🇯🇵
20.210.128.125
23 hours ago
20.210.128.125 - - [08/Oct/2026:11:44:11 +0100] "GET /cgi-bin/ttt.php HTTP/1.1" 404 2480 "-" "-"
Bad Web Bot
🇧🇪
34.140.234.80
23 hours ago
2026/10/08 11:18:48 [error] 4060693#4060693: *1152485 access forbidden by rule, client: 34.140.234.8 ...
show more
2026/10/08 11:18:48 [error] 4060693#4060693: *1152485 access forbidden by rule, client: 34.140.234.80, server: simetria.org, request: "GET /.env HTTP/2.0", host: "blog.simetria.org"
2026/10/08 11:18:48 [error] 4060694#4060694: *1152486 access forbidden by rule, client: 34.140.234.80, server: simetria.org, request: "GET /.docker/.env HTTP/2.0", host: "blog.simetria.org"
2026/10/08 11:18:48 [error] 4060694#4060694: *1152488 access forbidden by rule, client: 34.140.234.80, server: simetria.org, request: "GET /.aws/.env HTTP/2.0", host: "blog.simetria.org"
show less
Brute-Force
Web App Attack
🇩🇪
130.12.180.117
23 hours ago
2026/10/08 11:11:14 [error] 4060693#4060693: *1150457 access forbidden by rule, client: 130.12.180.1 ...
show more
2026/10/08 11:11:14 [error] 4060693#4060693: *1150457 access forbidden by rule, client: 130.12.180.117, server: lisboa.betatechnologies.info, request: "GET /.env HTTP/2.0", host: "lisboa.betatechnologies.info"
130.12.180.117 - - [08/Oct/2026:11:11:14 +0100] "GET /.env HTTP/2.0" 403 1045 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko, Yokohama Institute of Information Security https://www.iisec.ac.jp) Chrome/124.0.0.0 Safari/537.36"
2026/10/08 11:11:16 [error] 4060693#4060693: *1150462 access forbidden by rule, client: 130.12.180.117, server: lisboa.betatechnologies.info, request: "GET /.env HTTP/2.0", host: "lisboa.betatechnologies.info", referrer: "http://lisboa.betatechnologies.info:8880/.env"
show less
Brute-Force
Web App Attack
🇳🇱
94.154.43.125
23 hours ago
2026/10/08 10:56:13 [error] 4060693#4060693: *1146928 access forbidden by rule, client: 94.154.43.12 ...
show more
2026/10/08 10:56:13 [error] 4060693#4060693: *1146928 access forbidden by rule, client: 94.154.43.125, server: vp-arc.org, request: "GET /.env HTTP/2.0", host: "pilfershire.vp-arc.org"
94.154.43.125 - - [08/Oct/2026:10:56:13 +0100] "GET /.env HTTP/2.0" 403 1045 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36"
2026/10/08 10:56:44 [error] 4060693#4060693: *1147032 access forbidden by rule, client: 94.154.43.125, server: vp-arc.org, request: "GET /.env HTTP/2.0", host: "lisbon1755.vp-arc.org"
show less
Brute-Force
Web App Attack
🇳🇱
45.156.87.16
23 hours ago
2026/10/08 10:53:03 [error] 4060693#4060693: *1146049 access forbidden by rule, client: 45.156.87.16 ...
show more
2026/10/08 10:53:03 [error] 4060693#4060693: *1146049 access forbidden by rule, client: 45.156.87.16, server: zonadetestes.com, request: "GET /backend/.env HTTP/2.0", host: "zonadetestes.com"
2026/10/08 10:53:03 [error] 4060693#4060693: *1146049 access forbidden by rule, client: 45.156.87.16, server: zonadetestes.com, request: "GET /.env HTTP/2.0", host: "zonadetestes.com"
45.156.87.16 - - [08/Oct/2026:10:53:03 +0100] "GET /.env HTTP/2.0" 403 1045 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
show less
Brute-Force
Web App Attack
🇸🇬
152.42.215.55
08 Oct 2026
152.42.215.55 - - [08/Oct/2026:10:47:28 +0100] "GET /cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php HTTP/ ...
show more
152.42.215.55 - - [08/Oct/2026:10:47:28 +0100] "GET /cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php HTTP/2.0" 404 997 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
show less
Bad Web Bot
🇦🇪
84.235.252.117
08 Oct 2026
84.235.252.117 - - [08/Oct/2026:10:43:15 +0100] "GET /wp-login.php HTTP/2.0" 404 994 "-" "Mozilla/5. ...
show more
84.235.252.117 - - [08/Oct/2026:10:43:15 +0100] "GET /wp-login.php HTTP/2.0" 404 994 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
show less
Bad Web Bot
🇳🇱
94.154.43.180
08 Oct 2026
2026/10/08 10:42:58 [error] 4060693#4060693: *1143355 access forbidden by rule, client: 94.154.43.18 ...
show more
2026/10/08 10:42:58 [error] 4060693#4060693: *1143355 access forbidden by rule, client: 94.154.43.180, server: alzulej.pt, request: "GET /autodiscover.xml/.env HTTP/2.0", host: "alzulej.pt"
2026/10/08 10:43:04 [error] 4060693#4060693: *1143382 access forbidden by rule, client: 94.154.43.180, server: alzulej.pt, request: "GET /.env HTTP/2.0", host: "alzulej.pt"
94.154.43.180 - - [08/Oct/2026:10:43:04 +0100] "GET /.env HTTP/2.0" 403 1045 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36"
show less
Brute-Force
Web App Attack
🇺🇸
35.209.10.233
08 Oct 2026
2026/10/08 10:11:32 [error] 4060693#4060693: *1134875 access forbidden by rule, client: 35.209.10.23 ...
show more
2026/10/08 10:11:32 [error] 4060693#4060693: *1134875 access forbidden by rule, client: 35.209.10.233, server: feminina.eu, request: "GET /.env HTTP/2.0", host: "feminina.eu"
35.209.10.233 - - [08/Oct/2026:10:11:32 +0100] "GET /.env HTTP/2.0" 403 138 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
2026/10/08 10:11:51 [error] 4060693#4060693: *1134976 access forbidden by rule, client: 35.209.10.233, server: feminina.eu, request: "GET /app/.env HTTP/2.0", host: "feminina.eu"
show less
Brute-Force
Web App Attack
🇨🇳
203.25.208.110
08 Oct 2026
Oct 8 09:58:28 autonomy sshd-session[2611364]: Invalid user marcel from 203.25.208.110 port 43502
O ...
show more
Oct 8 09:58:28 autonomy sshd-session[2611364]: Invalid user marcel from 203.25.208.110 port 43502
Oct 8 10:01:07 autonomy sshd-session[2615459]: Invalid user ftpupload from 203.25.208.110 port 41388
Oct 8 10:03:02 autonomy sshd-session[2617621]: Invalid user anton from 203.25.208.110 port 46200
Oct 8 10:03:57 autonomy sshd-session[2618738]: Invalid user tester from 203.25.208.110 port 43872
Oct 8 10:05:50 autonomy sshd-session[2620452]: Invalid user admin from 203.25.208.110 port 51806
Oct 8 10:06:49 autonomy sshd-session[2621718]: Invalid user student from 203.25.208.110 port 42720
show less
Brute-Force
SSH
🇳🇱
45.153.34.217
08 Oct 2026
45.153.34.217 - - [08/Oct/2026:09:48:44 +0100] "GET /phpmyadmin/phpinfo.php HTTP/2.0" 404 139 "http: ...
show more
45.153.34.217 - - [08/Oct/2026:09:48:44 +0100] "GET /phpmyadmin/phpinfo.php HTTP/2.0" 404 139 "http://bot.betatechnologies.info/phpmyadmin/phpinfo.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
show less
Bad Web Bot
🇳🇱
45.148.10.64
08 Oct 2026
45.148.10.64 - - [08/Oct/2026:09:41:35 +0100] "GET /roundcube/wp-json/ HTTP/2.0" 404 994 "https://we ...
show more
45.148.10.64 - - [08/Oct/2026:09:41:35 +0100] "GET /roundcube/wp-json/ HTTP/2.0" 404 994 "https://webmail.betatechnologies.info/wp-json/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
show less
Bad Web Bot
🇮🇳
34.4.25.165
08 Oct 2026
2026/10/08 09:33:34 [error] 4060693#4060693: *1127176 access forbidden by rule, client: 34.4.25.165, ...
show more
2026/10/08 09:33:34 [error] 4060693#4060693: *1127176 access forbidden by rule, client: 34.4.25.165, server: [redacted], request: "GET /.env HTTP/1.1", host: "[redacted]"
34.4.25.165 - - [08/Oct/2026:09:33:34 +0100] "GET /.env HTTP/1.1" 403 1178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
2026/10/08 09:33:45 [error] 4060693#4060693: *1127176 access forbidden by rule, client: 34.4.25.165, server: [redacted], request: "GET /app/.env HTTP/1.1", host: "[redacted]"
show less
Brute-Force
Web App Attack
🇸🇬
165.232.174.158
08 Oct 2026
165.232.174.158 - - [08/Oct/2026:09:24:24 +0100] "GET /cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php HTT ...
show more
165.232.174.158 - - [08/Oct/2026:09:24:24 +0100] "GET /cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php HTTP/2.0" 404 994 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
show less
Bad Web Bot
🇩🇪
213.209.159.133
08 Oct 2026
2026/10/08 09:21:41 [error] 4060693#4060693: *1124581 access forbidden by rule, client: 213.209.159. ...
show more
2026/10/08 09:21:41 [error] 4060693#4060693: *1124581 access forbidden by rule, client: 213.209.159.133, server: simetria.org, request: "GET /www2.simetria.org/.env HTTP/2.0", host: "www2.simetria.org", referrer: "https://www2.simetria.org/%2f%2eenv"
2026/10/08 09:21:41 [error] 4060693#4060693: *1124473 access forbidden by rule, client: 213.209.159.133, server: simetria.org, request: "GET /www2.simetria.org/api/.env HTTP/2.0", host: "www2.simetria.org", referrer: "https://www2.simetria.org/api/.env"
2026/10/08 09:21:41 [error] 4060693#4060693: *1124581 access forbidden by rule, client: 213.209.159.133, server: simetria.org, request: "GET /www2.simetria.org/.env HTTP/2.0", host: "www2.simetria.org", referrer: "https://www2.simetria.org/%2eenv"
show less
Brute-Force
Web App Attack
🇺🇸
138.68.57.2
08 Oct 2026
138.68.57.2 - - [08/Oct/2026:09:15:27 +0100] "GET /wp-login.php HTTP/2.0" 404 994 "-" "Mozilla/5.0"
Bad Web Bot
🇦🇺
13.70.107.184
08 Oct 2026
13.70.107.184 - - [08/Oct/2026:08:58:57 +0100] "GET //cgi-bin/index.php HTTP/1.1" 404 2480 "-" "-"
Bad Web Bot
🇸🇬
159.65.142.60
08 Oct 2026
159.65.142.60 - - [08/Oct/2026:08:42:52 +0100] "GET /roundcube/license.txt HTTP/2.0" 404 997 "-" "py ...
show more
159.65.142.60 - - [08/Oct/2026:08:42:52 +0100] "GET /roundcube/license.txt HTTP/2.0" 404 997 "-" "python-requests/2.27.1"
show less
Bad Web Bot
🇺🇸
134.122.113.206
08 Oct 2026
134.122.113.206 - - [08/Oct/2026:08:42:18 +0100] "GET /wp-login.php HTTP/2.0" 404 994 "-" "Mozilla/5 ...
show more
134.122.113.206 - - [08/Oct/2026:08:42:18 +0100] "GET /wp-login.php HTTP/2.0" 404 994 "-" "Mozilla/5.0"
show less
Bad Web Bot
🇺🇸
45.156.129.113
08 Oct 2026
45.156.129.113 - - [08/Oct/2026:08:41:56 +0100] "GET /cgi-bin/authLogin.cgi HTTP/2.0" 404 1064 "http ...
show more
45.156.129.113 - - [08/Oct/2026:08:41:56 +0100] "GET /cgi-bin/authLogin.cgi HTTP/2.0" 404 1064 "http://simetria.org/cgi-bin/authLogin.cgi" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36"
show less
Bad Web Bot
🇬🇧
104.248.166.35
08 Oct 2026
104.248.166.35 - - [08/Oct/2026:08:37:14 +0100] "GET /wp-login.php HTTP/2.0" 404 994 "-" "Mozilla/5. ...
show more
104.248.166.35 - - [08/Oct/2026:08:37:14 +0100] "GET /wp-login.php HTTP/2.0" 404 994 "-" "Mozilla/5.0"
show less
Bad Web Bot
🇺🇸
43.153.119.168
08 Oct 2026
Oct 8 08:19:18 autonomy sshd-session[2469412]: Invalid user vera from 43.153.119.168 port 51088
Oct ...
show more
Oct 8 08:19:18 autonomy sshd-session[2469412]: Invalid user vera from 43.153.119.168 port 51088
Oct 8 08:22:12 autonomy sshd-session[2473616]: Invalid user yusuf from 43.153.119.168 port 54820
Oct 8 08:23:35 autonomy sshd-session[2476060]: Invalid user eprints from 43.153.119.168 port 56684
Oct 8 08:26:12 autonomy sshd-session[2479966]: Invalid user alvaro from 43.153.119.168 port 60390
Oct 8 08:27:32 autonomy sshd-session[2482693]: Invalid user aaa from 43.153.119.168 port 34010
Oct 8 08:30:15 autonomy sshd-session[2486954]: Invalid user admin from 43.153.119.168 port 37712
show less
Brute-Force
SSH
🇰🇷
20.249.5.100
08 Oct 2026
20.249.5.100 - - [08/Oct/2026:08:29:03 +0100] "GET /wp-admin.php HTTP/1.1" 404 1006 "-" "Mozilla/5.0 ...
show more
20.249.5.100 - - [08/Oct/2026:08:29:03 +0100] "GET /wp-admin.php HTTP/1.1" 404 1006 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
show less
Bad Web Bot
🇺🇸
144.225.187.68
08 Oct 2026
Oct 8 08:19:56 autonomy sshd-session[2470065]: Invalid user vera from 144.225.187.68 port 53748
Oct ...
show more
Oct 8 08:19:56 autonomy sshd-session[2470065]: Invalid user vera from 144.225.187.68 port 53748
Oct 8 08:22:29 autonomy sshd-session[2474020]: Invalid user shop from 144.225.187.68 port 50022
Oct 8 08:23:42 autonomy sshd-session[2476182]: Invalid user cmm from 144.225.187.68 port 46508
Oct 8 08:24:52 autonomy sshd-session[2477736]: Invalid user server from 144.225.187.68 port 60410
Oct 8 08:26:05 autonomy sshd-session[2479598]: Invalid user aaa from 144.225.187.68 port 53358
Oct 8 08:27:17 autonomy sshd-session[2482031]: Invalid user musicbot from 144.225.187.68 port 45518
show less
Brute-Force
SSH
🇳🇱
195.178.110.104
08 Oct 2026
195.178.110.104 - - [08/Oct/2026:08:26:16 +0100] "GET /roundcube/blog/ HTTP/2.0" 404 1064 "https://w ...
show more
195.178.110.104 - - [08/Oct/2026:08:26:16 +0100] "GET /roundcube/blog/ HTTP/2.0" 404 1064 "https://webmail.simetria.org/blog/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36"
show less
Bad Web Bot