π΅π±
194.180.49.41
18 minutes ago
194.180.49.41 - - [31/Oct/2026:21:09:40 +0100] "GET / HTTP/1.1" 404 0 "-" "Go-http-client/1.1"
194.1 ...
show more
194.180.49.41 - - [31/Oct/2026:21:09:40 +0100] "GET / HTTP/1.1" 404 0 "-" "Go-http-client/1.1"
194.180.49.41 - - [31/Oct/2026:21:09:40 +0100] "GET /.env HTTP/1.1" 403 394 "-" "Go-http-client/1.1"
194.180.49.41 - - [31/Oct/2026:21:09:40 +0100] "GET /.env HTTP/1.1" 403 394 "-" "Go-http-client/1.1"
194.180.49.41 - - [31/Oct/2026:21:09:41 +0100] "GET /.env.backup HTTP/1.1" 404 0 "-" "Go-http-client/1.1"
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
π¦πΊ
34.116.77.178
22 minutes ago
34.116.77.178 - - [31/Oct/2026:21:05:38 +0100] "POST / HTTP/1.1" 404 140 "-" "Mozilla/5.0 (X11; Linu ...
show more
34.116.77.178 - - [31/Oct/2026:21:05:38 +0100] "POST / HTTP/1.1" 404 140 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.116.77.178 - - [31/Oct/2026:21:05:38 +0100] "POST / HTTP/1.1" 404 140 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.116.77.178 - - [31/Oct/2026:21:05:41 +0100] "POST / HTTP/1.1" 404 140 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.116.77.178 - - [31/Oct/2026:21:05:41 +0100] "GET /.git/config HTTP/1.1" 404 150 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.116.77.178 - - [31/Oct/2026:21:05:41 +0100] "POST / HTTP/1.1" 404 140 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
π΅π±
45.138.12.43
31 minutes ago
45.138.12.43 - - [31/Oct/2026:20:56:29 +0100] "HEAD / HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 1 ...
show more
45.138.12.43 - - [31/Oct/2026:20:56:29 +0100] "HEAD / HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
45.138.12.43 - - [31/Oct/2026:20:56:32 +0100] "GET /wp-login.php HTTP/2.0" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.138.12.43 - - [31/Oct/2026:20:56:32 +0100] "GET /wp-login.php HTTP/2.0" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.138.12.43 - - [31/Oct/2026:20:56:33 +0100] "GET / HTTP/2.0" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
π§π·
138.186.46.85
1 hour ago
138.186.46.85 - - [31/Oct/2026:19:49:36 +0100] "GET / HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 1 ...
show more
138.186.46.85 - - [31/Oct/2026:19:49:36 +0100] "GET / HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0"
138.186.46.85 - - [31/Oct/2026:19:49:37 +0100] "GET /pbxcore/api/v3/system:ping HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
138.186.46.85 - - [31/Oct/2026:19:49:37 +0100] "GET /api/v1/Accounts HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.13 Mobile/15E148 Safari/604.1"
138.186.46.85 - - [31/Oct/2026:19:49:37 +0100] "GET /php/ViewUserInfo.php HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Macintosh; U; PPC Mac OS X 10_10_3 rv:2.0; so-DJ) AppleWebKit/533.15.6 (KHTML, like Gecko) Version/4.0.2 Safari/533.15.6"
138.186.46.85 - - [31/Oct/2026:19:49:37 +0100] "GET /php/model/sql.php HTTP/1.1" 404 0 "-" "Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
π³π±
45.148.10.40
1 hour ago
45.148.10.40 - - [31/Oct/2026:19:33:49 +0100] "GET /_next/static/chunks/_buildManifest.js HTTP/1.1" ...
show more
45.148.10.40 - - [31/Oct/2026:19:33:49 +0100] "GET /_next/static/chunks/_buildManifest.js HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Edg/122.0.2365.52"
45.148.10.40 - - [31/Oct/2026:19:33:49 +0100] "GET /_next/static/chunks/app-build-manifest.js HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Edg/122.0.2365.52"
45.148.10.40 - - [31/Oct/2026:19:33:49 +0100] "GET /_next/static/chunks/app-build-manifest.js HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Edg/122.0.2365.52"
45.148.10.40 - - [31/Oct/2026:19:33:49 +0100] "GET /_next/static/development/_buildManifest.js HTTP/1.1" 404 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.224 Safari/537.36"
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
πΉπ
104.28.246.148
2 hours ago
104.28.246.148 - - [31/Oct/2026:19:21:07 +0100] "GET /.env.backup HTTP/1.1" 404 9 "https://www.googl ...
