๐ฌ๐ง
213.219.38.113
26 Mar 2026
600 requests to bare IP - what a waste of resources.
Hacking
Brute-Force
Web App Attack
๐จ๐ณ
223.166.22.76
24 Mar 2026
223.166.22.76 various exploit searches and hacking GET /auth/login HTTP/1.1" , v naughty
Hacking
Web App Attack
๐ฎ๐ณ
151.158.52.145
19 Mar 2026
151.158.52.145 - - [19/Mar/2026:08:59:40 +0000] "POST /xmlrpc.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 ...
show more
151.158.52.145 - - [19/Mar/2026:08:59:40 +0000] "POST /xmlrpc.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Linux; Android 10; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Opera/72.0.0.0 Safari/537.36"
show less
Web App Attack
๐ธ๐ฌ
114.119.139.220
19 Mar 2026
114.119.139.220 - - [19/Mar/2026 +0000] "GET /?source=post_internal_links---------42---------------- ...
show more
114.119.139.220 - - [19/Mar/2026 +0000] "GET /?source=post_internal_links---------42---------------------------- HTTP/1.1" 503 7770 "https://medium.com/some-shit-link-spam" "Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)"
show less
Web Spam
Bad Web Bot
๐ธ๐ฌ
114.119.138.185
19 Mar 2026
114.119.138.185 - - [19/Mar/2026:04:44:48 +0000] "GET /?source=post_internal_links---------3-------- ...
show more
114.119.138.185 - - [19/Mar/2026:04:44:48 +0000] "GET /?source=post_internal_links---------3---------------------------- HTTP/1.1" 503 7770 "https://wanker.medium.com/83-some-shit-link-spam---" "Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)"
show less
Web Spam
๐จ๐ฆ
212.56.52.76
18 Mar 2026
212.56.52.76 - - [18/Mar/2026:19:32:17 +0000] "GET /xmlrpc.php?rsd HTTP/1.1" 404 16 "-" "Mozilla/5.0 ...
show more
212.56.52.76 - - [18/Mar/2026:19:32:17 +0000] "GET /xmlrpc.php?rsd HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
show less
Web App Attack
๐บ๐ธ
2a10:3c0:5:0:1:44:0:5
18 Mar 2026
2a10:3c0:5:0:1:44:0:5 - - [18/Mar/2026:03:46:56 +0000] "POST /mcp HTTP/1.1" 404 9 "-" "python-httpx/ ...
show more
2a10:3c0:5:0:1:44:0:5 - - [18/Mar/2026:03:46:56 +0000] "POST /mcp HTTP/1.1" 404 9 "-" "python-httpx/0.28.1"
show less
Hacking
Web App Attack
๐ซ๐ฎ
95.217.114.145
18 Mar 2026
95.217.114.145 multiple requests for same robots.txt file -??
Bad Web Bot
๐ธ๐ฌ
85.203.23.12
18 Mar 2026
85.203.23.xxx cycled through 222 ip addresses
Web App Attack
๐ฐ๐ท
20.196.201.163
18 Mar 2026
20.196.201.163 this bot active for 3 weeks
Web App Attack
๐ธ๐ฌ
85.203.23.15
18 Mar 2026
85.203.23.15 spaced out exploit checks to avoid detection :)
Web App Attack
๐บ๐ธ
35.243.182.43
18 Mar 2026
35.243.182.43 - - [17/Mar/2026:16:13:07 +0000] "HEAD /wp/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Linux; A ...
show more
35.243.182.43 - - [17/Mar/2026:16:13:07 +0000] "HEAD /wp/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Linux; Android 12; Redmi Note 11) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.112 Mobile Safari/537.36" usw
show less
Web App Attack
๐ฎ๐ณ
20.219.138.187
18 Mar 2026
20.219.138.187 - - [17/Mar/2026:05:47:38 +0000] "GET /wk/index.php HTTP/1.1" 404 9 "-" "Mozilla/5.0 ...
show more
20.219.138.187 - - [17/Mar/2026:05:47:38 +0000] "GET /wk/index.php HTTP/1.1" 404 9 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" simple, outdated exploit search
show less
Web App Attack
๐บ๐ธ
54.190.23.129
18 Mar 2026
54.190.23.129 - - [17/Mar/2026:19:54:33 +0000] "GET /backup.zip HTTP/1.1" 404 9 "-" "Mozilla/5.0 (Wi ...
