AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User edena joined AbuseIPDB in May 2019 and has reported 1,762 IP addresses.

Standing (weight) is good.

ACTIVE USER

IP	Date	Comment	Categories
🇳🇱 45.138.12.51	19 Sep 2026	45.138.12.51 - - [19/Sep/2026:05:21:06 +0200] "GET /settings/.env HTTP/1.1" 403 322 "-" "l9explore/1 ... show more 45.138.12.51 - - [19/Sep/2026:05:21:06 +0200] "GET /settings/.env HTTP/1.1" 403 322 "-" "l9explore/1.2.2" 45.138.12.51 - - [19/Sep/2026:05:21:06 +0200] "GET /assets../.git/config HTTP/1.1" 403 322 "-" "l9explore/1.2.2" 45.138.12.51 - - [19/Sep/2026:05:21:06 +0200] "GET /static../.git/config HTTP/1.1" 403 322 "-" "l9explore/1.2.2" ... show less	Web App Attack Bad Web Bot
🇵🇰 223.123.65.54	18 Sep 2026	223.123.65.54 - - [19/Sep/2026:01:17:26 +0200] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2 ... show more 223.123.65.54 - - [19/Sep/2026:01:17:26 +0200] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 591 "-" "libredtail-http" 223.123.65.54 - - [19/Sep/2026:01:17:27 +0200] "POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1" 400 591 "-" "libredtail-http" 223.123.65.54 - - [19/Sep/2026:01:17:28 +0200] "POST /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 403 359 "-" "libredtail-http" ... show less	Web App Attack Bad Web Bot
🇩🇪 45.139.104.224	18 Sep 2026	45.139.104.224 - - [18/Sep/2026:22:52:24 +0200] "GET /terraform.tfstate.backup HTTP/1.1" 403 322 "-" ... show more 45.139.104.224 - - [18/Sep/2026:22:52:24 +0200] "GET /terraform.tfstate.backup HTTP/1.1" 403 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.139.104.224 - - [18/Sep/2026:22:52:24 +0200] "GET /backup.sql HTTP/1.1" 403 322 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:109.0) Gecko/20100101 Firefox/115.0" 45.139.104.224 - - [18/Sep/2026:22:52:24 +0200] "GET /db.sql HTTP/1.1" 403 322 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6 Safari/605.1.15" ... show less	Web App Attack Bad Web Bot
🇰🇷 43.128.131.29	18 Sep 2026	43.128.131.29 - - [18/Sep/2026:14:06:43 +0200] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2 ... show more 43.128.131.29 - - [18/Sep/2026:14:06:43 +0200] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 591 "-" "libredtail-http" 43.128.131.29 - - [18/Sep/2026:14:06:44 +0200] "POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1" 400 591 "-" "libredtail-http" 43.128.131.29 - - [18/Sep/2026:14:06:45 +0200] "POST /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 403 359 "-" "libredtail-http" ... show less	Web App Attack Bad Web Bot
🇩🇪 213.209.159.154	18 Sep 2026	213.209.159.154 - - [18/Sep/2026:08:21:21 +0200] "GET /.env HTTP/1.1" 403 359 "-" "Mozilla/5.0 (Wind ... show more 213.209.159.154 - - [18/Sep/2026:08:21:21 +0200] "GET /.env HTTP/1.1" 403 359 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 213.209.159.154 - - [18/Sep/2026:08:21:21 +0200] "GET /api/.env HTTP/1.1" 403 358 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" ... show less	Web App Attack Bad Web Bot
🇹🇷 149.102.229.137	18 Sep 2026	149.102.229.137 - - [18/Sep/2026:06:39:34 +0200] "GET /.env.dev HTTP/1.1" 403 644 "-" "Mozilla/5.0 ( ... show more 149.102.229.137 - - [18/Sep/2026:06:39:34 +0200] "GET /.env.dev HTTP/1.1" 403 644 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 149.102.229.137 - - [18/Sep/2026:06:39:34 +0200] "GET /.env.production HTTP/1.1" 403 644 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 149.102.229.137 - - [18/Sep/2026:06:39:34 +0200] "GET /app/.env HTTP/1.1" 403 1826 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack Bad Web Bot
🇺🇸 144.225.6.184	18 Sep 2026	144.225.6.184 - - [18/Sep/2026:06:26:18 +0200] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2 ... show more 144.225.6.184 - - [18/Sep/2026:06:26:18 +0200] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 591 "-" "libredtail-http" 144.225.6.184 - - [18/Sep/2026:06:26:19 +0200] "POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1" 400 591 "-" "libredtail-http" 144.225.6.184 - - [18/Sep/2026:06:26:20 +0200] "POST /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 403 359 "-" "libredtail-http" ... show less	Web App Attack Bad Web Bot
🇳🇱 93.123.109.101	17 Sep 2026	93.123.109.101 - - [17/Sep/2026:20:36:43 +0200] "GET /ai/credentials.json HTTP/1.1" 403 685 "-" "Moz ... show more 93.123.109.101 - - [17/Sep/2026:20:36:43 +0200] "GET /ai/credentials.json HTTP/1.1" 403 685 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 93.123.109.101 - - [17/Sep/2026:20:36:44 +0200] "GET /.aws/credentials.bak HTTP/1.1" 403 685 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 93.123.109.101 - - [17/Sep/2026:20:36:44 +0200] "GET /.aws/config.bak HTTP/1.1" 403 685 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" ... show less	Web App Attack Bad Web Bot
🇺🇸 34.45.6.137	17 Sep 2026	34.45.6.137 - - [17/Sep/2026:19:21:29 +0200] "GET /.git/config HTTP/1.1" 403 380 "-" "Mozilla/5.0 (M ... show more 34.45.6.137 - - [17/Sep/2026:19:21:29 +0200] "GET /.git/config HTTP/1.1" 403 380 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.45.6.137 - - [17/Sep/2026:19:21:30 +0200] "GET /.env HTTP/1.1" 403 380 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.45.6.137 - - [17/Sep/2026:19:21:30 +0200] "GET /.env.local HTTP/1.1" 403 380 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Web App Attack Bad Web Bot
🇫🇷 31.220.82.234	17 Sep 2026	31.220.82.234 - - [17/Sep/2026:13:57:21 +0200] "GET /.env HTTP/1.1" 403 1827 "-" "Mozilla/5.0 (compa ... show more 31.220.82.234 - - [17/Sep/2026:13:57:21 +0200] "GET /.env HTTP/1.1" 403 1827 "-" "Mozilla/5.0 (compatible; LaravelBounty/1.0)" 31.220.82.234 - - [17/Sep/2026:13:57:58 +0200] "GET /.env HTTP/1.1" 403 303 "-" "Mozilla/5.0 (compatible; LaravelBounty/1.0)" 31.220.82.234 - - [17/Sep/2026:13:58:53 +0200] "GET /.env HTTP/1.1" 403 1827 "-" "Mozilla/5.0 (compatible; LaravelBounty/1.0)" ... show less	Web App Attack Bad Web Bot
🇩🇪 94.154.46.244	17 Sep 2026	94.154.46.244 - - [17/Sep/2026:10:16:37 +0200] "GET /wp-config.php.old HTTP/1.1" 403 1811 "-" "Mozil ... show more 94.154.46.244 - - [17/Sep/2026:10:16:37 +0200] "GET /wp-config.php.old HTTP/1.1" 403 1811 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 94.154.46.244 - - [17/Sep/2026:10:16:37 +0200] "GET /.npmrc HTTP/1.1" 403 1811 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 94.154.46.244 - - [17/Sep/2026:10:16:37 +0200] "GET /wp-config.bak HTTP/1.1" 403 1811 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" ... show less	Web App Attack Bad Web Bot
🇺🇸 173.214.163.142	17 Sep 2026	173.214.163.142 - - [17/Sep/2026:05:19:29 +0200] "GET /pathscan-a9451d8c26ed-nope.env HTTP/1.1" 403 ... show more 173.214.163.142 - - [17/Sep/2026:05:19:29 +0200] "GET /pathscan-a9451d8c26ed-nope.env HTTP/1.1" 403 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 173.214.163.142 - - [17/Sep/2026:05:19:29 +0200] "GET /.env.txt HTTP/1.1" 403 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 173.214.163.142 - - [17/Sep/2026:05:19:29 +0200] "GET /.git/config HTTP/1.1" 403 325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" ... show less	Web App Attack Bad Web Bot
