Обнаружил в логах сервера
[Sun May 23 17:53:37.768905 2021] [core:error] [pid 16052:tid 140462377649920] [client 38.89.136.194:52416] AH00126: Invalid URI in request GET /../../../../.bitcoin/wallet.dat HTTP/1.1
[Sun May 23 17:53:38.010128 2021] [core:error] [pid 16089:tid 140462367160064] [client 38.89.136.194:52444] AH00126: Invalid URI in request GET /../../../../../.bitcoin/wallet.dat HTTP/1.1
[Sun May 23 17:53:38.254036 2021] [core:error] [pid 16052:tid 140462490867456] [client 38.89.136.194:52482] AH00126: Invalid URI in request GET /../../../../../../.bitcoin/wallet.dat HTTP/1.1
[Sun May 23 17:53:38.500979 2021] [core:error] [pid 16052:tid 140462335690496] [client 38.89.136.194:52556] AH00126: Invalid URI in request GET /../../../../../../../.bitcoin/wallet.dat HTTP/1.1
[Sun May 23 18:19:44.095322 2021] [core:error] [pid 16052:tid 140462251771648] [client 38.89.136.194:58720] AH00126: Invalid URI in request GET /../../.bitcoin/wallet.dat HTTP/1.1
[Sun May 23 18:19:44.479331 2021] [core:error] [pid 16052:tid 140462241281792] [client 38.89.136.194:58856] AH00126: Invalid URI in request GET /../../../.bitcoin/wallet.dat HTTP/1.1
[Sun May 23 18:19:44.938491 2021] [core:error] [pid 16052:tid 140462356670208] [client 38.89.136.194:58990] AH00126: Invalid URI in request GET /../../../../.bitcoin/wallet.dat HTTP/1.1
[Sun May 23 18:19:45.329034 2021] [core:error] [pid 16052:tid 140462230791936] [client 38.89.136.194:59110] AH00126: Invalid URI in request GET /../../../../../.bitcoin/wallet.dat HTTP/1.1
[Sun May 23 18:19:45.695434 2021] [core:error] [pid 16052:tid 140462314710784] [client 38.89.136.194:59234] AH00126: Invalid URI in request GET /../../../../../../.bitcoin/wallet.dat HTTP/1.1
[Sun May 23 18:19:45.941327 2021] [core:error] [pid 16052:tid 140462220302080] [client 38.89.136.194:59304] AH00126: Invalid URI in request GET /../../../../../../../.bitcoin/wallet.dat HTTP/1.1
забавный расчёт на наличие кошелька и доступа к нему сервера.