sep 2026	2026-09-01T12:07:47.110663+00:00 [TARGET-FQDN] sshd-session[103383]: Connection closed by authentica ... show more 2026-09-01T12:07:47.110663+00:00 [TARGET-FQDN] sshd-session[103383]: Connection closed by authenticating user root 91.107.251.117 port 49204 [preauth] ... [host=MEI***] show less	Brute-Force SSH
🇩🇪 91.107.251.117	01 Sep 2026	2026-09-01T11:19:35.238133+00:00 [TARGET-FQDN] sshd-session[101814]: Connection closed by authentica ... show more 2026-09-01T11:19:35.238133+00:00 [TARGET-FQDN] sshd-session[101814]: Connection closed by authenticating user root 91.107.251.117 port 40724 [preauth] 2026-09-01T11:23:48.230746+00:00 [TARGET-FQDN] sshd-session[101921]: Connection closed by authenticating user root 91.107.251.117 port 49662 [preauth] 2026-09-01T11:23:48.230746+00:00 [TARGET-FQDN] sshd-session[101921]: Connection closed by authenticating user root 91.107.251.117 port 49662 [preauth] ... [host=MEI***] show less	Brute-Force SSH
🇩🇪 91.107.251.117	01 Sep 2026	2026-09-01T10:50:01.483784+00:00 [TARGET-FQDN] sshd-session[100885]: Connection closed by authentica ... show more 2026-09-01T10:50:01.483784+00:00 [TARGET-FQDN] sshd-session[100885]: Connection closed by authenticating user root 91.107.251.117 port 48880 [preauth] 2026-09-01T10:54:06.780177+00:00 [TARGET-FQDN] sshd-session[101001]: Connection closed by authenticating user root 91.107.251.117 port 40726 [preauth] 2026-09-01T10:54:06.780177+00:00 [TARGET-FQDN] sshd-session[101001]: Connection closed by authenticating user root 91.107.251.117 port 40726 [preauth] 2026-09-01T10:58:55.296767+00:00 [TARGET-FQDN] sshd-session[101131]: Connection closed by authenticating user root 91.107.251.117 port 44108 [preauth] ... [host=MEI***] show less	Brute-Force SSH
🇩🇪 91.107.251.117	01 Sep 2026	2026-09-01T10:20:05.559821+00:00 [TARGET-FQDN] sshd-session[100041]: Connection closed by authentica ... show more 2026-09-01T10:20:05.559821+00:00 [TARGET-FQDN] sshd-session[100041]: Connection closed by authenticating user root 91.107.251.117 port 58594 [preauth] 2026-09-01T10:24:59.959868+00:00 [TARGET-FQDN] sshd-session[100163]: Connection closed by authenticating user root 91.107.251.117 port 44738 [preauth] 2026-09-01T10:29:18.303032+00:00 [TARGET-FQDN] sshd-session[100304]: Connection closed by authenticating user root 91.107.251.117 port 40228 [preauth] 2026-09-01T10:33:30.588027+00:00 [TARGET-FQDN] sshd-session[100404]: Connection closed by authenticating user root 91.107.251.117 port 47786 [preauth] 2026-09-01T10:37:39.210949+00:00 [TARGET-FQDN] sshd-session[100522]: Connection closed by authenticating user root 91.107.251.117 port 40270 [preauth] ... [host=MEI***] show less	Brute-Force SSH
🇺🇸 34.26.52.30	31 Aug 2026	34.26.52.30 - - [31/Aug/2026:18:31:51 +0000] "GET /static/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/s ... show more 34.26.52.30 - - [31/Aug/2026:18:31:51 +0000] "GET /static/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ HTTP/1.1" 400 150 "-" "-" 34.26.52.30 - - [31/Aug/2026:18:31:52 +0000] "GET /static/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/1.1" 400 150 "-" "-" 34.26.52.30 - - [31/Aug/2026:18:31:52 +0000] "GET /static/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/1.1" 400 150 "-" "-" ... [host=LAN***] show less	Web App Attack
🇺🇸 34.138.14.43	31 Aug 2026	34.138.14.43 - - [31/Aug/2026:14:43:05 +0000] "GET /assets../../../etc/passwd HTTP/1.1" 400 150 "-" ... show more 34.138.14.43 - - [31/Aug/2026:14:43:05 +0000] "GET /assets../../../etc/passwd HTTP/1.1" 400 150 "-" "-" 34.138.14.43 - - [31/Aug/2026:14:43:06 +0000] "GET /assets../../../.env HTTP/1.1" 400 150 "-" "-" 34.138.14.43 - - [31/Aug/2026:14:43:17 +0000] "GET /assets../../../etc/passwd HTTP/1.1" 400 150 "-" "-" 34.138.14.43 - - [31/Aug/2026:14:43:19 +0000] "GET /assets../../../.env HTTP/1.1" 400 150 "-" "-" 34.138.14.43 - - [31/Aug/2026:14:43:40 +0000] "GET /assets../../../etc/passwd HTTP/1.1" 400 150 "-" "-" ... [host=LAN***] show less	Web App Attack
🇺🇸 35.227.40.220	31 Aug 2026	35.227.40.220 - - [31/Aug/2026:12:33:34 +0000] "GET /static/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc ... show more 35.227.40.220 - - [31/Aug/2026:12:33:34 +0000] "GET /static/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ HTTP/1.1" 400 150 "-" "-" 35.227.40.220 - - [31/Aug/2026:12:33:35 +0000] "GET /static/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/1.1" 400 150 "-" "-" 35.227.40.220 - - [31/Aug/2026:12:33:35 +0000] "GET /resources/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/1.1" 400 150 "-" "-" 35.227.40.220 - - [31/Aug/2026:12:33:42 +0000] "GET /..%2f.env HTTP/1.1" 400 150 "-" "-" 35.227.40.220 - - [31/Aug/2026:12:33:42 +0000] "GET /..%2f..%2f.env HTTP/1.1" 400 150 "-" "-" ... [host=LAN***] show less	Web App Attack
🇺🇸 35.231.245.55	31 Aug 2026	35.231.245.55 - - [31/Aug/2026:02:08:37 +0000] "GET /..%2f.env HTTP/1.1" 400 150 "-" "-" 35.231.245. ... show more 35.231.245.55 - - [31/Aug/2026:02:08:37 +0000] "GET /..%2f.env HTTP/1.1" 400 150 "-" "-" 35.231.245.55 - - [31/Aug/2026:02:08:37 +0000] "GET /..%2f..%2f.env HTTP/1.1" 400 150 "-" "-" 35.231.245.55 - - [31/Aug/2026:02:08:37 +0000] "GET /%2e%2e/.env HTTP/1.1" 400 150 "-" "-" 35.231.245.55 - - [31/Aug/2026:02:08:38 +0000] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ HTTP/1.1" 400 150 "-" "-" 35.231.245.55 - - [31/Aug/2026:02:08:38 +0000] "GET /public/plugins/alertlist/../../../../../../../../proc/self/environ HTTP/1.1" 400 150 "-" "-" ... [host=LAN***] show less	Web App Attack
🇫🇮 77.42.80.164	31 Aug 2026	2026-08-31T02:03:22.427361+00:00 [TARGET-FQDN] sshd-session[44370]: Connection closed by authenticat ... show more 2026-08-31T02:03:22.427361+00:00 [TARGET-FQDN] sshd-session[44370]: Connection closed by authenticating user root 77.42.80.164 port 40132 [preauth] ... [host=MEI***] show less	Brute-Force SSH