🇫🇮 2.29.38.95	16 Sep 2026	2.29.38.95 - - [16/Sep/2026:21:37:37 +0200] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/. ... show more 2.29.38.95 - - [16/Sep/2026:21:37:37 +0200] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 591 "-" "libredtail-http" 2.29.38.95 - - [16/Sep/2026:21:37:37 +0200] "POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1" 400 591 "-" "libredtail-http" 2.29.38.95 - - [16/Sep/2026:21:37:40 +0200] "POST /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 403 359 "-" "libredtail-http" ... show less	Web App Attack Bad Web Bot
🇰🇿 31.132.90.3	16 Sep 2026	31.132.90.3 - - [16/Sep/2026:20:27:15 +0200] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/ ... show more 31.132.90.3 - - [16/Sep/2026:20:27:15 +0200] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 403 1867 "-" "libredtail-http" ... show less	Web App Attack Bad Web Bot
🇺🇸 57.154.242.54	16 Sep 2026	57.154.242.54 - - [16/Sep/2026:17:20:42 +0200] "GET /.env HTTP/1.1" 403 359 "-" "Mozilla/5.0 (Linux; ... show more 57.154.242.54 - - [16/Sep/2026:17:20:42 +0200] "GET /.env HTTP/1.1" 403 359 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" 57.154.242.54 - - [16/Sep/2026:17:20:43 +0200] "GET /.env.local HTTP/1.1" 403 359 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" 57.154.242.54 - - [16/Sep/2026:17:20:43 +0200] "GET /wp-config.php HTTP/1.1" 403 359 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" ... show less	Web App Attack Bad Web Bot
🇩🇪 2.26.64.195	16 Sep 2026	2.26.64.195 - - [16/Sep/2026:15:11:39 +0200] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/ ... show more 2.26.64.195 - - [16/Sep/2026:15:11:39 +0200] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 591 "-" "libredtail-http" 2.26.64.195 - - [16/Sep/2026:15:11:43 +0200] "POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1" 400 591 "-" "libredtail-http" 2.26.64.195 - - [16/Sep/2026:15:11:47 +0200] "POST /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 403 359 "-" "libredtail-http" ... show less	Web App Attack Bad Web Bot
🇳🇱 91.92.47.87	16 Sep 2026	91.92.47.87 - - [16/Sep/2026:10:59:35 +0200] "GET /.git/config HTTP/1.1" 403 359 "-" "Mozilla/5.0 (W ... show more 91.92.47.87 - - [16/Sep/2026:10:59:35 +0200] "GET /.git/config HTTP/1.1" 403 359 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 91.92.47.87 - - [16/Sep/2026:10:59:35 +0200] "GET /.env HTTP/1.1" 403 359 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 91.92.47.87 - - [16/Sep/2026:10:59:35 +0200] "GET /.env.production HTTP/1.1" 403 359 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" ... show less	Web App Attack Bad Web Bot
🇮🇳 34.47.168.250	16 Sep 2026	34.47.168.250 - - [16/Sep/2026:04:25:53 +0200] "GET /.git/config HTTP/1.1" 403 380 "-" "Mozilla/5.0 ... show more 34.47.168.250 - - [16/Sep/2026:04:25:53 +0200] "GET /.git/config HTTP/1.1" 403 380 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.47.168.250 - - [16/Sep/2026:04:25:54 +0200] "GET /.env HTTP/1.1" 403 380 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.47.168.250 - - [16/Sep/2026:04:25:54 +0200] "GET /.env.local HTTP/1.1" 403 380 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Web App Attack Bad Web Bot
🇬🇧 78.153.140.148	16 Sep 2026	78.153.140.148 - - [16/Sep/2026:03:25:29 +0200] "GET /.env HTTP/1.1" 403 359 "-" "Mozilla/5.0 (Windo ... show more 78.153.140.148 - - [16/Sep/2026:03:25:29 +0200] "GET /.env HTTP/1.1" 403 359 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36" ... show less	Web App Attack Bad Web Bot
🇺🇸 40.116.110.67	15 Sep 2026	40.116.110.67 - - [15/Sep/2026:23:26:21 +0200] "GET /.env HTTP/1.1" 403 322 "-" "Mozilla/5.0 (Macint ... show more 40.116.110.67 - - [15/Sep/2026:23:26:21 +0200] "GET /.env HTTP/1.1" 403 322 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36" 40.116.110.67 - - [15/Sep/2026:23:26:21 +0200] "GET /.env.local HTTP/1.1" 403 322 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36" 40.116.110.67 - - [15/Sep/2026:23:26:21 +0200] "GET /.env.development HTTP/1.1" 403 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" ... show less	Web App Attack Bad Web Bot
