๐บ๐ธ
34.28.81.87
07 Sep 2026
34.28.81.87 - - [07/Sep/2026:09:11:49 +0200] "GET /@fs/..%2f..%2f..%2f..%2f..%2froot/.env?raw?? HTTP ...
show more
34.28.81.87 - - [07/Sep/2026:09:11:49 +0200] "GET /@fs/..%2f..%2f..%2f..%2f..%2froot/.env?raw?? HTTP/1.1" 404 1799 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Bytespider; +https://zhanzhang.toutiao.com/)"
34.28.81.87 - - [07/Sep/2026:09:11:49 +0200] "GET /@fs/..%2f..%2f..%2f..%2f..%2fapp/.env?raw?? HTTP/1.1" 404 1799 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot"
34.28.81.87 - - [07/Sep/2026:09:11:50 +0200] "GET /@fs/var/www/html/wp-config.php?raw?? HTTP/1.1" 404 5918 "https://www.chinesetools.eu/@fs/var/www/html/wp-config.php?raw??" "Mozilla/5.0 (compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot)" 14728 -
34.28.81.87 - - [07/Sep/2026:09:12:30 +0200] "GET /api/config HTTP/1.1" 404 38126 "https://www.chinesetools.eu/api/config" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:133.14) Gecko/20100101 Firefox/133.14; compatible; LinkedInBot/1.0; +http://www.linkedin.com" 29426
...
show less
Web App Attack
Bad Web Bot
๐บ๐ธ
66.93.9.239
07 Sep 2026
2026-09-07T08:04:36.264603+02:00 vps-a3e99d67 sshd-session[3885596]: Invalid user hsc from 66.93.9.2 ...
show more
2026-09-07T08:04:36.264603+02:00 vps-a3e99d67 sshd-session[3885596]: Invalid user hsc from 66.93.9.239 port 57704
...
show less
Brute-Force
SSH
๐ธ๐ฌ
118.26.110.171
07 Sep 2026
2026-09-07T07:18:00.339505+02:00 vps-a3e99d67 sshd-session[3809004]: Invalid user zkagent from 118.2 ...
show more
2026-09-07T07:18:00.339505+02:00 vps-a3e99d67 sshd-session[3809004]: Invalid user zkagent from 118.26.110.171 port 55230
2026-09-07T07:33:42.681506+02:00 vps-a3e99d67 sshd-session[3834779]: Invalid user dixi from 118.26.110.171 port 53790
2026-09-07T07:40:00.228739+02:00 vps-a3e99d67 sshd-session[3844616]: Invalid user backenderm from 118.26.110.171 port 58774
...
show less
Brute-Force
SSH
๐น๐ผ
34.80.214.15
07 Sep 2026
34.80.214.15 - - [07/Sep/2026:06:11:48 +0200] "GET /media../.env HTTP/1.1" 404 4501 "-" "Mozilla/5.0 ...
show more
34.80.214.15 - - [07/Sep/2026:06:11:48 +0200] "GET /media../.env HTTP/1.1" 404 4501 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user)" 24159 -
34.80.214.15 - - [07/Sep/2026:06:11:49 +0200] "GET /api/config HTTP/1.1" 404 37114 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user)" 24783 -
34.80.214.15 - - [07/Sep/2026:06:11:50 +0200] "POST /api/graphql HTTP/1.1" 404 37121 "https://54.37.157.50:443" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_4 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user) Chrome/126.0.404.82 Mobile Safari/537.36" 49705 -
34.80.214.15 - - [07/Sep/2026:06:11:50 +0200] "POST /api/preview HTTP/1.1" 404 37225 "https://54.37.157.50:443" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )" 56319 -
34.80.214
...
show less
Web App Attack
Bad Web Bot
๐บ๐ธ
136.112.228.33
07 Sep 2026
136.112.228.33 - - [07/Sep/2026:05:55:25 +0200] "GET /@fs/.env.production?raw?? HTTP/1.1" 404 5908 " ...
show more
136.112.228.33 - - [07/Sep/2026:05:55:25 +0200] "GET /@fs/.env.production?raw?? HTTP/1.1" 404 5908 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.355.169 Mobile Safari/537.36; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user" 11371 -
136.112.228.33 - - [07/Sep/2026:05:55:34 +0200] "GET /@fs/var/www/.aws/credentials?raw?? HTTP/1.1" 404 5908 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user) Chrome/118.0.6667.37 Safari/537.36" 7665 -
136.112.228.33 - - [07/Sep/2026:05:55:34 +0200] "GET /@fs/.env.staging?raw?? HTTP/1.1" 404 5908 "-" "Mozilla/5.0 (Windows NT 10.0; rv:143.1) Gecko/20100101 Firefox/143.1; compatible; WhatsApp/10.0.2.1" 9589 -
136.112.228.33 - - [07/Sep/2026:05:55:40 +0200] "GET /@fs/home/ubuntu/.env?raw?? HTTP/1.1" 404 4482 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Cl
...
show less
Web App Attack
Bad Web Bot
๐ง๐ช
34.38.51.232
07 Sep 2026
34.38.51.232 - - [07/Sep/2026:04:01:27 +0200] "GET /uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env ...
show more
34.38.51.232 - - [07/Sep/2026:04:01:27 +0200] "GET /uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/2.0" 404 264 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
34.38.51.232 - - [07/Sep/2026:04:01:27 +0200] "GET /admin%2F.env HTTP/2.0" 404 264 "-" "Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)"
34.38.51.232 - - [07/Sep/2026:04:01:27 +0200] "GET /dashboard%2F.env HTTP/2.0" 404 264 "-" "Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)"
34.38.51.232 - - [07/Sep/2026:04:01:27 +0200] "GET /api%2F.env HTTP/2.0" 404 264 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"
34.38.51.232 - - [07/Sep/2026:04:01:27 +0200] "GET /settings%2F.env HTTP/2.0" 404 264 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)"
34.38.51.232 - - [07/Sep/2026:04:01:29 +0200] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fvar/run/secrets/kubernetes.io/serviceaccount/token HTTP/2.0" 404 264 "-" "Mozilla/5.
...
show less
Web App Attack
Bad Web Bot
๐ง๐ผ
41.87.162.66
07 Sep 2026
2026-09-07T03:51:29.057978+02:00 vps-a3e99d67 sshd-session[3431585]: Invalid user test from 41.87.16 ...
show more
2026-09-07T03:51:29.057978+02:00 vps-a3e99d67 sshd-session[3431585]: Invalid user test from 41.87.162.66 port 55982
...
show less
Brute-Force
SSH
๐บ๐ธ
136.117.33.99
07 Sep 2026
136.117.33.99 - - [07/Sep/2026:03:06:23 +0200] "GET /..%2f.env HTTP/2.0" 404 264 "-" "Mozilla/5.0 (c ...
show more
136.117.33.99 - - [07/Sep/2026:03:06:23 +0200] "GET /..%2f.env HTTP/2.0" 404 264 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)"
136.117.33.99 - - [07/Sep/2026:03:06:24 +0200] "GET /..%2f..%2f.env HTTP/2.0" 404 287 "-" "Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)"
136.117.33.99 - - [07/Sep/2026:03:06:24 +0200] "GET /..%2f..%2f.env HTTP/2.0" 404 287 "-" "Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)"
136.117.33.99 - - [07/Sep/2026:03:06:25 +0200] "GET /admin%2F.env HTTP/2.0" 404 287 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)"
136.117.33.99 - - [07/Sep/2026:03:06:25 +0200] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/2.0" 404 264 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
...
show less
Web App Attack
Bad Web Bot
๐บ๐ธ
35.226.71.158
07 Sep 2026
35.226.71.158 - - [07/Sep/2026:02:51:26 +0200] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2 ...
show more
35.226.71.158 - - [07/Sep/2026:02:51:26 +0200] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/2.0" 404 264 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
35.226.71.158 - - [07/Sep/2026:02:51:26 +0200] "GET /api%2F.env HTTP/2.0" 404 264 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)"
35.226.71.158 - - [07/Sep/2026:02:51:26 +0200] "GET /admin%2F.env HTTP/2.0" 404 264 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )"
35.226.71.158 - - [07/Sep/2026:02:51:26 +0200] "GET /dashboard%2F.env HTTP/2.0" 404 264 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)"
35.226.71.158 - - [07/Sep/2026:02:51:26 +0200] "GET /uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/2.0" 404 264 "-" "Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)"
...
show less
Web App Attack
Bad Web Bot
๐ฎ๐ฉ
14.102.84.16
07 Sep 2026
14.102.84.16 - - [07/Sep/2026:02:26:40 +0200] "GET /static/dropzone/upload.php HTTP/1.1" 404 41442 " ...
show more
14.102.84.16 - - [07/Sep/2026:02:26:40 +0200] "GET /static/dropzone/upload.php HTTP/1.1" 404 41442 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 49848 -
14.102.84.16 - - [07/Sep/2026:02:26:51 +0200] "GET /lib/dropzone/upload.php HTTP/1.1" 404 41549 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:122.0) Gecko/20100101 Firefox/122.0" 33864 -
14.102.84.16 - - [07/Sep/2026:02:26:51 +0200] "GET /core/dropzone/upload.php HTTP/1.1" 404 36933 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:122.0) Gecko/20100101 Firefox/122.0" 55614 -
14.102.84.16 - - [07/Sep/2026:02:26:52 +0200] "GET /panel/dropzone/upload.php HTTP/1.1" 404 36985 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:122.0) Gecko/20100101 Firefox/122.0" 34160 -
14.102.84.16 - - [07/Sep/2026:02:26:52 +0200] "GET /dashboard/dropzone/upload.php HTTP/1.1" 404 36933 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:122.0) Gecko/20100101 Firefox/122.0" 42609
...
show less
Web App Attack
Bad Web Bot
๐ฎ๐ฉ
14.102.84.177
07 Sep 2026
14.102.84.177 - - [07/Sep/2026:02:26:41 +0200] "GET /admin/dropzone/upload.php HTTP/1.1" 404 42081 " ...
show more
14.102.84.177 - - [07/Sep/2026:02:26:41 +0200] "GET /admin/dropzone/upload.php HTTP/1.1" 404 42081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 48482 -
14.102.84.177 - - [07/Sep/2026:02:26:42 +0200] "GET /backend/dropzone/upload.php HTTP/1.1" 404 37094 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 29332 -
14.102.84.177 - - [07/Sep/2026:02:26:42 +0200] "GET /resources/dropzone/upload.php HTTP/1.1" 404 37007 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 48192 -
14.102.84.177 - - [07/Sep/2026:02:26:42 +0200] "GET /resources/assets/dropzone/upload.php HTTP/1.1" 404 36986 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:122.0) Gecko/20100101 Firefox/122.0" 48581 -
14.102.84.177 - - [07/Sep/2026:02:26:43 +0200] "GET /public/assets/dropzone/upload.php HTTP/1.1" 404 36990 "-" "Mo
...
show less
Web App Attack
Bad Web Bot
๐ฎ๐ฉ
14.102.84.154
07 Sep 2026
14.102.84.154 - - [07/Sep/2026:02:26:29 +0200] "GET /application/config/database.php.bak HTTP/1.1" 4 ...
show more
14.102.84.154 - - [07/Sep/2026:02:26:29 +0200] "GET /application/config/database.php.bak HTTP/1.1" 404 42087 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 59954 -
14.102.84.154 - - [07/Sep/2026:02:26:30 +0200] "GET /dropzone/upload.php HTTP/1.1" 404 37114 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 54095 -
14.102.84.154 - - [07/Sep/2026:02:26:31 +0200] "GET /assets/dropzone/upload.php HTTP/1.1" 404 36921 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 71823 -
14.102.84.154 - - [07/Sep/2026:02:26:32 +0200] "GET /assets/backend/plugins/dropzone/upload.php HTTP/1.1" 404 36559 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:122.0) Gecko/20100101 Firefox/122.0" 31177 -
14.102.84.154 - - [07/Sep/2026:02:26:33 +0200] "GET /plugins/dropzone/upload.php HTTP/1.1" 404 36421 "-" "Mozilla/5.0 (
...
show less
Web App Attack
Bad Web Bot
๐ฎ๐ฉ
14.102.84.248
07 Sep 2026
14.102.84.248 - - [07/Sep/2026:02:26:14 +0200] "GET /wp-config-backup.php HTTP/1.1" 404 4469 "-" "Mo ...
show more
14.102.84.248 - - [07/Sep/2026:02:26:14 +0200] "GET /wp-config-backup.php HTTP/1.1" 404 4469 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:122.0) Gecko/20100101 Firefox/122.0" 9429 -
14.102.84.248 - - [07/Sep/2026:02:26:16 +0200] "GET /configuration.php.old HTTP/1.1" 404 36793 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:122.0) Gecko/20100101 Firefox/122.0" 66241 -
14.102.84.248 - - [07/Sep/2026:02:26:17 +0200] "GET /configuration.php.save HTTP/1.1" 404 36563 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:122.0) Gecko/20100101 Firefox/122.0" 39149 -
14.102.84.248 - - [07/Sep/2026:02:26:19 +0200] "GET /config/database.php.bak HTTP/1.1" 404 37048 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:122.0) Gecko/20100101 Firefox/122.0" 46550 -
14.102.84.248 - - [07/Sep/2026:02:26:22 +0200] "GET /config/database.php.old HTTP/1.1" 404 37187 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:122.0) Gecko/20100101 Firefox/122.0" 45456 -
14.102.84.248 - - [07/Sep/2026:02:26:23 +020
...
show less
Web App Attack
Bad Web Bot
๐ฎ๐ฉ
14.102.84.57
07 Sep 2026
14.102.84.57 - - [07/Sep/2026:02:23:25 +0200] "GET /ftp-config.json HTTP/1.1" 404 37014 "-" "Mozilla ...
show more
14.102.84.57 - - [07/Sep/2026:02:23:25 +0200] "GET /ftp-config.json HTTP/1.1" 404 37014 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:122.0) Gecko/20100101 Firefox/122.0" 43718 -
14.102.84.57 - - [07/Sep/2026:02:24:54 +0200] "GET /backup/filemanager/dialog.php HTTP/1.1" 404 37172 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 53572 -
14.102.84.57 - - [07/Sep/2026:02:25:59 +0200] "GET /wp-content/plugins/jquery.filer/php/readme.txt HTTP/1.1" 404 4470 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 17198 -
14.102.84.57 - - [07/Sep/2026:02:26:03 +0200] "GET /wp-config.php.save HTTP/1.1" 404 4470 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:122.0) Gecko/20100101 Firefox/122.0" 17227 -
14.102.84.57 - - [07/Sep/2026:02:26:05 +0200] "GET /wp-config.old HTTP/1.1" 404 4470 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.
...
show less
Web App Attack
Bad Web Bot
๐ฎ๐ฉ
14.102.84.52
07 Sep 2026
14.102.84.52 - - [07/Sep/2026:02:23:04 +0200] "POST /portal/vendor/phpunit/phpunit/src/Util/PHP/eval ...
show more
14.102.84.52 - - [07/Sep/2026:02:23:04 +0200] "POST /portal/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 9512 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 10553 -
14.102.84.52 - - [07/Sep/2026:02:23:04 +0200] "POST /v1/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 4469 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 11236 -
14.102.84.52 - - [07/Sep/2026:02:23:05 +0200] "POST /v2/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 4470 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 14426 -
14.102.84.52 - - [07/Sep/2026:02:23:06 +0200] "GET /sftp-config.json HTTP/1.1" 404 37067 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:122.0) Gecko/20100101 Firefox/122.0" 63600 -
14.102.84.52 - - [07/Sep/2026:02:23:07 +0200]
...
show less
Web App Attack
Bad Web Bot
๐ฎ๐ฉ
14.102.84.78
07 Sep 2026
14.102.84.78 - - [07/Sep/2026:02:22:56 +0200] "POST /api/vendor/phpunit/phpunit/src/Util/PHP/eval-st ...
show more
14.102.84.78 - - [07/Sep/2026:02:22:56 +0200] "POST /api/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 9511 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:122.0) Gecko/20100101 Firefox/122.0" 11092 -
14.102.84.78 - - [07/Sep/2026:02:22:57 +0200] "POST /backend/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 4470 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 19047 -
14.102.84.78 - - [07/Sep/2026:02:22:57 +0200] "POST /app/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 4470 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 14462 -
14.102.84.78 - - [07/Sep/2026:02:22:58 +0200] "POST /core/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 4469 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 13293 -
14.102.84.78 - - [07/Sep
...
show less
Web App Attack
Bad Web Bot
๐ฎ๐ฉ
14.102.84.31
07 Sep 2026
14.102.84.31 - - [07/Sep/2026:02:22:47 +0200] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin. ...
show more
14.102.84.31 - - [07/Sep/2026:02:22:47 +0200] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 4469 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 8115 -
14.102.84.31 - - [07/Sep/2026:02:22:47 +0200] "POST /vendor/phpunits/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 4469 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 9475 -
14.102.84.31 - - [07/Sep/2026:02:22:48 +0200] "POST /assets/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 4470 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 18588 -
14.102.84.31 - - [07/Sep/2026:02:22:49 +0200] "POST /admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 4469 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:122.0) Gecko/20100101 Firefox/122.0" 16898 -
14.102.84.31 - - [0
...
show less
Web App Attack
Bad Web Bot
๐ฎ๐ฉ
103.190.0.39
06 Sep 2026
103.190.0.39 - - [07/Sep/2026:01:47:12 +0200] "GET //wp-includes/ID3/license.txt HTTP/1.1" 404 40808 ...
show more
103.190.0.39 - - [07/Sep/2026:01:47:12 +0200] "GET //wp-includes/ID3/license.txt HTTP/1.1" 404 40808 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 46026 -
103.190.0.39 - - [07/Sep/2026:01:47:14 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 4532 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 11821 -
103.190.0.39 - - [07/Sep/2026:01:47:15 +0200] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 4532 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 8750 -
103.190.0.39 - - [07/Sep/2026:01:47:15 +0200] "GET //wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 4532 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 7361 -
103.190.0.39 - - [07/Sep/2026:01:47:15 +0200] "GET //wp/wp-include
...
show less
Web App Attack
Bad Web Bot
๐บ๐ธ
34.9.71.91
06 Sep 2026
34.9.71.91 - - [07/Sep/2026:00:28:44 +0200] "GET /..%2f..%2f.env HTTP/2.0" 404 264 "-" "Mozilla/5.0 ...
show more
34.9.71.91 - - [07/Sep/2026:00:28:44 +0200] "GET /..%2f..%2f.env HTTP/2.0" 404 264 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)"
34.9.71.91 - - [07/Sep/2026:00:28:44 +0200] "GET /..%2f.env HTTP/2.0" 404 264 "-" "Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)"
34.9.71.91 - - [07/Sep/2026:00:28:46 +0200] "GET /uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/2.0" 404 287 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot)"
34.9.71.91 - - [07/Sep/2026:00:28:46 +0200] "GET /api%2F.env HTTP/2.0" 404 264 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
34.9.71.91 - - [07/Sep/2026:00:28:46 +0200] "GET /admin%2F.env HTTP/2.0" 404 264 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)"
34.9.71.91 - - [07/Sep/2026:00:28:46 +0200] "GET /settings%2F.env HTTP/2
...
show less
Web App Attack
Bad Web Bot
๐ฎ๐ณ
103.91.187.83
06 Sep 2026
2026-09-06T23:53:47.943229+02:00 vps-a3e99d67 sshd-session[3031935]: Invalid user admin from 103.91. ...
show more
2026-09-06T23:53:47.943229+02:00 vps-a3e99d67 sshd-session[3031935]: Invalid user admin from 103.91.187.83 port 56730
2026-09-06T23:56:32.260969+02:00 vps-a3e99d67 sshd-session[3036474]: Invalid user user from 103.91.187.83 port 45970
2026-09-07T00:02:05.898295+02:00 vps-a3e99d67 sshd-session[3044531]: Invalid user user from 103.91.187.83 port 51172
...
show less
Brute-Force
SSH
๐บ๐ธ
165.22.166.7
06 Sep 2026
2026-09-06T23:20:28.173799+02:00 vps-a3e99d67 sshd-session[2972097]: Invalid user crypto from 165.22 ...
show more
2026-09-06T23:20:28.173799+02:00 vps-a3e99d67 sshd-session[2972097]: Invalid user crypto from 165.22.166.7 port 59680
2026-09-06T23:22:55.804294+02:00 vps-a3e99d67 sshd-session[2975914]: Invalid user crypto from 165.22.166.7 port 39382
2026-09-06T23:25:12.292759+02:00 vps-a3e99d67 sshd-session[2979476]: Invalid user blockchain from 165.22.166.7 port 35756
...
show less
Brute-Force
SSH
๐บ๐ธ
137.184.79.60
06 Sep 2026
2026-09-06T22:43:38.927963+02:00 vps-a3e99d67 sshd-session[2908967]: Invalid user admin from 137.184 ...
show more
2026-09-06T22:43:38.927963+02:00 vps-a3e99d67 sshd-session[2908967]: Invalid user admin from 137.184.79.60 port 40968
2026-09-06T22:45:54.092058+02:00 vps-a3e99d67 sshd-session[2912021]: Invalid user admin from 137.184.79.60 port 43180
2026-09-06T22:47:57.617440+02:00 vps-a3e99d67 sshd-session[2915686]: Invalid user admin from 137.184.79.60 port 45990
...
show less
Brute-Force
SSH
๐จ๐ฆ
50.21.22.50
06 Sep 2026
2026-09-06T22:27:19.607237+02:00 vps-a3e99d67 sshd-session[2881275]: Invalid user chine-informations ...
show more
2026-09-06T22:27:19.607237+02:00 vps-a3e99d67 sshd-session[2881275]: Invalid user chine-informations from 50.21.22.50 port 38353
...
show less
Brute-Force
SSH
๐ฉ๐ช
209.50.183.238
06 Sep 2026
209.50.183.238 - - [06/Sep/2026:22:24:38 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 453 ...
show more
209.50.183.238 - - [06/Sep/2026:22:24:38 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 4532 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 10157 -
209.50.183.238 - - [06/Sep/2026:22:24:40 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 4532 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 8760 -
209.50.183.238 - - [06/Sep/2026:22:24:40 +0200] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 4532 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 12688 -
209.50.183.238 - - [06/Sep/2026:22:24:40 +0200] "GET //wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 4532 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 8413 -
209.50.183.238 - - [06/Sep/2026:22:24:40 +0200] "GET //
...
show less
Web App Attack
Bad Web Bot
๐บ๐ธ
157.245.227.77
06 Sep 2026
2026-09-06T22:14:00.560618+02:00 vps-a3e99d67 sshd-session[2857526]: Invalid user rust-fil-proofs fr ...
show more
2026-09-06T22:14:00.560618+02:00 vps-a3e99d67 sshd-session[2857526]: Invalid user rust-fil-proofs from 157.245.227.77 port 55624
2026-09-06T22:16:50.715549+02:00 vps-a3e99d67 sshd-session[2861684]: Invalid user filecoin-ffi from 157.245.227.77 port 43628
...
show less
Brute-Force
SSH