|
🇺🇸
2a09:bac1:76c0:780::5e:4f
|
|
2a09:bac1:76c0:780::5e:4f - - [02/Aug/2026:20:44:25 +1000] "GET /ms-themes.php HTTP/1.1" 404 70202 " ...
show more
2a09:bac1:76c0:780::5e:4f - - [02/Aug/2026:20:44:25 +1000] "GET /ms-themes.php HTTP/1.1" 404 70202 "http://greg-naud.com/ms-themes.php" "Go-http-client/2.0"
2a09:bac1:76c0:780::5e:4f - - [02/Aug/2026:20:44:27 +1000] "GET /chosen.php HTTP/1.1" 404 70195 "https://greg-naud.com/chosen.php?p=" "Go-http-client/2.0"
2a09:bac1:76c0:780::5e:4f - - [02/Aug/2026:20:44:28 +1000] "GET /file.php HTTP/1.1" 404 70174 "http://greg-naud.com/file.php" "Go-http-client/2.0"
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
66.132.224.94
|
|
66.132.224.94 - - [02/Aug/2026:18:53:40 +1000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; ...
show more
66.132.224.94 - - [02/Aug/2026:18:53:40 +1000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
66.132.224.94 - - [02/Aug/2026:18:53:41 +1000] "GET / HTTP/1.1" 400 154 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
66.132.224.94 - - [02/Aug/2026:18:53:42 +1000] "PRI * HTTP/2.0" 400 154 "-" "-"
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇳🇱
45.148.10.62
|
|
45.148.10.62 - - [02/Aug/2026:18:34:10 +1000] "GET /test.php HTTP/1.1" 404 70210 "-" "Mozilla/5.0 (X ...
show more
45.148.10.62 - - [02/Aug/2026:18:34:10 +1000] "GET /test.php HTTP/1.1" 404 70210 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
45.148.10.62 - - [02/Aug/2026:18:34:25 +1000] "GET /config.json.save HTTP/1.1" 404 70202 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
45.148.10.62 - - [02/Aug/2026:18:34:27 +1000] "GET /config.php HTTP/1.1" 404 70206 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇫🇷
143.244.57.86
|
|
143.244.57.86 - - [02/Aug/2026:18:29:23 +1000] "GET /ALFA_DATA/ HTTP/1.1" 404 70187 "-" "-"
143.244. ...
show more
143.244.57.86 - - [02/Aug/2026:18:29:23 +1000] "GET /ALFA_DATA/ HTTP/1.1" 404 70187 "-" "-"
143.244.57.86 - - [02/Aug/2026:18:29:26 +1000] "GET /id/ HTTP/1.1" 404 70202 "-" "-"
143.244.57.86 - - [02/Aug/2026:18:29:28 +1000] "GET /www/ HTTP/1.1" 404 70201 "-" "-"
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇳🇱
185.242.226.112
|
|
185.242.226.112 - - [02/Aug/2026:18:00:27 +1000] "\x16\x03\x01\x00\x8D\x01\x00\x00\x89\x03\x03\x0E1E ...
show more
185.242.226.112 - - [02/Aug/2026:18:00:27 +1000] "\x16\x03\x01\x00\x8D\x01\x00\x00\x89\x03\x03\x0E1E\xC8\xB4@\xF0X\x1By\x12\x12\xB8\xBC\x18\x8C\x7F\x9D\xDB\xAA\x0E\x93\x12\x02\xBFJ.\x14\x9Bg\xFA\xFC\x00\x00\x1A\xC0/\xC0+\xC0\x11\xC0\x07\xC0\x13\xC0\x09\xC0\x14\xC0" 400 154 "-" "-"
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇧🇪
35.190.221.105
|
|
35.190.221.105 - - [02/Aug/2026:17:30:04 +1000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT ...
show more
35.190.221.105 - - [02/Aug/2026:17:30:04 +1000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
35.190.221.105 - - [02/Aug/2026:17:30:05 +1000] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\xF7\x81\x98\xA2\x8D\xA4\xFAf\xDAv7\x90\x8C\xF3 /\xAC\xB7zq\xA2\xDA2\xCD\xD3\x9D\x87\xCD\xD9}\xA3\xF2 #\x9Ebw^" 400 154 "-" "-"
35.190.221.105 - - [02/Aug/2026:17:30:06 +1000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇧🇪
207.175.185.66
|
|
207.175.185.66 - - [02/Aug/2026:17:09:43 +1000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT ...
show more
207.175.185.66 - - [02/Aug/2026:17:09:43 +1000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
207.175.185.66 - - [02/Aug/2026:17:09:44 +1000] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\x0Cx\xB8\xB8\xABK\xD6\x18-\xFD\xB3\xB2\xBE *\xF4{\x09V\xFB\xEB\xD7\xE8uX\xE9\x5CS2\xA4" 400 154 "-" "-"
207.175.185.66 - - [02/Aug/2026:17:09:45 +1000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇧🇪
35.195.247.79
|
|
35.195.247.79 - - [02/Aug/2026:16:53:27 +1000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 1 ...
show more
35.195.247.79 - - [02/Aug/2026:16:53:27 +1000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
35.195.247.79 - - [02/Aug/2026:16:53:28 +1000] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\xB7\x063\x1B<Z\xEF\xDF\xE8>4\xDC\x8A\x9D\x80#V\xFDU\xE1\xB0\xA2\x1D\x0F\xAB\xCC'4\xE1\x05\xD8\xCE \xEE@\xCF\x19\x09\xCBj\xE9\xA6\x0F\xB4p\xD8\xAD\xFA\x10\xE7\xE5VZy\xC0\xAB\xF5%\xE6X:\x04\x00J!\x002\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 154 "-" "-"
35.195.247.79 - - [02/Aug/2026:16:53:29 +1000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇫🇷
146.70.194.220
|
|
146.70.194.220 - - [02/Aug/2026:16:14:30 +1000] "GET /.well-known/acme-challenge/ HTTP/1.1" 404 7019 ...
show more
146.70.194.220 - - [02/Aug/2026:16:14:30 +1000] "GET /.well-known/acme-challenge/ HTTP/1.1" 404 70196 "-" "-"
146.70.194.220 - - [02/Aug/2026:16:14:39 +1000] "GET /cgi-bin/ HTTP/1.1" 404 70202 "-" "-"
146.70.194.220 - - [02/Aug/2026:16:14:42 +1000] "GET /index/ HTTP/1.1" 404 70205 "-" "-"
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇩🇪
138.201.81.100
|
|
138.201.81.100 - - [02/Aug/2026:14:20:56 +1000] "GET /wp-content/plugins/wp-ticket/readme.txt HTTP/1 ...
show more
138.201.81.100 - - [02/Aug/2026:14:20:56 +1000] "GET /wp-content/plugins/wp-ticket/readme.txt HTTP/1.1" 404 70201 "-" "CMS-Security-Auditor/1.0 (+authorized self-check; contact: local-admin)"
138.201.81.100 - - [02/Aug/2026:14:20:57 +1000] "GET /wp-content/plugins/wp-automatic/readme.txt HTTP/1.1" 404 70166 "-" "CMS-Security-Auditor/1.0 (+authorized self-check; contact: local-admin)"
138.201.81.100 - - [02/Aug/2026:14:20:58 +1000] "GET /wp-content/plugins/wp-fastest-cache/readme.txt HTTP/1.1" 404 70210 "-" "CMS-Security-Auditor/1.0 (+authorized self-check; contact: local-admin)"
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
71.6.239.183
|
|
71.6.239.183 - - [02/Aug/2026:14:17:04 +1000] "GET / HTTP/1.0" 444 0 "-" "-"
71.6.239.183 - - [02/Au ...
show more
71.6.239.183 - - [02/Aug/2026:14:17:04 +1000] "GET / HTTP/1.0" 444 0 "-" "-"
71.6.239.183 - - [02/Aug/2026:14:17:04 +1000] "OPTIONS / HTTP/1.0" 444 0 "-" "-"
71.6.239.183 - - [02/Aug/2026:14:17:05 +1000] "OPTIONS / RTSP/1.0" 400 154 "-" "-"
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇩🇪
185.242.3.192
|
|
185.242.3.192 - - [02/Aug/2026:14:04:07 +1000] "GET /wp-content/plugins/apikey/apikey.php?test=hello ...
show more
185.242.3.192 - - [02/Aug/2026:14:04:07 +1000] "GET /wp-content/plugins/apikey/apikey.php?test=hello HTTP/1.1" 404 70200 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
185.242.3.192 - - [02/Aug/2026:14:04:07 +1000] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 404 70187 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
185.242.3.192 - - [02/Aug/2026:14:04:07 +1000] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 404 70195 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
20.169.53.38
|
|
20.169.53.38 - - [02/Aug/2026:13:58:04 +1000] "GET /.git/HEAD HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Wind ...
show more
20.169.53.38 - - [02/Aug/2026:13:58:04 +1000] "GET /.git/HEAD HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Edg/124.0.0.0"
20.169.53.38 - - [02/Aug/2026:13:58:05 +1000] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Edg/124.0.0.0"
20.169.53.38 - - [02/Aug/2026:13:58:06 +1000] "GET /.git/logs/HEAD HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.4; rv:125.0) Gecko/20100101 Firefox/125.0"
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇮🇹
172.213.232.128
|
|
172.213.232.128 - - [02/Aug/2026:10:41:51 +1000] "GET /.well-known/.well-known/ HTTP/1.1" 404 70198 ...
show more
172.213.232.128 - - [02/Aug/2026:10:41:51 +1000] "GET /.well-known/.well-known/ HTTP/1.1" 404 70198 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
172.213.232.128 - - [02/Aug/2026:10:41:53 +1000] "GET /.well-known/991176.php HTTP/1.1" 404 70204 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
47.251.249.208
|
|
47.251.249.208 - - [02/Aug/2026:10:13:45 +1000] "GET / HTTP/1.1" 444 0 "-" "curl/7.64.1"
47.251.249. ...
show more
47.251.249.208 - - [02/Aug/2026:10:13:45 +1000] "GET / HTTP/1.1" 444 0 "-" "curl/7.64.1"
47.251.249.208 - - [02/Aug/2026:10:13:55 +1000] "l\x00\x0B\x00\x00\x00\x00\x00\x00\x00\x00\x00" 400 154 "-" "-"
47.251.249.208 - - [02/Aug/2026:10:13:56 +1000] "GET / HTTP/1.1" 444 0 "-" "curl/7.74.0"
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇩🇪
20.52.125.110
|
|
20.52.125.110 - - [02/Aug/2026:09:09:34 +1000] "GET /.well-known/.well-known/ HTTP/1.1" 404 70210 "- ...
show more
20.52.125.110 - - [02/Aug/2026:09:09:34 +1000] "GET /.well-known/.well-known/ HTTP/1.1" 404 70210 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.52.125.110 - - [02/Aug/2026:09:09:36 +1000] "GET /.well-known/991176.php HTTP/1.1" 404 70206 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
...
show less
|
Bad Web Bot
Web App Attack
|
|
169.254.12.93
|
|
2026-08-02T08:59:34.839659+10:00 greg-Z170X-Gaming-7 kernel: [UFW BLOCK] IN=enp0s31f6 OUT= MAC=40:8d ...
show more
2026-08-02T08:59:34.839659+10:00 greg-Z170X-Gaming-7 kernel: [UFW BLOCK] IN=enp0s31f6 OUT= MAC=40:8d:5c:b5:73:3c:f8:ca:59:49:58:1d:08:00 SRC=169.254.12.93 DST=192.168.20.23 LEN=52 TOS=0x00 PREC=0x00 TTL=127 ID=57813 DF PROTO=TCP SPT=53757 DPT=22220 WINDOW=65535 RES=0x00 SYN URGP=0
2026-08-02T08:59:35.845667+10:00 greg-Z170X-Gaming-7 kernel: [UFW BLOCK] IN=enp0s31f6 OUT= MAC=40:8d:5c:b5:73:3c:f8:ca:59:49:58:1d:08:00 SRC=169.254.12.93 DST=192.168.20.23 LEN=52 TOS=0x00 PREC=0x00 TTL=127 ID=57840 DF PROTO=TCP SPT=53757 DPT=22220 WINDOW=65535 RES=0x00 SYN URGP=0
2026-08-02T08:59:40.983604+10:00 greg-Z170X-Gaming-7 kernel: [UFW BLOCK] IN=enp0s31f6 OUT= MAC=40:8d:5c:b5:73:3c:f8:ca:59:49:58:1d:08:00 SRC=169.254.12.93 DST=192.168.20.23 LEN=52 TOS=0x00 PREC=0x00 TTL=127 ID=57945 DF PROTO=TCP SPT=53758 DPT=22220 WINDOW=65535 RES=0x00 SYN URGP=0
...
show less
|
Port Scan
|
|
🇳🇱
2a06:a880:5:fd84::1
|
|
2a06:a880:5:fd84::1 - - [02/Aug/2026:08:26:17 +1000] "GET /js/config.js HTTP/1.1" 404 70200 "-" "Moz ...
show more
2a06:a880:5:fd84::1 - - [02/Aug/2026:08:26:17 +1000] "GET /js/config.js HTTP/1.1" 404 70200 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15.7; rv:149.0) Gecko/20100101 Firefox/149.0"
2a06:a880:5:fd84::1 - - [02/Aug/2026:08:26:17 +1000] "GET /env HTTP/1.1" 404 70204 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/146.0.3856.109"
2a06:a880:5:fd84::1 - - [02/Aug/2026:08:26:17 +1000] "GET /config.json HTTP/1.1" 404 70200 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15.7; rv:149.0) Gecko/20100101 Firefox/149.0"
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇳🇱
195.178.110.199
|
|
195.178.110.199 - - [02/Aug/2026:07:19:48 +1000] "GET /*/[id] HTTP/1.1" 404 70202 "-" "Mozilla/5.0 ( ...
show more
195.178.110.199 - - [02/Aug/2026:07:19:48 +1000] "GET /*/[id] HTTP/1.1" 404 70202 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 Edg/126.0.0.0"
195.178.110.199 - - [02/Aug/2026:07:19:48 +1000] "GET /*/[slug] HTTP/1.1" 404 70210 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
195.178.110.199 - - [02/Aug/2026:07:19:48 +1000] "GET /*update.cgi* HTTP/1.1" 404 70203 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇧🇷
20.226.5.174
|
|
20.226.5.174 - - [02/Aug/2026:06:37:14 +1000] "GET /.well-known/.well-known/ HTTP/1.1" 404 70202 "-" ...
show more
20.226.5.174 - - [02/Aug/2026:06:37:14 +1000] "GET /.well-known/.well-known/ HTTP/1.1" 404 70202 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.226.5.174 - - [02/Aug/2026:06:37:16 +1000] "GET /.well-known/991176.php HTTP/1.1" 404 70193 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
135.119.63.61
|
|
135.119.63.61 - - [02/Aug/2026:06:15:27 +1000] "GET /.well-known/991176.php HTTP/1.1" 404 70192 "-" ...
show more
135.119.63.61 - - [02/Aug/2026:06:15:27 +1000] "GET /.well-known/991176.php HTTP/1.1" 404 70192 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
135.119.63.61 - - [02/Aug/2026:06:15:28 +1000] "GET /.well-known/about.php HTTP/1.1" 404 70201 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇦🇷
190.194.81.108
|
|
190.194.81.108 - - [02/Aug/2026:03:45:00 +1000] "GET /llms.txt HTTP/1.1" 404 70203 "-" "OpenBash-Sur ...
show more
190.194.81.108 - - [02/Aug/2026:03:45:00 +1000] "GET /llms.txt HTTP/1.1" 404 70203 "-" "OpenBash-Surface/2.1 (+https://openbash.com/scan-policy.html)"
190.194.81.108 - - [02/Aug/2026:03:45:00 +1000] "GET /.well-known/security.txt HTTP/1.1" 404 70210 "-" "OpenBash-Surface/2.1 (+https://openbash.com/scan-policy.html)"
190.194.81.108 - - [02/Aug/2026:03:45:01 +1000] "GET /AGENTS.md HTTP/1.1" 404 70201 "-" "OpenBash-Surface/2.1 (+https://openbash.com/scan-policy.html)"
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇨🇳
118.145.104.37
|
|
118.145.104.37 - - [02/Aug/2026:02:57:14 +1000] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.% ...
show more
118.145.104.37 - - [02/Aug/2026:02:57:14 +1000] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 154 "-" "-"
118.145.104.37 - - [02/Aug/2026:02:57:16 +1000] "POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1" 400 154 "-" "-"
118.145.104.37 - - [02/Aug/2026:02:57:17 +1000] "POST /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 444 0 "-" "libredtail-http"
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇳🇱
5.61.209.224
|
|
5.61.209.224 - - [02/Aug/2026:00:32:05 +1000] "POST /v1/chat/completions HTTP/1.1" 444 0 "-" "Mozill ...
show more
5.61.209.224 - - [02/Aug/2026:00:32:05 +1000] "POST /v1/chat/completions HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; AIScan/1.0)"
5.61.209.224 - - [02/Aug/2026:00:32:07 +1000] "POST /v1/responses HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; AIScan/1.0)"
5.61.209.224 - - [02/Aug/2026:00:32:23 +1000] "POST /api/chat HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; AIScan/1.0)"
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇸🇬
152.42.165.47
|
|
152.42.165.47 - - [01/Aug/2026:21:02:17 +1000] "GET /sftp-config.json HTTP/1.1" 404 70205 "-" "Mozil ...
show more
152.42.165.47 - - [01/Aug/2026:21:02:17 +1000] "GET /sftp-config.json HTTP/1.1" 404 70205 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
152.42.165.47 - - [01/Aug/2026:21:02:20 +1000] "GET /ftp-sync.json HTTP/1.1" 404 70194 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
152.42.165.47 - - [01/Aug/2026:21:02:22 +1000] "GET /ftp-config.json HTTP/1.1" 404 70201 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
...
show less
|
Bad Web Bot
Web App Attack
|