show more
104.28.246.148 - - [31/Oct/2026:19:21:07 +0100] "GET /.env.backup HTTP/1.1" 404 9 "https://www.google.com/search?q=rspamd.snsolution.de" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15"
104.28.246.148 - - [31/Oct/2026:19:21:11 +0100] "GET /.dev.vars HTTP/1.1" 404 9 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:137.0) Gecko/20100101 Firefox/137.0"
104.28.246.148 - - [31/Oct/2026:19:21:12 +0100] "GET /wp-config.php.bak HTTP/1.1" 404 9 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
104.28.246.148 - - [31/Oct/2026:19:21:15 +0100] "GET /.env.old HTTP/1.1" 404 9 "https://www.google.com/search?q=rspamd.snsolution.de" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.6422.113 Mobile Safari/537.36"
104.28.246.148 - - [31/Oct/2026:19:21:18 +0100] "GET /config.yaml HTTP/1.1" 404 9 "https://www.google.com/search?q
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
πΉπ
104.28.214.147
2 hours ago
104.28.214.147 - - [31/Oct/2026:19:21:11 +0100] "GET /config.json HTTP/1.1" 404 9 "-" "Mozilla/5.0 ( ...
show more
104.28.214.147 - - [31/Oct/2026:19:21:11 +0100] "GET /config.json HTTP/1.1" 404 9 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
104.28.214.147 - - [31/Oct/2026:19:21:14 +0100] "GET /wp-config.php HTTP/1.1" 404 9 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:137.0) Gecko/20100101 Firefox/137.0"
104.28.214.147 - - [31/Oct/2026:19:21:15 +0100] "GET /.env.dist HTTP/1.1" 404 9 "https://www.google.com/search?q=rspamd.snsolution.de" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
104.28.214.147 - - [31/Oct/2026:19:21:15 +0100] "GET /.env.sample HTTP/1.1" 404 9 "https://www.google.com/search?q=rspamd.snsolution.de" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
104.28.214.147 - - [31/Oct/2026:19:21:17 +0100] "GET /config.yml HTTP/1.1" 404 9 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
πΉπ
104.28.214.148
2 hours ago
104.28.214.148 - - [31/Oct/2026:19:21:07 +0100] "GET /.env.local HTTP/1.1" 404 9 "https://www.google ...
show more
104.28.214.148 - - [31/Oct/2026:19:21:07 +0100] "GET /.env.local HTTP/1.1" 404 9 "https://www.google.com/search?q=rspamd.snsolution.de" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15"
104.28.214.148 - - [31/Oct/2026:19:21:07 +0100] "GET /.env.production HTTP/1.1" 404 9 "https://www.google.com/search?q=rspamd.snsolution.de" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)"
104.28.214.148 - - [31/Oct/2026:19:21:11 +0100] "GET /.aws/credentials HTTP/1.1" 404 9 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
104.28.214.148 - - [31/Oct/2026:19:21:15 +0100] "GET /.env.test HTTP/1.1" 404 9 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
104.28.214.148 - - [31/Oct/2026:19:21:17 +0100] "GET /.env.bak HTTP/1.1" 404 9 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/13
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
πΉπ
104.28.246.147
2 hours ago
104.28.246.147 - - [31/Oct/2026:19:21:07 +0100] "GET /.git/HEAD HTTP/1.1" 404 9 "-" "Mozilla/5.0 (Ma ...
show more
104.28.246.147 - - [31/Oct/2026:19:21:07 +0100] "GET /.git/HEAD HTTP/1.1" 404 9 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
104.28.246.147 - - [31/Oct/2026:19:21:07 +0100] "GET /.git/config HTTP/1.1" 404 9 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.6422.113 Mobile Safari/537.36"
104.28.246.147 - - [31/Oct/2026:19:21:07 +0100] "GET /.env HTTP/1.1" 404 9 "https://www.google.com/search?q=rspamd.snsolution.de" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.6422.113 Mobile Safari/537.36"
104.28.246.147 - - [31/Oct/2026:19:21:11 +0100] "GET /secrets.json HTTP/1.1" 404 9 "https://www.google.com/search?q=rspamd.snsolution.de" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:137.0) Gecko/20100101 Firefox/137.0"
104.28.246.147 - - [31/Oct/2026:19:21:15 +0100] "GET /.env.save HTTP/1.1" 404 9 "https://www.google.com/searc
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
π³π±
195.178.110.53
2 hours ago
195.178.110.53 - - [31/Oct/2026:18:33:33 +0100] "GET /_next/static/chunks/_buildManifest.js HTTP/1.1 ...
