🇧🇪
104.155.34.84
21 Sep 2026
104.155.34.84 - - [21/Sep/2026:08:02:22 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 1 ...
show more
104.155.34.84 - - [21/Sep/2026:08:02:22 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
104.155.34.84 - - [21/Sep/2026:08:02:25 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\x09Z\x92{\xD6\x92\xF0\xC9u\xA9gP\x1A\xCE(\xE9\x07\xCBEY\xB5\x0FY\xF4f \x16\xE3\xEF\x9C\xBE\xE5 \xCCc3\xDC\x9D\xA8\x00\xAB\xDD\xDE\xD3b$\x8F\xDD\xEF\xA4u\xF2ye\x1F\x81\xB8l\x8C\xEE\xEF\xE6\xBD\xDB*\x002\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-"
104.155.34.84 - - [21/Sep/2026:08:02:27 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
104.155.34.84 - - [21/Sep/2026:08:02:31 +0200] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-"
104.1
...
show less
Bad Web Bot
Web App Attack
🇺🇸
216.180.246.17
21 Sep 2026
216.180.246.17 - - [21/Sep/2026:07:52:00 +0200] "GET / HTTP/1.0" 444 0 "-" "Mozilla/5.0 (compatible; ...
show more
216.180.246.17 - - [21/Sep/2026:07:52:00 +0200] "GET / HTTP/1.0" 444 0 "-" "Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)"
216.180.246.17 - - [21/Sep/2026:07:53:35 +0200] "GET / HTTP/1.0" 444 0 "-" "Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)"
216.180.246.17 - - [21/Sep/2026:07:54:51 +0200] "GET / HTTP/1.0" 444 0 "-" "Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)"
216.180.246.17 - - [21/Sep/2026:07:55:44 +0200] "\x16\x03\x01\x00\xFD\x01\x00\x00\xF9\x03\x03\xCE\xAA\x99\xAF\xE5\xB6\x84\x8B+1\xA0\xE0\xAB\x94" 400 150 "-" "-"
216.180.246.17 - - [21/Sep/2026:07:57:51 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)"
216.180.246.17 - - [21/Sep/2026:07:57:54 +0200] "GET /manage/account/login HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)"
216.180.246.17 - -
...
show less
Bad Web Bot
Web App Attack
🇧🇪
130.211.97.92
21 Sep 2026
2026-09-21T07:49:00.187334+02:00 server sshd[3948129]: Connection closed by 130.211.97.92 port 53576 ...
show more
2026-09-21T07:49:00.187334+02:00 server sshd[3948129]: Connection closed by 130.211.97.92 port 53576
2026-09-21T07:49:38.376852+02:00 server sshd[3964956]: Unable to negotiate with 130.211.97.92 port 18204: no matching host key type found. Their offer: ssh-dss [preauth]
2026-09-21T07:49:38.641001+02:00 server sshd[3965078]: Unable to negotiate with 130.211.97.92 port 18218: no matching host key type found. Their offer: ssh-rsa [preauth]
2026-09-21T07:49:39.123509+02:00 server sshd[3965209]: Connection closed by 130.211.97.92 port 18232 [preauth]
2026-09-21T07:49:39.282575+02:00 server sshd[3965382]: Unable to negotiate with 130.211.97.92 port 18236: no matching host key type found. Their offer: ecdsa-sha2-nistp384 [preauth]
...
show less
Brute-Force
SSH
🇳🇱
45.148.10.18
21 Sep 2026
45.148.10.18 - - [21/Sep/2026:04:57:48 +0200] "POST /index.php?rest_route=/batch/v1 HTTP/1.1" 301 16 ...
show more
45.148.10.18 - - [21/Sep/2026:04:57:48 +0200] "POST /index.php?rest_route=/batch/v1 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
45.148.10.18 - - [21/Sep/2026:04:57:49 +0200] "GET /index.php?rest_route=/batch/v1 HTTP/1.1" 302 5 "http://www.jborch.de/index.php?rest_route=/batch/v1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
45.148.10.18 - - [21/Sep/2026:04:57:49 +0200] "POST /index.php?rest_route=%2Fbatch%2Fv1 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
45.148.10.18 - - [21/Sep/2026:04:57:49 +0200] "GET /index.php?rest_route=%2Fbatch%2Fv1 HTTP/1.1" 302 5 "http://www.jborch.de/index.php?rest_route=%2Fbatch%2Fv1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
45.148.10.18 -
...
show less
Bad Web Bot
Web App Attack
🇭🇰
35.220.213.46
20 Sep 2026
35.220.213.46 - - [20/Sep/2026:21:47:51 +0200] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (M ...
show more
35.220.213.46 - - [20/Sep/2026:21:47:51 +0200] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.220.213.46 - - [20/Sep/2026:21:47:52 +0200] "GET /.env HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.220.213.46 - - [20/Sep/2026:21:47:53 +0200] "GET /.env.local HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.220.213.46 - - [20/Sep/2026:21:47:53 +0200] "GET /.env.production HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.220.213.46 - - [20/Sep/2026:21:47:53 +0200] "GET /.env.staging HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chro
...
show less
Bad Web Bot
Web App Attack
🇨🇦
35.203.66.36
20 Sep 2026
35.203.66.36 - - [20/Sep/2026:17:32:51 +0200] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Ma ...
show more
35.203.66.36 - - [20/Sep/2026:17:32:51 +0200] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.203.66.36 - - [20/Sep/2026:17:32:52 +0200] "GET /.env HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.203.66.36 - - [20/Sep/2026:17:32:52 +0200] "GET /.env.local HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.203.66.36 - - [20/Sep/2026:17:32:52 +0200] "GET /.env.production HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.203.66.36 - - [20/Sep/2026:17:32:53 +0200] "GET /.env.staging HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/13
...
show less
Bad Web Bot
Web App Attack
🇩🇪
64.226.101.155
20 Sep 2026
64.226.101.155 - - [20/Sep/2026:17:21:19 +0200] "\x16\x03\x01\x05\xBA\x01\x00\x05\xB6\x03\x03\xFD\xC ...
show more
64.226.101.155 - - [20/Sep/2026:17:21:19 +0200] "\x16\x03\x01\x05\xBA\x01\x00\x05\xB6\x03\x03\xFD\xC9\x05\x1E\x1E\x85\xA0\xE4\x0Fw\xFD\xCD\xFE\xCDf\x90I\x13\x92\x00~*\x9A'\xC0\xC6\xA99\x96\xA1bI \xA0\xBC\xDA\xE5;)\xEC\xB1e\xC3\xF1\xF4\xE3\xBEB\xC2\xB5\xC0\xF07(L\x8C7 \xF9|>\xCF\xB0\xDB\xF1\x00&\xCC\xA8\xCC\xA9\xC0/\xC00\xC0+\xC0,\xC0\x13\xC0\x09\xC0\x14\xC0" 400 150 "-" "-"
64.226.101.155 - - [20/Sep/2026:17:21:23 +0200] "*1" 400 150 "-" "-"
64.226.101.155 - - [20/Sep/2026:17:21:23 +0200] "4\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xDD\x07\x00\x00\x00\x00\x00\x00\x00\x1F\x00\x00\x00\x10hello\x00\x01\x00\x00\x00\x02$db\x00\x06\x00\x00\x00admin\x00\x00" 400 150 "-" "-"
64.226.101.155 - - [20/Sep/2026:17:21:23 +0200] ":\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\x01\x00\x00\x00\x13\x00\x00\x00\x10isMaster\x00\x01\x00\x00\x00\x00" 400 150 "-" "-"
64.226.101.155 - - [20/Sep/2026:17:21:24 +0200] "\x16\x03\x01\x05\xBA\x01\x00\x
...
show less
Bad Web Bot
Web App Attack
🇺🇸
136.69.128.72
20 Sep 2026
136.69.128.72 - - [20/Sep/2026:16:52:12 +0200] "GET /__/firebase/init.json HTTP/1.1" 444 0 "-" "Mozi ...
show more
136.69.128.72 - - [20/Sep/2026:16:52:12 +0200] "GET /__/firebase/init.json HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)"
136.69.128.72 - - [20/Sep/2026:16:52:12 +0200] "GET /.env.live HTTP/1.1" 404 117 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)"
136.69.128.72 - - [20/Sep/2026:16:52:12 +0200] "GET /__/firebase/init.json HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)"
136.69.128.72 - - [20/Sep/2026:16:52:13 +0200] "GET /.env.bak HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)"
136.69.128.72 - - [20/Sep/2026:16:52:13 +0200] "GET /packages/.env HTTP/1.1" 444 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
136.69.128.72 - - [20/Sep/2026:16:52:13 +0200] "GET /.env.backup HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; Bytespider; spider-feedback@b
...
show less
Bad Web Bot
Web App Attack
🇨🇭
34.65.209.225
20 Sep 2026
34.65.209.225 - - [20/Sep/2026:16:43:56 +0200] "GET /.git/config HTTP/1.1" 400 632 "-" "Mozilla/5.0 ...
show more
34.65.209.225 - - [20/Sep/2026:16:43:56 +0200] "GET /.git/config HTTP/1.1" 400 632 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.65.209.225 - - [20/Sep/2026:16:43:56 +0200] "GET /.env HTTP/1.1" 400 632 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.65.209.225 - - [20/Sep/2026:16:43:56 +0200] "GET /.env.local HTTP/1.1" 400 632 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.65.209.225 - - [20/Sep/2026:16:43:57 +0200] "GET /.env.production HTTP/1.1" 400 632 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.65.209.225 - - [20/Sep/2026:16:43:57 +0200] "GET /.env.staging HTTP/1.1" 400 632 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
...
show less
Bad Web Bot
Web App Attack
🇺🇸
34.69.71.180
20 Sep 2026
34.69.71.180 - - [20/Sep/2026:15:54:33 +0200] "GET /.git/config HTTP/1.1" 400 632 "-" "Mozilla/5.0 ( ...
show more
34.69.71.180 - - [20/Sep/2026:15:54:33 +0200] "GET /.git/config HTTP/1.1" 400 632 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.69.71.180 - - [20/Sep/2026:15:54:34 +0200] "GET /.env HTTP/1.1" 400 632 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.69.71.180 - - [20/Sep/2026:15:54:35 +0200] "GET /.env.local HTTP/1.1" 400 632 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.69.71.180 - - [20/Sep/2026:15:54:35 +0200] "GET /.env.production HTTP/1.1" 400 632 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.69.71.180 - - [20/Sep/2026:15:54:36 +0200] "GET /.env.staging HTTP/1.1" 400 632 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrom
...
show less
Bad Web Bot
Web App Attack
🇳🇱
34.187.97.45
20 Sep 2026
34.187.97.45 - - [20/Sep/2026:15:12:13 +0200] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Wi ...
show more
34.187.97.45 - - [20/Sep/2026:15:12:13 +0200] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.187.97.45 - - [20/Sep/2026:15:12:13 +0200] "GET /.env HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.187.97.45 - - [20/Sep/2026:15:12:14 +0200] "GET /.env.local HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.187.97.45 - - [20/Sep/2026:15:12:14 +0200] "GET /.env.production HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.187.97.45 - - [20/Sep/2026:15:12:14 +0200] "GET /.env.staging HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.187.
...
show less
Bad Web Bot
Web App Attack
🇶🇦
34.18.224.201
20 Sep 2026
34.18.224.201 - - [20/Sep/2026:14:08:27 +0200] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (M ...
show more
34.18.224.201 - - [20/Sep/2026:14:08:27 +0200] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.18.224.201 - - [20/Sep/2026:14:08:28 +0200] "GET /.env HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.18.224.201 - - [20/Sep/2026:14:08:28 +0200] "GET /.env.local HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.18.224.201 - - [20/Sep/2026:14:08:28 +0200] "GET /.env.production HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.18.224.201 - - [20/Sep/2026:14:08:28 +0200] "GET /.env.staging HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chro
...
show less
Bad Web Bot
Web App Attack
🇧🇪
34.14.58.11
20 Sep 2026
2026-09-20T10:43:53.593185+02:00 server sshd[2857695]: Connection closed by 34.14.58.11 port 54250
2 ...
show more
2026-09-20T10:43:53.593185+02:00 server sshd[2857695]: Connection closed by 34.14.58.11 port 54250
2026-09-20T10:44:00.171834+02:00 server sshd[2860728]: Invalid user mutqk from 34.14.58.11 port 63280
2026-09-20T10:44:00.272131+02:00 server sshd[2860728]: Connection closed by invalid user mutqk 34.14.58.11 port 63280 [preauth]
2026-09-20T10:44:05.782896+02:00 server sshd[2863693]: Unable to negotiate with 34.14.58.11 port 30838: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1 [preauth]
2026-09-20T10:44:07.809515+02:00 server sshd[2864642]: Unable to negotiate with 34.14.58.11 port 30850: no matching host key type found. Their offer: ssh-dss [preauth]
...
show less
Brute-Force
SSH
🇭🇰
118.26.37.105
20 Sep 2026
118.26.37.105 - - [20/Sep/2026:10:26:37 +0200] "\x16\x03\x01\x00\xFC\x01\x00\x00\xF8\x03\x03\x22\x8E ...
show more
118.26.37.105 - - [20/Sep/2026:10:26:37 +0200] "\x16\x03\x01\x00\xFC\x01\x00\x00\xF8\x03\x03\x22\x8E\x11F\x86\xB5\xCC\xD4%\x8F\xFC\x01\x01\x13\x97\x0F\x06\x03\x92\xEB\x9B\xD5\x9E\xCA\x86\xB29V^Z\xAA< &%\xFD\xC2\xF5\x08\xEDk6aW\xEA\xE3\x86\x1DuXG\xC0_t$G\xE7o\x0E\x0Bt\xF7\x07\xF1\xE7\x004\xCC\xA8\xCC\xA9\xC0/\xC00\xC0+\xC0,\xC0\x09\x00\x9E\xCC\xA8\xCC\xAA\x003\x00=\x00\x16\xC0" 400 150 "-" "-"
118.26.37.105 - - [20/Sep/2026:10:26:47 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0"
118.26.37.105 - - [20/Sep/2026:10:26:48 +0200] "l\x00\x0B\x00\x00\x00\x00\x00\x00\x00\x00\x00" 400 150 "-" "-"
118.26.37.105 - - [20/Sep/2026:10:26:49 +0200] "OPTIONS / RTSP/1.0" 400 150 "-" "-"
118.26.37.105 - - [20/Sep/2026:10:26:59 +0200] "" 400 0 "-" "-"
118.26.37.105 - - [20/Sep/2026:10:26:59 +0200] "\x05\x04\x00\x01\x02\x80\x05\x01\x00\x03" 400 150 "-" "-"
118.26.37.105 - - [20/Sep/2026:
...
show less
Bad Web Bot
Web App Attack
🇧🇪
146.148.113.204
20 Sep 2026
146.148.113.204 - - [20/Sep/2026:05:36:11 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT ...
show more
146.148.113.204 - - [20/Sep/2026:05:36:11 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
146.148.113.204 - - [20/Sep/2026:05:36:11 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03E\xA0+6" 400 150 "-" "-"
146.148.113.204 - - [20/Sep/2026:05:36:11 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
146.148.113.204 - - [20/Sep/2026:05:36:16 +0200] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-"
146.148.113.204 - - [20/Sep/2026:05:36:16 +0200] "\xAD\xF9\xC4\x92'\x8BP\xA9T\x85I\x81I4\xBF\xE6\xED\xCA\x9Az\x97\xA6\xEE=\x02#\xB7\xA9o\xD0\xB8{-*lU4\xADo%Y)\x15\x97\xC0s<a\x8A|f\xE7DJ\x8E\xC7\xD3\xB9\xC8\x9F\x8F#\xC0\x7F" 400 150 "-" "-"
146.148.
...
show less
Bad Web Bot
Web App Attack
🇧🇪
35.195.214.161
20 Sep 2026
35.195.214.161 - - [20/Sep/2026:05:09:56 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT ...
show more
35.195.214.161 - - [20/Sep/2026:05:09:56 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
35.195.214.161 - - [20/Sep/2026:05:09:56 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x037\xEF/N\x1C\xBB\x8F\xBB\xCE\xD4\xF5Q\xBB\xEA\xD3\xB2\x00\x22W\x12\x83\xBE%q\x9F#\x1C\xD5#(B 2<3\x8E\xB9\x1C\x16x\x1F?\xA8\xC8\x9D\x1Ae\x10kb\xA6\x90\xD0T\x08\x8D\xAC_X\xA7MO\xE9\xA3\x002\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-"
35.195.214.161 - - [20/Sep/2026:05:09:56 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
35.195.214.161 - - [20/Sep/2026:05:10:01 +0200] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-"
35.195.214.161 -
...
show less
Bad Web Bot
Web App Attack
🇧🇪
34.79.24.255
20 Sep 2026
34.79.24.255 - - [20/Sep/2026:04:47:47 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10 ...
show more
34.79.24.255 - - [20/Sep/2026:04:47:47 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
34.79.24.255 - - [20/Sep/2026:04:47:49 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\xA2\xE9b\xE3\xAC\x8E\xF7(H\x8D\x5C2\xEB\xC3\x05r\xD1\x97\x1B\x8D\x1Fj\xAE\xA8\xC2\xD0c" 400 150 "-" "-"
34.79.24.255 - - [20/Sep/2026:04:47:52 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
34.79.24.255 - - [20/Sep/2026:04:47:56 +0200] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-"
34.79.24.255 - - [20/Sep/2026:04:47:58 +0200] "\xBB'\xD4&m\xFE.\xA0\xA3\xA7\xA3\xE0!\xAB7`Eq>" 400 150 "-" "-"
34.79.24.255 - - [20/Sep/2026:04:48:20 +0200] "\x00\x1E[\xB4\x01\x00\
...
show less
Bad Web Bot
Web App Attack
🇩🇪
107.150.117.121
20 Sep 2026
107.150.117.121 - - [20/Sep/2026:02:47:17 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; ...
show more
107.150.117.121 - - [20/Sep/2026:02:47:17 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0"
107.150.117.121 - - [20/Sep/2026:02:47:17 +0200] "l\x00\x0B\x00\x00\x00\x00\x00\x00\x00\x00\x00" 400 150 "-" "-"
107.150.117.121 - - [20/Sep/2026:02:47:17 +0200] "\x00\x00\x07\x00\x08\x00\x03\x00\x04\x00\x05\x00\x06" 400 150 "-" "-"
107.150.117.121 - - [20/Sep/2026:02:47:17 +0200] "\x00\x0E87\xA5&\x08\xA2\x1B\xA0\xB1\x00\x00\x00\x00\x00" 400 150 "-" "-"
107.150.117.121 - - [20/Sep/2026:02:47:17 +0200] "^\x02$" 400 150 "-" "-"
107.150.117.121 - - [20/Sep/2026:02:47:27 +0200] "\x05\x04\x00\x01\x02\x80\x05\x01\x00\x03" 400 150 "-" "-"
107.150.117.121 - - [20/Sep/2026:02:47:27 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0"
107.150.117.121 - - [20/Sep/2026:02:47:27
...
show less
Bad Web Bot
Web App Attack
🇮🇹
79.31.176.193
20 Sep 2026
2026-09-20T02:46:12.022847+02:00 server sshd[2647048]: error: maximum authentication attempts exceed ...
show more
2026-09-20T02:46:12.022847+02:00 server sshd[2647048]: error: maximum authentication attempts exceeded for root from 79.31.176.193 port 37994 ssh2 [preauth]
2026-09-20T02:46:13.740605+02:00 server sshd[2647689]: error: maximum authentication attempts exceeded for root from 79.31.176.193 port 38276 ssh2 [preauth]
2026-09-20T02:46:15.563939+02:00 server sshd[2648502]: error: maximum authentication attempts exceeded for root from 79.31.176.193 port 38700 ssh2 [preauth]
2026-09-20T02:46:16.621375+02:00 server sshd[2649316]: Disconnected from authenticating user root 79.31.176.193 port 38988 [preauth]
2026-09-20T02:46:18.811657+02:00 server sshd[2649738]: Invalid user admin from 79.31.176.193 port 39270
...
show less
Brute-Force
SSH
🇮🇩
34.101.113.107
19 Sep 2026
34.101.113.107 - - [19/Sep/2026:19:42:56 +0200] "GET /.codex/config.toml HTTP/1.1" 444 0 "-" "crusad ...
show more
34.101.113.107 - - [19/Sep/2026:19:42:56 +0200] "GET /.codex/config.toml HTTP/1.1" 444 0 "-" "crusader-worker/1.0"
34.101.113.107 - - [19/Sep/2026:19:42:56 +0200] "GET /.codex/auth.json HTTP/1.1" 444 0 "-" "crusader-worker/1.0"
34.101.113.107 - - [19/Sep/2026:19:42:56 +0200] "GET /.claude/credentials.json HTTP/1.1" 444 0 "-" "crusader-worker/1.0"
34.101.113.107 - - [19/Sep/2026:19:42:56 +0200] "GET /.claude/settings.json HTTP/1.1" 444 0 "-" "crusader-worker/1.0"
34.101.113.107 - - [19/Sep/2026:19:42:56 +0200] "GET /.claude.json HTTP/1.1" 444 0 "-" "crusader-worker/1.0"
34.101.113.107 - - [19/Sep/2026:19:42:56 +0200] "GET /.codex/config.json HTTP/1.1" 444 0 "-" "crusader-worker/1.0"
34.101.113.107 - - [19/Sep/2026:19:42:56 +0200] "GET /old/.codex/auth.json HTTP/1.1" 444 0 "-" "crusader-worker/1.0"
34.101.113.107 - - [19/Sep/2026:19:42:56 +0200] "GET /.claude/settings.local.json HTTP/1.1" 444 0 "-" "crusader-worker/1.0"
...
show less
Bad Web Bot
Web App Attack
🇨🇦
35.203.123.86
19 Sep 2026
35.203.123.86 - - [19/Sep/2026:19:42:26 +0200] "GET /.codex/config.json HTTP/1.1" 444 0 "-" "crusade ...
show more
35.203.123.86 - - [19/Sep/2026:19:42:26 +0200] "GET /.codex/config.json HTTP/1.1" 444 0 "-" "crusader-worker/1.0"
35.203.123.86 - - [19/Sep/2026:19:42:26 +0200] "GET /.claude.json HTTP/1.1" 444 0 "-" "crusader-worker/1.0"
35.203.123.86 - - [19/Sep/2026:19:42:26 +0200] "GET /.claude/credentials.json HTTP/1.1" 444 0 "-" "crusader-worker/1.0"
35.203.123.86 - - [19/Sep/2026:19:42:26 +0200] "GET /.codex/auth.json HTTP/1.1" 444 0 "-" "crusader-worker/1.0"
35.203.123.86 - - [19/Sep/2026:19:42:26 +0200] "GET /.claude/settings.json HTTP/1.1" 444 0 "-" "crusader-worker/1.0"
35.203.123.86 - - [19/Sep/2026:19:42:26 +0200] "GET /.codex/config.toml HTTP/1.1" 444 0 "-" "crusader-worker/1.0"
35.203.123.86 - - [19/Sep/2026:19:42:26 +0200] "GET /.claude/settings.local.json HTTP/1.1" 444 0 "-" "crusader-worker/1.0"
35.203.123.86 - - [19/Sep/2026:19:42:26 +0200] "GET /.claude/.credentials.json HTTP/1.1" 444 0 "-" "crusader-worker/1.0"
...
show less
Bad Web Bot
Web App Attack
🇹🇼
35.221.198.95
19 Sep 2026
35.221.198.95 - - [19/Sep/2026:15:35:56 +0200] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (W ...
show more
35.221.198.95 - - [19/Sep/2026:15:35:56 +0200] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.221.198.95 - - [19/Sep/2026:15:35:58 +0200] "GET /.env HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.221.198.95 - - [19/Sep/2026:15:35:59 +0200] "GET /.env.local HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.221.198.95 - - [19/Sep/2026:15:36:00 +0200] "GET /.env.production HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.221.198.95 - - [19/Sep/2026:15:36:00 +0200] "GET /.env.staging HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35
...
show less
Bad Web Bot
Web App Attack
🇨🇳
14.103.87.77
19 Sep 2026
2026-09-19T12:59:43.742415+02:00 server sshd[1633416]: Invalid user zy from 14.103.87.77 port 35348
...
show more
2026-09-19T12:59:43.742415+02:00 server sshd[1633416]: Invalid user zy from 14.103.87.77 port 35348
2026-09-19T12:59:43.966249+02:00 server sshd[1633416]: Disconnected from invalid user zy 14.103.87.77 port 35348 [preauth]
2026-09-19T13:08:32.368074+02:00 server sshd[1870587]: Invalid user administrador from 14.103.87.77 port 42068
2026-09-19T13:08:32.587014+02:00 server sshd[1870587]: Disconnected from invalid user administrador 14.103.87.77 port 42068 [preauth]
2026-09-19T13:11:04.460294+02:00 server sshd[1937876]: Connection closed by 14.103.87.77 port 56198 [preauth]
...
show less
Brute-Force
SSH
🇨🇳
49.235.157.138
19 Sep 2026
2026-09-19T11:45:33.363822+02:00 server sshd[3814581]: Disconnected from authenticating user root 49 ...
show more
2026-09-19T11:45:33.363822+02:00 server sshd[3814581]: Disconnected from authenticating user root 49.235.157.138 port 37768 [preauth]
2026-09-19T11:49:25.691440+02:00 server sshd[3919910]: Disconnected from authenticating user root 49.235.157.138 port 58322 [preauth]
2026-09-19T11:50:54.282225+02:00 server sshd[3960089]: Invalid user server from 49.235.157.138 port 42534
2026-09-19T11:50:54.499191+02:00 server sshd[3960089]: Disconnected from invalid user server 49.235.157.138 port 42534 [preauth]
2026-09-19T11:52:24.114229+02:00 server sshd[3999896]: Invalid user va from 49.235.157.138 port 50412
...
show less
Brute-Force
SSH
🇧🇪
34.14.25.5
19 Sep 2026
34.14.25.5 - - [19/Sep/2026:09:17:03 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0 ...
show more
34.14.25.5 - - [19/Sep/2026:09:17:03 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
34.14.25.5 - - [19/Sep/2026:09:17:04 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\xE9\xD79\x8E\xD6\xE3\x12??\xAB\x09\x82\xFE\xE6S\x06\x22\x90KIO\x1B:\x8Dt\xB0-5\xA6\xE9\xCD\xA6 \x92\x19Pc\xA7\xC1\xA4\x99d\xD9\xD7\x0C\x95\xC2y\x04\xFB\x9F\x1F$\x9B\xD2\x19\x84{i\x8D(A\xF9%\xAB\x002\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-"
34.14.25.5 - - [19/Sep/2026:09:17:04 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
34.14.25.5 - - [19/Sep/2026:09:17:09 +0200] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-"
34.14.25.5 - - [19/S
...
show less
Bad Web Bot
Web App Attack