🇳🇱
34.6.191.112
1 hour ago
34.6.191.112 - - [08/Sep/2026:09:47:34 +0200] "GET /.git/config HTTP/1.1" 400 632 "-" "Mozilla/5.0 ( ...
show more
34.6.191.112 - - [08/Sep/2026:09:47:34 +0200] "GET /.git/config HTTP/1.1" 400 632 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.6.191.112 - - [08/Sep/2026:09:47:34 +0200] "GET /.env HTTP/1.1" 400 632 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.6.191.112 - - [08/Sep/2026:09:47:35 +0200] "GET /.env.local HTTP/1.1" 400 632 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.6.191.112 - - [08/Sep/2026:09:47:35 +0200] "GET /.env.production HTTP/1.1" 400 632 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.6.191.112 - - [08/Sep/2026:09:47:35 +0200] "GET /.env.staging HTTP/1.1" 400 632 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.6.191.112 - - [08/Sep/2026:09:47:36 +0200] "GET /.
...
show less
Bad Web Bot
Web App Attack
🇺🇸
34.174.234.60
2 hours ago
34.174.234.60 - - [08/Sep/2026:09:08:54 +0200] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X ...
show more
34.174.234.60 - - [08/Sep/2026:09:08:54 +0200] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.174.234.60 - - [08/Sep/2026:09:08:55 +0200] "GET /.env HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.174.234.60 - - [08/Sep/2026:09:08:55 +0200] "GET /.env.local HTTP/1.1" 404 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.174.234.60 - - [08/Sep/2026:09:08:56 +0200] "GET /.env.production HTTP/1.1" 404 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.174.234.60 - - [08/Sep/2026:09:08:56 +0200] "GET /.env.staging HTTP/1.1" 404 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.174.234.60 - - [08/Sep/2026:09:08:56 +0200] "GET
...
show less
Bad Web Bot
Web App Attack
🇺🇸
216.180.246.73
3 hours ago
216.180.246.73 - - [08/Sep/2026:07:46:18 +0200] "GET / HTTP/1.0" 444 0 "-" "Mozilla/5.0 (compatible; ...
show more
216.180.246.73 - - [08/Sep/2026:07:46:18 +0200] "GET / HTTP/1.0" 444 0 "-" "Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)"
216.180.246.73 - - [08/Sep/2026:07:49:13 +0200] "\x16\x03\x01\x00\xFD\x01\x00\x00\xF9\x03\x03\x05\xD4\x15p{\xB7\xCE]\xE4\x17\xB3O\x5C\x91\xF85F\xEC(\xE5\xEE\x17\x82\xD6L0\x06\xD8\x89\x12oS \x7F\x10LQ\xE2s\x05e*\xFEut`q'\xB4[y\x8D\xAA\x18\xAD\x93N\xC0\x06\x95\xBBy\xFD\xBD\x9C\x00&\xCC\xA8\xCC\xA9\xC0/\xC00\xC0+\xC0,\xC0\x13\xC0\x09\xC0\x14\xC0" 400 150 "-" "-"
216.180.246.73 - - [08/Sep/2026:07:50:00 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)"
216.180.246.73 - - [08/Sep/2026:07:50:04 +0200] "GET /manage/account/login HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)"
216.180.246.73 - - [08/Sep/2026:07:50:07 +0200] "GET /admin/index.html HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +
...
show less
Bad Web Bot
Web App Attack
🇧🇪
35.205.235.149
4 hours ago
35.205.235.149 - - [08/Sep/2026:07:39:45 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT ...
show more
35.205.235.149 - - [08/Sep/2026:07:39:45 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
35.205.235.149 - - [08/Sep/2026:07:39:47 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\xAFb\xA5\xF1>\x08\xECp\xC4\xB5j\xFB`/\x97\x04D\x1F\xE2C\x97 \x19\xCD\xC7\x83\x9C\xEF\xE3a" 400 150 "-" "-"
35.205.235.149 - - [08/Sep/2026:07:39:49 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
35.205.235.149 - - [08/Sep/2026:07:39:53 +0200] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-"
35.205.235.149 - - [08/Sep/2026:07:39:56 +0200] "\x03\x9Ef\xFB\x81[\xDA\x95\x13\x17 \x95Je\xC6\xC7\xC6\xBFC\x9D\x14\xCCvN\xCD\xA1\x04J\xC1\xC0z\xC8p!\xB2p\xD4\x06\x9F\x
...
show less
Bad Web Bot
Web App Attack
🇧🇪
34.140.59.170
4 hours ago
34.140.59.170 - - [08/Sep/2026:07:17:40 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 1 ...
show more
34.140.59.170 - - [08/Sep/2026:07:17:40 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
34.140.59.170 - - [08/Sep/2026:07:17:40 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\x91\xC8\x87_\xB8\xAB\xDD3\xB1\xD5U\xD9\xD2\x22\x0B X\xEF_\xA6\xC2[\xA3NuzV\x1BFO\x097 \x04\x22\xAC\x91\x97]" 400 150 "-" "-"
34.140.59.170 - - [08/Sep/2026:07:17:41 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
34.140.59.170 - - [08/Sep/2026:07:17:45 +0200] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-"
34.140.59.170 - - [08/Sep/2026:07:17:46 +0200] "T\x07o\x03\x99\xDEW\xA2+rj\x12.<d\xE1\x8E\xAF\xED\xC7\x17\x94\xDE\xAF\xB1Z\xAC\x12u\x05\x85d\x81\x08n\x1E\x
...
show less
Bad Web Bot
Web App Attack
🇧🇪
34.76.77.131
4 hours ago
2026-09-08T07:05:32.498090+02:00 server sshd[2802001]: Connection closed by invalid user admin 34.76 ...
show more
2026-09-08T07:05:32.498090+02:00 server sshd[2802001]: Connection closed by invalid user admin 34.76.77.131 port 22788 [preauth]
2026-09-08T07:05:37.150881+02:00 server sshd[2804057]: error: kex_exchange_identification: Connection closed by remote host
2026-09-08T07:05:37.150915+02:00 server sshd[2804057]: Connection closed by 34.76.77.131 port 22804
2026-09-08T07:05:37.970949+02:00 server sshd[2801951]: Connection closed by 34.76.77.131 port 22772 [preauth]
2026-09-08T07:05:47.246679+02:00 server sshd[2808257]: Unable to negotiate with 34.76.77.131 port 11822: no matching host key type found. Their offer: ssh-dss [preauth]
...
show less
Brute-Force
SSH
🇧🇪
34.78.245.117
4 hours ago
34.78.245.117 - - [08/Sep/2026:07:02:34 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 1 ...
show more
34.78.245.117 - - [08/Sep/2026:07:02:34 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
34.78.245.117 - - [08/Sep/2026:07:02:36 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\x10\x92r\xA6\xA0i\x19\xE5r\x02\xDB\xB1{}/\x00n\xF2\xDD$4\xADI>D\x19TW\x91\xD5\xAD\x8B \x97:=\xFAr\xCF\x19\x15\x0FJ\xEB\xF0\x0F\x09\x19\xB9\xD4\xF5\x11\xF0\x11\xB6!\xD0\xAF\x01\xE0\xA3\xAA\x89KX\x002\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-"
34.78.245.117 - - [08/Sep/2026:07:02:38 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
34.78.245.117 - - [08/Sep/2026:07:02:42 +0200] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-"
34.78.24
...
show less
Bad Web Bot
Web App Attack
🇺🇸
34.22.40.75
12 hours ago
34.22.40.75 - - [07/Sep/2026:23:29:35 +0200] "GET /dump.tar.gz HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X11 ...
show more
34.22.40.75 - - [07/Sep/2026:23:29:35 +0200] "GET /dump.tar.gz HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36"
34.22.40.75 - - [07/Sep/2026:23:29:35 +0200] "GET /archive.zip HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36"
34.22.40.75 - - [07/Sep/2026:23:29:36 +0200] "GET /.claude/mcp.json HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36"
34.22.40.75 - - [07/Sep/2026:23:29:36 +0200] "GET /.claude/settings.json HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36"
34.22.40.75 - - [07/Sep/2026:23:29:36 +0200] "GET /.claude/.credentials.json HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36"
34.22.40.75 - - [07/Sep/2026:23:29:36 +0200] "GET /.code
...
show less
Bad Web Bot
Web App Attack
🇺🇸
136.107.233.229
12 hours ago
136.107.233.229 - - [07/Sep/2026:23:29:34 +0200] "GET /backup.tar.gz HTTP/1.1" 444 0 "-" "Mozilla/5. ...
show more
136.107.233.229 - - [07/Sep/2026:23:29:34 +0200] "GET /backup.tar.gz HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36"
136.107.233.229 - - [07/Sep/2026:23:29:34 +0200] "GET /dump.sql HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36"
136.107.233.229 - - [07/Sep/2026:23:29:34 +0200] "GET /backup.zip HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36"
136.107.233.229 - - [07/Sep/2026:23:29:34 +0200] "GET /htdocs.zip HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36"
136.107.233.229 - - [07/Sep/2026:23:29:34 +0200] "GET /.claude/settings.json HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36"
136.107.233.229 - - [07/Sep/2026:23:29:34 +0200] "GET /sit
...
show less
Bad Web Bot
Web App Attack
🇭🇰
35.241.89.166
12 hours ago
35.241.89.166 - - [07/Sep/2026:22:48:27 +0200] "GET /.env.backup HTTP/1.1" 444 0 "-" "crusader-worke ...
show more
35.241.89.166 - - [07/Sep/2026:22:48:27 +0200] "GET /.env.backup HTTP/1.1" 444 0 "-" "crusader-worker/1.0"
35.241.89.166 - - [07/Sep/2026:22:48:27 +0200] "GET /storage/logs/laravel.log HTTP/1.1" 444 0 "-" "crusader-worker/1.0"
35.241.89.166 - - [07/Sep/2026:22:48:27 +0200] "GET /actuator/configprops HTTP/1.1" 444 0 "-" "crusader-worker/1.0"
35.241.89.166 - - [07/Sep/2026:22:48:27 +0200] "GET /.env.old HTTP/1.1" 444 0 "-" "crusader-worker/1.0"
35.241.89.166 - - [07/Sep/2026:22:48:27 +0200] "GET /.env.production HTTP/1.1" 444 0 "-" "crusader-worker/1.0"
35.241.89.166 - - [07/Sep/2026:22:48:27 +0200] "GET /crusader-404-probe HTTP/1.1" 444 0 "-" "crusader-worker/1.0"
35.241.89.166 - - [07/Sep/2026:22:48:27 +0200] "GET /.env.save HTTP/1.1" 444 0 "-" "crusader-worker/1.0"
35.241.89.166 - - [07/Sep/2026:22:48:27 +0200] "GET /wp-config.php.swp HTTP/1.1" 444 0 "-" "crusader-worker/1.0"
...
show less
Bad Web Bot
Web App Attack
🇭🇰
35.220.159.6
12 hours ago
35.220.159.6 - - [07/Sep/2026:22:48:25 +0200] "GET /.env HTTP/1.1" 444 0 "-" "crusader-worker/1.0"
3 ...
show more
35.220.159.6 - - [07/Sep/2026:22:48:25 +0200] "GET /.env HTTP/1.1" 444 0 "-" "crusader-worker/1.0"
35.220.159.6 - - [07/Sep/2026:22:48:25 +0200] "GET /.env.local HTTP/1.1" 444 0 "-" "crusader-worker/1.0"
35.220.159.6 - - [07/Sep/2026:22:48:25 +0200] "GET /.env.bak HTTP/1.1" 444 0 "-" "crusader-worker/1.0"
35.220.159.6 - - [07/Sep/2026:22:48:25 +0200] "GET /env HTTP/1.1" 444 0 "-" "crusader-worker/1.0"
35.220.159.6 - - [07/Sep/2026:22:48:25 +0200] "GET /_ignition/health-check HTTP/1.1" 444 0 "-" "crusader-worker/1.0"
35.220.159.6 - - [07/Sep/2026:22:48:25 +0200] "GET /.env.production HTTP/1.1" 444 0 "-" "crusader-worker/1.0"
35.220.159.6 - - [07/Sep/2026:22:48:25 +0200] "GET /actuator/env HTTP/1.1" 444 0 "-" "crusader-worker/1.0"
35.220.159.6 - - [07/Sep/2026:22:48:25 +0200] "GET /.env.example HTTP/1.1" 444 0 "-" "crusader-worker/1.0"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
35.190.141.208
13 hours ago
35.190.141.208 - - [07/Sep/2026:22:06:21 +0200] "GET /@fs/../.env?raw?? HTTP/1.1" 444 0 "-" "Mozilla ...
show more
35.190.141.208 - - [07/Sep/2026:22:06:21 +0200] "GET /@fs/../.env?raw?? HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; GPTBot/1.2; +https://openai.com/gptbot)"
35.190.141.208 - - [07/Sep/2026:22:06:21 +0200] "GET /@fs/..%252f..%252f..%252f..%252f..%252fapp/.env?raw?? HTTP/1.1" 444 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; LinkedInBot/1.0; +http://www.linkedin.com)"
35.190.141.208 - - [07/Sep/2026:22:06:21 +0200] "GET /@fs/..%252f..%252f..%252f..%252f..%252froot/.env?raw?? HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/grokbot)"
35.190.141.208 - - [07/Sep/2026:22:06:21 +0200] "GET /@fs/app/.env?raw?? HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; Twitterbot/1.0)"
35.190.141.208 - - [07/Sep/2026:22:06:21 +0200] "GET /@fs/root/.env?raw?? HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; meta-externalagent/1.1; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
35.190.141.208 - - [07/Sep/2026:22:06:21 +0200] "GET /@fs/etc/pass
...
show less
Bad Web Bot
Web App Attack
🇧🇪
34.76.54.78
07 Sep 2026
34.76.54.78 - - [07/Sep/2026:10:09:15 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10. ...
show more
34.76.54.78 - - [07/Sep/2026:10:09:15 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
34.76.54.78 - - [07/Sep/2026:10:09:15 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\x8C\xF4\x84\xA6\xD5\xCBV\x183\xB3\x00\x5C\x12\xE7b\x92P\x1D" 400 150 "-" "-"
34.76.54.78 - - [07/Sep/2026:10:09:15 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
34.76.54.78 - - [07/Sep/2026:10:09:20 +0200] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-"
34.76.54.78 - - [07/Sep/2026:10:09:20 +0200] "W\xFA" 400 150 "-" "-"
34.76.54.78 - - [07/Sep/2026:10:09:59 +0200] "\x00\x1E\xA1x\x01\x00\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03" 40
...
show less
Bad Web Bot
Web App Attack
🇧🇪
207.175.145.34
07 Sep 2026
207.175.145.34 - - [07/Sep/2026:09:47:22 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT ...
show more
207.175.145.34 - - [07/Sep/2026:09:47:22 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
207.175.145.34 - - [07/Sep/2026:09:47:22 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\x86\xAE\xEF \xB1;\x06\xAD\x12\x11Dk>\xB1\x08\xF6\xF6\x82R\xCD\xCF\x9CLFt\xD7\xCA\xCA\xBA\xCC\xE77 \x05\xD5\xF8\x1A\x09\xBAg\x86%\x10\xB2Zp\x0B\x14\x98*4e\x89\x19\xCB:_\x08b\xBA\x91\xF4\xD2" 400 150 "-" "-"
207.175.145.34 - - [07/Sep/2026:09:47:22 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
207.175.145.34 - - [07/Sep/2026:09:47:27 +0200] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-"
207.175.145.34 - - [07/Sep/2026:09:47:27 +0200] "k\xC6v\xD9\xAE\x14\xE
...
show less
Bad Web Bot
Web App Attack
🇧🇪
34.62.145.114
07 Sep 2026
34.62.145.114 - - [07/Sep/2026:09:30:38 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 1 ...
show more
34.62.145.114 - - [07/Sep/2026:09:30:38 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
34.62.145.114 - - [07/Sep/2026:09:30:39 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\xDE\xAD\x02\xEF\xCAhV\xB7B\xFB\xAE\xCBI|+\x02\x87\x1D\x87p\xFBI\xDA;s>x\x9E\x7F\x92\x83\xC2 \x7FXw\xA3w\x9C\xD7E3+J\xBF\xB3\x96\x81\xC1\xFE3\x1D\x88\x91\xEF\xBF\x95\xA2\x9C^*0z\x07\x18\x002\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-"
34.62.145.114 - - [07/Sep/2026:09:30:39 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
34.62.145.114 - - [07/Sep/2026:09:30:44 +0200] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-"
34.62.145.114 - -
...
show less
Bad Web Bot
Web App Attack
🇰🇷
121.183.240.55
07 Sep 2026
2026-09-07T07:55:13.936371+02:00 server sshd[1773264]: error: maximum authentication attempts exceed ...
show more
2026-09-07T07:55:13.936371+02:00 server sshd[1773264]: error: maximum authentication attempts exceeded for root from 121.183.240.55 port 34322 ssh2 [preauth]
2026-09-07T07:55:24.585039+02:00 server sshd[1773272]: error: maximum authentication attempts exceeded for root from 121.183.240.55 port 34718 ssh2 [preauth]
2026-09-07T07:55:35.312973+02:00 server sshd[1773278]: error: maximum authentication attempts exceeded for root from 121.183.240.55 port 35262 ssh2 [preauth]
2026-09-07T07:55:42.329815+02:00 server sshd[1773284]: Disconnected from authenticating user root 121.183.240.55 port 35792 [preauth]
2026-09-07T07:55:48.691818+02:00 server sshd[1773294]: Invalid user admin from 121.183.240.55 port 36128
...
show less
Brute-Force
SSH
🇨🇳
180.76.229.30
07 Sep 2026
2026-09-07T03:50:51.441995+02:00 server sshd[1759316]: Connection closed by authenticating user root ...
show more
2026-09-07T03:50:51.441995+02:00 server sshd[1759316]: Connection closed by authenticating user root 180.76.229.30 port 51964 [preauth]
2026-09-07T03:50:52.703561+02:00 server sshd[1759336]: Connection closed by authenticating user root 180.76.229.30 port 36586 [preauth]
2026-09-07T03:50:53.933397+02:00 server sshd[1759338]: Connection closed by authenticating user root 180.76.229.30 port 36600 [preauth]
2026-09-07T03:50:55.186464+02:00 server sshd[1759340]: Connection closed by authenticating user root 180.76.229.30 port 36616 [preauth]
2026-09-07T03:50:56.191970+02:00 server sshd[1759342]: Connection closed by authenticating user root 180.76.229.30 port 56724 [preauth]
...
show less
Brute-Force
SSH
🇬🇧
167.172.61.6
06 Sep 2026
2026-09-06T20:59:05.785613+02:00 server sshd[1731409]: Connection closed by 167.172.61.6 port 38780
...
show more
2026-09-06T20:59:05.785613+02:00 server sshd[1731409]: Connection closed by 167.172.61.6 port 38780
2026-09-06T21:02:41.686886+02:00 server sshd[1731611]: Invalid user flashbots from 167.172.61.6 port 51418
2026-09-06T21:02:41.710899+02:00 server sshd[1731611]: Connection closed by invalid user flashbots 167.172.61.6 port 51418 [preauth]
2026-09-06T21:05:00.771029+02:00 server sshd[1731726]: Invalid user mev-boost from 167.172.61.6 port 36170
2026-09-06T21:05:00.797506+02:00 server sshd[1731726]: Connection closed by invalid user mev-boost 167.172.61.6 port 36170 [preauth]
...
show less
Brute-Force
SSH
🇳🇱
206.189.1.110
06 Sep 2026
2026-09-06T20:08:09.379717+02:00 server sshd[1728075]: Connection closed by 206.189.1.110 port 44702 ...
show more
2026-09-06T20:08:09.379717+02:00 server sshd[1728075]: Connection closed by 206.189.1.110 port 44702
2026-09-06T20:11:54.705067+02:00 server sshd[1728365]: Invalid user validator from 206.189.1.110 port 34864
2026-09-06T20:11:54.761750+02:00 server sshd[1728365]: Connection closed by invalid user validator 206.189.1.110 port 34864 [preauth]
2026-09-06T20:14:14.570938+02:00 server sshd[1728540]: Invalid user validator from 206.189.1.110 port 44708
2026-09-06T20:14:14.591269+02:00 server sshd[1728540]: Connection closed by invalid user validator 206.189.1.110 port 44708 [preauth]
...
show less
Brute-Force
SSH
🇬🇧
157.245.39.107
06 Sep 2026
2026-09-06T19:59:20.379292+02:00 server sshd[1727570]: Connection closed by 157.245.39.107 port 5814 ...
show more
2026-09-06T19:59:20.379292+02:00 server sshd[1727570]: Connection closed by 157.245.39.107 port 58148
2026-09-06T20:04:23.088070+02:00 server sshd[1727849]: Invalid user ashley from 157.245.39.107 port 51772
2026-09-06T20:04:23.560939+02:00 server sshd[1727849]: Connection closed by invalid user ashley 157.245.39.107 port 51772 [preauth]
2026-09-06T20:08:20.043679+02:00 server sshd[1728087]: Invalid user ashley from 157.245.39.107 port 33978
2026-09-06T20:08:20.341020+02:00 server sshd[1728087]: Connection closed by invalid user ashley 157.245.39.107 port 33978 [preauth]
...
show less
Brute-Force
SSH
🇺🇸
18.97.19.223
06 Sep 2026
18.97.19.223 - - [06/Sep/2026:19:08:30 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 6. ...
show more
18.97.19.223 - - [06/Sep/2026:19:08:30 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/58.0.3036.61 Safari/537.32"
18.97.19.223 - - [06/Sep/2026:19:08:31 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/58.0.3036.61 Safari/537.32"
18.97.19.223 - - [06/Sep/2026:19:08:32 +0200] "\x16\x03\x01\x06\x13\x01\x00\x06\x0F\x03\x03\xAF\xBF}%\xDCwAqs\xC4\x9C\xE1.\x5C\x01Y\xCA\xCF\x87\x91\xAFO\xDE1!\xA4\x815\xF2\x95\xF6\xD0 ]\xA6\x08\xCA\xD88\x0F`\xD1\x88Kl\x92V\xD3&\xE2\xE5v^2\xAE\xD8\x92c(u\xDF" 400 150 "-" "-"
18.97.19.223 - - [06/Sep/2026:19:08:32 +0200] "POST /mcp HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
18.97.19.223 - - [06/Sep/2026:19:08:33 +0200] "POST /mcp HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, lik
...
show less
Bad Web Bot
Web App Attack
🇭🇰
152.32.189.202
06 Sep 2026
152.32.189.202 - - [06/Sep/2026:18:02:51 +0200] "GET / HTTP/1.1" 444 0 "-" "rawgrab"
152.32.189.202 ...
show more
152.32.189.202 - - [06/Sep/2026:18:02:51 +0200] "GET / HTTP/1.1" 444 0 "-" "rawgrab"
152.32.189.202 - - [06/Sep/2026:18:02:52 +0200] "GET /raw HTTP/1.1" 444 0 "-" "rawgrab"
152.32.189.202 - - [06/Sep/2026:18:02:53 +0200] "GET /ws HTTP/1.1" 444 0 "-" "rawgrab"
152.32.189.202 - - [06/Sep/2026:18:02:55 +0200] "GET /socket.io/?EIO=4&transport=websocket HTTP/1.1" 444 0 "-" "rawgrab"
152.32.189.202 - - [06/Sep/2026:18:02:58 +0200] "GET /v1 HTTP/1.1" 400 248 "-" "-"
152.32.189.202 - - [06/Sep/2026:18:02:58 +0200] "GET / HTTP/1.1" 400 248 "-" "-"
152.32.189.202 - - [06/Sep/2026:18:02:59 +0200] "GET / HTTP/1.1" 400 248 "-" "-"
152.32.189.202 - - [06/Sep/2026:18:02:59 +0200] "GET /version HTTP/1.1" 400 248 "-" "-"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
52.90.57.90
06 Sep 2026
52.90.57.90 - - [06/Sep/2026:17:23:55 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10. ...
show more
52.90.57.90 - - [06/Sep/2026:17:23:55 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
52.90.57.90 - - [06/Sep/2026:17:23:57 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
52.90.57.90 - - [06/Sep/2026:17:23:58 +0200] "\x16\x03\x01\x05\xEE\x01\x00\x05\xEA\x03\x03\x9D\xC7\xC0\x01\x7FP8\x9B\x99u*S\xE3)\xDExefIj]c>]\xC0G\xEC\xD3\x15\x19\xE5\xC8 \x1A?N\x11V" 400 150 "-" "-"
52.90.57.90 - - [06/Sep/2026:17:23:58 +0200] "``\xB0\x17\x00\x00\x00\x06\x00\x00\x00\x05\x00\x00\x04\x04\x00\x00\x01\x04" 400 150 "-" "-"
52.90.57.90 - - [06/Sep/2026:17:23:58 +0200] "0\x0C\x02\x01\x02`\x07\x02\x01\x03\x04\x00\x80\x00" 400 150 "-" "-"
52.90.57.90 - - [06/Sep/2026:17:23:59 +0200] "0\x0C\x02\x01\x02`\x07\x02\x01\x03\x04\x00\x80\x00" 400 150 "-" "-"
52.90.57.90 - - [06/Sep/2026:17:23:59 +0200] "``\xB0\x17\x00\x
...
show less
Bad Web Bot
Web App Attack
🇺🇸
66.240.192.138
06 Sep 2026
66.240.192.138 - - [06/Sep/2026:17:12:33 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X11; Linux ...
show more
66.240.192.138 - - [06/Sep/2026:17:12:33 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36"
66.240.192.138 - - [06/Sep/2026:17:12:34 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36"
66.240.192.138 - - [06/Sep/2026:17:12:35 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36"
66.240.192.138 - - [06/Sep/2026:17:12:42 +0200] "" 400 0 "-" "-"
66.240.192.138 - - [06/Sep/2026:17:12:43 +0200] "" 400 0 "-" "-"
66.240.192.138 - - [06/Sep/2026:17:12:44 +0200] "" 400 0 "-" "-"
66.240.192.138 - - [06/Sep/2026:17:12:44 +0200] "" 400 0 "-" "-"
66.240.192.138 - - [06/Sep/2026:17:12:51 +0200] "GET /robots.txt HTTP/1.1" 444 0 "-" "-"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
44.220.185.93
06 Sep 2026
44.220.185.93 - - [06/Sep/2026:17:10:13 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 6 ...
show more
44.220.185.93 - - [06/Sep/2026:17:10:13 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/59.0.3088.106 Safari/537.32"
44.220.185.93 - - [06/Sep/2026:17:10:13 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/59.0.3088.106 Safari/537.32"
44.220.185.93 - - [06/Sep/2026:17:10:14 +0200] "\x16\x03\x01\x06\x13\x01\x00\x06\x0F\x03\x03P\x9Aq\x01\xE3\xC1\xFE:N\xC8q\xA3\xE5P\x05&\xD9" 400 150 "-" "-"
44.220.185.93 - - [06/Sep/2026:17:10:14 +0200] "POST /mcp HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
44.220.185.93 - - [06/Sep/2026:17:10:14 +0200] "POST /mcp HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
44.220.185.93 - - [06/Sep/2026:17:10:14 +0200] "POST / HTTP/1.1" 444 0
...
show less
Bad Web Bot
Web App Attack