๐ณ๐ฑ
195.178.110.28
18 hours ago
195.178.110.28 - - [10/Sep/2026:21:01:08 +0200] "GET //cms/.env HTTP/1.1" 200 3733 "-" "Mozilla/5.0 ...
show more
195.178.110.28 - - [10/Sep/2026:21:01:08 +0200] "GET //cms/.env HTTP/1.1" 200 3733 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
195.178.110.28 - - [10/Sep/2026:21:01:08 +0200] "GET //apis/.env HTTP/1.1" 200 3733 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
195.178.110.28 - - [10/Sep/2026:21:01:08 +0200] "GET //API/.env HTTP/1.1" 200 3733 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
195.178.110.28 - - [10/Sep/2026:21:01:08 +0200] "GET //apis/.env HTTP/1.1" 200 3733 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
๐ฉ๐ช
2003:c0:173a:ff30:3cc8:a266:afc4:3ad8
20 hours ago
2026-09-10T18:29:53.197868+02:00 www4 dovecot[918589]: imap-login: Disconnected: Aborted login by lo ...
show more
2026-09-10T18:29:53.197868+02:00 www4 dovecot[918589]: imap-login: Disconnected: Aborted login by logging out (auth failed, 5 attempts in 22 secs): user=<web12p2>, method=PLAIN, rip=2003:c0:173a:ff30:3cc8:a266:afc4:3ad8, lip=2a01:4f8:150:92a2::2, TLS, session=<uMjweCNb8t0gAwDAFzr/MDzIomavxDrY>
2026-09-10T18:34:54.292558+02:00 www4 dovecot[918589]: imap-login: Disconnected: Aborted login by logging out (auth failed, 5 attempts in 23 secs): user=<web12p2>, method=PLAIN, rip=2003:c0:173a:ff30:3cc8:a266:afc4:3ad8, lip=2a01:4f8:150:92a2::2, TLS, session=<rlvSiiNb990gAwDAFzr/MDzIomavxDrY>
2026-09-10T18:34:54.292558+02:00 www4 dovecot[918589]: imap-login: Disconnected: Aborted login by logging out (auth failed, 5 attempts in 23 secs): user=<web12p2>, method=PLAIN, rip=2003:c0:173a:ff30:3cc8:a266:afc4:3ad8, lip=2a01:4f8:150:92a2::2, TLS, session=<rlvSiiNb990gAwDAFzr/MDzIomavxDrY>
2026-09-10T18:35:22.085727+02:00 www4 dovecot[918589]: imap-login: Disconnected: Aborted login by logging out (auth
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
๐จ๐ณ
175.6.54.250
20 hours ago
175.6.54.250 - - [10/Sep/2026:18:16:03 +0200] "POST /api/chat/completions HTTP/1.1" 404 125 "-" "llm ...
show more
175.6.54.250 - - [10/Sep/2026:18:16:03 +0200] "POST /api/chat/completions HTTP/1.1" 404 125 "-" "llm-scan-zgrab2/0.1"
175.6.54.250 - - [10/Sep/2026:18:16:04 +0200] "GET /api/models HTTP/1.1" 404 125 "-" "llm-scan-zgrab2/0.1"
175.6.54.250 - - [10/Sep/2026:18:16:06 +0200] "POST /api/v1/files HTTP/1.1" 404 125 "-" "llm-scan-zgrab2/0.1"
175.6.54.250 - - [10/Sep/2026:18:16:08 +0200] "POST /api/v1/knowledge/%7Bid%7D/file/add HTTP/1.1" 404 125 "-" "llm-scan-zgrab2/0.1"
175.6.54.250 - - [10/Sep/2026:18:16:10 +0200] "POST /completion HTTP/1.1" 404 125 "-" "llm-scan-zgrab2/0.1"
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
๐ฉ๐ช
2003:c0:173a:ff30:3cc8:a266:afc4:3ad8
20 hours ago
2026-09-10T17:59:50.791547+02:00 www4 dovecot[918589]: imap-login: Disconnected: Aborted login by lo ...
