🇩🇪
34.179.152.79
21 Sep 2026
34.179.152.79 - - [21/Sep/2026:17:14:57 +0000] "GET /config/.env HTTP/1.1" 429 107 "-" "Mozilla/5.0 ...
show more
34.179.152.79 - - [21/Sep/2026:17:14:57 +0000] "GET /config/.env HTTP/1.1" 429 107 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.179.152.79 - - [21/Sep/2026:17:14:57 +0000] "GET /private/.env HTTP/1.1" 429 107 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.179.152.79 - - [21/Sep/2026:17:14:57 +0000] "GET /application/.env HTTP/1.1" 429 107 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.179.152.79 - - [21/Sep/2026:17:14:57 +0000] "GET /bootstrap/.env HTTP/1.1" 429 107 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.179.152.79 - - [21/Sep/2026:17:14:57 +0000] "GET /database/.env HTTP/1.1" 429 107 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.179.152.79 - - [21/Sep/2026:17:
...
show less
Bad Web Bot
🇧🇪
34.38.113.44
21 Sep 2026
34.38.113.44 - - [21/Sep/2026:15:58:24 +0000] "GET / HTTP/1.1" 200 2469 "-" "Mozilla/5.0 (Windows NT ...
show more
34.38.113.44 - - [21/Sep/2026:15:58:24 +0000] "GET / HTTP/1.1" 200 2469 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36"
34.38.113.44 - - [21/Sep/2026:15:58:24 +0000] "GET /program/js/jquery.min.js?s=1661761679 HTTP/1.1" 200 89037 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36"
34.38.113.44 - - [21/Sep/2026:15:58:24 +0000] "GET /program/js/common.min.js?s=1750329934 HTTP/1.1" 200 11696 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36"
34.38.113.44 - - [21/Sep/2026:15:58:24 +0000] "GET /program/js/app.min.js?s=1750329934 HTTP/1.1" 200 170355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36"
34.38.113.44 - - [21/Sep/2026:15:58:24 +0000] "GET /program/js/jstz.min.js?s=1640540109 HTTP/1.1" 200 15263 "-" "Mozilla/5.0 (Wi
...
show less
Bad Web Bot
Web App Attack
🇧🇪
35.241.239.86
21 Sep 2026
35.241.239.86 - - [21/Sep/2026:15:12:41 +0000] "GET / HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 1 ...
show more
35.241.239.86 - - [21/Sep/2026:15:12:41 +0000] "GET / HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36"
35.241.239.86 - - [21/Sep/2026:15:12:41 +0000] "GET /under-construction HTTP/1.1" 200 9040 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36"
35.241.239.86 - - [21/Sep/2026:15:12:42 +0000] "GET /Components/Layout/ReconnectModal.cyz5k529gx.razor.js HTTP/1.1" 200 740 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36"
35.241.239.86 - - [21/Sep/2026:15:12:42 +0000] "GET /lib/bootstrap/dist/js/bootstrap.bundle.min.493y06b0oq.js HTTP/1.1" 200 23984 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36"
35.241.239.86 - - [21/Sep/2026:15:12:42 +0000] "GET /js/site.mx9sfostj7.js HTTP/1.1" 200 4033 "-" "Mozilla/5.0 (W
...
show less
Bad Web Bot
Web App Attack
🇬🇧
165.22.115.79
21 Sep 2026
2026-09-21T11:14:54.089672+00:00 ubuntu-8gb-hel1-1 sshd[2517056]: Invalid user oracle from 165.22.11 ...
show more
2026-09-21T11:14:54.089672+00:00 ubuntu-8gb-hel1-1 sshd[2517056]: Invalid user oracle from 165.22.115.79 port 48424
2026-09-21T11:14:54.352012+00:00 ubuntu-8gb-hel1-1 sshd[2517101]: Invalid user linuxadmin from 165.22.115.79 port 48436
2026-09-21T11:14:54.619568+00:00 ubuntu-8gb-hel1-1 sshd[2517122]: User postgres from 165.22.115.79 not allowed because not listed in AllowUsers
2026-09-21T11:14:55.143716+00:00 ubuntu-8gb-hel1-1 sshd[2517296]: Invalid user ubuntu from 165.22.115.79 port 48246
2026-09-21T11:14:55.409359+00:00 ubuntu-8gb-hel1-1 sshd[2517387]: Invalid user sonar from 165.22.115.79 port 48254
2026-09-21T11:14:55.679366+00:00 ubuntu-8gb-hel1-1 sshd[2517412]: Invalid user devops from 165.22.115.79 port 48266
2026-09-21T11:14:55.953887+00:00 ubuntu-8gb-hel1-1 sshd[2517428]: User git from 165.22.115.79 not allowed because not listed in AllowUsers
2026-09-21T11:14:56.589455+00:00 ubuntu-8gb-hel1-1 sshd[2517450]: Invalid user ftpuser from 165.22.115.79 port 48290
2026-09-21T11:14:
...