🇫🇷 169.58.186.92	15 Sep 2026	169.58.186.92 - - [15/Sep/2026:21:48:17 +0200] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2 ... show more 169.58.186.92 - - [15/Sep/2026:21:48:17 +0200] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 591 "-" "libredtail-http" 169.58.186.92 - - [15/Sep/2026:21:48:17 +0200] "POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1" 400 591 "-" "libredtail-http" 169.58.186.92 - - [15/Sep/2026:21:48:19 +0200] "POST /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 403 359 "-" "libredtail-http" ... show less	Web App Attack Bad Web Bot
🇩🇪 5.252.26.87	15 Sep 2026	5.252.26.87 - - [15/Sep/2026:21:09:16 +0200] "GET /static../.env HTTP/1.1" 403 303 "-" "Mozilla/5.0 ... show more 5.252.26.87 - - [15/Sep/2026:21:09:16 +0200] "GET /static../.env HTTP/1.1" 403 303 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/131.0.6157.175 Safari/537.36" 5.252.26.87 - - [15/Sep/2026:21:09:16 +0200] "GET /media../.env HTTP/1.1" 403 303 "-" "Mozilla/5.0 (Windows NT 10.0; rv:121.5) Gecko/20100101 Firefox/121.5; compatible; Discordbot/2.0; +https://discordapp.com" 5.252.26.87 - - [15/Sep/2026:21:09:18 +0200] "GET /@fs/home/ec2-user/.aws/credentials?raw?? HTTP/1.1" 403 303 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Mobile/15E148 Safari/604.1; compatible; Slackbot-LinkExpanding/1.0; +https://api.slack.com/robots" ... show less	Web App Attack Bad Web Bot
🇺🇸 32.195.59.163	15 Sep 2026	32.195.59.163 - - [15/Sep/2026:20:59:09 +0200] "GET /static../.env HTTP/1.1" 403 303 "-" "Mozilla/5. ... show more 32.195.59.163 - - [15/Sep/2026:20:59:09 +0200] "GET /static../.env HTTP/1.1" 403 303 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.1371.132 Mobile Safari/537.36; compatible; GPTBot/1.2; +https://openai.com/gptbot" 32.195.59.163 - - [15/Sep/2026:20:59:09 +0200] "GET /media../.env HTTP/1.1" 403 303 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_6_1) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected]) Chrome/118.0.1583.222 Safari/537.36 Edg/118.0.1583.222" 32.195.59.163 - - [15/Sep/2026:20:59:15 +0200] "GET /@fs/home/ec2-user/.aws/credentials?raw?? HTTP/1.1" 403 303 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user) Chrome/128.0.3327.59 Safari/537.36" ... show less	Web App Attack Bad Web Bot
🇩🇪 130.12.180.194	15 Sep 2026	130.12.180.194 - - [15/Sep/2026:12:41:15 +0200] "GET /.env HTTP/1.1" 403 1827 "-" "Mozilla/5.0 (Wind ... show more 130.12.180.194 - - [15/Sep/2026:12:41:15 +0200] "GET /.env HTTP/1.1" 403 1827 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" 130.12.180.194 - - [15/Sep/2026:12:41:15 +0200] "GET /.env.local HTTP/1.1" 403 1827 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" 130.12.180.194 - - [15/Sep/2026:12:41:15 +0200] "GET /.env.production HTTP/1.1" 403 645 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" ... show less	Web App Attack Bad Web Bot
🇸🇬 43.156.130.94	15 Sep 2026	43.156.130.94 - - [15/Sep/2026:10:58:48 +0200] "GET /.env HTTP/1.1" 403 1826 "-" "Go-http-client/1.1 ... show more 43.156.130.94 - - [15/Sep/2026:10:58:48 +0200] "GET /.env HTTP/1.1" 403 1826 "-" "Go-http-client/1.1" 43.156.130.94 - - [15/Sep/2026:10:58:49 +0200] "GET /.env.backup HTTP/1.1" 403 1826 "-" "Go-http-client/1.1" 43.156.130.94 - - [15/Sep/2026:10:58:50 +0200] "GET /.env.bak HTTP/1.1" 403 1826 "-" "Go-http-client/1.1" ... show less	Web App Attack Bad Web Bot