🇸🇬 35.240.190.47	30 Aug 2026	35.240.190.47 - - [30/Aug/2026:17:25:24 +0000] "GET /@fs/../../.env?raw?? HTTP/1.1" 400 150 "-" "-" ... show more 35.240.190.47 - - [30/Aug/2026:17:25:24 +0000] "GET /@fs/../../.env?raw?? HTTP/1.1" 400 150 "-" "-" 35.240.190.47 - - [30/Aug/2026:17:25:25 +0000] "GET /@fs/..%2f..%2f..%2f..%2f..%2fapp/.env?raw?? HTTP/1.1" 400 150 "-" "-" 35.240.190.47 - - [30/Aug/2026:17:25:25 +0000] "GET /@fs/..%2f..%2f..%2f..%2f..%2fproc/self/environ?raw?? HTTP/1.1" 400 150 "-" "-" 35.240.190.47 - - [30/Aug/2026:17:25:25 +0000] "GET /@fs/../../../../../proc/self/environ?raw?? HTTP/1.1" 400 150 "-" "-" 35.240.190.47 - - [30/Aug/2026:17:25:25 +0000] "GET /@fs/..%2f..%2f..%2f..%2f..%2froot/.env?raw?? HTTP/1.1" 400 150 "-" "-" ... [host=LAN***] show less	Web App Attack
🇫🇮 77.42.80.164	30 Aug 2026	2026-08-30T09:50:26.270474+00:00 [TARGET-FQDN] sshd-session[16098]: Connection closed by authenticat ... show more 2026-08-30T09:50:26.270474+00:00 [TARGET-FQDN] sshd-session[16098]: Connection closed by authenticating user root 77.42.80.164 port 56798 [preauth] ... [host=MEI***] show less	Brute-Force SSH
🇫🇮 77.42.80.164	30 Aug 2026	2026-08-30T09:04:35.131903+00:00 [TARGET-FQDN] sshd-session[14763]: Connection closed by authenticat ... show more 2026-08-30T09:04:35.131903+00:00 [TARGET-FQDN] sshd-session[14763]: Connection closed by authenticating user root 77.42.80.164 port 43978 [preauth] 2026-08-30T09:10:24.102102+00:00 [TARGET-FQDN] sshd-session[15007]: Connection closed by authenticating user root 77.42.80.164 port 46548 [preauth] 2026-08-30T09:10:24.102102+00:00 [TARGET-FQDN] sshd-session[15007]: Connection closed by authenticating user root 77.42.80.164 port 46548 [preauth] ... [host=MEI***] show less	Brute-Force SSH
🇫🇮 77.42.80.164	30 Aug 2026	2026-08-30T08:30:51.314790+00:00 [TARGET-FQDN] sshd-session[13852]: Connection closed by authenticat ... show more 2026-08-30T08:30:51.314790+00:00 [TARGET-FQDN] sshd-session[13852]: Connection closed by authenticating user root 77.42.80.164 port 42814 [preauth] 2026-08-30T08:36:08.472133+00:00 [TARGET-FQDN] sshd-session[14017]: Connection closed by authenticating user root 77.42.80.164 port 56702 [preauth] 2026-08-30T08:36:08.472133+00:00 [TARGET-FQDN] sshd-session[14017]: Connection closed by authenticating user root 77.42.80.164 port 56702 [preauth] 2026-08-30T08:42:01.116998+00:00 [TARGET-FQDN] sshd-session[14123]: Connection closed by authenticating user root 77.42.80.164 port 52898 [preauth] ... [host=MEI***] show less	Brute-Force SSH
🇫🇮 77.42.80.164	30 Aug 2026	2026-08-30T07:56:30.938167+00:00 [TARGET-FQDN] sshd-session[12767]: Connection closed by authenticat ... show more 2026-08-30T07:56:30.938167+00:00 [TARGET-FQDN] sshd-session[12767]: Connection closed by authenticating user root 77.42.80.164 port 37858 [preauth] 2026-08-30T08:02:34.621209+00:00 [TARGET-FQDN] sshd-session[12947]: Connection closed by authenticating user root 77.42.80.164 port 45448 [preauth] 2026-08-30T08:07:39.075621+00:00 [TARGET-FQDN] sshd-session[13218]: Connection closed by authenticating user root 77.42.80.164 port 41438 [preauth] 2026-08-30T08:13:42.544347+00:00 [TARGET-FQDN] sshd-session[13363]: Connection closed by authenticating user root 77.42.80.164 port 34732 [preauth] 2026-08-30T08:19:51.935798+00:00 [TARGET-FQDN] sshd-session[13532]: Connection closed by authenticating user root 77.42.80.164 port 55878 [preauth] ... [host=MEI***] show less	Brute-Force SSH
🇹🇼 35.189.164.101	30 Aug 2026	35.189.164.101 - - [30/Aug/2026:02:09:18 +0000] "GET /assets../../../etc/passwd HTTP/1.1" 400 150 "- ... show more 35.189.164.101 - - [30/Aug/2026:02:09:18 +0000] "GET /assets../../../etc/passwd HTTP/1.1" 400 150 "-" "-" 35.189.164.101 - - [30/Aug/2026:02:09:18 +0000] "GET /assets../../../.env HTTP/1.1" 400 150 "-" "-" 35.189.164.101 - - [30/Aug/2026:02:09:30 +0000] "GET /assets../../../etc/passwd HTTP/1.1" 400 150 "-" "-" 35.189.164.101 - - [30/Aug/2026:02:09:31 +0000] "GET /assets../../../.env HTTP/1.1" 400 150 "-" "-" 35.189.164.101 - - [30/Aug/2026:02:09:42 +0000] "GET /assets../../../etc/passwd HTTP/1.1" 400 150 "-" "-" ... [host=LAN***] show less	Web App Attack
🇧🇷 187.181.209.108	30 Aug 2026	2026-08-30 02:05:10 H=(bbb5d16c.virtua.com.br) [187.181.209.108] I=[[TARGET-IPv4]]:25 F=<yqqgzdut@bc ... show more 2026-08-30 02:05:10 H=(bbb5d16c.virtua.com.br) [187.181.209.108] I=[[TARGET-IPv4]]:25 F=<[email protected]> rejected RCPT <REDACTED>: relay not permitted 2026-08-30 02:05:42 H=(bbb5d16c.virtua.com.br) [187.181.209.108] I=[[TARGET-IPv4]]:25 F=<[email protected]> rejected RCPT <REDACTED>: relay not permitted 2026-08-30 02:06:06 H=(bbb5d16c.virtua.com.br) [187.181.209.108] I=[[TARGET-IPv4]]:25 F=<[email protected]> rejected RCPT <REDACTED>: relay not permitted ... [host=MEI***] show less	Email Spam Brute-Force
🇸🇬 35.198.245.171	29 Aug 2026	35.198.245.171 - - [29/Aug/2026:23:10:39 +0000] "GET /@fs/../../.env?raw?? HTTP/1.1" 400 150 "-" "-" ... show more 35.198.245.171 - - [29/Aug/2026:23:10:39 +0000] "GET /@fs/../../.env?raw?? HTTP/1.1" 400 150 "-" "-" 35.198.245.171 - - [29/Aug/2026:23:10:39 +0000] "GET /@fs/..%2f..%2f..%2f..%2f..%2froot/.env HTTP/1.1" 400 150 "-" "-" 35.198.245.171 - - [29/Aug/2026:23:10:39 +0000] "GET /@fs/..%2f..%2f..%2f..%2f..%2fproc/self/environ HTTP/1.1" 400 150 "-" "-" 35.198.245.171 - - [29/Aug/2026:23:10:39 +0000] "GET /@fs/..%2f..%2f..%2f..%2f..%2fapp/.env HTTP/1.1" 400 150 "-" "-" 35.198.245.171 - - [29/Aug/2026:23:10:53 +0000] "GET /@fs/..%2f..%2f..%2f..%2f..%2fproc/self/environ?raw?? HTTP/1.1" 400 150 "-" "-" ... [host=LAN***] show less	Web App Attack
🇺🇸 34.73.245.106	29 Aug 2026	34.73.245.106 - - [29/Aug/2026:22:19:30 +0000] "GET /static/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env ... show more 34.73.245.106 - - [29/Aug/2026:22:19:30 +0000] "GET /static/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/1.1" 400 150 "-" "-" 34.73.245.106 - - [29/Aug/2026:22:19:30 +0000] "GET /resources/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/1.1" 400 150 "-" "-" 34.73.245.106 - - [29/Aug/2026:22:19:30 +0000] "GET /static/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ HTTP/1.1" 400 150 "-" "-" ... [host=LAN***] show less	Web App Attack