show more
2026-09-10T17:59:50.791547+02:00 www4 dovecot[918589]: imap-login: Disconnected: Aborted login by logging out (auth failed, 5 attempts in 10 secs): user=<web12p2>, method=PLAIN, rip=2003:c0:173a:ff30:3cc8:a266:afc4:3ad8, lip=2a01:4f8:150:92a2::2, TLS, session=<InUyDiNbDd0gAwDAFzr/MDzIomavxDrY>
2026-09-10T18:04:42.212496+02:00 www4 dovecot[918589]: imap-login: Disconnected: Aborted login by logging out (auth failed, 5 attempts in 22 secs): user=<web12p2>, method=PLAIN, rip=2003:c0:173a:ff30:3cc8:a266:afc4:3ad8, lip=2a01:4f8:150:92a2::2, TLS, session=<rQvnHiNbEd0gAwDAFzr/MDzIomavxDrY>
2026-09-10T18:09:42.349357+02:00 www4 dovecot[918589]: imap-login: Disconnected: Aborted login by logging out (auth failed, 5 attempts in 22 secs): user=<web12p2>, method=PLAIN, rip=2003:c0:173a:ff30:3cc8:a266:afc4:3ad8, lip=2a01:4f8:150:92a2::2, TLS, session=<9j3IMCNbct0gAwDAFzr/MDzIomavxDrY>
2026-09-10T18:11:45.335849+02:00 www4 dovecot[918589]: imap-login: Disconnected: Aborted login by logging out (auth
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
๐ณ๐ฑ
94.154.46.249
22 hours ago
94.154.46.249 - - [10/Sep/2026:16:13:26 +0200] "GET /wp-config.php.bak HTTP/1.1" 200 1618 "-" "Mozil ...
show more
94.154.46.249 - - [10/Sep/2026:16:13:26 +0200] "GET /wp-config.php.bak HTTP/1.1" 200 1618 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
94.154.46.249 - - [10/Sep/2026:16:13:26 +0200] "GET /.git/index HTTP/1.1" 200 1618 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
94.154.46.249 - - [10/Sep/2026:16:13:26 +0200] "GET /.git/HEAD HTTP/1.1" 200 1618 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
94.154.46.249 - - [10/Sep/2026:16:13:26 +0200] "GET /wp-config.bak HTTP/1.1" 200 1618 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
94.154.46.249 - - [10/Sep/2026:16:13:26 +0200] "GET /wp-config.old HTTP/1.1" 200 1618 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
๐ท๐ด
92.118.39.148
23 hours ago
2026-09-10T15:31:29.445179+02:00 www4 postfix/smtpd[3381842]: warning: unknown[92.118.39.148]: SASL ...
show more
2026-09-10T15:31:29.445179+02:00 www4 postfix/smtpd[3381842]: warning: unknown[92.118.39.148]: SASL LOGIN authentication failed: (reason unavailable), [email protected]
2026-09-10T15:31:38.310702+02:00 www4 postfix/smtpd[3381842]: warning: unknown[92.118.39.148]: SASL LOGIN authentication failed: (reason unavailable), [email protected]
2026-09-10T15:31:51.102269+02:00 www4 postfix/smtpd[3381842]: warning: unknown[92.118.39.148]: SASL LOGIN authentication failed: (reason unavailable), [email protected]
2026-09-10T15:32:09.182041+02:00 www4 postfix/smtpd[3381842]: warning: unknown[92.118.39.148]: SASL LOGIN authentication failed: (reason unavailable), [email protected]
2026-09-10T15:32:18.011650+02:00 www4 postfix/smtpd[3387186]: warning: unknown[92.118.39.148]: SASL LOGIN authentication failed: (reason unavailable), [email protected]
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
๐ฑ๐น
213.176.24.65
23 hours ago
2026-09-10T15:22:37.127206+02:00 www4 postfix/submission/smtpd[3365984]: NOQUEUE: reject: RCPT from ...
show more
2026-09-10T15:22:37.127206+02:00 www4 postfix/submission/smtpd[3365984]: NOQUEUE: reject: RCPT from unknown[213.176.24.65]: 504 5.5.2 <00w4EPXBt6>: Helo command rejected: need fully-qualified hostname; from=<[email protected] > to=<[email protected] > proto=ESMTP helo=<00w4EPXBt6>
2026-09-10T15:22:46.581956+02:00 www4 postfix/submission/smtpd[3365984]: NOQUEUE: reject: RCPT from unknown[213.176.24.65]: 504 5.5.2 <f27b1ALp>: Helo command rejected: need fully-qualified hostname; from=<[email protected] > to=<[email protected] > proto=ESMTP helo=<f27b1ALp>
2026-09-10T15:25:51.664093+02:00 www4 postfix/submission/smtpd[3373554]: NOQUEUE: reject: RCPT from unknown[213.176.24.65]: 504 5.5.2 <2Fvlcuw5>: Helo command rejected: need fully-qualified hostname; from=<[email protected] > to=<[email protected] > proto=ESMTP helo=<2Fvlcuw5>
2026-09-10T15:26:01.097707+02:00 www4 postfix/submission/smtpd[3373554]: NOQUEUE: reject: RCPT from unknown[213.176.24.65]: 504 5.5.2 <FzRNfu2n>: H
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
๐ง๐ช
34.34.165.225
10 Sep 2026
34.34.165.225 - - [10/Sep/2026:14:07:11 +0200] "GET /.git/config HTTP/1.1" 200 1628 "-" "Mozilla/5.0 ...
show more
34.34.165.225 - - [10/Sep/2026:14:07:11 +0200] "GET /.git/config HTTP/1.1" 200 1628 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.34.165.225 - - [10/Sep/2026:14:07:11 +0200] "GET /.env HTTP/1.1" 200 1628 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.34.165.225 - - [10/Sep/2026:14:07:11 +0200] "GET /.env.local HTTP/1.1" 200 1628 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.34.165.225 - - [10/Sep/2026:14:07:11 +0200] "GET /.env.production HTTP/1.1" 200 1628 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.34.165.225 - - [10/Sep/2026:14:07:11 +0200] "GET /.env.staging HTTP/1.1" 200 1628 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Ge
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
๐ณ๐ฑ
91.92.241.196
10 Sep 2026
91.92.241.196 - - [10/Sep/2026:13:22:07 +0200] "GET /.git/HEAD HTTP/1.1" 200 1628 "-" "Mozilla/5.0 ( ...
show more
91.92.241.196 - - [10/Sep/2026:13:22:07 +0200] "GET /.git/HEAD HTTP/1.1" 200 1628 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
91.92.241.196 - - [10/Sep/2026:13:22:07 +0200] "GET /.git/config HTTP/1.1" 200 1628 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
91.92.241.196 - - [10/Sep/2026:13:22:25 +0200] "GET /.git/HEAD HTTP/1.1" 401 32 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
91.92.241.196 - - [10/Sep/2026:13:22:27 +0200] "GET /.git/config HTTP/1.1" 401 32 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
91.92.241.196 - - [10/Sep/2026:13:22:28 +0200] "GET /.git/HEAD HTTP/1.1" 401 32 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
๐ฆ๐บ
34.151.113.168
10 Sep 2026
34.151.113.168 - - [10/Sep/2026:13:13:24 +0200] "GET /.git/config HTTP/1.1" 200 1628 "-" "Mozilla/5. ...
show more
34.151.113.168 - - [10/Sep/2026:13:13:24 +0200] "GET /.git/config HTTP/1.1" 200 1628 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.151.113.168 - - [10/Sep/2026:13:13:25 +0200] "GET /.env HTTP/1.1" 200 1628 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.151.113.168 - - [10/Sep/2026:13:13:25 +0200] "GET /.env.local HTTP/1.1" 200 1628 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.151.113.168 - - [10/Sep/2026:13:13:26 +0200] "GET /.env.production HTTP/1.1" 200 1628 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.151.113.168 - - [10/Sep/2026:13:13:26 +0200] "GET /.env.staging HTTP/1.1" 200 1628 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
๐ธ๐ฎ
212.13.234.23
10 Sep 2026
212.13.234.23 - - [10/Sep/2026:13:12:27 +0200] "GET /.git/credential-cache HTTP/1.1" 422 496 "-" "Mo ...