show more
54.190.23.129 - - [17/Mar/2026:19:54:33 +0000] "GET /backup.zip HTTP/1.1" 404 9 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/91.0.4472.124"
and another 300 exploit checks
show less
Hacking
Web App Attack
๐ซ๐ท
2a01:cb1d:b2a:e600:802c:a4a3:2c49:4f27
16 Mar 2026
2a01:cb1d:b2a:e600:802c:a4a3:2c49:4f27 - - [16/Mar/2026:10:12:32 +0000] "POST /xmlrpc.php HTTP/1.1" ...
show more
2a01:cb1d:b2a:e600:802c:a4a3:2c49:4f27 - - [16/Mar/2026:10:12:32 +0000] "POST /xmlrpc.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/94.0.0.0 Safari/537.36" gotta love ipv6 attacks
show less
Web App Attack
๐บ๐ธ
104.28.214.112
16 Mar 2026
104.28.214.112 - - [16/Mar/2026:01:46:08 +0000] "GET /php8.php HTTP/1.1" 404 16 "-" "Go-http-client/ ...
show more
104.28.214.112 - - [16/Mar/2026:01:46:08 +0000] "GET /php8.php HTTP/1.1" 404 16 "-" "Go-http-client/1.1"
Cloudflare - not only protecting against attacks, but supplying them too!
show less
Hacking
Web App Attack
๐ธ๐ฌ
20.205.227.70
16 Mar 2026
20.205.227.70 Thanks MIcrosoft, this abuser has been highly active over the last two weeks, swappi ...
show more
20.205.227.70 Thanks MIcrosoft, this abuser has been highly active over the last two weeks, swapping IPs with a legacy list of exploits.
show less
Web App Attack
๐ฉ๐ช
43.228.157.68
15 Mar 2026
43.228.157.68 - - [15/Mar/2026:01:26:19 +0000] "GET /.git/config HTTP/1.1" 404 9 "-" "Go-http-client ...
show more
43.228.157.68 - - [15/Mar/2026:01:26:19 +0000] "GET /.git/config HTTP/1.1" 404 9 "-" "Go-http-client/1.1"
show less
Hacking
Web App Attack
๐บ๐ธ
8.229.206.211
15 Mar 2026
exploit searching, mainly outdated wordpress
Web App Attack
๐ฌ๐ง
213.168.248.72
15 Mar 2026
213.168.248.72 500 checks on historic exploits
Hacking
Web App Attack
๐ฐ๐ท
20.194.29.45
15 Mar 2026
20.194.29.45 - - [15/Mar/2026:01:35:54 +0000] "GET /buy.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Windo ...
show more
20.194.29.45 - - [15/Mar/2026:01:35:54 +0000] "GET /buy.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ffs
show less
Web App Attack
๐ธ๐ฌ
85.203.23.35
13 Mar 2026
85.203.23.35 - - [13/Mar/2026:17:02:16 +0000] "GET /bolt.php HTTP/1.1" 301 281 "-" "Mozilla/5.0 (X1 ...
show more
85.203.23.35 - - [13/Mar/2026:17:02:16 +0000] "GET /bolt.php HTTP/1.1" 301 281 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36"
show less
Web App Attack
๐ธ๐ฌ
85.203.23.15
13 Mar 2026
85.203.23.15 - - [13/Mar/2026:17:19:49 +0000] "GET /admin/assets/dist/img/weather/ HTTP/1.1" 404 9 " ...
show more
85.203.23.15 - - [13/Mar/2026:17:19:49 +0000] "GET /admin/assets/dist/img/weather/ HTTP/1.1" 404 9 "http://xxxxxxxxxxxx.xxx/admin/assets/dist/img/weather/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36"
wft "weather"!!!!
show less
Web App Attack
๐บ๐ธ
34.53.70.221
13 Mar 2026
34.53.70.221 - - [13/Mar/2026:16:57:09 +0000] "HEAD /wordpress/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Li ...
show more
34.53.70.221 - - [13/Mar/2026:16:57:09 +0000] "HEAD /wordpress/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Linux; Android 13; Infinix X688B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.48 Mobile Safari/537.36"
cmon google - stop this shit
show less
Web App Attack
๐ฌ๐ง
172.237.117.50
13 Mar 2026
172.237.117.50 - - [13/Mar/2026:19:44:52 +0000] "GET /inicio.jhtml HTTP/1.1" 403 13 "-" "Mozilla/5.0 ...
show more
172.237.117.50 - - [13/Mar/2026:19:44:52 +0000] "GET /inicio.jhtml HTTP/1.1" 403 13 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:128.2.0) Gecko/20100101 Firefox/128.2.0"
Searching for exploits
show less
Hacking
Web App Attack