show less
Brute-Force
SSH
🇧🇪
34.140.234.80
21 Sep 2026
34.140.234.80 - - [21/Sep/2026:08:25:21 +0000] "GET / HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 1 ...
show more
34.140.234.80 - - [21/Sep/2026:08:25:21 +0000] "GET / HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36"
34.140.234.80 - - [21/Sep/2026:08:25:21 +0000] "GET /under-construction HTTP/1.1" 200 9041 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36"
34.140.234.80 - - [21/Sep/2026:08:25:31 +0000] "GET /Components/Layout/ReconnectModal.cyz5k529gx.razor.js HTTP/1.1" 200 740 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36"
34.140.234.80 - - [21/Sep/2026:08:25:31 +0000] "GET /lib/bootstrap/dist/js/bootstrap.bundle.min.493y06b0oq.js HTTP/1.1" 200 23984 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36"
34.140.234.80 - - [21/Sep/2026:08:25:32 +0000] "GET /js/app-assistant.g1yu1thqqv.js HTTP/1.1" 200 4780 "-" "Mozil
...
show less
Bad Web Bot
Web App Attack
🇳🇱
45.148.10.60
21 Sep 2026
45.148.10.60 - - [21/Sep/2026:06:25:55 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 301 162 "-" "Mo ...
show more
45.148.10.60 - - [21/Sep/2026:06:25:55 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
45.148.10.60 - - [21/Sep/2026:06:25:55 +0000] "GET /?rest_route=/batch/v1 HTTP/1.1" 307 1994 "http://affiliates.easyagents.dev/?rest_route=/batch/v1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
45.148.10.60 - - [21/Sep/2026:06:25:55 +0000] "GET /login HTTP/1.1" 200 3423 "https://affiliates.easyagents.dev/?rest_route=/batch/v1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
45.148.10.60 - - [21/Sep/2026:06:25:55 +0000] "POST /index.php?rest_route=/batch/v1 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
45.148.10.60 - - [21/Sep/2026:06:25:55 +0000] "GET /?res
...
show less
Bad Web Bot
Web App Attack
🇳🇱
45.138.12.22
21 Sep 2026
45.138.12.22 - - [21/Sep/2026:04:24:55 +0000] "GET /.env.backup HTTP/1.1" 429 162 "-" "Mozilla/5.0 ( ...
show more
45.138.12.22 - - [21/Sep/2026:04:24:55 +0000] "GET /.env.backup HTTP/1.1" 429 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
45.138.12.22 - - [21/Sep/2026:04:24:55 +0000] "GET /.env.dev HTTP/1.1" 429 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
45.138.12.22 - - [21/Sep/2026:04:24:55 +0000] "GET /.env.development HTTP/1.1" 429 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
45.138.12.22 - - [21/Sep/2026:04:24:55 +0000] "GET /.docker/laravel/app/.env HTTP/1.1" 429 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
45.138.12.22 - - [21/Sep/2026:04:24:55 +0000] "GET /.env.dist HTTP/1.1" 429 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
45.138.12.22 - - [21/Sep/2026:04:24:55 +0000] "GET /.env.docker HTTP/1.1" 429 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
45.138.12.22 - - [21/Sep/2026:04:24:55 +0000] "GET /.env.email HTTP/1.1" 429 162 "-" "Mozilla
...
show less
Bad Web Bot
🇧🇪
35.240.58.49
21 Sep 2026
35.240.58.49 - - [21/Sep/2026:01:47:10 +0000] "GET / HTTP/1.1" 200 3381 "-" "Mozilla/5.0 (Windows NT ...
show more
35.240.58.49 - - [21/Sep/2026:01:47:10 +0000] "GET / HTTP/1.1" 200 3381 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36"
35.240.58.49 - - [21/Sep/2026:01:47:10 +0000] "GET /.amplifyrc HTTP/1.1" 404 2599 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
35.240.58.49 - - [21/Sep/2026:01:47:10 +0000] "GET /.amplifyrc HTTP/1.1" 404 2599 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
35.240.58.49 - - [21/Sep/2026:01:47:10 +0000] "GET /.boto HTTP/1.1" 404 2598 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
35.240.58.49 - - [21/Sep/2026:01:47:10 +0000] "GET /.boto HTTP/1.1" 404 2598 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
35.240.58.49 - - [21/Sep/2026:01:47:10 +0000] "GET /.env HTTP/1.1" 404 2598 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
35.240.58.49 - - [21/Sep/2026:01:47:10 +0000] "GET /.env HTTP/1.1" 404 2598 "-" "
...
show less
Bad Web Bot
Web App Attack
🇧🇪
34.52.146.37
20 Sep 2026
34.52.146.37 - - [20/Sep/2026:23:37:41 +0000] "GET / HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10 ...
show more
34.52.146.37 - - [20/Sep/2026:23:37:41 +0000] "GET / HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36"
34.52.146.37 - - [20/Sep/2026:23:37:41 +0000] "GET /.docker/secrets.json HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.52.146.37 - - [20/Sep/2026:23:37:41 +0000] "GET /.env HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.52.146.37 - - [20/Sep/2026:23:37:41 +0000] "GET /.amplifyrc HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.52.146.37 - - [20/Sep/2026:23:37:41 +0000] "GET /.aws/config HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.52.146.37 - - [20/Sep/2026:23:37:41 +0000] "GET /.aws/.env HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.52.146.37 - - [20/Sep/2026:23:37:41 +0000] "GET /.anthropic/config.json HTTP
...
show less
Bad Web Bot
Web App Attack
🇧🇪
34.52.229.253
20 Sep 2026
34.52.229.253 - - [20/Sep/2026:23:02:31 +0000] "GET / HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 1 ...
show more
34.52.229.253 - - [20/Sep/2026:23:02:31 +0000] "GET / HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36"
34.52.229.253 - - [20/Sep/2026:23:02:31 +0000] "GET /under-construction HTTP/1.1" 200 9041 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36"
34.52.229.253 - - [20/Sep/2026:23:02:34 +0000] "GET /Components/Layout/ReconnectModal.cyz5k529gx.razor.js HTTP/1.1" 200 740 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36"
34.52.229.253 - - [20/Sep/2026:23:02:34 +0000] "GET /js/site.mx9sfostj7.js HTTP/1.1" 200 4033 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36"
34.52.229.253 - - [20/Sep/2026:23:02:34 +0000] "GET /js/dashboard2.js HTTP/1.1" 200 5290 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/5
...
show less
Bad Web Bot
Web App Attack
🇧🇪
35.241.202.92
20 Sep 2026
35.241.202.92 - - [20/Sep/2026:20:45:19 +0000] "GET / HTTP/1.1" 307 1994 "-" "Mozilla/5.0 (Windows N ...
show more
35.241.202.92 - - [20/Sep/2026:20:45:19 +0000] "GET / HTTP/1.1" 307 1994 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36"
35.241.202.92 - - [20/Sep/2026:20:45:19 +0000] "GET /login HTTP/1.1" 200 3423 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36"
35.241.202.92 - - [20/Sep/2026:20:45:19 +0000] "GET /login HTTP/1.1" 200 3423 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36"
35.241.202.92 - - [20/Sep/2026:20:45:20 +0000] "GET /_next/static/chunks/1627bf2f54f2038d.js HTTP/1.1" 200 8948 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36"
35.241.202.92 - - [20/Sep/2026:20:45:20 +0000] "GET /_next/static/chunks/1627bf2f54f2038d.js HTTP/1.1" 200 8948 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, l
...
show less
Bad Web Bot
Web App Attack
🇩🇪
94.154.46.244
20 Sep 2026
94.154.46.244 - - [20/Sep/2026:18:12:40 +0000] "GET /.git/refs/heads/main HTTP/1.1" 429 72 "-" "Mozi ...
show more
94.154.46.244 - - [20/Sep/2026:18:12:40 +0000] "GET /.git/refs/heads/main HTTP/1.1" 429 72 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
94.154.46.244 - - [20/Sep/2026:18:12:40 +0000] "GET /terraform.tfstate HTTP/1.1" 429 72 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
94.154.46.244 - - [20/Sep/2026:18:12:40 +0000] "GET /infra/terraform.tfvars HTTP/1.1" 429 72 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
94.154.46.244 - - [20/Sep/2026:18:12:40 +0000] "GET /aws/.env HTTP/1.1" 429 72 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
94.154.46.244 - - [20/Sep/2026:18:12:40 +0000] "GET /helm/secrets.yaml HTTP/1.1" 429 72 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
94.154.46.244 - - [20/Sep/2026:18:12:40 +0000] "GET /application.properties HTTP/1.1" 429 72 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.h
...
show less
Bad Web Bot
🇧🇪
34.38.89.160
20 Sep 2026
34.38.89.160 - - [20/Sep/2026:13:40:13 +0000] "GET /config/.env HTTP/1.1" 429 107 "-" "Mozilla/5.0 ( ...
show more
34.38.89.160 - - [20/Sep/2026:13:40:13 +0000] "GET /config/.env HTTP/1.1" 429 107 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.38.89.160 - - [20/Sep/2026:13:40:13 +0000] "GET /private/.env HTTP/1.1" 429 107 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.38.89.160 - - [20/Sep/2026:13:40:13 +0000] "GET /application/.env HTTP/1.1" 429 107 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.38.89.160 - - [20/Sep/2026:13:40:13 +0000] "GET /bootstrap/.env HTTP/1.1" 429 107 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.38.89.160 - - [20/Sep/2026:13:40:13 +0000] "GET /database/.env HTTP/1.1" 429 107 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, lik
...
show less
Bad Web Bot
🇸🇪
81.230.146.243
20 Sep 2026
2026-09-20T12:12:04.970954+00:00 ubuntu-8gb-hel1-1 sshd[745539]: error: maximum authentication attem ...
show more
2026-09-20T12:12:04.970954+00:00 ubuntu-8gb-hel1-1 sshd[745539]: error: maximum authentication attempts exceeded for root from 81.230.146.243 port 51748 ssh2 [preauth]
2026-09-20T12:12:06.456606+00:00 ubuntu-8gb-hel1-1 sshd[745575]: error: maximum authentication attempts exceeded for root from 81.230.146.243 port 51928 ssh2 [preauth]
2026-09-20T12:12:07.285530+00:00 ubuntu-8gb-hel1-1 sshd[745633]: error: maximum authentication attempts exceeded for root from 81.230.146.243 port 52190 ssh2 [preauth]
2026-09-20T12:12:08.363084+00:00 ubuntu-8gb-hel1-1 sshd[745666]: Invalid user admin from 81.230.146.243 port 52420
2026-09-20T12:12:08.503369+00:00 ubuntu-8gb-hel1-1 sshd[745666]: error: maximum authentication attempts exceeded for invalid user admin from 81.230.146.243 port 52420 ssh2 [preauth]
2026-09-20T12:12:09.051084+00:00 ubuntu-8gb-hel1-1 sshd[745837]: Invalid user admin from 81.230.146.243 port 52530
2026-09-20T12:12:09.203214+00:00 ubuntu-8gb-hel1-1 sshd[745837]: error: maximum auth
...
show less
Brute-Force
SSH
🇳🇱
45.94.31.65
20 Sep 2026
45.94.31.65 - - [20/Sep/2026:08:16:28 +0000] "POST / HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Linux; Androi ...
show more
45.94.31.65 - - [20/Sep/2026:08:16:28 +0000] "POST / HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Linux; Android 14; SM-S918B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36"
45.94.31.65 - - [20/Sep/2026:08:16:28 +0000] "GET /under-construction HTTP/1.1" 200 27298 "-" "Mozilla/5.0 (Linux; Android 14; SM-S918B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36"
45.94.31.65 - - [20/Sep/2026:08:16:28 +0000] "POST /public/ HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
45.94.31.65 - - [20/Sep/2026:08:16:28 +0000] "GET /under-construction HTTP/1.1" 200 27298 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
45.94.31.65 - - [20/Sep/2026:08:16:29 +0000] "POST /index.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/
...
show less
Bad Web Bot
Web App Attack
🇩🇪
213.209.159.133
20 Sep 2026
213.209.159.133 - - [20/Sep/2026:04:06:13 +0000] "GET / HTTP/1.1" 302 0 "-" "Mozilla/5.0 (compatible ...
show more
213.209.159.133 - - [20/Sep/2026:04:06:13 +0000] "GET / HTTP/1.1" 302 0 "-" "Mozilla/5.0 (compatible; jscrawler/0.1; +https://github.com/)"
213.209.159.133 - - [20/Sep/2026:04:06:13 +0000] "GET /under-construction HTTP/1.1" 200 9043 "https://easyagentsdev.com/" "Mozilla/5.0 (compatible; jscrawler/0.1; +https://github.com/)"
213.209.159.133 - - [20/Sep/2026:04:06:20 +0000] "GET /beta-apply HTTP/1.1" 200 9487 "-" "Mozilla/5.0 (compatible; jscrawler/0.1; +https://github.com/)"
213.209.159.133 - - [20/Sep/2026:04:06:20 +0000] "GET /Account/Login HTTP/1.1" 200 8319 "-" "Mozilla/5.0 (compatible; jscrawler/0.1; +https://github.com/)"
213.209.159.133 - - [20/Sep/2026:04:06:20 +0000] "GET /lp/freetheai HTTP/1.1" 200 14884 "-" "Mozilla/5.0 (compatible; jscrawler/0.1; +https://github.com/)"
213.209.159.133 - - [20/Sep/2026:04:06:20 +0000] "GET /lp/features HTTP/1.1" 200 11424 "-" "Mozilla/5.0 (compatible; jscrawler/0.1; +https://github.com/)"
213.209.159.133 - - [20/Sep/2026:04:06:20 +0000] "GET
...
show less
Bad Web Bot
Web App Attack
🇧🇪
34.140.132.132
20 Sep 2026
34.140.132.132 - - [20/Sep/2026:00:56:28 +0000] "GET /.env.staging HTTP/1.1" 429 162 "-" "Mozilla/5. ...
show more
34.140.132.132 - - [20/Sep/2026:00:56:28 +0000] "GET /.env.staging HTTP/1.1" 429 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.140.132.132 - - [20/Sep/2026:00:56:28 +0000] "GET /.env.save HTTP/1.1" 429 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.140.132.132 - - [20/Sep/2026:00:56:28 +0000] "GET /.env.swp HTTP/1.1" 429 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.140.132.132 - - [20/Sep/2026:00:56:28 +0000] "GET /.env.test HTTP/1.1" 429 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.140.132.132 - - [20/Sep/2026:00:56:28 +0000] "GET /.env.testing HTTP/1.1" 429 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.140.132.132 - - [20/Sep/2026:00:56:28 +0000] "GET /.env~ HTTP/1.1" 429 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.140.132.132 - - [20/Sep/2026:00:56:28 +0000] "GET /.esmtprc HTTP/1.1" 429 162 "-" "Mozilla/5.0 (Window
...
show less
Bad Web Bot
🇳🇱
45.138.12.26
20 Sep 2026
45.138.12.26 - - [20/Sep/2026:00:15:31 +0000] "GET / HTTP/1.1" 200 2467 "-" "Mozilla/5.0 (Windows NT ...
show more
45.138.12.26 - - [20/Sep/2026:00:15:31 +0000] "GET / HTTP/1.1" 200 2467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36"
45.138.12.26 - - [20/Sep/2026:00:15:32 +0000] "GET /program/js/jquery.min.js?s=1661761679 HTTP/1.1" 200 89037 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36"
45.138.12.26 - - [20/Sep/2026:00:15:32 +0000] "GET /program/js/common.min.js?s=1750329934 HTTP/1.1" 200 11696 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36"
45.138.12.26 - - [20/Sep/2026:00:15:33 +0000] "GET /program/js/app.min.js?s=1750329934 HTTP/1.1" 200 170355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36"
45.138.12.26 - - [20/Sep/2026:00:15:33 +0000] "GET /program/js/jstz.min.js?s=1640540109 HTTP/1.1" 200 15263 "-" "Mozilla/5.0 (Wi
...
show less
Bad Web Bot
Web App Attack
🇧🇪
34.156.121.46
19 Sep 2026
34.156.121.46 - - [19/Sep/2026:23:32:13 +0000] "GET / HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 1 ...
show more
34.156.121.46 - - [19/Sep/2026:23:32:13 +0000] "GET / HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36"
34.156.121.46 - - [19/Sep/2026:23:32:13 +0000] "GET /under-construction HTTP/1.1" 200 9043 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36"
34.156.121.46 - - [19/Sep/2026:23:32:15 +0000] "GET /Components/Layout/ReconnectModal.cyz5k529gx.razor.js HTTP/1.1" 200 740 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36"
34.156.121.46 - - [19/Sep/2026:23:32:15 +0000] "GET /lib/bootstrap/dist/js/bootstrap.bundle.min.493y06b0oq.js HTTP/1.1" 200 23984 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36"
34.156.121.46 - - [19/Sep/2026:23:32:15 +0000] "GET /js/dashboard2.js HTTP/1.1" 200 5290 "-" "Mozilla/5.0 (Window
...
show less
Bad Web Bot
Web App Attack
🇰🇷
119.195.45.76
19 Sep 2026
2026-09-19T22:25:00.283776+00:00 ubuntu-8gb-hel1-1 sshd[3976332]: error: maximum authentication atte ...
show more
2026-09-19T22:25:00.283776+00:00 ubuntu-8gb-hel1-1 sshd[3976332]: error: maximum authentication attempts exceeded for root from 119.195.45.76 port 44362 ssh2 [preauth]
2026-09-19T22:25:18.867814+00:00 ubuntu-8gb-hel1-1 sshd[3976779]: error: maximum authentication attempts exceeded for root from 119.195.45.76 port 44816 ssh2 [preauth]
2026-09-19T22:25:36.888684+00:00 ubuntu-8gb-hel1-1 sshd[3977020]: error: maximum authentication attempts exceeded for root from 119.195.45.76 port 45288 ssh2 [preauth]
2026-09-19T22:26:00.673675+00:00 ubuntu-8gb-hel1-1 sshd[3977574]: Invalid user admin from 119.195.45.76 port 46058
2026-09-19T22:26:07.948433+00:00 ubuntu-8gb-hel1-1 sshd[3977574]: error: maximum authentication attempts exceeded for invalid user admin from 119.195.45.76 port 46058 ssh2 [preauth]
2026-09-19T22:26:20.264610+00:00 ubuntu-8gb-hel1-1 sshd[3977976]: Invalid user admin from 119.195.45.76 port 46540
2026-09-19T22:26:27.301079+00:00 ubuntu-8gb-hel1-1 sshd[3977976]: error: maximum aut
...
show less
Brute-Force
SSH
🇳🇱
45.138.12.24
19 Sep 2026
45.138.12.24 - - [19/Sep/2026:16:22:50 +0000] "GET / HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10 ...
show more
45.138.12.24 - - [19/Sep/2026:16:22:50 +0000] "GET / HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36"
45.138.12.24 - - [19/Sep/2026:16:22:50 +0000] "GET /under-construction HTTP/1.1" 200 9044 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36"
45.138.12.24 - - [19/Sep/2026:16:22:50 +0000] "GET / HTTP/1.1" 200 10182 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36"
45.138.12.24 - - [19/Sep/2026:16:22:53 +0000] "GET /Components/Layout/ReconnectModal.cyz5k529gx.razor.js HTTP/1.1" 200 740 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36"
45.138.12.24 - - [19/Sep/2026:16:22:53 +0000] "GET /js/site.mx9sfostj7.js HTTP/1.1" 200 4033 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like G
...
show less
Bad Web Bot
Web App Attack
🇭🇰
45.115.26.203
19 Sep 2026
45.115.26.203 - - [19/Sep/2026:13:45:25 +0000] "GET /server-status HTTP/1.1" 429 564 "-" "Mozilla/5. ...
show more
45.115.26.203 - - [19/Sep/2026:13:45:25 +0000] "GET /server-status HTTP/1.1" 429 564 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
45.115.26.203 - - [19/Sep/2026:13:45:25 +0000] "GET /actuator/configprops HTTP/1.1" 429 564 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
45.115.26.203 - - [19/Sep/2026:13:45:25 +0000] "GET /%2eenv HTTP/1.1" 429 564 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
45.115.26.203 - - [19/Sep/2026:13:45:25 +0000] "GET /actuator/env HTTP/1.1" 429 564 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41.125.186]"
45.115.26.203 - - [19/Sep/2026:13:45:25 +0000] "GET /actuator/configprops HTTP/1.1" 429 564 "-" "Mozilla/5.0 (Lin
...
show less
Bad Web Bot
🇳🇱
45.148.10.152
19 Sep 2026
2026-09-19T13:08:21.840364+00:00 ubuntu-8gb-hel1-1 sshd[2799384]: error: PAM: Authentication failure ...
show more
2026-09-19T13:08:21.840364+00:00 ubuntu-8gb-hel1-1 sshd[2799384]: error: PAM: Authentication failure for root from 45.148.10.152
2026-09-19T13:08:24.748623+00:00 ubuntu-8gb-hel1-1 sshd[2799384]: error: PAM: Authentication failure for root from 45.148.10.152
2026-09-19T13:08:27.993029+00:00 ubuntu-8gb-hel1-1 sshd[2799384]: error: PAM: Authentication failure for root from 45.148.10.152
2026-09-19T13:08:31.376068+00:00 ubuntu-8gb-hel1-1 sshd[2799384]: error: PAM: Authentication failure for root from 45.148.10.152
2026-09-19T13:08:31.376871+00:00 ubuntu-8gb-hel1-1 sshd[2799384]: Failed keyboard-interactive/pam for root from 45.148.10.152 port 28362 ssh2
2026-09-19T13:08:34.955304+00:00 ubuntu-8gb-hel1-1 sshd[2799384]: error: PAM: Authentication failure for root from 45.148.10.152
2026-09-19T13:08:34.956324+00:00 ubuntu-8gb-hel1-1 sshd[2799384]: Failed keyboard-interactive/pam for root from 45.148.10.152 port 28362 ssh2
2026-09-19T13:13:42.012216+00:00 ubuntu-8gb-hel1-1 sshd[2812405]: error
...
show less
Brute-Force
SSH
🇧🇪
34.156.22.222
19 Sep 2026
34.156.22.222 - - [19/Sep/2026:12:35:07 +0000] "GET /.claude/settings.json HTTP/1.1" 429 162 "-" "Mo ...
show more
34.156.22.222 - - [19/Sep/2026:12:35:07 +0000] "GET /.claude/settings.json HTTP/1.1" 429 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.156.22.222 - - [19/Sep/2026:12:35:07 +0000] "GET /.env.aws HTTP/1.1" 429 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.156.22.222 - - [19/Sep/2026:12:35:07 +0000] "GET /.env.backup HTTP/1.1" 429 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.156.22.222 - - [19/Sep/2026:12:35:07 +0000] "GET /.env.dist HTTP/1.1" 429 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.156.22.222 - - [19/Sep/2026:12:35:07 +0000] "GET /.env-example HTTP/1.1" 429 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.156.22.222 - - [19/Sep/2026:12:35:07 +0000] "GET /.env.anthropic HTTP/1.1" 429 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.156.22.222 - - [19/Sep/2026:12:35:07 +0000] "GET /.env.dev HTTP/1.1" 429 162 "-" "Mozill
...
show less
Bad Web Bot
🇧🇪
34.62.82.165
19 Sep 2026
34.62.82.165 - - [19/Sep/2026:10:12:58 +0000] "GET / HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10 ...
show more
34.62.82.165 - - [19/Sep/2026:10:12:58 +0000] "GET / HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36"
34.62.82.165 - - [19/Sep/2026:10:12:58 +0000] "GET /under-construction HTTP/1.1" 200 9042 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36"
34.62.82.165 - - [19/Sep/2026:10:12:58 +0000] "GET /Components/Layout/ReconnectModal.cyz5k529gx.razor.js HTTP/1.1" 200 740 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36"
34.62.82.165 - - [19/Sep/2026:10:12:59 +0000] "GET /lib/bootstrap/dist/js/bootstrap.bundle.min.493y06b0oq.js HTTP/1.1" 200 23984 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36"
34.62.82.165 - - [19/Sep/2026:10:12:59 +0000] "GET /Components/Account/Shared/PasskeySubmit.7ozcgj5zvk.razor.js HTTP/
...
show less
Bad Web Bot
Web App Attack