๐บ๐ธ
136.90.54.236
26 Sep 2026
136.90.54.236 - - [26/Sep/2026:05:58:52 +0200] "GET /.env HTTP/2.0" 200 1641 "-" "Mozilla/5.0 (compa ...
show more
136.90.54.236 - - [26/Sep/2026:05:58:52 +0200] "GET /.env HTTP/2.0" 200 1641 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)"
136.90.54.236 - - [26/Sep/2026:05:58:52 +0200] "GET /.env.bak HTTP/2.0" 200 1601 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36"
136.90.54.236 - - [26/Sep/2026:05:58:52 +0200] "GET /.env.production HTTP/2.0" 200 1601 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"
136.90.54.236 - - [26/Sep/2026:05:58:53 +0200] "GET /.env.example HTTP/2.0" 200 1606 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot"
136.90.54.236 - - [26/Sep/2026:05:58:53 +0200] "GET /.env.save HTTP/2.0" 200 1606 "-" "Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)"
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
๐บ๐ธ
136.90.54.222
26 Sep 2026
136.90.54.222 - - [26/Sep/2026:05:52:17 +0200] "GET /config/env/aws_credentials.env HTTP/2.0" 200 16 ...
show more
136.90.54.222 - - [26/Sep/2026:05:52:17 +0200] "GET /config/env/aws_credentials.env HTTP/2.0" 200 1606 "-" "Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)"
136.90.54.222 - - [26/Sep/2026:05:52:17 +0200] "GET /.env.example HTTP/2.0" 200 1606 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
136.90.54.222 - - [26/Sep/2026:05:52:17 +0200] "GET /.env.production HTTP/2.0" 200 1606 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
136.90.54.222 - - [26/Sep/2026:05:52:17 +0200] "GET /.env.example HTTP/2.0" 200 1606 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
๐จ๐ญ
176.65.144.72
26 Sep 2026
176.65.144.72 - - [26/Sep/2026:05:14:17 +0200] "GET /.env~ HTTP/2.0" 200 1601 "-" "Mozilla/5.0 (Wind ...
show more
176.65.144.72 - - [26/Sep/2026:05:14:17 +0200] "GET /.env~ HTTP/2.0" 200 1601 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36"
176.65.144.72 - - [26/Sep/2026:05:14:17 +0200] "GET /.env HTTP/2.0" 200 1606 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36"
176.65.144.72 - - [26/Sep/2026:05:14:17 +0200] "GET /.env.local HTTP/2.0" 200 1601 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36"
176.65.144.72 - - [26/Sep/2026:05:14:17 +0200] "GET /.env HTTP/2.0" 200 1606 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36"
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
๐ณ๐ฑ
93.123.109.55
26 Sep 2026
93.123.109.55 - - [26/Sep/2026:05:11:30 +0200] "GET /.github/workflows/production.yml HTTP/1.1" 200 ...
show more
93.123.109.55 - - [26/Sep/2026:05:11:30 +0200] "GET /.github/workflows/production.yml HTTP/1.1" 200 3733 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36"
93.123.109.55 - - [26/Sep/2026:05:11:30 +0200] "GET /.github/workflows/release.yml HTTP/1.1" 200 3733 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36"
93.123.109.55 - - [26/Sep/2026:05:11:30 +0200] "GET /.gitlab-ci.yml HTTP/1.1" 200 3733 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36"
93.123.109.55 - - [26/Sep/2026:05:11:30 +0200] "GET /.github/workflows/ci.yml HTTP/1.1" 200 3733 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36"
93.123.109.55 - - [26/Sep/2026:05:11:30 +0200] "GET /.github/workflows/build.yml HTTP/1.1" 200 3733 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleW
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
๐ฉ๐ช
104.248.252.89
26 Sep 2026
2026-09-26T04:37:12.279464+02:00 www4 postfix/smtpd[44865]: improper command pipelining after CONNEC ...
show more
2026-09-26T04:37:12.279464+02:00 www4 postfix/smtpd[44865]: improper command pipelining after CONNECT from unknown[104.248.252.89]: HELP\r\n
2026-09-26T04:37:12.292958+02:00 www4 postfix/smtpd[4147737]: improper command pipelining after CONNECT from unknown[104.248.252.89]: \r\n\r\n
2026-09-26T04:37:12.385009+02:00 www4 postfix/smtpd[44865]: improper command pipelining after CONNECT from unknown[104.248.252.89]: GET / HTTP/1.0\r\n\r\n
2026-09-26T04:37:12.400182+02:00 www4 postfix/smtpd[4147737]: improper command pipelining after CONNECT from unknown[104.248.252.89]: OPTIONS / HTTP/1.0\r\n\r\n
2026-09-26T04:37:12.416231+02:00 www4 postfix/smtpd[44865]: improper command pipelining after CONNECT from unknown[104.248.252.89]: OPTIONS / RTSP/1.0\r\n\r\n
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
๐ธ๐ฌ
140.245.126.243
26 Sep 2026
140.245.126.243 - - [26/Sep/2026:04:36:27 +0200] "GET /.env.production.local HTTP/1.1" 302 145 "-" " ...
show more
140.245.126.243 - - [26/Sep/2026:04:36:27 +0200] "GET /.env.production.local HTTP/1.1" 302 145 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
140.245.126.243 - - [26/Sep/2026:04:36:27 +0200] "GET /.env HTTP/1.1" 302 145 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
140.245.126.243 - - [26/Sep/2026:04:36:27 +0200] "GET /.env.production HTTP/1.1" 302 145 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
140.245.126.243 - - [26/Sep/2026:04:36:28 +0200] "GET /.env.bak HTTP/1.1" 302 145 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
140.245.126.243 - - [26/Sep/2026:04:36:28 +0200] "GET /.env.local HTTP/1.1" 302 145 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
๐ง๐ช
34.62.82.165
26 Sep 2026
34.62.82.165 - - [26/Sep/2026:04:35:27 +0200] "GET /.aws/.env HTTP/2.0" 200 1601 "-" "Mozilla/5.0 (W ...
show more
34.62.82.165 - - [26/Sep/2026:04:35:27 +0200] "GET /.aws/.env HTTP/2.0" 200 1601 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.62.82.165 - - [26/Sep/2026:04:35:27 +0200] "GET /.aws/credentials HTTP/2.0" 200 1601 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.62.82.165 - - [26/Sep/2026:04:35:27 +0200] "GET /.aws/config HTTP/2.0" 200 1601 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.62.82.165 - - [26/Sep/2026:04:35:27 +0200] "GET /.aws/credentials.bak HTTP/2.0" 200 1601 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
๐บ๐ธ
136.90.15.166
26 Sep 2026
136.90.15.166 - - [26/Sep/2026:04:09:41 +0200] "GET /config/env/aws_credentials.env HTTP/2.0" 200 16 ...
show more
136.90.15.166 - - [26/Sep/2026:04:09:41 +0200] "GET /config/env/aws_credentials.env HTTP/2.0" 200 1601 "-" "Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)"
136.90.15.166 - - [26/Sep/2026:04:09:42 +0200] "GET /.env.development HTTP/2.0" 200 1606 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )"
136.90.15.166 - - [26/Sep/2026:04:09:42 +0200] "GET /.env.development HTTP/2.0" 200 1606 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )"
136.90.15.166 - - [26/Sep/2026:04:09:42 +0200] "GET /config.env HTTP/2.0" 200 1606 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)"
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
๐ง๐ช
34.52.133.111
26 Sep 2026
34.52.133.111 - - [26/Sep/2026:04:08:43 +0200] "GET /.env-example HTTP/2.0" 200 1601 "-" "Mozilla/5. ...
show more
34.52.133.111 - - [26/Sep/2026:04:08:43 +0200] "GET /.env-example HTTP/2.0" 200 1601 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.52.133.111 - - [26/Sep/2026:04:08:43 +0200] "GET /.env HTTP/2.0" 200 1601 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.52.133.111 - - [26/Sep/2026:04:08:43 +0200] "GET /.docker/.env HTTP/2.0" 200 1601 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.52.133.111 - - [26/Sep/2026:04:08:43 +0200] "GET /.docker/laravel/app/.env HTTP/2.0" 200 1601 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.52.133.111 - - [26/Sep/2026:04:08:43 +0200] "GET /.aws/.env HTTP/2.0" 200 1601 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
๐บ๐ธ
136.90.53.72
26 Sep 2026
136.90.53.72 - - [26/Sep/2026:04:01:25 +0200] "GET /.env.production HTTP/2.0" 200 1606 "-" "Mozilla/ ...
show more
136.90.53.72 - - [26/Sep/2026:04:01:25 +0200] "GET /.env.production HTTP/2.0" 200 1606 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
136.90.53.72 - - [26/Sep/2026:04:01:25 +0200] "GET /.env HTTP/2.0" 200 1606 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot"
136.90.53.72 - - [26/Sep/2026:04:01:25 +0200] "GET /.env.example HTTP/2.0" 200 1601 "-" "Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)"
136.90.53.72 - - [26/Sep/2026:04:01:25 +0200] "GET /.env.local HTTP/2.0" 200 1606 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)"
136.90.53.72 - - [26/Sep/2026:04:01:25 +0200] "GET /config/env/aws_credentials.env HTTP/2.0" 200 1606 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)"
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
๐บ๐ธ
136.90.30.63
26 Sep 2026
136.90.30.63 - - [26/Sep/2026:03:27:36 +0200] "GET /.env.prod HTTP/2.0" 200 1606 "-" "Mozilla/5.0 (c ...
show more
136.90.30.63 - - [26/Sep/2026:03:27:36 +0200] "GET /.env.prod HTTP/2.0" 200 1606 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
136.90.30.63 - - [26/Sep/2026:03:27:36 +0200] "GET /api/.env HTTP/2.0" 200 1601 "-" "Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)"
136.90.30.63 - - [26/Sep/2026:03:27:36 +0200] "GET /admin/.env HTTP/2.0" 200 1601 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
136.90.30.63 - - [26/Sep/2026:03:27:36 +0200] "GET /.env.save HTTP/2.0" 200 1606 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)"
136.90.30.63 - - [26/Sep/2026:03:27:36 +0200] "GET /backend/.env HTTP/2.0" 200 1606 "-" "Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)"
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
๐ญ๐ฐ
104.208.65.139
26 Sep 2026
104.208.65.139 - - [26/Sep/2026:02:43:57 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.p ...
show more
104.208.65.139 - - [26/Sep/2026:02:43:57 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 502 157 "-" "-"
104.208.65.139 - - [26/Sep/2026:02:43:57 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 502 157 "-" "-"
104.208.65.139 - - [26/Sep/2026:02:43:57 +0200] "GET /f35.update.php HTTP/1.1" 502 157 "-" "-"
104.208.65.139 - - [26/Sep/2026:02:43:57 +0200] "GET //adminfuns.php HTTP/1.1" 502 157 "-" "-"
104.208.65.139 - - [26/Sep/2026:02:43:58 +0200] "GET /3PJcpMFsD8B.php HTTP/1.1" 502 157 "-" "-"
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
๐บ๐ธ
136.90.54.202
26 Sep 2026
136.90.54.202 - - [26/Sep/2026:02:23:35 +0200] "GET /config/env/aws_credentials.env HTTP/2.0" 200 16 ...
show more
136.90.54.202 - - [26/Sep/2026:02:23:35 +0200] "GET /config/env/aws_credentials.env HTTP/2.0" 200 1606 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1)"
136.90.54.202 - - [26/Sep/2026:02:23:35 +0200] "GET /.env HTTP/2.0" 200 1606 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)"
136.90.54.202 - - [26/Sep/2026:02:23:35 +0200] "GET /.env HTTP/2.0" 200 1606 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)"
136.90.54.202 - - [26/Sep/2026:02:23:35 +0200] "GET /.env.production HTTP/2.0" 200 1601 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
๐บ๐ธ
89.106.74.143
26 Sep 2026
2026-09-26T02:05:33.003864+02:00 www4 sshd-session[3894051]: pam_unix(sshd:auth): authentication fai ...
show more
2026-09-26T02:05:33.003864+02:00 www4 sshd-session[3894051]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.106.74.143 user=root
2026-09-26T02:05:34.348455+02:00 www4 sshd-session[3894051]: Failed password for root from 89.106.74.143 port 35420 ssh2
2026-09-26T02:07:05.816236+02:00 www4 sshd-session[3897703]: Invalid user mark from 89.106.74.143 port 37772
2026-09-26T02:07:05.818444+02:00 www4 sshd-session[3897703]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.106.74.143
2026-09-26T02:07:07.685726+02:00 www4 sshd-session[3897703]: Failed password for invalid user mark from 89.106.74.143 port 37772 ssh2
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
๐บ๐ธ
74.7.242.8
25 Sep 2026
74.7.242.8 - - [26/Sep/2026:01:32:55 +0200] "GET /admin/scripts/js/'%20+%20%20%20%20%20%20%20%20%20% ...
show more
74.7.242.8 - - [26/Sep/2026:01:32:55 +0200] "GET /admin/scripts/js/'%20+%20%20%20%20%20%20%20%20%20%20%20%20%20%20v.url%20+%20%20%20%20%20%20%20%20%20%20%20%20%20%20' HTTP/2.0" 404 1271 "https://pih.snsolution.de/admin/scripts/js/footer.js?v=1783659657" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)"
74.7.242.8 - - [26/Sep/2026:01:32:56 +0200] "GET /admin/scripts/js/'%20+%20%20%20%20%20%20%20%20%20%20%20%20%20%20v.url%20+ HTTP/2.0" 404 1421 "https://pih.snsolution.de/admin/scripts/js/footer.js?v=1783659657" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)"
74.7.242.8 - - [26/Sep/2026:01:33:07 +0200] "GET /admin/vendor/fonts/source-sans-pro/source-sans-pro-v13-latin-regular.woff HTTP/2.0" 404 1390 "https://pih.snsolution.de/admin/vendor/fonts/source-sans-pro/source-sans-pro.css?v=1783659658" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://o
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
๐ณ๐ฑ
195.178.110.53
25 Sep 2026
195.178.110.53 - - [26/Sep/2026:01:30:16 +0200] "GET /.env HTTP/1.1" 200 1628 "-" "Mozilla/5.0 (Wind ...
show more
195.178.110.53 - - [26/Sep/2026:01:30:16 +0200] "GET /.env HTTP/1.1" 200 1628 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
195.178.110.53 - - [26/Sep/2026:01:30:16 +0200] "GET /.env?raw HTTP/1.1" 200 1628 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
195.178.110.53 - - [26/Sep/2026:01:30:16 +0200] "GET /.env?import&raw HTTP/1.1" 200 1628 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
195.178.110.53 - - [26/Sep/2026:01:30:16 +0200] "GET /.env?import&url&inline HTTP/1.1" 200 1628 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
195.178.110.53 - - [26/Sep/2026:01:30:16 +0200] "GET /.env?raw&cb=7128 HTTP/1.1" 200 1628 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
๐บ๐ธ
136.144.42.130
25 Sep 2026
136.144.42.130 - - [26/Sep/2026:01:12:33 +0200] "GET /rest/.env HTTP/1.1" 200 3733 "-" "Mozilla/5.0 ...
show more
136.144.42.130 - - [26/Sep/2026:01:12:33 +0200] "GET /rest/.env HTTP/1.1" 200 3733 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36"
136.144.42.130 - - [26/Sep/2026:01:12:33 +0200] "GET /shared/.env%20 HTTP/1.1" 200 3733 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36"
136.144.42.130 - - [26/Sep/2026:01:12:34 +0200] "GET /sources/.env HTTP/1.1" 200 3733 "-" "Mozilla/5.0 (Windows NT 10.0; rv:105.0) Gecko/20100101 Firefox/105.0"
136.144.42.130 - - [26/Sep/2026:01:12:35 +0200] "GET /enviroments/.env.production HTTP/1.1" 200 3733 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36"
136.144.42.130 - - [26/Sep/2026:01:12:35 +0200] "GET /enviroments/.env HTTP/1.1" 200 3733 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36"
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
๐บ๐ธ
172.98.32.189
25 Sep 2026
172.98.32.189 - - [26/Sep/2026:01:12:09 +0200] "GET /.env.dist HTTP/1.1" 200 3733 "-" "Mozilla/5.0 ( ...
show more
172.98.32.189 - - [26/Sep/2026:01:12:09 +0200] "GET /.env.dist HTTP/1.1" 200 3733 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36"
172.98.32.189 - - [26/Sep/2026:01:12:09 +0200] "GET /back/.env HTTP/1.1" 200 3733 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36"
172.98.32.189 - - [26/Sep/2026:01:12:11 +0200] "GET /core/.env HTTP/1.1" 200 3733 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0"
172.98.32.189 - - [26/Sep/2026:01:12:11 +0200] "GET /docker/.env HTTP/1.1" 200 3733 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36"
172.98.32.189 - - [26/Sep/2026:01:12:19 +0200] "GET /fedex/.env HTTP/1.1" 200 3733 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0"
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
๐บ๐ธ
172.98.32.191
25 Sep 2026
172.98.32.191 - - [26/Sep/2026:01:11:38 +0200] "GET /cp/.env HTTP/1.1" 200 3733 "-" "Mozilla/5.0 (Wi ...
show more
172.98.32.191 - - [26/Sep/2026:01:11:38 +0200] "GET /cp/.env HTTP/1.1" 200 3733 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36"
172.98.32.191 - - [26/Sep/2026:01:11:38 +0200] "GET /private/.env HTTP/1.1" 200 3733 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Safari/605.1.15"
172.98.32.191 - - [26/Sep/2026:01:11:38 +0200] "GET /system/.env HTTP/1.1" 200 3733 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:105.0) Gecko/20100101 Firefox/105.0"
172.98.32.191 - - [26/Sep/2026:01:11:40 +0200] "GET /redmine/.env HTTP/1.1" 200 3733 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0"
172.98.32.191 - - [26/Sep/2026:01:11:40 +0200] "GET /docker/.env HTTP/1.1" 200 3733 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:106.0) Gecko/20100101 Firefox/106.0"
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
๐บ๐ธ
136.144.42.132
25 Sep 2026
136.144.42.132 - - [26/Sep/2026:01:11:13 +0200] "GET /.env HTTP/1.1" 200 3733 "-" "Mozilla/5.0 (Wind ...
show more
136.144.42.132 - - [26/Sep/2026:01:11:13 +0200] "GET /.env HTTP/1.1" 200 3733 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36"
136.144.42.132 - - [26/Sep/2026:01:11:13 +0200] "GET /.env.save HTTP/1.1" 200 3733 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:105.0) Gecko/20100101 Firefox/105.0"
136.144.42.132 - - [26/Sep/2026:01:11:13 +0200] "GET /.env.old HTTP/1.1" 200 3733 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36"
136.144.42.132 - - [26/Sep/2026:01:11:14 +0200] "GET /.env.prod HTTP/1.1" 200 3733 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36"
136.144.42.132 - - [26/Sep/2026:01:11:14 +0200] "GET /.env.production HTTP/1.1" 200 3733 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
๐ญ๐ฐ
34.92.62.22
25 Sep 2026
34.92.62.22 - - [25/Sep/2026:23:55:37 +0200] "GET /.git/config HTTP/1.1" 200 1628 "-" "Mozilla/5.0 ( ...
show more
34.92.62.22 - - [25/Sep/2026:23:55:37 +0200] "GET /.git/config HTTP/1.1" 200 1628 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.92.62.22 - - [25/Sep/2026:23:55:37 +0200] "GET /.env HTTP/1.1" 200 1628 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.92.62.22 - - [25/Sep/2026:23:55:37 +0200] "GET /.env.local HTTP/1.1" 200 1628 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.92.62.22 - - [25/Sep/2026:23:55:38 +0200] "GET /.env.production HTTP/1.1" 200 1628 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.92.62.22 - - [25/Sep/2026:23:55:38 +0200] "GET /.env.staging HTTP/1.1" 200 1628 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrom
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
๐บ๐ธ
34.73.114.25
25 Sep 2026
34.73.114.25 - - [25/Sep/2026:23:17:09 +0200] "GET /.git/config HTTP/1.1" 200 3733 "-" "Mozilla/5.0 ...
show more
34.73.114.25 - - [25/Sep/2026:23:17:09 +0200] "GET /.git/config HTTP/1.1" 200 3733 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_7_2) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Safari/605.1.15"
34.73.114.25 - - [25/Sep/2026:23:17:09 +0200] "GET /.env HTTP/1.1" 200 3733 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 Edg/130.0.0.0"
34.73.114.25 - - [25/Sep/2026:23:17:09 +0200] "GET /.env.local HTTP/1.1" 200 3733 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Mobile/15E148 Safari/604.1"
34.73.114.25 - - [25/Sep/2026:23:17:09 +0200] "GET /.env.production HTTP/1.1" 200 3733 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0"
34.73.114.25 - - [25/Sep/2026:23:17:09 +0200] "GET /.env.staging HTTP/1.1" 200 3733 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0"
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
๐ง๐ช
34.77.137.207
25 Sep 2026
34.77.137.207 - - [25/Sep/2026:23:14:26 +0200] "GET /.env-example HTTP/2.0" 200 1601 "-" "Mozilla/5. ...
show more
34.77.137.207 - - [25/Sep/2026:23:14:26 +0200] "GET /.env-example HTTP/2.0" 200 1601 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.77.137.207 - - [25/Sep/2026:23:14:26 +0200] "GET /.env HTTP/2.0" 200 1601 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.77.137.207 - - [25/Sep/2026:23:14:26 +0200] "GET /.docker/.env HTTP/2.0" 200 1601 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.77.137.207 - - [25/Sep/2026:23:14:26 +0200] "GET /.docker/laravel/app/.env HTTP/2.0" 200 1601 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.77.137.207 - - [25/Sep/2026:23:14:26 +0200] "GET /.aws/credentials.bak HTTP/2.0" 200 1601 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
๐บ๐ธ
136.90.24.194
25 Sep 2026
136.90.24.194 - - [25/Sep/2026:23:01:40 +0200] "GET /build../.env HTTP/2.0" 200 1601 "-" "Mozilla/5. ...
show more
136.90.24.194 - - [25/Sep/2026:23:01:40 +0200] "GET /build../.env HTTP/2.0" 200 1601 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
136.90.24.194 - - [25/Sep/2026:23:01:40 +0200] "GET /static../.env HTTP/2.0" 200 1606 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)"
136.90.24.194 - - [25/Sep/2026:23:01:40 +0200] "GET /static../.env HTTP/2.0" 200 1606 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)"
136.90.24.194 - - [25/Sep/2026:23:01:40 +0200] "GET /@fs/app/.env.local?import&raw?? HTTP/2.0" 200 1606 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
๐ซ๐ท
82.102.18.118
25 Sep 2026
82.102.18.118 - - [25/Sep/2026:22:42:13 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 9 "- ...
show more
82.102.18.118 - - [25/Sep/2026:22:42:13 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 9 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
82.102.18.118 - - [25/Sep/2026:22:42:13 +0200] "GET //xmlrpc.php?rsd HTTP/1.1" 404 9 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
82.102.18.118 - - [25/Sep/2026:22:42:13 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 9 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
82.102.18.118 - - [25/Sep/2026:22:42:13 +0200] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 9 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
82.102.18.118 - - [25/Sep/2026:22:42:13 +0200] "GET //wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 9 "-" "Mozilla/5.0
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH