🇺🇸
143.198.161.227
07 Oct 2026
2026-10-07T20:19:41.613042+02:00 vps-a3e99d67 sshd-session[3603453]: Invalid user test101 from 143.1 ...
show more
2026-10-07T20:19:41.613042+02:00 vps-a3e99d67 sshd-session[3603453]: Invalid user test101 from 143.198.161.227 port 44528
2026-10-07T20:20:59.158425+02:00 vps-a3e99d67 sshd-session[3605279]: Invalid user smkim from 143.198.161.227 port 43098
2026-10-07T20:22:12.881896+02:00 vps-a3e99d67 sshd-session[3607004]: Invalid user mosquitto from 143.198.161.227 port 33634
...
show less
Brute-Force
SSH
🇺🇸
34.138.152.6
07 Oct 2026
34.138.152.6 - - [07/Oct/2026:18:58:32 +0200] "GET /.ssh/id_rsa HTTP/2.0" 404 264 "-" "Mozilla/5.0 ( ...
show more
34.138.152.6 - - [07/Oct/2026:18:58:32 +0200] "GET /.ssh/id_rsa HTTP/2.0" 404 264 "-" "Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)"
34.138.152.6 - - [07/Oct/2026:18:58:32 +0200] "GET /wp-json HTTP/2.0" 404 264 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)"
34.138.152.6 - - [07/Oct/2026:18:58:32 +0200] "GET /.ssh/id_ed25519 HTTP/2.0" 404 264 "-" "Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)"
34.138.152.6 - - [07/Oct/2026:18:58:33 +0200] "GET /.ssh/config HTTP/2.0" 404 264 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"
34.138.152.6 - - [07/Oct/2026:18:58:33 +0200] "GET /@fs/app/.env?raw?? HTTP/2.0" 404 264 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)"
34.138.152.6 - - [07/Oct/2026:18:58:33 +0200] "GET /@fs/../.env?raw?? HTTP/2.0" 404 264 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
...
show less
Web App Attack
Bad Web Bot
🇺🇸
136.87.9.18
07 Oct 2026
136.87.9.18 - - [07/Oct/2026:18:56:07 +0200] "GET /api/console/api_server?sense_version=%40%40SENSE_ ...
show more
136.87.9.18 - - [07/Oct/2026:18:56:07 +0200] "GET /api/console/api_server?sense_version=%40%40SENSE_VERSION&apis=../../../../../../.env HTTP/2.0" 404 264 "-" "Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)"
136.87.9.18 - - [07/Oct/2026:18:56:07 +0200] "GET /api/attachments/img/avatar/..%2F..%2F..%2F..%2F..%2F.env HTTP/2.0" 404 264 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"
136.87.9.18 - - [07/Oct/2026:18:56:07 +0200] "GET /api/attachments/img/avatar/..%2F..%2F..%2F..%2F..%2Fproc%2Fself%2Fenviron HTTP/2.0" 404 264 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36"
136.87.9.18 - - [07/Oct/2026:18:56:07 +0200] "GET /api/console/api_server?sense_version=%40%40SENSE_VERSION&apis=../../../../../../proc/self/environ HTTP/2.0" 404 264 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"
136.87.9.18 - - [07/Oct/2026:18:56:07 +0200] "
...
show less
Web App Attack
Bad Web Bot
🇳🇱
34.6.149.106
07 Oct 2026
34.6.149.106 - - [07/Oct/2026:18:37:46 +0200] "GET /api/system/fileView?file=/app/.env HTTP/2.0" 404 ...
show more
34.6.149.106 - - [07/Oct/2026:18:37:46 +0200] "GET /api/system/fileView?file=/app/.env HTTP/2.0" 404 264 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
34.6.149.106 - - [07/Oct/2026:18:37:46 +0200] "GET /userfiles?path=../../../.env HTTP/2.0" 404 264 "-" "Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)"
34.6.149.106 - - [07/Oct/2026:18:37:46 +0200] "GET /userfiles?path=../../.env HTTP/2.0" 404 264 "-" "Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)"
34.6.149.106 - - [07/Oct/2026:18:37:46 +0200] "GET /userfiles?path=../../../.env HTTP/2.0" 404 264 "-" "Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)"
34.6.149.106 - - [07/Oct/2026:18:37:46 +0200] "GET /userfiles?path=../../.env HTTP/2.0" 404 264 "-" "Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)"
...
show less
Web App Attack
Bad Web Bot
🇯🇵
34.146.182.250
07 Oct 2026
34.146.182.250 - - [07/Oct/2026:18:19:55 +0200] "GET /api/attachments/img/avatar/..%2F..%2F..%2F..%2 ...
show more
34.146.182.250 - - [07/Oct/2026:18:19:55 +0200] "GET /api/attachments/img/avatar/..%2F..%2F..%2F..%2F..%2F.env HTTP/2.0" 404 264 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot"
34.146.182.250 - - [07/Oct/2026:18:19:57 +0200] "GET /api/attachments/img/avatar/..%2F..%2F..%2F..%2F..%2Fproc%2Fself%2Fenviron HTTP/2.0" 404 287 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)"
34.146.182.250 - - [07/Oct/2026:18:19:57 +0200] "GET /api/console/api_server?sense_version=%40%40SENSE_VERSION&apis=../../../../../../proc/self/environ HTTP/2.0" 404 264 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)"
34.146.182.250 - - [07/Oct/2026:18:19:57 +0200] "GET /document.php?modulepart=systemtools&file=../conf/conf.php&hashp=shared HTTP/2.0" 404 48 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)"
34.146.182.250 - - [07/Oct/
...
show less
Web App Attack
Bad Web Bot
🇰🇷
20.214.170.255
07 Oct 2026
20.214.170.255 - - [07/Oct/2026:18:19:38 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.p ...
show more
20.214.170.255 - - [07/Oct/2026:18:19:38 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 8460 "-" "-" 10125 -
20.214.170.255 - - [07/Oct/2026:18:19:40 +0200] "GET /098.php HTTP/1.1" 404 40132 "-" "-" 54882 -
20.214.170.255 - - [07/Oct/2026:18:19:40 +0200] "GET /098.php HTTP/1.1" 404 40132 "-" "-" 54882 -
20.214.170.255 - - [07/Oct/2026:18:19:40 +0200] "GET /np.php?p= HTTP/1.1" 404 39960 "-" "-" 37643 -
20.214.170.255 - - [07/Oct/2026:18:19:40 +0200] "GET /np.php?p= HTTP/1.1" 404 39960 "-" "-" 37643 -
...
show less
Web App Attack
Bad Web Bot
🇺🇸
136.70.74.218
07 Oct 2026
136.70.74.218 - - [07/Oct/2026:17:53:33 +0200] "GET /document.php?modulepart=systemtools&file=../con ...
show more
136.70.74.218 - - [07/Oct/2026:17:53:33 +0200] "GET /document.php?modulepart=systemtools&file=../conf/conf.php&hashp=shared HTTP/2.0" 404 38 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"
136.70.74.218 - - [07/Oct/2026:17:53:33 +0200] "GET /api/console/api_server?sense_version=%40%40SENSE_VERSION&apis=../../../../../../.env HTTP/2.0" 404 264 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
136.70.74.218 - - [07/Oct/2026:17:53:33 +0200] "GET /api/console/api_server?sense_version=%40%40SENSE_VERSION&apis=../../../../../../proc/self/environ HTTP/2.0" 404 264 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)"
136.70.74.218 - - [07/Oct/2026:17:53:33 +0200] "GET /api/attachments/img/avatar/..%2F..%2F..%2F..%2F..%2F.env HTTP/2.0" 404 264 "-" "Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)"
136.70.74.218 - - [07/Oct/2026:17:53:33 +0200] "GET /api/attachments/img/avatar/..%2F..%2F..%2F..%2F..%2Fproc%2Fself%2Fenviron HTTP/2.0"
...
show less
Web App Attack
Bad Web Bot
🇰🇷
52.141.3.247
07 Oct 2026
52.141.3.247 - - [07/Oct/2026:17:53:05 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php ...
show more
52.141.3.247 - - [07/Oct/2026:17:53:05 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 8461 "-" "-" 12566 -
52.141.3.247 - - [07/Oct/2026:17:53:07 +0200] "GET /wsd.php HTTP/1.1" 404 39776 "-" "-" 18084 -
52.141.3.247 - - [07/Oct/2026:17:53:07 +0200] "GET /go.php HTTP/1.1" 404 40120 "-" "-" 17190 -
52.141.3.247 - - [07/Oct/2026:17:53:08 +0200] "GET /z60.php?p= HTTP/1.1" 404 39986 "-" "-" 47331 -
52.141.3.247 - - [07/Oct/2026:17:53:07 +0200] "GET /wsd.php HTTP/1.1" 404 39776 "-" "-" 18084 -
...
show less
Web App Attack
Bad Web Bot
🇰🇷
20.200.211.114
07 Oct 2026
20.200.211.114 - - [07/Oct/2026:17:28:07 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.p ...
show more
20.200.211.114 - - [07/Oct/2026:17:28:07 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 8463 "-" "-" 13982 -
20.200.211.114 - - [07/Oct/2026:17:28:09 +0200] "GET /aa.php HTTP/1.1" 404 39598 "-" "-" 21134 -
20.200.211.114 - - [07/Oct/2026:17:28:09 +0200] "GET /z70.php HTTP/1.1" 404 39891 "-" "-" 36126 -
20.200.211.114 - - [07/Oct/2026:17:28:10 +0200] "GET /adminfuns.php HTTP/1.1" 404 40154 "-" "-" 23102 -
20.200.211.114 - - [07/Oct/2026:17:28:10 +0200] "GET /av.php HTTP/1.1" 404 39840 "-" "-" 32794 -
20.200.211.114 - - [07/Oct/2026:17:28:11 +0200] "GET /chosen.php HTTP/1.1" 404 40028 "-" "-" 37837 -
...
show less
Web App Attack
Bad Web Bot
🇹🇼
35.185.158.56
07 Oct 2026
35.185.158.56 - - [07/Oct/2026:17:20:11 +0200] "GET /..%2f..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5 ...
show more
35.185.158.56 - - [07/Oct/2026:17:20:11 +0200] "GET /..%2f..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)" 863 -
35.185.158.56 - - [07/Oct/2026:17:20:11 +0200] "GET /..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)" 436 -
35.185.158.56 - - [07/Oct/2026:17:20:11 +0200] "GET /settings%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 494 -
35.185.158.56 - - [07/Oct/2026:17:20:11 +0200] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)" 440 -
35.185.158.56 - - [07/Oct/2026:17:20:11 +0200] "GET /dashboard%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" 290 -
35.185.158.56 - - [07/Oct/2026:17:
...
show less
Web App Attack
Bad Web Bot
🇭🇰
152.32.171.213
07 Oct 2026
2026-10-07T16:38:32.181927+02:00 vps-a3e99d67 sshd-session[3290098]: Invalid user ghost from 152.32. ...
show more
2026-10-07T16:38:32.181927+02:00 vps-a3e99d67 sshd-session[3290098]: Invalid user ghost from 152.32.171.213 port 53180
2026-10-07T17:03:08.980962+02:00 vps-a3e99d67 sshd-session[3326348]: Invalid user sharing from 152.32.171.213 port 39186
2026-10-07T17:15:06.336104+02:00 vps-a3e99d67 sshd-session[3345413]: Invalid user nexus from 152.32.171.213 port 33638
...
show less
Brute-Force
SSH
🇺🇸
34.182.169.219
07 Oct 2026
34.182.169.219 - - [07/Oct/2026:17:12:18 +0200] "GET /.env.old HTTP/2.0" 404 287 "-" "Mozilla/5.0 (c ...
show more
34.182.169.219 - - [07/Oct/2026:17:12:18 +0200] "GET /.env.old HTTP/2.0" 404 287 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
34.182.169.219 - - [07/Oct/2026:17:12:18 +0200] "GET /.env.bak HTTP/2.0" 404 264 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot"
34.182.169.219 - - [07/Oct/2026:17:12:18 +0200] "GET /.env.backup HTTP/2.0" 404 264 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)"
34.182.169.219 - - [07/Oct/2026:17:12:18 +0200] "GET /.env.local HTTP/2.0" 404 264 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )"
34.182.169.219 - - [07/Oct/2026:17:12:18 +0200] "GET /.env.save HTTP/2.0" 404 264 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"
34.182.169.219 - - [07/Oct/2026:17:12:19 +0200] "GET /backend/.env HTTP/2.0" 404 264 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compati
...
show less
Web App Attack
Bad Web Bot
🇧🇷
34.39.199.185
07 Oct 2026
34.39.199.185 - - [07/Oct/2026:16:57:50 +0200] "GET /wp-json HTTP/2.0" 404 264 "-" "Mozilla/5.0 (com ...
show more
34.39.199.185 - - [07/Oct/2026:16:57:50 +0200] "GET /wp-json HTTP/2.0" 404 264 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)"
34.39.199.185 - - [07/Oct/2026:16:57:51 +0200] "GET /.ssh/id_rsa HTTP/2.0" 404 264 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
34.39.199.185 - - [07/Oct/2026:16:57:51 +0200] "GET /.ssh/config HTTP/2.0" 404 264 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
34.39.199.185 - - [07/Oct/2026:16:57:51 +0200] "GET /.ssh/id_ed25519 HTTP/2.0" 404 264 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; +https://openai.com/searchbot"
34.39.199.185 - - [07/Oct/2026:16:57:52 +0200] "GET /@fs/src/.env?raw?? HTTP/2.0" 404 264 "-" "Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)"
34.39.199.185 - - [07/Oct/2026:16:57:52 +0200] "GET /@fs/app/.env?raw?? HTTP/2.0" 404 264 "-" "Mozilla/5.0 AppleWebKit/53
...
show less
Web App Attack
Bad Web Bot
🇦🇷
181.10.138.162
07 Oct 2026
2026-10-07T16:51:00.795031+02:00 vps-a3e99d67 sshd-session[3307406]: Invalid user origin from 181.10 ...
show more
2026-10-07T16:51:00.795031+02:00 vps-a3e99d67 sshd-session[3307406]: Invalid user origin from 181.10.138.162 port 56158
2026-10-07T16:52:47.121314+02:00 vps-a3e99d67 sshd-session[3312270]: Invalid user remote from 181.10.138.162 port 53426
2026-10-07T16:54:33.422110+02:00 vps-a3e99d67 sshd-session[3314419]: Invalid user max from 181.10.138.162 port 42356
...
show less
Brute-Force
SSH
🇺🇸
104.196.234.8
07 Oct 2026
104.196.234.8 - - [07/Oct/2026:16:40:45 +0200] "POST /api/graphql HTTP/2.0" 404 38425 "https://chine ...
show more
104.196.234.8 - - [07/Oct/2026:16:40:45 +0200] "POST /api/graphql HTTP/2.0" 404 38425 "https://chine.in" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" 21434 -
104.196.234.8 - - [07/Oct/2026:16:40:45 +0200] "GET /api/fs/read?allowOutsideWorkspace=true&path=/proc/self/environ HTTP/2.0" 404 35910 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 28199 -
104.196.234.8 - - [07/Oct/2026:16:40:45 +0200] "GET /api/system/fileView?file=/proc/self/environ HTTP/2.0" 404 35933 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)" 30884 -
104.196.234.8 - - [07/Oct/2026:16:40:45 +0200] "GET /api/fs/read?allowOutsideWorkspace=true&path=/app/.env HTTP/2.0" 404 35921 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)" 41093 -
104.196.234.8 - - [07/Oct/2026:16:40:45 +0200] "GET /userfiles?path=../../.env HTTP/2.0" 404 36219 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.
...
show less
Web App Attack
Bad Web Bot
🇳🇬
41.216.167.226
07 Oct 2026
2026-10-07T16:22:36.306397+02:00 vps-a3e99d67 sshd-session[3268756]: Invalid user tero from 41.216.1 ...
show more
2026-10-07T16:22:36.306397+02:00 vps-a3e99d67 sshd-session[3268756]: Invalid user tero from 41.216.167.226 port 41874
2026-10-07T16:28:10.512034+02:00 vps-a3e99d67 sshd-session[3276063]: Invalid user rajmund from 41.216.167.226 port 52404
2026-10-07T16:31:40.942490+02:00 vps-a3e99d67 sshd-session[3281619]: Invalid user steam from 41.216.167.226 port 42038
...
show less
Brute-Force
SSH
🇺🇸
34.29.107.235
07 Oct 2026
34.29.107.235 - - [07/Oct/2026:16:22:24 +0200] "GET /api/orders/..%2f..%2fproc/self/environ HTTP/2.0 ...
show more
34.29.107.235 - - [07/Oct/2026:16:22:24 +0200] "GET /api/orders/..%2f..%2fproc/self/environ HTTP/2.0" 404 264 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot"
34.29.107.235 - - [07/Oct/2026:16:22:24 +0200] "GET /api/orders/..%2f..%2f.env HTTP/2.0" 404 264 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
34.29.107.235 - - [07/Oct/2026:16:22:24 +0200] "GET /api/data/..%2f..%2f.env HTTP/2.0" 404 264 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)"
34.29.107.235 - - [07/Oct/2026:16:22:24 +0200] "GET /api/orders/..%2fadmin/config.json HTTP/2.0" 404 264 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )"
34.29.107.235 - - [07/Oct/2026:16:22:28 +0200] "GET /..%2f.env HTTP/2.0" 404 264 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
34.29.107.235 - - [07/Oct/2026:16:22:28 +0200] "GET /..%2f..%2f.env HTTP/2.0" 404 264 "-" "
...
show less
Web App Attack
Bad Web Bot
🇰🇿
95.58.255.251
07 Oct 2026
2026-10-07T16:16:36.609130+02:00 vps-a3e99d67 sshd-session[3261553]: Invalid user ismail from 95.58. ...
show more
2026-10-07T16:16:36.609130+02:00 vps-a3e99d67 sshd-session[3261553]: Invalid user ismail from 95.58.255.251 port 55662
2026-10-07T16:18:05.811366+02:00 vps-a3e99d67 sshd-session[3263447]: Invalid user nokia from 95.58.255.251 port 33400
2026-10-07T16:19:26.835180+02:00 vps-a3e99d67 sshd-session[3265276]: Invalid user odoo from 95.58.255.251 port 33368
...
show less
Brute-Force
SSH
🇸🇬
139.162.49.153
07 Oct 2026
139.162.49.153 - - [07/Oct/2026:16:18:15 +0200] "GET /0byte.php HTTP/1.1" 404 40011 "-" "Mozilla/5.0 ...
show more
139.162.49.153 - - [07/Oct/2026:16:18:15 +0200] "GET /0byte.php HTTP/1.1" 404 40011 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 28974 -
139.162.49.153 - - [07/Oct/2026:16:18:15 +0200] "GET /0.php HTTP/1.1" 404 40111 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 35673 -
139.162.49.153 - - [07/Oct/2026:16:18:15 +0200] "GET /01.php HTTP/1.1" 404 40150 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 48265 -
139.162.49.153 - - [07/Oct/2026:16:18:15 +0200] "GET /00.php HTTP/1.1" 404 39756 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 67019 -
139.162.49.153 - - [07/Oct/2026:16:18:15 +0200] "GET /1.php HTTP/1.1" 404 39987 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.
...
show less
Web App Attack
Bad Web Bot
🇺🇸
8.231.179.101
07 Oct 2026
8.231.179.101 - - [07/Oct/2026:16:17:28 +0200] "POST /api/graphql HTTP/2.0" 404 36053 "https://chine ...
show more
8.231.179.101 - - [07/Oct/2026:16:17:28 +0200] "POST /api/graphql HTTP/2.0" 404 36053 "https://chine.in" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" 38569 -
8.231.179.101 - - [07/Oct/2026:16:17:28 +0200] "GET /push_config.json HTTP/2.0" 404 35741 "-" "Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)" 33968 -
8.231.179.101 - - [07/Oct/2026:16:17:37 +0200] "GET /__vite_rsc_findSourceMapURL?filename=file:///app/.env&environmentName=rsc HTTP/2.0" 404 38132 "-" "Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)" 17733 -
8.231.179.101 - - [07/Oct/2026:16:17:37 +0200] "GET /__vite_rsc_findSourceMapURL?filename=file:///root/.ssh/id_rsa&environmentName=rsc HTTP/2.0" 404 36074 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)" 24604 -
8.231.179.101 - - [07/Oct/2026:16:17:37 +0200] "GET /__vite_rsc_findSourceMapURL?filename=file:///root/.aws/credentials&environmentName=rsc HTTP/2.0"
...
show less
Web App Attack
Bad Web Bot
🇧🇪
104.199.104.236
07 Oct 2026
104.199.104.236 - - [07/Oct/2026:16:12:48 +0200] "GET /api/data/..%2f..%2f.env HTTP/2.0" 404 264 "-" ...
show more
104.199.104.236 - - [07/Oct/2026:16:12:48 +0200] "GET /api/data/..%2f..%2f.env HTTP/2.0" 404 264 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
104.199.104.236 - - [07/Oct/2026:16:12:48 +0200] "GET /api/orders/..%2f..%2f.env HTTP/2.0" 404 264 "-" "Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)"
104.199.104.236 - - [07/Oct/2026:16:12:48 +0200] "GET /api/orders/..%2fadmin/config.json HTTP/2.0" 404 264 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot"
104.199.104.236 - - [07/Oct/2026:16:12:51 +0200] "GET /..%2f.env HTTP/2.0" 404 264 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; +https://openai.com/searchbot"
104.199.104.236 - - [07/Oct/2026:16:12:51 +0200] "GET /api%2F.env HTTP/2.0" 404 264 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
104.199.104.236 - - [07/Oct/
...
show less
Web App Attack
Bad Web Bot
🇺🇸
34.73.247.134
07 Oct 2026
34.73.247.134 - - [07/Oct/2026:16:07:06 +0200] "GET /api/orders/..%2f..%2fproc/self/environ HTTP/2.0 ...
show more
34.73.247.134 - - [07/Oct/2026:16:07:06 +0200] "GET /api/orders/..%2f..%2fproc/self/environ HTTP/2.0" 404 287 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
34.73.247.134 - - [07/Oct/2026:16:07:06 +0200] "GET /api/data/..%2f..%2f.env HTTP/2.0" 404 264 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot"
34.73.247.134 - - [07/Oct/2026:16:07:06 +0200] "GET /api/orders/..%2f..%2f.env HTTP/2.0" 404 264 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; +https://openai.com/searchbot"
34.73.247.134 - - [07/Oct/2026:16:07:06 +0200] "GET /api/orders/..%2fadmin/config.json HTTP/2.0" 404 264 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"
34.73.247.134 - - [07/Oct/2026:16:07:11 +0200] "GET /..%2f.env HTTP/2
...
show less
Web App Attack
Bad Web Bot
🇨🇦
34.118.176.36
07 Oct 2026
34.118.176.36 - - [07/Oct/2026:16:06:02 +0200] "GET /resources/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f. ...
show more
34.118.176.36 - - [07/Oct/2026:16:06:02 +0200] "GET /resources/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/2.0" 404 264 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)"
34.118.176.36 - - [07/Oct/2026:16:06:02 +0200] "GET /static/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/2.0" 404 264 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"
34.118.176.36 - - [07/Oct/2026:16:06:09 +0200] "GET /api/data/..%2f..%2f.env HTTP/2.0" 404 287 "-" "Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)"
34.118.176.36 - - [07/Oct/2026:16:06:09 +0200] "GET /api/orders/..%2f..%2fproc/self/environ HTTP/2.0" 404 264 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
34.118.176.36 - - [07/Oct/2026:16:06:09 +0200] "GET /api/orders/..%2fadmin/config.json HTTP/2.0" 404 264 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)"
34.118.176.36 - - [07/Oct/2026:16:06:09 +0200] "GET /api/order
...
show less
Web App Attack
Bad Web Bot
🇺🇸
136.69.188.77
07 Oct 2026
136.69.188.77 - - [07/Oct/2026:16:05:10 +0200] "GET /api/orders/..%2f..%2fproc/self/environ HTTP/2.0 ...
show more
136.69.188.77 - - [07/Oct/2026:16:05:10 +0200] "GET /api/orders/..%2f..%2fproc/self/environ HTTP/2.0" 404 264 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)"
136.69.188.77 - - [07/Oct/2026:16:05:10 +0200] "GET /api/orders/..%2fadmin/config.json HTTP/2.0" 404 264 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)"
136.69.188.77 - - [07/Oct/2026:16:05:10 +0200] "GET /api/data/..%2f..%2f.env HTTP/2.0" 404 264 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )"
136.69.188.77 - - [07/Oct/2026:16:05:16 +0200] "GET /admin%2F.env HTTP/2.0" 404 287 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
136.69.188.77 - - [07/Oct/2026:16:05:16 +0200] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/2.0" 404 264 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )"
136.69.
...
show less
Web App Attack
Bad Web Bot
🇺🇸
136.71.224.194
07 Oct 2026
136.71.224.194 - - [07/Oct/2026:16:04:23 +0200] "GET /api/orders/..%2f..%2fproc/self/environ HTTP/2. ...
show more
136.71.224.194 - - [07/Oct/2026:16:04:23 +0200] "GET /api/orders/..%2f..%2fproc/self/environ HTTP/2.0" 404 264 "-" "Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)"
136.71.224.194 - - [07/Oct/2026:16:04:23 +0200] "GET /api/orders/..%2f..%2f.env HTTP/2.0" 404 264 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)"
136.71.224.194 - - [07/Oct/2026:16:04:23 +0200] "GET /api/data/..%2f..%2f.env HTTP/2.0" 404 264 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)"
136.71.224.194 - - [07/Oct/2026:16:04:24 +0200] "GET /..%2f.env HTTP/2.0" 404 264 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"
136.71.224.194 - - [07/Oct/2026:16:04:24 +0200] "GET /..%2f..%2f.env HTTP/2.0" 404 264 "-" "Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)"
136.71.224.194 - - [07/Oct/2026:16:04:24 +0200] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ HTTP/2.0" 404 264 "-" "CCBot/2.0 (https://
...
show less
Web App Attack
Bad Web Bot