show more
212.13.234.23 - - [10/Sep/2026:13:12:27 +0200] "GET /.git/credential-cache HTTP/1.1" 422 496 "-" "Mozilla/5.0 (X11; Linux x86_64)"
212.13.234.23 - - [10/Sep/2026:13:12:27 +0200] "GET /.git/config HTTP/1.1" 422 496 "-" "Mozilla/5.0 (X11; Linux x86_64)"
212.13.234.23 - - [10/Sep/2026:13:12:27 +0200] "GET /.git-credentials HTTP/1.1" 422 496 "-" "Mozilla/5.0 (X11; Linux x86_64)"
212.13.234.23 - - [10/Sep/2026:13:12:27 +0200] "GET /.git/config.credentials HTTP/1.1" 422 496 "-" "Mozilla/5.0 (X11; Linux x86_64)"
212.13.234.23 - - [10/Sep/2026:13:12:27 +0200] "GET /.git/config.bak HTTP/1.1" 422 496 "-" "Mozilla/5.0 (X11; Linux x86_64)"
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
๐บ๐ธ
136.85.148.172
10 Sep 2026
136.85.148.172 - - [10/Sep/2026:12:10:36 +0200] "GET /@fs/.env.local?raw?? HTTP/1.1" 200 1628 "-" "M ...
show more
136.85.148.172 - - [10/Sep/2026:12:10:36 +0200] "GET /@fs/.env.local?raw?? HTTP/1.1" 200 1628 "-" "Mozilla/5.0 (compatible; Slackbot-LinkExpanding/1.0; +https://api.slack.com/robots)"
136.85.148.172 - - [10/Sep/2026:12:10:36 +0200] "GET /@fs/..%252f..%252f..%252f..%252f..%252froot/.env?raw?? HTTP/1.1" 200 1665 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.2 Mobile/15E148 Safari/604.1; compatible; TelegramBot/1.0"
136.85.148.172 - - [10/Sep/2026:12:10:36 +0200] "GET /@fs/..%252f..%252f..%252f..%252f..%252fapp/.env?raw?? HTTP/1.1" 200 1628 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot) Chrome/130.0.712.179 Mobile Safari/537.36"
136.85.148.172 - - [10/Sep/2026:12:10:36 +0200] "GET /@fs/.env?raw?? HTTP/1.1" 200 1618 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Perplexity-User/1.0; +https://perplexity.ai
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
๐บ๐ธ
71.6.199.23
10 Sep 2026
2026-09-10T10:33:59.113479+02:00 www4 postfix/smtpd[2717366]: improper command pipelining after CONN ...
show more
2026-09-10T10:33:59.113479+02:00 www4 postfix/smtpd[2717366]: improper command pipelining after CONNECT from einstein.census.shodan.io[71.6.199.23]: \026\003\003\001\245\001\000\001\241\003\0034&n\327,\247\312\344\337PCJ]8\204\236\331\027\267\207\037\341b\335\016\327_\307\226\\\220\361 \033\313\036=\322\360\344\230\202\020W\353\241\330\332\214\3037\336\330l\347\003e\204;\254\253\025\177\352\302\000\212\000\005\000\004\000\a\000\300\000\204\000\272\000A\000\235\300\241\300\235\000=
2026-09-10T10:34:00.805329+02:00 www4 postfix/smtpd[2717366]: improper command pipelining after CONNECT from einstein.census.shodan.io[71.6.199.23]: \026\003\003\001\231\001\000\001\225\003\003\3368\322X\272\273\237tT\267\261\340\374+\377D\367\327v\316\263\026X\230\245\251\322a\372\353\206\331 \317w\000LG\tl\220\330g\314\035\376\374V\274\024\327\327\255\325-4k"\032c\257K\232\313n\000\214\352\352\300\022\300\023\300\a\300'\314\024\300/\023\001\300\024\023\002\300(
2026-09-10T10:34:01.144105+02:00 www4 postfix/
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
๐ฑ๐บ
64.89.160.73
10 Sep 2026
64.89.160.73 - - [10/Sep/2026:10:27:37 +0200] "GET /.env HTTP/1.1" 200 3733 "-" "Mozilla/5.0 (Window ...
show more
64.89.160.73 - - [10/Sep/2026:10:27:37 +0200] "GET /.env HTTP/1.1" 200 3733 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/124.0 Safari/537.36"
64.89.160.73 - - [10/Sep/2026:10:27:38 +0200] "GET /.env.local HTTP/1.1" 200 3733 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/124.0 Safari/537.36"
64.89.160.73 - - [10/Sep/2026:10:27:38 +0200] "GET /.env.local HTTP/1.1" 200 3733 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/124.0 Safari/537.36"
64.89.160.73 - - [10/Sep/2026:10:27:38 +0200] "GET /.env.production HTTP/1.1" 200 3733 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/124.0 Safari/537.36"
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
๐ธ๐ฌ
104.28.156.148
10 Sep 2026
104.28.156.148 - - [10/Sep/2026:08:58:06 +0200] "GET /robots.txt HTTP/1.1" 404 9 "https://www.google ...
show more
104.28.156.148 - - [10/Sep/2026:08:58:06 +0200] "GET /robots.txt HTTP/1.1" 404 9 "https://www.google.com/search?q=rspamd.snsolution.de" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15"
104.28.156.148 - - [10/Sep/2026:08:58:09 +0200] "GET /sitemap.xml HTTP/1.1" 404 9 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.6422.113 Mobile Safari/537.36"
104.28.156.148 - - [10/Sep/2026:08:58:19 +0200] "GET /.env.backup HTTP/1.1" 404 9 "https://www.google.com/search?q=rspamd.snsolution.de" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)"
104.28.156.148 - - [10/Sep/2026:08:58:21 +0200] "GET /secrets.json HTTP/1.1" 404 9 "https://www.google.com/search?q=rspamd.snsolution.de" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:137.0) Gecko/20100101 Firefox/137.0"
104.28.156.148 - - [10/Sep/2026:08:58:22 +0200] "GET /.env HTTP/1.1" 4
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
๐ธ๐ฌ
104.28.167.56
10 Sep 2026
104.28.167.56 - - [10/Sep/2026:08:55:49 +0200] "GET /_rNd9xZ7kL3 HTTP/1.1" 404 9 "-" "Mozilla/5.0 Ap ...
show more
104.28.167.56 - - [10/Sep/2026:08:55:49 +0200] "GET /_rNd9xZ7kL3 HTTP/1.1" 404 9 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)"
104.28.167.56 - - [10/Sep/2026:08:55:51 +0200] "GET /robots.txt HTTP/1.1" 404 9 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15"
104.28.167.56 - - [10/Sep/2026:08:55:52 +0200] "GET /sitemap.xml HTTP/1.1" 404 9 "https://www.google.com/search?q=rspamd.snsolution.de" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
104.28.167.56 - - [10/Sep/2026:08:55:57 +0200] "GET /sitemap-index.xml HTTP/1.1" 404 9 "https://www.google.com/search?q=rspamd.snsolution.de" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)"
104.28.167.56 - - [10/Sep/2026:08:56:03 +0200] "GET /.env.local HTTP/1.1" 404 9 "-" "Mozilla/5.0 (Linux; A
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
๐ฎ๐ฉ
119.235.222.219
10 Sep 2026
119.235.222.219 - - [10/Sep/2026:08:28:42 +0200] "GET /.env.bak HTTP/1.1" 200 1628 "-" "Mozilla/5.0 ...
show more
119.235.222.219 - - [10/Sep/2026:08:28:42 +0200] "GET /.env.bak HTTP/1.1" 200 1628 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246"
119.235.222.219 - - [10/Sep/2026:08:28:44 +0200] "GET /.env.local HTTP/1.1" 200 1628 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246"
119.235.222.219 - - [10/Sep/2026:08:28:44 +0200] "GET /.env.production HTTP/1.1" 200 1628 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246"
119.235.222.219 - - [10/Sep/2026:08:28:45 +0200] "GET /.env.staging HTTP/1.1" 200 1628 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246"
119.235.222.219 - - [10/Sep/2026:08:28:46 +0200] "GET /.env.dev HTTP/1.1" 200 1628 "-" "Mozilla/5.0 (Windows NT 10.0; W
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
๐ฉ๐ช
213.209.159.223
10 Sep 2026
213.209.159.223 - - [10/Sep/2026:08:08:58 +0200] "GET /.env HTTP/2.0" 200 3733 "-" "Mozilla/5.0 (Win ...
show more
213.209.159.223 - - [10/Sep/2026:08:08:58 +0200] "GET /.env HTTP/2.0" 200 3733 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.186 Safari/537.36"
213.209.159.223 - - [10/Sep/2026:08:08:58 +0200] "GET /phpinfo/ HTTP/2.0" 200 3733 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.186 Safari/537.36"
213.209.159.223 - - [10/Sep/2026:08:08:58 +0200] "GET /phpinfo/ HTTP/2.0" 200 3733 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.186 Safari/537.36"
213.209.159.223 - - [10/Sep/2026:08:08:59 +0200] "GET /dev/.env HTTP/2.0" 200 3733 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.186 Safari/537.36"
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
๐ธ๐ฌ
104.28.254.46
10 Sep 2026
104.28.254.46 - - [10/Sep/2026:07:38:27 +0200] "GET /sitemap.xml HTTP/1.1" 404 1323 "-" "Mozilla/5.0 ...
show more
104.28.254.46 - - [10/Sep/2026:07:38:27 +0200] "GET /sitemap.xml HTTP/1.1" 404 1323 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15"
104.28.254.46 - - [10/Sep/2026:07:38:43 +0200] "GET /.env.old HTTP/1.1" 404 1323 "https://www.google.com/search?q=pih.snsolution.de" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15"
104.28.254.46 - - [10/Sep/2026:07:38:46 +0200] "HEAD /.continue/config.json HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.6422.113 Mobile Safari/537.36"
104.28.254.46 - - [10/Sep/2026:07:38:46 +0200] "GET /.env.development.local HTTP/1.1" 404 1323 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
104.28.254.46 - - [10/Sep/2026:07:38:47 +0200] "GET /.netrc HTTP/1.1" 404 1323 "https://www.google.com/se
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
๐ธ๐ฌ
104.28.222.46
10 Sep 2026
104.28.222.46 - - [10/Sep/2026:07:38:25 +0200] "GET /robots.txt HTTP/1.1" 404 1323 "-" "Mozilla/5.0 ...
show more
104.28.222.46 - - [10/Sep/2026:07:38:25 +0200] "GET /robots.txt HTTP/1.1" 404 1323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:137.0) Gecko/20100101 Firefox/137.0"
104.28.222.46 - - [10/Sep/2026:07:38:45 +0200] "GET /.env.production.local HTTP/1.1" 404 1323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
104.28.222.46 - - [10/Sep/2026:07:38:46 +0200] "GET /.pypirc HTTP/1.1" 404 1323 "https://www.google.com/search?q=pih.snsolution.de" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:137.0) Gecko/20100101 Firefox/137.0"
104.28.222.46 - - [10/Sep/2026:07:38:46 +0200] "HEAD /bootstrap/cache/config.php HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15"
104.28.222.46 - - [10/Sep/2026:07:38:46 +0200] "GET /.env.dist HTTP/1.1" 404 1323 "https://www.google.com/search?q=pih.snsolution.de" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWeb
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
๐ธ๐ฌ
104.28.156.135
10 Sep 2026
104.28.156.135 - - [10/Sep/2026:07:38:20 +0200] "GET /_rNd9xZ7kL3 HTTP/1.1" 404 4144 "https://www.go ...
show more
104.28.156.135 - - [10/Sep/2026:07:38:20 +0200] "GET /_rNd9xZ7kL3 HTTP/1.1" 404 4144 "https://www.google.com/search?q=pih.snsolution.de" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
104.28.156.135 - - [10/Sep/2026:07:38:29 +0200] "GET /sitemap_index.xml HTTP/1.1" 404 1323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:137.0) Gecko/20100101 Firefox/137.0"
104.28.156.135 - - [10/Sep/2026:07:38:31 +0200] "GET /sitemap-index.xml HTTP/1.1" 404 1323 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
104.28.156.135 - - [10/Sep/2026:07:38:33 +0200] "HEAD /.env HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
104.28.156.135 - - [10/Sep/2026:07:38:33 +0200] "HEAD /.git/config HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
๐ฎ๐น
34.17.91.17
10 Sep 2026
34.17.91.17 - - [10/Sep/2026:07:04:14 +0200] "GET /.git/config HTTP/1.1" 400 158 "-" "Mozilla/5.0 (X ...
show more
34.17.91.17 - - [10/Sep/2026:07:04:14 +0200] "GET /.git/config HTTP/1.1" 400 158 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.17.91.17 - - [10/Sep/2026:07:04:14 +0200] "GET /.env HTTP/1.1" 400 158 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.17.91.17 - - [10/Sep/2026:07:04:14 +0200] "GET /.env.local HTTP/1.1" 400 158 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.17.91.17 - - [10/Sep/2026:07:04:14 +0200] "GET /.env.production HTTP/1.1" 400 158 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.17.91.17 - - [10/Sep/2026:07:04:15 +0200] "GET /.env.staging HTTP/1.1" 400 158 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
๐ญ๐ฐ
34.150.21.17
10 Sep 2026
34.150.21.17 - - [10/Sep/2026:06:46:24 +0200] "GET /.git/config HTTP/1.1" 200 1628 "-" "Mozilla/5.0 ...
show more
34.150.21.17 - - [10/Sep/2026:06:46:24 +0200] "GET /.git/config HTTP/1.1" 200 1628 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.150.21.17 - - [10/Sep/2026:06:46:24 +0200] "GET /.env HTTP/1.1" 200 1628 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.150.21.17 - - [10/Sep/2026:06:46:24 +0200] "GET /.env.local HTTP/1.1" 200 1628 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.150.21.17 - - [10/Sep/2026:06:46:25 +0200] "GET /.env.production HTTP/1.1" 200 1628 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.150.21.17 - - [10/Sep/2026:06:46:25 +0200] "GET /.env.staging HTTP/1.1" 200 1628 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko)
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
๐ฎ๐น
34.17.93.97
10 Sep 2026
34.17.93.97 - - [10/Sep/2026:05:47:37 +0200] "POST /accounts/login/ HTTP/1.1" 403 742 "-" "Mozilla/5 ...
show more
34.17.93.97 - - [10/Sep/2026:05:47:37 +0200] "POST /accounts/login/ HTTP/1.1" 403 742 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.17.93.97 - - [10/Sep/2026:05:47:37 +0200] "POST /accounts/login/ HTTP/1.1" 403 742 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.17.93.97 - - [10/Sep/2026:05:47:37 +0200] "POST /accounts/login/ HTTP/1.1" 403 742 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.17.93.97 - - [10/Sep/2026:05:47:38 +0200] "GET /.git/config HTTP/1.1" 302 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.17.93.97 - - [10/Sep/2026:05:47:38 +0200] "POST / HTTP/1.1" 403 742 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
๐ต๐ฑ
34.118.44.143
10 Sep 2026
34.118.44.143 - - [10/Sep/2026:03:30:16 +0200] "GET /.git/config HTTP/1.1" 200 1628 "-" "Mozilla/5.0 ...
show more
34.118.44.143 - - [10/Sep/2026:03:30:16 +0200] "GET /.git/config HTTP/1.1" 200 1628 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.118.44.143 - - [10/Sep/2026:03:30:16 +0200] "GET /.env HTTP/1.1" 200 1628 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.118.44.143 - - [10/Sep/2026:03:30:16 +0200] "GET /.env.local HTTP/1.1" 200 1618 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.118.44.143 - - [10/Sep/2026:03:30:16 +0200] "GET /.env.production HTTP/1.1" 200 1628 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.118.44.143 - - [10/Sep/2026:03:30:16 +0200] "GET /.env.staging HTTP/1.1" 200 1628 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Ge
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH