AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User MaxMeier joined AbuseIPDB in May 2026 and has reported 1,217 IP addresses.

Standing (weight) is good.

ACTIVE USER

IP	Date	Comment	Categories
🇬🇧 152.32.198.93	17 Sep 2026	152.32.198.93 - - [17/Sep/2026:16:04:18 +0200] "\x16\x03\x01\x00\xFC\x01\x00\x00\xF8\x03\x03\x01{\x7 ... show more 152.32.198.93 - - [17/Sep/2026:16:04:18 +0200] "\x16\x03\x01\x00\xFC\x01\x00\x00\xF8\x03\x03\x01{\x7F\x7F)\xCBY\x09%\x1D\xA7C\xAE\x8E\xA4d\x8A\x8E>!\xF8\xB4\x1A\x13>\x9F\x92\xB7\x9B\x9CB3 \xD4\xCF)O]\xA4}0\xB2\xE2t\xCD\x07nC=\x88\x96\x88\xF7\xE6\xCC\xB2\x8Bv\xF3\xB1\xC5\x063s;\x004\xCC\xA8\xCC\xA9\xC0/\xC00\xC0+\xC0,\xC0\x09\x00\x9E\xCC\xA8\xCC\xAA\x003\x00=\x00\x16\xC0" 400 150 "-" "-" 152.32.198.93 - - [17/Sep/2026:16:04:28 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0" 152.32.198.93 - - [17/Sep/2026:16:04:28 +0200] "l\x00\x0B\x00\x00\x00\x00\x00\x00\x00\x00\x00" 400 150 "-" "-" 152.32.198.93 - - [17/Sep/2026:16:04:29 +0200] "OPTIONS / RTSP/1.0" 400 150 "-" "-" 152.32.198.93 - - [17/Sep/2026:16:04:39 +0200] "" 400 0 "-" "-" 152.32.198.93 - - [17/Sep/2026:16:04:39 +0200] "\x05\x04\x00\x01\x02\x80\x05\x01\x00\x03" 400 150 "-" "-" 152.32.198.93 - - [17/Sep/2026:16:04: ... show less	Bad Web Bot Web App Attack
🇰🇷 118.33.119.34	17 Sep 2026	2026-09-17T11:30:40.651593+02:00 server sshd[4124825]: Invalid user admin from 118.33.119.34 port 35 ... show more 2026-09-17T11:30:40.651593+02:00 server sshd[4124825]: Invalid user admin from 118.33.119.34 port 35838 2026-09-17T11:30:45.448569+02:00 server sshd[4124825]: Connection closed by invalid user admin 118.33.119.34 port 35838 [preauth] 2026-09-17T11:32:04.865783+02:00 server sshd[4160780]: Invalid user user from 118.33.119.34 port 50248 2026-09-17T11:32:08.982219+02:00 server sshd[4160780]: Connection closed by invalid user user 118.33.119.34 port 50248 [preauth] 2026-09-17T11:33:32.636028+02:00 server sshd[5140]: Connection closed by authenticating user root 118.33.119.34 port 37290 [preauth] ... show less	Brute-Force SSH
🇲🇽 201.143.167.114	17 Sep 2026	2026-09-17T11:04:50.242152+02:00 server sshd[3446366]: error: maximum authentication attempts exceed ... show more 2026-09-17T11:04:50.242152+02:00 server sshd[3446366]: error: maximum authentication attempts exceeded for root from 201.143.167.114 port 57370 ssh2 [preauth] 2026-09-17T11:04:59.730789+02:00 server sshd[3450278]: error: maximum authentication attempts exceeded for root from 201.143.167.114 port 57674 ssh2 [preauth] 2026-09-17T11:05:09.332182+02:00 server sshd[3454655]: error: maximum authentication attempts exceeded for root from 201.143.167.114 port 57970 ssh2 [preauth] 2026-09-17T11:05:17.325809+02:00 server sshd[3458912]: Disconnected from authenticating user root 201.143.167.114 port 58220 [preauth] 2026-09-17T11:05:24.535635+02:00 server sshd[3462509]: Invalid user admin from 201.143.167.114 port 58466 ... show less	Brute-Force SSH
🇧🇪 34.62.44.61	17 Sep 2026	34.62.44.61 - - [17/Sep/2026:07:13:02 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10. ... show more 34.62.44.61 - - [17/Sep/2026:07:13:02 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" 34.62.44.61 - - [17/Sep/2026:07:13:02 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\xB3e\xF8\x12\xD5d\xA8\x80\xBD\xFD\xEF\xE4\xF9L\x19?\x1C\xDA\xA0\xFB#.\x18E>HG\x85\xD2\xE9\xE0s }BA\xD5m\x16\xCC\xCA>\x02M\xA0\x928J8jY\xDD\x8A\xA0\x09{\x91\xF8\x9Bd:D\x977\x86\x002\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-" 34.62.44.61 - - [17/Sep/2026:07:13:02 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" 34.62.44.61 - - [17/Sep/2026:07:13:07 +0200] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-" 34.62.44.61 - - [17/Sep/2026:07:13 ... show less	Bad Web Bot Web App Attack
🇧🇪 130.211.111.53	17 Sep 2026	130.211.111.53 - - [17/Sep/2026:06:48:08 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT ... show more 130.211.111.53 - - [17/Sep/2026:06:48:08 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" 130.211.111.53 - - [17/Sep/2026:06:48:08 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\xB7>\xA8\x99\x83\xE0!V\xB2s\xDF\xB3\xCDs\xD7Y\xEF\x8B\xB2\xB8\xF3\x7F\|\x06\x9E\xF6;\xCC\x92NG\xAE g\xF1\xEA\x9D\x03\x8C\xB5\xC09V\x1E\xFAr\xBC\xA7;\xA3\x95\xB4w{\xE4&_m\xEF\x09" 400 150 "-" "-" 130.211.111.53 - - [17/Sep/2026:06:48:08 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" 130.211.111.53 - - [17/Sep/2026:06:48:13 +0200] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-" 130.211.111.53 - - [17/Sep/2026:06:48:13 +0200] "\x9B6\xFE\xC4\xDE\xE3\x19K\x9A\x0 ... show less	Bad Web Bot Web App Attack
🇧🇪 207.175.112.214	17 Sep 2026	2026-09-17T06:38:10.855723+02:00 server sshd[570379]: Unable to negotiate with 207.175.112.214 port ... show more 2026-09-17T06:38:10.855723+02:00 server sshd[570379]: Unable to negotiate with 207.175.112.214 port 38456: no matching host key type found. Their offer: ssh-dss [preauth] 2026-09-17T06:38:11.111085+02:00 server sshd[570493]: Unable to negotiate with 207.175.112.214 port 38464: no matching host key type found. Their offer: ssh-rsa [preauth] 2026-09-17T06:38:11.570250+02:00 server sshd[570607]: Connection closed by 207.175.112.214 port 38470 [preauth] 2026-09-17T06:38:11.721521+02:00 server sshd[570775]: Unable to negotiate with 207.175.112.214 port 38478: no matching host key type found. Their offer: ecdsa-sha2-nistp384 [preauth] 2026-09-17T06:38:11.975020+02:00 server sshd[570897]: Unable to negotiate with 207.175.112.214 port 38494: no matching host key type found. Their offer: ecdsa-sha2-nistp521 [preauth] ... show less	Brute-Force SSH
🇧🇪 34.140.47.243	17 Sep 2026	34.140.47.243 - - [17/Sep/2026:06:35:06 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 1 ... show more 34.140.47.243 - - [17/Sep/2026:06:35:06 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" 34.140.47.243 - - [17/Sep/2026:06:35:06 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\xBC\x89L\xE7d\xF9\xB8\xF4\x11E\xF8`J\xD0AO\xD4\xDB>\xFA\xC1\x9E\x0F\x8B\xAEv\x090;&\x1C\x9D O\xBBYJz1b=\xB0\x94\xD7\xE3\xF5)\xF3f\x041\xD3\xDA5JK~\x8E\xA0\xC7O9\x1FJ\xCE\x002\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-" 34.140.47.243 - - [17/Sep/2026:06:35:06 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" 34.140.47.243 - - [17/Sep/2026:06:35:11 +0200] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-" 34.140.47.243 - - [17/Sep/2026:0 ... show less	Bad Web Bot Web App Attack
🇺🇸 2604:a880:400:d1:0:4:ded2:f001	17 Sep 2026	2604:a880:400:d1:0:4:ded2:f001 - - [17/Sep/2026:06:02:12 +0200] "GET / HTTP/1.0" 444 0 "-" "-" 2604: ... show more 2604:a880:400:d1:0:4:ded2:f001 - - [17/Sep/2026:06:02:12 +0200] "GET / HTTP/1.0" 444 0 "-" "-" 2604:a880:400:d1:0:4:ded2:f001 - - [17/Sep/2026:06:02:13 +0200] "lv\|'\|'\|VHJvamFuX0M0NkY2RTk=\|'\|'\|MARK\|'\|'\|user\|'\|'\|2013-11-22\|'\|'\|\|'\|'\|Win XP\|'\|'\|No\|'\|'\|0.6.4\|'\|'\|..\|'\|'\|\|'\|'\|[endof]" 400 150 "-" "-" 2604:a880:400:d1:0:4:ded2:f001 - - [17/Sep/2026:06:02:13 +0200] "Gh0st\xAD\x00\x00\x00\xE0\x00\x00\x00x\x9CKS``\x98\xC3\xC0\xC0\xC0\x06\xC4\x8C@\xBCQ\x96\x81\x81\x09H\x07\xA7\x16\x95e&\xA7*\x04$&g+\x182\x94\xF6\xB000\xAC\xA8rc\x00\x01\x11\xA0\x82\x1F\x5C`&\x83\xC7K7\x86\x19\xE5n\x0C9\x95n\x0C;\x84\x0F3\xAC\xE8sch\xA8^\xCF4'J\x97\xA9\x82\xE30\xC3\x91h]&\x90\xF8\xCE\x97S\xCBA4L?2=\xE1\xC4\x92\x86\x0B@\xF5`\x0CT\x1F\xAE\xAF]" 400 150 "-" "-" 2604:a880:400:d1:0:4:ded2:f001 - - [17/Sep/2026:06:02:13 +0200] "145.ll\|'\|'\|SGFjS2VkX0Q0OTkwNjI3\|'\|'\|WIN-JNAPIER0859\|'\|'\|JNapier\|'\|'\|19-02-01\|'\|'\|\|'\|'\|Win 7 Professional SP1 x64\|'\|'\|No\|'\|'\|0.7d\|'\|'\|..\|'\|'\|AA==\|'\|'\|112.inf\|'\|'\|SGFjS2VkDQoxOTIuMTY4LjkyLjIyMjo1NTUy ... show less	Bad Web Bot Web App Attack
🇫🇮 46.62.170.251	16 Sep 2026	46.62.170.251 - - [16/Sep/2026:18:25:36 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Linux; Andro ... show more 46.62.170.251 - - [16/Sep/2026:18:25:36 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.8017.78 Mobile Safari/537.36; compatible; GPTBot/1.4; +https://openai.com/gptbot" 46.62.170.251 - - [16/Sep/2026:18:25:47 +0200] "GET /@fs/../.env?raw?? HTTP/1.1" 400 650 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_6_1) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user) Chrome/131.0.420.45 Safari/537.36" 46.62.170.251 - - [16/Sep/2026:18:25:47 +0200] "GET /static../.env HTTP/1.1" 400 248 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.5; rv:143.11) Gecko/20100101 Firefox/143.11; compatible; GPTBot/1.4; +https://openai.com/gptbot" 46.62.170.251 - - [16/Sep/2026:18:25:47 +0200] "GET /media../.env HTTP/1.1" 400 650 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot) Chrome/109.0 ... show less	Bad Web Bot Web App Attack
🇫🇮 95.216.142.212	16 Sep 2026	95.216.142.212 - - [16/Sep/2026:18:03:16 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X11; Linux ... show more 95.216.142.212 - - [16/Sep/2026:18:03:16 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:132.14) Gecko/20100101 Firefox/132.14; compatible; meta-externalagent/1.1; +https://developers.facebook.com/docs/sharing/webmasters/crawler" 95.216.142.212 - - [16/Sep/2026:18:03:26 +0200] "GET /static../.env HTTP/1.1" 400 650 "-" "Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.1853.61 Mobile Safari/537.36; compatible; Slackbot-LinkExpanding/1.0; +https://api.slack.com/robots" 95.216.142.212 - - [16/Sep/2026:18:03:27 +0200] "GET /media../.env HTTP/1.1" 400 248 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:150.13) Gecko/20100101 Firefox/150.13; compatible; GPTBot/1.2; +https://openai.com/gptbot" 95.216.142.212 - - [16/Sep/2026:18:03:29 +0200] "GET /@fs/../.env?raw?? HTTP/1.1" 400 650 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.2609.78 Safari/537.36; compatible; Slackbot-LinkExpandin ... show less	Bad Web Bot Web App Attack
🇷🇺 156.229.16.142	16 Sep 2026	156.229.16.142 - - [16/Sep/2026:17:09:28 +0200] "\x16\x03\x01\x00\xFC\x01\x00\x00\xF8\x03\x03\xD0h\x ... show more 156.229.16.142 - - [16/Sep/2026:17:09:28 +0200] "\x16\x03\x01\x00\xFC\x01\x00\x00\xF8\x03\x03\xD0h\x9C\xD2\xEE\xC9\x98p_+\x98\x1EZx)\xBBXo\xE2A\x98\x85\x9D[\x97\xA7\xA9\xF1fr" 400 150 "-" "-" 156.229.16.142 - - [16/Sep/2026:17:09:38 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0" 156.229.16.142 - - [16/Sep/2026:17:09:38 +0200] "l\x00\x0B\x00\x00\x00\x00\x00\x00\x00\x00\x00" 400 150 "-" "-" 156.229.16.142 - - [16/Sep/2026:17:09:38 +0200] "OPTIONS / RTSP/1.0" 400 150 "-" "-" 156.229.16.142 - - [16/Sep/2026:17:09:49 +0200] "\x05\x04\x00\x01\x02\x80\x05\x01\x00\x03" 400 150 "-" "-" 156.229.16.142 - - [16/Sep/2026:17:09:49 +0200] "\x03\x00\x00\x0B\x06\xE0\x00\x00\x00\x00\x00" 400 150 "-" "-" 156.229.16.142 - - [16/Sep/2026:17:09:49 +0200] "\x03\x00\x003.\xE0\x00\x00\x00\x00\x00Cookie: mstshash=Administrator" 400 150 "-" "-" 156.229.16.142 - - [16/Sep/2026:17:09:49 +0200] " ... show less	Bad Web Bot Web App Attack
🇧🇪 35.240.97.65	16 Sep 2026	35.240.97.65 - - [16/Sep/2026:14:09:14 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10 ... show more 35.240.97.65 - - [16/Sep/2026:14:09:14 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" 35.240.97.65 - - [16/Sep/2026:14:09:14 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\xB4/\x02\xF7\xF0\xA3\xF5\xF8'\xE0>\xF6p\x87sgB\x02+W\xE0\xB0HQ\xC7\xD0\xD9y\xF6\x0B\xE9V .\xBF\x85\xA0\xCF6\x16\x8C\x8F\x83\x92\x09\xB7\xB40\xD5\xBC\x87b\xA2g\x14\x8B\xE4{\xCF7\xF0\xCE\xDB\xD7\xBA\x002\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-" 35.240.97.65 - - [16/Sep/2026:14:09:14 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" 35.240.97.65 - - [16/Sep/2026:14:09:19 +0200] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-" 35.240.97 ... show less	Bad Web Bot Web App Attack
🇧🇪 34.78.241.121	16 Sep 2026	34.78.241.121 - - [16/Sep/2026:13:42:12 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 1 ... show more 34.78.241.121 - - [16/Sep/2026:13:42:12 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" 34.78.241.121 - - [16/Sep/2026:13:42:12 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\xD7}b\x184S\x5C\xBA\xD1\x1F\xA0;\xDF\xF2]\xB5\x17iu#\xA91q{\xBE\xA5$\x0C\x8E\xBC\xD3H \xE1\xA1y\xD0\x8Ce\x11<>\x84\x15o\x10\x5C'}\xA5\x99" 400 150 "-" "-" 34.78.241.121 - - [16/Sep/2026:13:42:12 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" 34.78.241.121 - - [16/Sep/2026:13:42:14 +0200] "\xF1\xDB\xE9\xC8\xDCz\xF5\xD6\xB0\x0B\x893\xA0\xBC=\xD9\xB1\xD0'd\xD1q\x1Ej7\xB92\x88\x1Ew;x\x1D\x0EQ_.\x96\x8F\x81^\xE3~\x1B\x98\x7F\xEB`B\xD2\xE3\xDD\xA9\xE2l\xA8X\xCB\xF66\xFF\xE5\x0E\xE7" 400 150 "-" "-" 34.78.241.121 - - [16/Sep/2026:13:42:14 +0200] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x0 ... show less	Bad Web Bot Web App Attack
🇧🇪 35.233.18.215	16 Sep 2026	35.233.18.215 - - [16/Sep/2026:13:25:51 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 1 ... show more 35.233.18.215 - - [16/Sep/2026:13:25:51 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" 35.233.18.215 - - [16/Sep/2026:13:25:52 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03w#\xCC\x10\xCD\x11d\xE9~\x83\x99%K\x9D=\x863\xE8fA\xE8\x9AC./y\xA2\xD0h\xD4\x17\xC2 \xD2\x93\x8CAnP" 400 150 "-" "-" 35.233.18.215 - - [16/Sep/2026:13:25:52 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" 35.233.18.215 - - [16/Sep/2026:13:25:57 +0200] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-" 35.233.18.215 - - [16/Sep/2026:13:25:58 +0200] "\xAF\x8AM\xA8\xCF&~\x85H\xE2\x03;#\xA6\xC4\x95\x7Fz\xDB\xA3B`\xC5\x8F\xA8\xCC\x07\x9B\x1BC\x84r\x8E\xD3\xCDh\xB4\x9E ... show less	Bad Web Bot Web App Attack
🇮🇳 59.144.228.132	16 Sep 2026	2026-09-16T13:16:45.458675+02:00 server sshd[2566735]: error: maximum authentication attempts exceed ... show more 2026-09-16T13:16:45.458675+02:00 server sshd[2566735]: error: maximum authentication attempts exceeded for root from 59.144.228.132 port 33906 ssh2 [preauth] 2026-09-16T13:16:56.066677+02:00 server sshd[2570141]: error: maximum authentication attempts exceeded for root from 59.144.228.132 port 33992 ssh2 [preauth] 2026-09-16T13:17:05.144676+02:00 server sshd[2574635]: error: maximum authentication attempts exceeded for root from 59.144.228.132 port 34136 ssh2 [preauth] 2026-09-16T13:17:12.068718+02:00 server sshd[2578521]: Disconnected from authenticating user root 59.144.228.132 port 34230 [preauth] 2026-09-16T13:17:21.031968+02:00 server sshd[2581583]: Invalid user admin from 59.144.228.132 port 34324 ... show less	Brute-Force SSH
🇨🇭 34.65.53.252	16 Sep 2026	34.65.53.252 - - [16/Sep/2026:12:48:24 +0200] "GET /.git/config HTTP/1.1" 400 632 "-" "Mozilla/5.0 ( ... show more 34.65.53.252 - - [16/Sep/2026:12:48:24 +0200] "GET /.git/config HTTP/1.1" 400 632 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.65.53.252 - - [16/Sep/2026:12:48:24 +0200] "GET /.env HTTP/1.1" 400 632 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.65.53.252 - - [16/Sep/2026:12:48:24 +0200] "GET /.env.local HTTP/1.1" 400 632 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.65.53.252 - - [16/Sep/2026:12:48:25 +0200] "GET /.env.production HTTP/1.1" 400 632 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.65.53.252 - - [16/Sep/2026:12:48:25 +0200] "GET /.env.staging HTTP/1.1" 400 632 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34. ... show less	Bad Web Bot Web App Attack
🇨🇳 180.175.161.99	16 Sep 2026	2026-09-16T10:49:06.073587+02:00 server sshd[2814994]: Connection closed by authenticating user root ... show more 2026-09-16T10:49:06.073587+02:00 server sshd[2814994]: Connection closed by authenticating user root 180.175.161.99 port 24254 [preauth] 2026-09-16T10:49:07.368271+02:00 server sshd[2816798]: Connection closed by authenticating user root 180.175.161.99 port 24255 [preauth] 2026-09-16T10:49:08.525976+02:00 server sshd[2817314]: Connection closed by authenticating user root 180.175.161.99 port 24256 [preauth] 2026-09-16T10:49:09.839706+02:00 server sshd[2817886]: Connection closed by authenticating user root 180.175.161.99 port 24257 [preauth] 2026-09-16T10:49:10.969985+02:00 server sshd[2818446]: Connection closed by authenticating user root 180.175.161.99 port 24258 [preauth] ... show less	Brute-Force SSH
🇭🇰 35.220.219.176	16 Sep 2026	35.220.219.176 - - [16/Sep/2026:05:11:47 +0200] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 ( ... show more 35.220.219.176 - - [16/Sep/2026:05:11:47 +0200] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.220.219.176 - - [16/Sep/2026:05:11:47 +0200] "GET /.env HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.220.219.176 - - [16/Sep/2026:05:11:48 +0200] "GET /.env.local HTTP/1.1" 404 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.220.219.176 - - [16/Sep/2026:05:11:48 +0200] "GET /.env.production HTTP/1.1" 404 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.220.219.176 - - [16/Sep/2026:05:11:48 +0200] "GET /.env.staging HTTP/1.1" 404 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.220.219.176 - - [16/Sep/2026:05:11:49 +0200] ... show less	Bad Web Bot Web App Attack
🇷🇺 109.63.141.73	16 Sep 2026	2026-09-16T02:49:34.381264+02:00 server sshd[2541388]: error: maximum authentication attempts exceed ... show more 2026-09-16T02:49:34.381264+02:00 server sshd[2541388]: error: maximum authentication attempts exceeded for root from 109.63.141.73 port 47304 ssh2 [preauth] 2026-09-16T02:49:40.325609+02:00 server sshd[2544068]: error: maximum authentication attempts exceeded for root from 109.63.141.73 port 47632 ssh2 [preauth] 2026-09-16T02:49:45.099351+02:00 server sshd[2546766]: error: maximum authentication attempts exceeded for root from 109.63.141.73 port 47968 ssh2 [preauth] 2026-09-16T02:49:49.680939+02:00 server sshd[2548946]: Disconnected from authenticating user root 109.63.141.73 port 48248 [preauth] 2026-09-16T02:49:54.131614+02:00 server sshd[2551017]: Invalid user admin from 109.63.141.73 port 48420 ... show less	Brute-Force SSH
🇦🇺 34.40.181.116	15 Sep 2026	34.40.181.116 - - [15/Sep/2026:21:52:15 +0200] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (W ... show more 34.40.181.116 - - [15/Sep/2026:21:52:15 +0200] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.40.181.116 - - [15/Sep/2026:21:52:17 +0200] "GET /.env HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.40.181.116 - - [15/Sep/2026:21:52:18 +0200] "GET /.env.local HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.40.181.116 - - [15/Sep/2026:21:52:18 +0200] "GET /.env.production HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.40.181.116 - - [15/Sep/2026:21:52:18 +0200] "GET /.env.staging HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34 ... show less	Bad Web Bot Web App Attack
🇳🇱 45.148.10.166	15 Sep 2026	45.148.10.166 - - [15/Sep/2026:21:13:34 +0200] "GET /config/aws.yml HTTP/1.1" 444 0 "http://aborch.d ... show more 45.148.10.166 - - [15/Sep/2026:21:13:34 +0200] "GET /config/aws.yml HTTP/1.1" 444 0 "http://aborch.de/config/aws.yml" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.2 Safari/605.1.15" 45.148.10.166 - - [15/Sep/2026:21:13:34 +0200] "GET /config.php~ HTTP/1.1" 404 178 "http://aborch.de/config.php~" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 45.148.10.166 - - [15/Sep/2026:21:13:34 +0200] "GET /crm/.env HTTP/1.1" 444 0 "http://aborch.de/crm/.env" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0" 45.148.10.166 - - [15/Sep/2026:21:13:34 +0200] "GET /api/.env HTTP/1.1" 444 0 "http://aborch.de/api/.env" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0" 45.148.10.166 - - [15/Sep/2026:21:13:38 +0200] "GET /aws.json HTTP/1.1" 444 0 "http://aborch.de/aws.json" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, ... show less	Bad Web Bot Web App Attack
🇩🇪 35.198.151.186	15 Sep 2026	35.198.151.186 - - [15/Sep/2026:20:02:24 +0200] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 ( ... show more 35.198.151.186 - - [15/Sep/2026:20:02:24 +0200] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.198.151.186 - - [15/Sep/2026:20:02:24 +0200] "GET /.env HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.198.151.186 - - [15/Sep/2026:20:02:24 +0200] "GET /.env.local HTTP/1.1" 404 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.198.151.186 - - [15/Sep/2026:20:02:24 +0200] "GET /.env.production HTTP/1.1" 404 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.198.151.186 - - [15/Sep/2026:20:02:24 +0200] "GET /.env.staging HTTP/1.1" 404 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.198.151.186 - - [15/Sep/2026:20:02:24 +0200] ... show less	Bad Web Bot Web App Attack
🇬🇧 34.89.23.250	15 Sep 2026	34.89.23.250 - - [15/Sep/2026:19:00:25 +0200] "GET /.git/config HTTP/1.1" 400 632 "-" "Mozilla/5.0 ( ... show more 34.89.23.250 - - [15/Sep/2026:19:00:25 +0200] "GET /.git/config HTTP/1.1" 400 632 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.89.23.250 - - [15/Sep/2026:19:00:25 +0200] "GET /.env HTTP/1.1" 400 632 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.89.23.250 - - [15/Sep/2026:19:00:25 +0200] "GET /.env.local HTTP/1.1" 400 632 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.89.23.250 - - [15/Sep/2026:19:00:25 +0200] "GET /.env.production HTTP/1.1" 400 632 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.89.23.250 - - [15/Sep/2026:19:00:25 +0200] "GET /.env.staging HTTP/1.1" 400 632 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrom ... show less	Bad Web Bot Web App Attack
🇩🇪 34.185.249.45	15 Sep 2026	34.185.249.45 - - [15/Sep/2026:18:33:49 +0200] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X ... show more 34.185.249.45 - - [15/Sep/2026:18:33:49 +0200] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.185.249.45 - - [15/Sep/2026:18:33:49 +0200] "GET /.env HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.185.249.45 - - [15/Sep/2026:18:33:49 +0200] "GET /.env.local HTTP/1.1" 404 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.185.249.45 - - [15/Sep/2026:18:33:49 +0200] "GET /.env.production HTTP/1.1" 404 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.185.249.45 - - [15/Sep/2026:18:33:49 +0200] "GET /.env.staging HTTP/1.1" 404 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.185.249.45 - - [15/Sep/2026:18:33:49 +0200] "GET ... show less	Bad Web Bot Web App Attack
🇺🇸 34.60.54.49	15 Sep 2026	34.60.54.49 - - [15/Sep/2026:16:23:30 +0200] "GET /manifest.json HTTP/1.1" 444 0 "-" "Mozilla/5.0 (M ... show more 34.60.54.49 - - [15/Sep/2026:16:23:30 +0200] "GET /manifest.json HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" 34.60.54.49 - - [15/Sep/2026:16:23:30 +0200] "GET /.aws/credentials HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)" 34.60.54.49 - - [15/Sep/2026:16:23:30 +0200] "GET /credentials.json HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" 34.60.54.49 - - [15/Sep/2026:16:23:30 +0200] "GET /asset-manifest.json HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" 34.60.54.49 - - [15/Sep/2026:16:23:30 +0200] "GET /key.json HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)" 34.60.54.49 - - [15/Sep/2026:16:23:30 +0200] "GET /dist/manifest.json HTTP/1.1" ... show less	Bad Web Bot Web App Attack