🇩🇪
77.90.13.72
13 Sep 2026
2026-09-13T10:49:30.153310+02:00 server sshd[3108275]: Invalid user admin from 77.90.13.72 port 4540 ...
show more
2026-09-13T10:49:30.153310+02:00 server sshd[3108275]: Invalid user admin from 77.90.13.72 port 45408
2026-09-13T10:49:30.171720+02:00 server sshd[3108275]: Connection closed by invalid user admin 77.90.13.72 port 45408 [preauth]
2026-09-13T10:50:00.425034+02:00 server sshd[3108301]: Invalid user user from 77.90.13.72 port 56662
2026-09-13T10:50:00.447257+02:00 server sshd[3108301]: Connection closed by invalid user user 77.90.13.72 port 56662 [preauth]
2026-09-13T10:50:39.219265+02:00 server sshd[3108409]: Connection closed by authenticating user root 77.90.13.72 port 39498 [preauth]
...
show less
Brute-Force
SSH
🇧🇪
207.175.40.143
13 Sep 2026
207.175.40.143 - - [13/Sep/2026:09:41:02 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT ...
show more
207.175.40.143 - - [13/Sep/2026:09:41:02 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
207.175.40.143 - - [13/Sep/2026:09:41:03 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\xE2\xB8" 400 150 "-" "-"
207.175.40.143 - - [13/Sep/2026:09:41:03 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
207.175.40.143 - - [13/Sep/2026:09:41:07 +0200] "\xDC\xD2\x8Cx3F\x85\x9DP\xA2\xFA\x06\xC1\x8F\x1CO\xE3\xA5]\x19\x08Q(\xAB41\xA7D9\xB5\x0B\xAF\xB5\x9D\xFA&\xC1}\x92Z\xEC\xBF\xC5\x9E`\x9A\x96\x87!\x84\xE2\xCC\xD7\xAD1s4\x7F-\xE8\xDF\x87\x89\xF5" 400 150 "-" "-"
207.175.40.143 - - [13/Sep/2026:09:41:07 +0200] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150
...
show less
Bad Web Bot
Web App Attack
🇧🇪
34.140.39.238
13 Sep 2026
34.140.39.238 - - [13/Sep/2026:09:14:36 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 1 ...
show more
34.140.39.238 - - [13/Sep/2026:09:14:36 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
34.140.39.238 - - [13/Sep/2026:09:14:36 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03C\x06\xE7gO-\x8FU\x1D\x98\xE8\xC5\x99\x18\x9E\x9C:\x0Ft\xB2\x83\xA2\x19\x14\xB8\xA0\x15\xE1\xE3\x84=\xB2 \xBE%\x04'\x9E\x1F\xE5\x95oV\x17\x84Y\xD6\x9C\xC7\x1E=\xEBm0\xD8\xB7\xB6\xFD\xA7.\xDA\x86\xAEd\xCC\x002\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-"
34.140.39.238 - - [13/Sep/2026:09:14:36 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
34.140.39.238 - - [13/Sep/2026:09:14:41 +0200] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-"
...
show less
Bad Web Bot
Web App Attack
🇧🇪
34.156.216.59
13 Sep 2026
34.156.216.59 - - [13/Sep/2026:08:57:15 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 1 ...
show more
34.156.216.59 - - [13/Sep/2026:08:57:15 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
34.156.216.59 - - [13/Sep/2026:08:57:16 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03`\x93\xD7\x8CRz\x86\xE0ZB\xE7\x1Fg\x05" 400 150 "-" "-"
34.156.216.59 - - [13/Sep/2026:08:57:18 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
34.156.216.59 - - [13/Sep/2026:08:57:22 +0200] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-"
34.156.216.59 - - [13/Sep/2026:08:57:24 +0200] "o\xB9\xC6cA\xB9\xD9\x16R\xBA\xC9\xF4\xBA\x1C`B\x1A\xC9Q\xD3\xC6\xEAQ\xAE\xF6\x94\x01\x9Ds`\xA0W.\x8Br\xC0X\xB7]\xC5I\xD1W\x96\x05\x07\x97\xE6\x92U\xABlu\xF1\x95\xFC\xED\xD8\xE1E
...
show less
Bad Web Bot
Web App Attack
🇪🇸
158.173.36.27
13 Sep 2026
158.173.36.27 - - [13/Sep/2026:07:58:44 +0200] "GET /wp-content/plugins/neoncore-themes/O/SrHD3odefa ...
show more
158.173.36.27 - - [13/Sep/2026:07:58:44 +0200] "GET /wp-content/plugins/neoncore-themes/O/SrHD3odefault.php?p= HTTP/1.1" 301 162 "-" "Go-http-client/1.1"
158.173.36.27 - - [13/Sep/2026:07:58:45 +0200] "GET /wp-content/plugins/bbpress/file5.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1"
158.173.36.27 - - [13/Sep/2026:07:58:46 +0200] "GET /wp-includes/core.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1"
158.173.36.27 - - [13/Sep/2026:07:58:46 +0200] "GET /wpx/index.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1"
158.173.36.27 - - [13/Sep/2026:07:58:47 +0200] "GET /wp-includes/cookie.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1"
158.173.36.27 - - [13/Sep/2026:07:58:47 +0200] "GET /wp-content/plugins/buddypress/alfa.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1"
158.173.36.27 - - [13/Sep/2026:07:58:47 +0200] "GET /wp-includes/woocommerce-call.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1"
158.173.36.27 - - [13/Sep/2026:07:58:48 +0200] "GET /wp-content/plugins/enhanced-text-widget/analyst/sr
...
show less
Bad Web Bot
Web App Attack
🇪🇸
158.173.36.207
13 Sep 2026
158.173.36.207 - - [13/Sep/2026:07:58:45 +0200] "GET /wp-content/plugins/neoncore-themes/O/SrHD3odef ...
show more
158.173.36.207 - - [13/Sep/2026:07:58:45 +0200] "GET /wp-content/plugins/neoncore-themes/O/SrHD3odefault.php?p= HTTP/1.1" 404 117 "http://jborch.de/wp-content/plugins/neoncore-themes/O/SrHD3odefault.php?p=" "Go-http-client/1.1"
158.173.36.207 - - [13/Sep/2026:07:58:46 +0200] "GET /wp-content/plugins/bbpress/file5.php HTTP/1.1" 404 117 "http://jborch.de/wp-content/plugins/bbpress/file5.php" "Go-http-client/1.1"
158.173.36.207 - - [13/Sep/2026:07:58:46 +0200] "GET /wp-includes/core.php HTTP/1.1" 404 117 "http://jborch.de/wp-includes/core.php" "Go-http-client/1.1"
158.173.36.207 - - [13/Sep/2026:07:58:46 +0200] "GET /wpx/index.php HTTP/1.1" 404 117 "http://jborch.de/wpx/index.php" "Go-http-client/1.1"
158.173.36.207 - - [13/Sep/2026:07:58:47 +0200] "GET /wp-includes/cookie.php HTTP/1.1" 404 117 "http://jborch.de/wp-includes/cookie.php" "Go-http-client/1.1"
158.173.36.207 - - [13/Sep/2026:07:58:47 +0200] "GET /wp-content/plugins/buddypress/alfa.php HTTP/1.1" 404 117 "http://jborch.de/wp-co
...
show less
Bad Web Bot
Web App Attack
🇨🇦
35.203.31.42
13 Sep 2026
35.203.31.42 - - [13/Sep/2026:06:57:07 +0200] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Wi ...
show more
35.203.31.42 - - [13/Sep/2026:06:57:07 +0200] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.203.31.42 - - [13/Sep/2026:06:57:08 +0200] "GET /.env HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.203.31.42 - - [13/Sep/2026:06:57:09 +0200] "GET /.env.local HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.203.31.42 - - [13/Sep/2026:06:57:09 +0200] "GET /.env.production HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.203.31.42 - - [13/Sep/2026:06:57:09 +0200] "GET /.env.staging HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.203.
...
show less
Bad Web Bot
Web App Attack
🇰🇷
59.24.222.224
13 Sep 2026
2026-09-13T03:22:32.189656+02:00 server sshd[3083677]: error: maximum authentication attempts exceed ...
show more
2026-09-13T03:22:32.189656+02:00 server sshd[3083677]: error: maximum authentication attempts exceeded for root from 59.24.222.224 port 47252 ssh2 [preauth]
2026-09-13T03:22:35.990674+02:00 server sshd[3083679]: error: maximum authentication attempts exceeded for root from 59.24.222.224 port 48030 ssh2 [preauth]
2026-09-13T03:22:39.753957+02:00 server sshd[3083681]: error: maximum authentication attempts exceeded for root from 59.24.222.224 port 48720 ssh2 [preauth]
2026-09-13T03:22:42.375382+02:00 server sshd[3083684]: Disconnected from authenticating user root 59.24.222.224 port 49480 [preauth]
2026-09-13T03:22:44.364953+02:00 server sshd[3083688]: Invalid user admin from 59.24.222.224 port 49892
...
show less
Brute-Force
SSH
🇺🇸
34.185.73.202
13 Sep 2026
34.185.73.202 - - [13/Sep/2026:02:54:55 +0200] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (M ...
show more
34.185.73.202 - - [13/Sep/2026:02:54:55 +0200] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.185.73.202 - - [13/Sep/2026:02:54:56 +0200] "GET /.env HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.185.73.202 - - [13/Sep/2026:02:54:57 +0200] "GET /.env.local HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.185.73.202 - - [13/Sep/2026:02:54:57 +0200] "GET /.env.production HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.185.73.202 - - [13/Sep/2026:02:54:57 +0200] "GET /.env.staging HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chro
...
show less
Bad Web Bot
Web App Attack
🇺🇸
146.190.209.0
12 Sep 2026
2026-09-13T01:06:25.732226+02:00 server sshd[3075330]: Connection closed by 146.190.209.0 port 46220 ...
show more
2026-09-13T01:06:25.732226+02:00 server sshd[3075330]: Connection closed by 146.190.209.0 port 46220 [preauth]
2026-09-13T01:06:25.818293+02:00 server sshd[3075334]: Unable to negotiate with 146.190.209.0 port 46214: no matching host key type found. Their offer: ssh-dss [preauth]
2026-09-13T01:06:26.867153+02:00 server sshd[3075333]: Connection closed by 146.190.209.0 port 46218 [preauth]
2026-09-13T01:06:27.496405+02:00 server sshd[3075335]: Connection closed by 146.190.209.0 port 46232 [preauth]
2026-09-13T01:06:27.582536+02:00 server sshd[3075332]: Unable to negotiate with 146.190.209.0 port 46238: no matching host key type found. Their offer: [email protected] [preauth]
...
show less
Brute-Force
SSH
🇹🇼
35.221.166.70
12 Sep 2026
35.221.166.70 - - [12/Sep/2026:22:48:42 +0200] "GET /@fs/src/.env?raw?? HTTP/1.1" 444 0 "-" "Mozilla ...
show more
35.221.166.70 - - [12/Sep/2026:22:48:42 +0200] "GET /@fs/src/.env?raw?? HTTP/1.1" 444 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Bytespider; +https://zhanzhang.toutiao.com/)"
35.221.166.70 - - [12/Sep/2026:22:48:42 +0200] "GET /@fs/..%252f..%252f..%252f..%252f..%252froot/.env?raw?? HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.3569.146 Safari/537.36; compatible; facebookexternalhit/1.1; +http://www.facebook.com/externalhit_uatext.php"
35.221.166.70 - - [12/Sep/2026:22:48:42 +0200] "GET /@fs/.env?raw?? HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot) Chrome/131.0.3889.238 Safari/537.36"
35.221.166.70 - - [12/Sep/2026:22:48:42 +0200] "GET /@fs/app/.env?raw?? HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)"
35.221.166.70 -
...
show less
Bad Web Bot
Web App Attack
🇨🇦
35.203.38.122
12 Sep 2026
35.203.38.122 - - [12/Sep/2026:17:12:00 +0200] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X ...
show more
35.203.38.122 - - [12/Sep/2026:17:12:00 +0200] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.203.38.122 - - [12/Sep/2026:17:12:02 +0200] "GET /.env HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.203.38.122 - - [12/Sep/2026:17:12:03 +0200] "GET /.env.local HTTP/1.1" 404 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.203.38.122 - - [12/Sep/2026:17:12:03 +0200] "GET /.env.production HTTP/1.1" 404 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.203.38.122 - - [12/Sep/2026:17:12:03 +0200] "GET /.env.staging HTTP/1.1" 404 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.203.38.122 - - [12/Sep/2026:17:12:03 +0200] "GET
...
show less
Bad Web Bot
Web App Attack
🇰🇷
34.64.34.104
12 Sep 2026
34.64.34.104 - - [12/Sep/2026:12:34:46 +0200] "GET /.git/config HTTP/1.1" 400 632 "-" "Mozilla/5.0 ( ...
show more
34.64.34.104 - - [12/Sep/2026:12:34:46 +0200] "GET /.git/config HTTP/1.1" 400 632 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.64.34.104 - - [12/Sep/2026:12:34:47 +0200] "GET /.env HTTP/1.1" 400 632 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.64.34.104 - - [12/Sep/2026:12:34:48 +0200] "GET /.env.local HTTP/1.1" 400 632 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.64.34.104 - - [12/Sep/2026:12:34:49 +0200] "GET /.env.production HTTP/1.1" 400 632 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.64.34.104 - - [12/Sep/2026:12:34:50 +0200] "GET /.env.staging HTTP/1.1" 400 632 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.64.34.104 - - [12/Sep/2026:12:34:50 +0200] "GET /.
...
show less
Bad Web Bot
Web App Attack
🇺🇸
34.24.188.180
12 Sep 2026
34.24.188.180 - - [12/Sep/2026:11:39:05 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (iPhone; CPU ...
show more
34.24.188.180 - - [12/Sep/2026:11:39:05 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Bytespider; +https://zhanzhang.toutiao.com/) Chrome/126.0.5723.162 Mobile Safari/537.36"
34.24.188.180 - - [12/Sep/2026:11:39:07 +0200] "GET /__aws_leak_probe_03341cfe__ HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user) Chrome/151.0.7433.168 Mobile Safari/537.36"
34.24.188.180 - - [12/Sep/2026:11:39:09 +0200] "GET /aws/credentials HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.4494.126 Safari/537.36; compatible; facebookexternalhit/1.1; +http://www.facebook.com/externalhit_uatext.php"
34.24.188.180 - - [12/Sep/2026:11:39:09 +0200] "GET /@fs/proc/1/environ?raw?? HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; GPTBot/1.2; +h
...
show less
Bad Web Bot
Web App Attack
🇩🇪
46.114.172.84
12 Sep 2026
46.114.172.84 - - [12/Sep/2026:11:30:07 +0200] "GET /solarlog/sldaten/events.js HTTP/1.1" 444 0 "-" ...
show more
46.114.172.84 - - [12/Sep/2026:11:30:07 +0200] "GET /solarlog/sldaten/events.js HTTP/1.1" 444 0 "-" "Python-urllib/3.13"
46.114.172.84 - - [12/Sep/2026:11:30:07 +0200] "GET /solarlog/sldaten/min_cur.js HTTP/1.1" 444 0 "-" "Python-urllib/3.13"
46.114.172.84 - - [12/Sep/2026:11:30:07 +0200] "GET /solarlog/sldaten/base_vars.js HTTP/1.1" 444 0 "-" "Python-urllib/3.13"
46.114.172.84 - - [12/Sep/2026:11:30:08 +0200] "GET /solarlog/sldaten/months.js HTTP/1.1" 444 0 "-" "Python-urllib/3.13"
46.114.172.84 - - [12/Sep/2026:11:30:08 +0200] "GET /solarlog/sldaten/years.js HTTP/1.1" 444 0 "-" "Python-urllib/3.13"
46.114.172.84 - - [12/Sep/2026:11:30:08 +0200] "GET /solarlog/sldaten/days.csv HTTP/1.1" 444 0 "-" "Python-urllib/3.13"
46.114.172.84 - - [12/Sep/2026:11:30:07 +0200] "GET /solarlog/sldaten/min_day.js HTTP/1.1" 444 0 "-" "Python-urllib/3.13"
46.114.172.84 - - [12/Sep/2026:11:30:07 +0200] "GET /solarlog/sldaten/days_hist.js HTTP/1.1" 444 0 "-" "Python-urllib/3.13"
...
show less
Bad Web Bot
Web App Attack
🇰🇷
34.64.58.19
12 Sep 2026
34.64.58.19 - - [12/Sep/2026:10:47:37 +0200] "GET /.git/config HTTP/1.1" 400 632 "-" "Mozilla/5.0 (M ...
show more
34.64.58.19 - - [12/Sep/2026:10:47:37 +0200] "GET /.git/config HTTP/1.1" 400 632 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.64.58.19 - - [12/Sep/2026:10:47:39 +0200] "GET /.env HTTP/1.1" 400 632 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.64.58.19 - - [12/Sep/2026:10:47:40 +0200] "GET /.env.local HTTP/1.1" 400 632 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.64.58.19 - - [12/Sep/2026:10:47:41 +0200] "GET /.env.production HTTP/1.1" 400 632 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.64.58.19 - - [12/Sep/2026:10:47:41 +0200] "GET /.env.staging HTTP/1.1" 400 632 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131
...
show less
Bad Web Bot
Web App Attack
🇳🇱
45.153.34.217
12 Sep 2026
45.153.34.217 - - [12/Sep/2026:10:41:42 +0200] "GET /test.php HTTP/1.1" 404 178 "http://aborch.de/te ...
show more
45.153.34.217 - - [12/Sep/2026:10:41:42 +0200] "GET /test.php HTTP/1.1" 404 178 "http://aborch.de/test.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
45.153.34.217 - - [12/Sep/2026:10:41:42 +0200] "GET /info.php HTTP/1.1" 404 178 "http://aborch.de/info.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
45.153.34.217 - - [12/Sep/2026:10:41:42 +0200] "GET /php.php HTTP/1.1" 404 178 "http://aborch.de/php.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
45.153.34.217 - - [12/Sep/2026:10:41:42 +0200] "GET /php_info.php HTTP/1.1" 404 178 "http://aborch.de/php_info.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
45.153.34.217 - - [12/Sep/2026:10:41:42 +0200] "GET /i.php HTTP/1.1" 404 178 "
...
show less
Bad Web Bot
Web App Attack
🇺🇸
34.182.72.254
12 Sep 2026
34.182.72.254 - - [12/Sep/2026:05:07:48 +0200] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (M ...
show more
34.182.72.254 - - [12/Sep/2026:05:07:48 +0200] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.182.72.254 - - [12/Sep/2026:05:07:50 +0200] "GET /.env HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.182.72.254 - - [12/Sep/2026:05:07:51 +0200] "GET /.env.local HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.182.72.254 - - [12/Sep/2026:05:07:51 +0200] "GET /.env.production HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.182.72.254 - - [12/Sep/2026:05:07:51 +0200] "GET /.env.staging HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chro
...
show less
Bad Web Bot
Web App Attack
🇧🇪
35.241.161.129
12 Sep 2026
35.241.161.129 - - [12/Sep/2026:05:05:29 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT ...
show more
35.241.161.129 - - [12/Sep/2026:05:05:29 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
35.241.161.129 - - [12/Sep/2026:05:05:29 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\x96T\x14\x17\xEAH\xDE\x9B\xB3d\xC1%\xEA\xCE\xF4\xE3\x04A\x80" 400 150 "-" "-"
35.241.161.129 - - [12/Sep/2026:05:05:29 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
35.241.161.129 - - [12/Sep/2026:05:05:34 +0200] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-"
35.241.161.129 - - [12/Sep/2026:05:05:34 +0200] "\xA0\x109\xA9bD7\x82\xB7\x8F\xAF\xF1x\xE5\x80\xB5\x88!y\xACR\xF0\xD5\xF3\x05\x18u<\xDE>\x8Ao\x99\xEA[]x\xF7\x9A\xD5\xE7!K\xCD\xF7\xC2\x06\x03" 400 15
...
show less
Bad Web Bot
Web App Attack
🇧🇪
35.240.120.122
12 Sep 2026
35.240.120.122 - - [12/Sep/2026:04:38:43 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT ...
show more
35.240.120.122 - - [12/Sep/2026:04:38:43 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
35.240.120.122 - - [12/Sep/2026:04:38:43 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03K\x1BR\x81\xAC\x85\xA0\x08\x04n\xE2\xB3\x1FH\xB4\x08\x85\xB9\xA4\xAF{\xD7\xFDN\x06'-\xB5\xBD\x90\x99d h\x04\xE1\xBF\x03\x15\x1Ebm\x02/\xCB\x1BsGj\x1CTv\xD2\xD71\x8E\x98 \x85\x07\x1B\xA9\xBE\x1C\xDD\x002\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-"
35.240.120.122 - - [12/Sep/2026:04:38:43 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
35.240.120.122 - - [12/Sep/2026:04:38:48 +0200] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-"
3
...
show less
Bad Web Bot
Web App Attack
🇧🇪
35.195.23.103
12 Sep 2026
35.195.23.103 - - [12/Sep/2026:04:26:57 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 1 ...
show more
35.195.23.103 - - [12/Sep/2026:04:26:57 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
35.195.23.103 - - [12/Sep/2026:04:26:58 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03}\xD1;\xC4-0~a\x1F\x01\x8C'u(\xFB\xE1\xD7IN\xC1\x17m\xFFc\xE5(H\x9E2\xDE\xA6G \xE7G\x7F/Z\x97.\xD1\xCE\xA7\xCDz\xA2\x9F'\x0CO\x15\xAD\xC0B;\xBBf1\xDF\x14\x22\xD2\x9B-\x1D\x002\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-"
35.195.23.103 - - [12/Sep/2026:04:26:59 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
35.195.23.103 - - [12/Sep/2026:04:27:04 +0200] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-"
35.195.23.103 - - [12/Sep/2026:0
...
show less
Bad Web Bot
Web App Attack
🇺🇸
97.107.134.44
11 Sep 2026
97.107.134.44 - - [12/Sep/2026:01:12:20 +0200] "GET / HTTP/1.0" 444 0 "-" "-"
97.107.134.44 - - [12/ ...
show more
97.107.134.44 - - [12/Sep/2026:01:12:20 +0200] "GET / HTTP/1.0" 444 0 "-" "-"
97.107.134.44 - - [12/Sep/2026:01:12:21 +0200] "OPTIONS / RTSP/1.0" 400 150 "-" "-"
97.107.134.44 - - [12/Sep/2026:01:12:26 +0200] "GET / HTTP/1.0" 444 0 "-" "-"
97.107.134.44 - - [12/Sep/2026:01:12:27 +0200] "OPTIONS / HTTP/1.0" 444 0 "-" "-"
97.107.134.44 - - [12/Sep/2026:01:12:27 +0200] "GET /nice%20ports%2C/Tri%6Eity.txt%2ebak HTTP/1.0" 444 0 "-" "-"
97.107.134.44 - - [12/Sep/2026:01:12:28 +0200] "\x00\x00\x07\x00\x08\x00\x03\x00\x04\x00\x05\x00\x06" 400 150 "-" "-"
97.107.134.44 - - [12/Sep/2026:01:12:33 +0200] "" 400 0 "-" "-"
97.107.134.44 - - [12/Sep/2026:01:12:33 +0200] "\x80\x00\x00(r\xFE\x1D\x13\x00\x00\x00\x00\x00\x00\x00\x02\x00\x01\x86\xA0\x00\x01\x97|\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00" 400 150 "-" "-"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
35.227.69.145
11 Sep 2026
35.227.69.145 - - [11/Sep/2026:20:59:13 +0200] "GET /webpack-stats.json HTTP/1.1" 444 0 "-" "Mozilla ...
show more
35.227.69.145 - - [11/Sep/2026:20:59:13 +0200] "GET /webpack-stats.json HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
35.227.69.145 - - [11/Sep/2026:20:59:13 +0200] "GET /asset-manifest.json HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
35.227.69.145 - - [11/Sep/2026:20:59:13 +0200] "GET /manifest.json HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
35.227.69.145 - - [11/Sep/2026:20:59:13 +0200] "GET /__/firebase/init.json HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)"
35.227.69.145 - - [11/Sep/2026:20:59:13 +0200] "GET /dist/manifest.json HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safa
...
show less
Bad Web Bot
Web App Attack
🇻🇳
27.79.42.129
11 Sep 2026
2026-09-11T20:45:33.265853+02:00 server sshd[1293462]: Invalid user user from 27.79.42.129 port 3484 ...
show more
2026-09-11T20:45:33.265853+02:00 server sshd[1293462]: Invalid user user from 27.79.42.129 port 34840
2026-09-11T20:45:33.645708+02:00 server sshd[1293462]: Connection closed by invalid user user 27.79.42.129 port 34840 [preauth]
2026-09-11T20:45:54.457171+02:00 server sshd[1302317]: Invalid user ubnt from 27.79.42.129 port 40846
2026-09-11T20:45:54.744126+02:00 server sshd[1302317]: Connection closed by invalid user ubnt 27.79.42.129 port 40846 [preauth]
2026-09-11T20:46:02.784006+02:00 server sshd[1305544]: Connection closed by authenticating user root 27.79.42.129 port 49072 [preauth]
...
show less
Brute-Force
SSH
🇺🇸
34.174.180.112
11 Sep 2026
34.174.180.112 - - [11/Sep/2026:19:32:32 +0200] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 ( ...
show more
34.174.180.112 - - [11/Sep/2026:19:32:32 +0200] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.174.180.112 - - [11/Sep/2026:19:32:33 +0200] "GET /.env HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.174.180.112 - - [11/Sep/2026:19:32:33 +0200] "GET /.env.local HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.174.180.112 - - [11/Sep/2026:19:32:33 +0200] "GET /.env.production HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.174.180.112 - - [11/Sep/2026:19:32:33 +0200] "GET /.env.staging HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.3
...
show less
Bad Web Bot
Web App Attack