show more
195.178.110.53 - - [31/Oct/2026:18:33:33 +0100] "GET /_next/static/chunks/_buildManifest.js HTTP/1.1" 404 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.224 Safari/537.36"
195.178.110.53 - - [31/Oct/2026:18:33:33 +0100] "GET /_next/static/chunks/app-build-manifest.js HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.94 Safari/537.36"
195.178.110.53 - - [31/Oct/2026:18:33:33 +0100] "GET /_next/static/development/_buildManifest.js HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2.1 Safari/605.1.15"
195.178.110.53 - - [31/Oct/2026:18:33:34 +0100] "POST / HTTP/1.1" 404 0 "https://achimherbst.de/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2.1 Safari/605.1.15"
195.178.110.53 - - [31/Oct/2026:18:33:34 +0100] "POST / HTTP/1.1" 404 0 "https://achim
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
π·π΄
89.32.41.98
3 hours ago
2026-10-31T19:04:54.600550+02:00 www4 postfix/smtpd[1647080]: NOQUEUE: reject: RCPT from unknown[89. ...
show more
2026-10-31T19:04:54.600550+02:00 www4 postfix/smtpd[1647080]: NOQUEUE: reject: RCPT from unknown[89.32.41.98]: 450 4.7.1 <thirtyfiveseven.com>: Helo command rejected: Host not found; from=<> to=<[email protected] > proto=ESMTP helo=<thirtyfiveseven.com>
2026-10-31T19:08:43.062121+02:00 www4 postfix/smtpd[1647080]: NOQUEUE: reject: RCPT from unknown[89.32.41.98]: 450 4.7.1 <thirtyfiveseven.com>: Helo command rejected: Host not found; from=<> to=<[email protected] > proto=ESMTP helo=<thirtyfiveseven.com>
2026-10-31T19:09:23.161774+02:00 www4 postfix/smtpd[1749780]: NOQUEUE: reject: RCPT from unknown[89.32.41.98]: 450 4.7.1 <thirtyfiveseven.com>: Helo command rejected: Host not found; from=<> to=<[email protected] > proto=ESMTP helo=<thirtyfiveseven.com>
2026-10-31T19:11:59.635291+02:00 www4 postfix/smtpd[1749780]: NOQUEUE: reject: RCPT from unknown[89.32.41.98]: 450 4.7.1 <thirtyfiveseven.com>: Helo command rejected: Host not found; from=<> to=<herbst.achim@snsolu
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
π§πͺ
35.187.187.131
3 hours ago
2026-10-31T19:09:29.362750+02:00 www4 postfix/submission/smtpd[1750929]: warning: 131.187.187.35.bc. ...
show more
2026-10-31T19:09:29.362750+02:00 www4 postfix/submission/smtpd[1750929]: warning: 131.187.187.35.bc.googleusercontent.com[35.187.187.131]: SASL PLAIN authentication failed: (reason unavailable), [email protected]
2026-10-31T19:09:35.392755+02:00 www4 postfix/submission/smtpd[1750929]: warning: 131.187.187.35.bc.googleusercontent.com[35.187.187.131]: SASL LOGIN authentication failed: (reason unavailable), [email protected]
2026-10-31T19:09:44.157087+02:00 www4 postfix/submissions/smtpd[1751300]: warning: 131.187.187.35.bc.googleusercontent.com[35.187.187.131]: SASL PLAIN authentication failed: (reason unavailable), [email protected]
2026-10-31T19:09:48.366876+02:00 www4 postfix/submission/smtpd[1750929]: warning: 131.187.187.35.bc.googleusercontent.com[35.187.187.131]: SASL PLAIN authentication failed: (reason unavailable), [email protected]
2026-10-31T19:09:50.369131+02:00 www4 postfix/submission/smtpd[1750929]: warnin
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
π°π·
20.194.45.183
5 hours ago
20.194.45.183 - - [31/Oct/2026:16:24:53 +0100] "GET /wk/index.php HTTP/1.1" 404 0 "-" "Mozilla/5.0 ( ...
show more
20.194.45.183 - - [31/Oct/2026:16:24:53 +0100] "GET /wk/index.php HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.194.45.183 - - [31/Oct/2026:16:24:54 +0100] "GET /inputs.php HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.194.45.183 - - [31/Oct/2026:16:24:54 +0100] "GET /ioxi-o.php HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.194.45.183 - - [31/Oct/2026:16:24:54 +0100] "GET /function/function.php HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.194.45.183 - - [31/Oct/2026:16:24:54 +0100] "GET /rip.php HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
π¦πͺ
20.46.43.126
5 hours ago
20.46.43.126 - - [31/Oct/2026:15:54:07 +0100] "GET /admin.php HTTP/2.0" 404 0 "-" "Mozilla/5.0 (Wind ...
show more
20.46.43.126 - - [31/Oct/2026:15:54:07 +0100] "GET /admin.php HTTP/2.0" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
20.46.43.126 - - [31/Oct/2026:15:54:07 +0100] "GET /public/css.php HTTP/2.0" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
20.46.43.126 - - [31/Oct/2026:15:54:07 +0100] "GET /public/css.php HTTP/2.0" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
20.46.43.126 - - [31/Oct/2026:15:54:08 +0100] "GET /classwithtostring.php HTTP/2.0" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
π©πͺ
128.14.225.164
6 hours ago
2026-10-31T16:17:20.739177+02:00 www4 sshd-session[1335126]: pam_unix(sshd:auth): authentication fai ...
show more
2026-10-31T16:17:20.739177+02:00 www4 sshd-session[1335126]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.14.225.164
2026-10-31T16:17:22.553578+02:00 www4 sshd-session[1335126]: Failed password for invalid user frank from 128.14.225.164 port 48276 ssh2
2026-10-31T16:18:34.489947+02:00 www4 sshd-session[1337956]: Invalid user emilia from 128.14.225.164 port 48590
2026-10-31T16:18:34.491898+02:00 www4 sshd-session[1337956]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.14.225.164
2026-10-31T16:18:36.433754+02:00 www4 sshd-session[1337956]: Failed password for invalid user emilia from 128.14.225.164 port 48590 ssh2
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
π³π±
45.153.34.178
6 hours ago
45.153.34.178 - - [31/Oct/2026:14:53:26 +0100] "GET /.env HTTP/2.0" 403 382 "-" "Mozilla/5.0 (X11; L ...
show more
45.153.34.178 - - [31/Oct/2026:14:53:26 +0100] "GET /.env HTTP/2.0" 403 382 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0 Safari/537.36"
45.153.34.178 - - [31/Oct/2026:14:53:26 +0100] "GET /backend/.env HTTP/2.0" 404 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0 Safari/537.36"
45.153.34.178 - - [31/Oct/2026:14:53:26 +0100] "GET /api/.env HTTP/2.0" 404 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0 Safari/537.36"
45.153.34.178 - - [31/Oct/2026:14:53:26 +0100] "GET /.env.example HTTP/2.0" 404 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0 Safari/537.36"
45.153.34.178 - - [31/Oct/2026:14:53:26 +0100] "GET /api/.env HTTP/2.0" 404 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0 Safari/537.36"
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
πΊπΈ
132.196.59.85
8 hours ago
132.196.59.85 - - [31/Oct/2026:13:06:10 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ...
show more
132.196.59.85 - - [31/Oct/2026:13:06:10 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 5350 "-" "-"
132.196.59.85 - - [31/Oct/2026:13:06:10 +0100] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 5350 "-" "-"
132.196.59.85 - - [31/Oct/2026:13:06:11 +0100] "GET /3PJcpMFsD8B.php HTTP/1.1" 404 5350 "-" "-"
132.196.59.85 - - [31/Oct/2026:13:06:11 +0100] "GET /radio.php HTTP/1.1" 404 5350 "-" "-"
132.196.59.85 - - [31/Oct/2026:13:06:11 +0100] "GET /BDKR28WP.php HTTP/1.1" 404 5350 "-" "-"
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
π³π±
45.148.10.59
9 hours ago
45.148.10.59 - - [31/Oct/2026:11:30:04 +0100] "HEAD / HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 1 ...
show more
45.148.10.59 - - [31/Oct/2026:11:30:04 +0100] "HEAD / HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
45.148.10.59 - - [31/Oct/2026:11:30:07 +0100] "GET /wp-login.php HTTP/2.0" 404 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 OPR/111.0.0.0"
45.148.10.59 - - [31/Oct/2026:11:30:07 +0100] "GET /wp-login.php HTTP/2.0" 404 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 OPR/111.0.0.0"
45.148.10.59 - - [31/Oct/2026:11:30:08 +0100] "GET /blog/wp-login.php HTTP/2.0" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
π΅π±
45.138.12.19
11 hours ago
45.138.12.19 - - [31/Oct/2026:09:52:11 +0100] "GET /anthropic/config.json HTTP/2.0" 404 0 "-" "Mozil ...
show more
45.138.12.19 - - [31/Oct/2026:09:52:11 +0100] "GET /anthropic/config.json HTTP/2.0" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
45.138.12.19 - - [31/Oct/2026:09:52:11 +0100] "GET /openai-proxy.yaml HTTP/2.0" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
45.138.12.19 - - [31/Oct/2026:09:52:11 +0100] "GET /config/bedrock.yaml HTTP/2.0" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
45.138.12.19 - - [31/Oct/2026:09:52:11 +0100] "GET /ai/config.yml HTTP/2.0" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
45.138.12.19 - - [31/Oct/2026:09:52:11 +0100] "GET /openai-proxy.yml HTTP/2.0" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
π§π·
34.95.215.91
12 hours ago
34.95.215.91 - - [31/Oct/2026:09:00:03 +0100] "GET /js../.env HTTP/2.0" 302 145 "-" "Mozilla/5.0 App ...
show more
34.95.215.91 - - [31/Oct/2026:09:00:03 +0100] "GET /js../.env HTTP/2.0" 302 145 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )"
34.95.215.91 - - [31/Oct/2026:09:00:03 +0100] "GET /files../.env HTTP/2.0" 302 145 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)"
34.95.215.91 - - [31/Oct/2026:09:00:03 +0100] "GET /static../.env HTTP/2.0" 302 145 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)"
34.95.215.91 - - [31/Oct/2026:09:00:03 +0100] "GET /userfiles/x?path=../../.env HTTP/2.0" 302 145 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36"
34.95.215.91 - - [31/Oct/2026:09:00:03 +0100] "GET /media../.env HTTP/2.0" 302 145 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
π²πΎ
123.253.35.11
13 hours ago
2026-10-31T08:34:10.975887+02:00 www4 postfix/smtpd[172910]: NOQUEUE: reject: RCPT from unknown[123. ...
show more
2026-10-31T08:34:10.975887+02:00 www4 postfix/smtpd[172910]: NOQUEUE: reject: RCPT from unknown[123.253.35.11]: 450 4.7.1 <adukao.kundenedekaworld.shop>: Helo command rejected: Host not found; from=<[email protected] > to=<[email protected] > proto=ESMTP helo=<adukao.kundenedekaworld.shop>
2026-10-31T08:34:11.322938+02:00 www4 postfix/smtpd[172910]: NOQUEUE: reject: RCPT from unknown[123.253.35.11]: 450 4.7.1 <adukao.kundenedekaworld.shop>: Helo command rejected: Host not found; from=<[email protected] > to=<[email protected] > proto=ESMTP helo=<adukao.kundenedekaworld.shop>
2026-10-31T08:34:11.322938+02:00 www4 postfix/smtpd[172910]: NOQUEUE: reject: RCPT from unknown[123.253.35.11]: 450 4.7.1 <adukao.kundenedekaworld.shop>: Helo command rejected: Host not found; from=<[email protected] > to=<[email protected] > proto=ESMTP helo=<adukao.kundenedekaworld.shop>
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
πΊπΈ
45.61.187.10
15 hours ago
45.61.187.10 - - [31/Oct/2026:06:13:00 +0100] "POST /wp-admin/admin-ajax.php?action=updraft_central_ ...
show more
45.61.187.10 - - [31/Oct/2026:06:13:00 +0100] "POST /wp-admin/admin-ajax.php?action=updraft_central_ajaxcallback HTTP/1.1" 404 0 "-" "python-requests/2.34.2"
45.61.187.10 - - [31/Oct/2026:06:13:03 +0100] "GET /wp-content/plugins/wp_ovqymbl/wp_ovqymbl.php HTTP/1.1" 404 0 "-" "python-requests/2.34.2"
45.61.187.10 - - [31/Oct/2026:06:13:05 +0100] "GET /wp-content/plugins/wp_ovqymbl/wp_ovqymbl.php HTTP/1.1" 404 0 "-" "python-requests/2.34.2"
45.61.187.10 - - [31/Oct/2026:06:13:06 +0100] "GET /wp-content/plugins/wp_ovqymbl/wp_ovqymbl.php HTTP/1.1" 404 0 "-" "python-requests/2.34.2"
45.61.187.10 - - [31/Oct/2026:06:13:07 +0100] "GET /wp-content/plugins/wp_ovqymbl/wp_ovqymbl.php HTTP/1.1" 404 0 "-" "python-requests/2.34.2"
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
π§π·
35.199.64.159
16 hours ago
35.199.64.159 - - [31/Oct/2026:05:05:24 +0100] "GET /robots.txt HTTP/2.0" 404 0 "-" "Mozilla/5.0 (co ...
show more
35.199.64.159 - - [31/Oct/2026:05:05:24 +0100] "GET /robots.txt HTTP/2.0" 404 0 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
35.199.64.159 - - [31/Oct/2026:05:05:24 +0100] "GET /sitemap.xml HTTP/2.0" 404 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)"
35.199.64.159 - - [31/Oct/2026:05:05:25 +0100] "GET /sitemap_index.xml HTTP/2.0" 404 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
35.199.64.159 - - [31/Oct/2026:05:05:25 +0100] "GET /build/manifest.json HTTP/2.0" 404 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
35.199.64.159 - - [31/Oct/2026:05:05:25 +0100] "GET /dist/.vite/manifest.json HTTP/2.0" 404 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
π«π·
51.159.4.12
16 hours ago
51.159.4.12 - - [31/Oct/2026:04:29:06 +0100] "POST /hello.world?%ADd+allow_url_include%3d1+%ADd+auto ...
show more
51.159.4.12 - - [31/Oct/2026:04:29:06 +0100] "POST /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 404 0 "-" "libredtail-http"
51.159.4.12 - - [31/Oct/2026:04:29:08 +0100] "POST /?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 404 0 "-" "libredtail-http"
51.159.4.12 - - [31/Oct/2026:04:29:10 +0100] "POST /index.php?%25ADd+allow_url_include%3D1+%25ADd+auto_prepend_file%3Dphp://input HTTP/1.1" 404 0 "-" "libredtail-http"
51.159.4.12 - - [31/Oct/2026:04:29:12 +0100] "POST /test.hello?%25ADd+allow_url_include%3D1+%25ADd+auto_prepend_file%3Dphp://input HTTP/1.1" 404 0 "-" "libredtail-http"
51.159.4.12 - - [31/Oct/2026:04:29:14 +0100] "POST /index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp%3a//input HTTP/1.1" 404 0 "-" "libredtail-http"
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
π΅π±
45.138.12.89
18 hours ago
45.138.12.89 - - [31/Oct/2026:03:04:58 +0100] "GET /.git/config HTTP/2.0" 200 1593 "-" "Mozilla/5.0 ...
show more
45.138.12.89 - - [31/Oct/2026:03:04:58 +0100] "GET /.git/config HTTP/2.0" 200 1593 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36"
45.138.12.89 - - [31/Oct/2026:03:04:58 +0100] "GET /.git/index HTTP/2.0" 200 1593 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36"
45.138.12.89 - - [31/Oct/2026:03:04:58 +0100] "GET /.git/HEAD HTTP/2.0" 200 1593 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36"
45.138.12.89 - - [31/Oct/2026:03:04:58 +0100] "GET /.anthropic/config.json HTTP/2.0" 404 0 "https://marcus-deuerlein.de/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36"
45.138.12.89 - - [31/Oct/2026:03:04:58 +0100] "GET /.auth.json HTTP/2.0" 404 0 "https://marcus-deuerlein.de/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH