🇺🇸
96.0.160.144
16 Aug 2026
96.0.160.144 - - [15/Aug/2026:22:14:55 -0400] "GET /phpinfo.php HTTP/1.1" 404 1649 "-" "Mozilla/5.0 ...
show more
96.0.160.144 - - [15/Aug/2026:22:14:55 -0400] "GET /phpinfo.php HTTP/1.1" 404 1649 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "-"
96.0.160.144 - - [15/Aug/2026:22:14:57 -0400] "GET /test.php HTTP/1.1" 404 1649 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "-"
96.0.160.144 - - [15/Aug/2026:22:14:58 -0400] "GET /_profiler/phpinfo HTTP/1.1" 404 1649 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "-"
96.0.160.144 - - [15/Aug/2026:22:15:00 -0400] "GET /.env/.env.bak HTTP/1.1" 404 1649 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" "-"
96.0.160.144 - - [15/Aug/2026:22:15:04 -0400] "GET /index.php HTTP/1.1" 404 1649 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gec
...
show less
Web App Attack
🇺🇸
20.102.65.165
15 Aug 2026
20.102.65.165 - - [15/Aug/2026:06:19:31 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ...
show more
20.102.65.165 - - [15/Aug/2026:06:19:31 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 1649 "-" "-" "-"
20.102.65.165 - - [15/Aug/2026:06:19:31 -0400] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 1649 "-" "-" "-"
20.102.65.165 - - [15/Aug/2026:06:19:31 -0400] "GET /4PJcpMFsD8B.php HTTP/1.1" 404 1649 "-" "-" "-"
20.102.65.165 - - [15/Aug/2026:06:19:31 -0400] "GET /3PJcpMFsD8B.php HTTP/1.1" 404 1649 "-" "-" "-"
20.102.65.165 - - [15/Aug/2026:06:19:31 -0400] "GET /ano.php HTTP/1.1" 404 1649 "-" "-" "-"
...
show less
Web App Attack
🇺🇸
34.26.30.4
15 Aug 2026
2026/08/15 00:34:05 [error] 374503#374503: *26905 limiting requests, excess: 5.959 by zone "rate_lim ...
show more
2026/08/15 00:34:05 [error] 374503#374503: *26905 limiting requests, excess: 5.959 by zone "rate_limit", client: 34.26.30.4, server: kc0zhq.com, request: "GET /dashboard HTTP/2.0", host: "www.kc0zhq.com"
2026/08/15 00:34:05 [error] 374503#374503: *26905 limiting requests, excess: 5.957 by zone "rate_limit", client: 34.26.30.4, server: kc0zhq.com, request: "GET /my HTTP/2.0", host: "www.kc0zhq.com"
2026/08/15 00:34:05 [error] 374503#374503: *26905 limiting requests, excess: 5.956 by zone "rate_limit", client: 34.26.30.4, server: kc0zhq.com, request: "GET /signin HTTP/2.0", host: "www.kc0zhq.com"
2026/08/15 00:34:05 [error] 374503#374503: *26905 limiting requests, excess: 5.954 by zone "rate_limit", client: 34.26.30.4, server: kc0zhq.com, request: "GET /z9x8c7v6b5-debug-trigger-www.kc0zhq.com HTTP/2.0", host: "www.kc0zhq.com"
2026/08/15 00:34:05 [error] 374503#374503: *26905 limiting requests, excess: 5.951 by zone "rate_limit", client: 34.26.30.4, server: kc0zhq.com, request: "GET /logi
...
show less
DDoS Attack
🇧🇪
34.77.200.216
15 Aug 2026
34.77.200.216 - - [15/Aug/2026:00:03:23 -0400] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\xE9\x99 ...
show more
34.77.200.216 - - [15/Aug/2026:00:03:23 -0400] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\xE9\x99\xA2/}G\xD7\xDD^\x9A\xDA\x9D\x950O'6\x19z\xC9;\xA3\xDF\xA4\xA7\xE0u}<\x0Fw\x05 d-g}\x98\xA1\x0EP\x04g\x93\x17)\x951\xC70dm;\x17[\xDC\x0B\xFA\x18*\xB7\xE0\xFC\xB4\xAE\x002\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-" "-"
34.77.200.216 - - [15/Aug/2026:00:03:28 -0400] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-" "-"
34.77.200.216 - - [15/Aug/2026:00:03:28 -0400] "\x8B\x98M\x09\xF8a5C\x8Dr\xBF\xEC\xD0\xB3\x192\xBF#1\xCFO\xA5\xBA^\xBFd\x9A\x00Oh\x1F\x96\xCA\xA7\x0C\xD0-\x99\x15?\x0B\x8C'Y\xFD\x96\xBEA\xE6\x01\x895\xA2\x04\xF7\xF8\xD1\x85\xB1a\x1D\xD6/C" 400 150 "-" "-" "-"
34.77.200.216 - - [15/Aug/2026:00:04:07 -0400] "\x00\x1E\xDEg\x01\x00\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\
...
show less
Web App Attack
🇧🇪
35.195.245.237
15 Aug 2026
35.195.245.237 - - [14/Aug/2026:23:39:55 -0400] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03N\xF8\x ...
show more
35.195.245.237 - - [14/Aug/2026:23:39:55 -0400] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03N\xF8\xBDtq\x9D\xE9%B~\xE7\x19*\x81@\x0E\xE3\xF1\xB6\x0Fd\xDFW\x1Ft\x91\x07\xE7X\xA2\xCF{ \xCD\xEC\x99\xA0\xCE%@le\xD3\xF6\xA1\xB2~2\xB8D\xBC\x0E\xCDs\x8E\xFFv\x05\x1A\x03\x8Fx\x87\xE9)\x002\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-" "-"
35.195.245.237 - - [14/Aug/2026:23:40:00 -0400] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-" "-"
35.195.245.237 - - [14/Aug/2026:23:40:00 -0400] "\xA6\xE2\x10\xBBE\x08-\x03\x14\xED\xFD[\xFA\x86\xA2\x19\x9B\xF2\x11\xFALB\xC2\x1C6\x0B\x80\x05\x8A\xA1\x1C=vst\x17\xE0\x00\x8F\xBCW\x17\xA1\xB3D\x15V\x94\xC1\x89\xAFu\xEA\xF3K`\xBE\x0F~\xB0\x17\xC8" 400 150 "-" "-" "-"
35.195.245.237 - - [14/Aug/2026:23:40:39 -0400] "\x00\x1E\xB1\xB8\x01\x00\x00\x01\x00\x00\x00\x00\x00\x00\x07versio
...
show less
Web App Attack
🇧🇪
104.155.113.90
15 Aug 2026
104.155.113.90 - - [14/Aug/2026:23:25:50 -0400] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03H\x05a\ ...
show more
104.155.113.90 - - [14/Aug/2026:23:25:50 -0400] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03H\x05a\xA9\xAA\xFE/\x0B^\xF7r(\xEBd'\x00O\xC1\xA3\xBC4-\x22b\xFE\xCF\x9D\xD5<{H\xD8 <\xEE\xB0U&\x5C5y\xBE\xD7\xB5G\x8DuTBk\x0FK\xB81`m\x10\xC7n\x83P\x17O\x0E\x87\x002\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-" "-"
104.155.113.90 - - [14/Aug/2026:23:25:56 -0400] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-" "-"
104.155.113.90 - - [14/Aug/2026:23:25:57 -0400] "\x8F!p\x14\x81l-;u\x07\xD7n\x92\xF7\x813(F*\xF5\x98\x12\xA9[\x9F\x01\xB8wT5_I1u\x90%Gus4g\x0B \x9C\xFB %\x8F|`%B;\x0B+R\xFD\xEFP\x85\x5C'\x82" 400 150 "-" "-" "-"
104.155.113.90 - - [14/Aug/2026:23:26:16 -0400] "\x00\x1E\xD3$\x01\x00\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03" 400 150 "-" "-" "-"
104.155.113.90 - - [14/Aug/2026
...
show less
Web App Attack
🇺🇸
138.68.9.94
15 Aug 2026
14-Aug-2026 22:49:17.303 client @0x7ff744e7e7e8 138.68.9.94#17096 (darksoulz.net): view external: zo ...
show more
14-Aug-2026 22:49:17.303 client @0x7ff744e7e7e8 138.68.9.94#17096 (darksoulz.net): view external: zone transfer 'darksoulz.net/AXFR/IN' denied
...
show less
Hacking
🇨🇦
146.190.245.170
15 Aug 2026
14-Aug-2026 22:43:40.782 client @0x7ff73c11cb78 146.190.245.170#42492 (kc0zhq.com): view external: z ...
show more
14-Aug-2026 22:43:40.782 client @0x7ff73c11cb78 146.190.245.170#42492 (kc0zhq.com): view external: zone transfer 'kc0zhq.com/AXFR/IN' denied
...
show less
Hacking
🇺🇸
20.65.105.233
14 Aug 2026
20.65.105.233 - - [14/Aug/2026:17:19:44 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ...
show more
20.65.105.233 - - [14/Aug/2026:17:19:44 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 1649 "-" "-" "-"
20.65.105.233 - - [14/Aug/2026:17:19:44 -0400] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 1649 "-" "-" "-"
20.65.105.233 - - [14/Aug/2026:17:19:44 -0400] "GET /class.php HTTP/1.1" 404 1649 "-" "-" "-"
20.65.105.233 - - [14/Aug/2026:17:19:44 -0400] "GET /lm13.php HTTP/1.1" 404 1649 "-" "-" "-"
20.65.105.233 - - [14/Aug/2026:17:19:44 -0400] "GET /1aa.php HTTP/1.1" 404 1649 "-" "-" "-"
...
show less
Web App Attack
🇭🇰
47.239.55.74
14 Aug 2026
47.239.55.74 - - [14/Aug/2026:11:28:06 -0400] "\x16\x03\x01\x00\xEF\x01\x00\x00\xEB\x03\x03B\x87/\x9 ...
show more
47.239.55.74 - - [14/Aug/2026:11:28:06 -0400] "\x16\x03\x01\x00\xEF\x01\x00\x00\xEB\x03\x03B\x87/\x98\xB0@|\xFF\x00-\x10\x11\xEA\xA2V\x16#&f\xE0\xF8D0\x869\xF4\x1A\xF9\xA9\x9E`V \x13^\xA6\x11\x8D\xE8\x5C\x0F+k\xC7U\xCC\xBE![\x04\x1Cp\xC4\xD7\x18m%\xEA\x89\xD8\xB1\xF5\x18\xACg\x00\x14\x13\x02\x13\x01\x13\x03\xC0,\xC0+\xCC\xA9\xC00\xC0/\xCC\xA8\x00\xFF\x01\x00\x00\x8E\x00-\x00\x02\x01\x01\x003\x00&\x00$\x00\x1D\x00 \xCE\x22\xF7p$8\xFD\xEFG\xE3\xD2\xDB<\xFD\x81G\xCDR\xA6\xE0\xAF\x0B\xF4\xFA\xEF%\x9F\x86tHo" 400 150 "-" "-" "-"
47.239.55.74 - - [14/Aug/2026:11:28:06 -0400] "\x16\x03\x01\x00\xEF\x01\x00\x00\xEB\x03\x03\x8A\x04`d\xBD(,E\xC1!B\x9D&l\xAE\x85L3\xA5(h\xA3A\x01\xE7<\xBD\xA6\xE90q\x03 \xB4.-\xD2M\xB44\x87#\xB2\x22i6\x11\x87+\xDED9B\xC2\x12\x87\x19\xC0\xEE\xCFq3v\xBEt\x00\x14\x13\x02\x13\x01\x13\x03\xC0,\xC0+\xCC\xA9\xC00\xC0/\xCC\xA8\x00\xFF\x01\x00\x00\x8E\x003\x00&\x00$\x00\x1D\x00 \xECk\xAA\x1C\xB7\x97\xF1wE=\x08\x22U\xD7\x01k\xB2*\x1A\xED\x89E\x86^.\xF7\xFAM\xA6" 400 150 "-" "
...
show less
Web App Attack
🇺🇸
216.180.246.142
14 Aug 2026
216.180.246.142 - - [14/Aug/2026:09:46:16 -0400] "GET / HTTP/1.1" 400 248 "-" "Mozilla/5.0 (compatib ...
show more
216.180.246.142 - - [14/Aug/2026:09:46:16 -0400] "GET / HTTP/1.1" 400 248 "-" "Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)" "-"
216.180.246.142 - - [14/Aug/2026:09:46:25 -0400] "GET /manage/account/login HTTP/1.1" 400 248 "-" "Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)" "-"
216.180.246.142 - - [14/Aug/2026:09:46:25 -0400] "GET /admin/index.html HTTP/1.1" 400 248 "-" "Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)" "-"
216.180.246.142 - - [14/Aug/2026:09:46:26 -0400] "GET /index.html HTTP/1.1" 400 248 "-" "Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)" "-"
216.180.246.142 - - [14/Aug/2026:09:46:26 -0400] "GET /+CSCOE+/logon.html HTTP/1.1" 400 248 "-" "Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)" "-"
216.180.246.142 - - [14/Aug/2026:09:46:27 -0400] "GET /cgi-bin/login.cgi HTTP/1.1" 400 248 "-" "Mozil
...
show less
Web App Attack
🇧🇪
34.76.86.212
14 Aug 2026
34.76.86.212 - - [14/Aug/2026:00:43:20 -0400] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x033\xC9Ty\x ...
show more
34.76.86.212 - - [14/Aug/2026:00:43:20 -0400] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x033\xC9Ty\x9C\xA8^\x1B\x97\x000A\xBE\xB7\x9ES<\xC1C\x01S\x08W2\x22(\xD7&'\xB6\x17\xBC }\xA4u\x06\x11&f\x159\xC76\xA2 \xEC\xAA\xF7QOXp.\xAEzT\xE2\xD6\x0F\x9Ad\xEE0\x05\x002\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-" "-"
34.76.86.212 - - [14/Aug/2026:00:43:26 -0400] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-" "-"
34.76.86.212 - - [14/Aug/2026:00:43:26 -0400] "\xB6\xEBn\xC4-\xC1\xF5v\xE6\xC6\xBE\xA2}\xA7\x03" 400 150 "-" "-" "-"
34.76.86.212 - - [14/Aug/2026:00:44:05 -0400] "\x00\x1Em\xC3\x01\x00\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03" 400 150 "-" "-" "-"
34.76.86.212 - - [14/Aug/2026:00:44:15 -0400] "\x03\x00\x00\x13\x0E\xE0\x00\x00\x00\x00\x00\x01\x00\x08\x00\x0B\x00\x00\x00" 400 1
...
show less
Web App Attack
🇧🇪
207.175.225.112
14 Aug 2026
207.175.225.112 - - [14/Aug/2026:00:20:02 -0400] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03C\x1A\ ...
show more
207.175.225.112 - - [14/Aug/2026:00:20:02 -0400] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03C\x1A\xFF\x85\xE38\xA2\x86\xE4\xA3\x1A\xBBF\x9B\xB0\xF4GM\xD6CQ\x92\x99\x01h\x92\x19q\xBF\xE6\xCB\x90 \x09f\xB5u\x08\xE1\x17\xE0\x9F\xC6\xD2\xA3V\xD8\xA5\xA5\xF2\xBF\xA2\xC2\xF2R" 400 150 "-" "-" "-"
207.175.225.112 - - [14/Aug/2026:00:20:07 -0400] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-" "-"
207.175.225.112 - - [14/Aug/2026:00:20:07 -0400] " \xFC]\x09\xD0\x03\x9E\xC2\x9A&\x0F#\xC9\xEC\xA3\xAC\x00\x9C\x5C\xFAB_wCt\xB9\xB3\x91\xC8J\xC5>\x8D\xD1.\xE8\xDB\xF1\xFD\xDA\x7F\xCDX\xE3\xD5\x0E#\xEE \xE9\x5C\xAB?\x22V\xAA\x8E\xE9\x1B^\x0B&\x13\x02" 400 150 "-" "-" "-"
207.175.225.112 - - [14/Aug/2026:00:20:46 -0400] "\x00\x1E\xFA\x07\x01\x00\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03" 400 150 "-" "-" "-"
207.175.225
...
show less
Web App Attack
🇧🇪
34.14.18.112
14 Aug 2026
34.14.18.112 - - [14/Aug/2026:00:04:59 -0400] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03G}z\xDB\x ...
show more
34.14.18.112 - - [14/Aug/2026:00:04:59 -0400] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03G}z\xDB\x13\x0F\xD4\x82\xBD\xE1\xAA\xA5\x90\xF97,\x85:\xFC]FvE\xFF\xD7ru\xF8\x5C\x5CzY \xDE\xCCL\xD6,\x02\xC6`K\xF6b\x90\x81-\xCB\x9A\x13s\x7F\x9B-xp\xB6\xB4\xC4Ck\x03\x22A\xAA\x002\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-" "-"
34.14.18.112 - - [14/Aug/2026:00:05:04 -0400] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-" "-"
34.14.18.112 - - [14/Aug/2026:00:05:06 -0400] "J\x0C62\xD6:\xF6\xF2/\x04\x13\x84\xD9%\xF6D1x\x16\x9AV\x08\xF4\x03Z\xA2N\x14\xD3e\x8D\x92\xEC\x82Vr=\xD9\xD5Q\x00\xAA\xF2\x8CV\x93\x8A']\x13\x8EX\xA4j\x88\xEA\x01\xD3" 400 150 "-" "-" "-"
34.14.18.112 - - [14/Aug/2026:00:05:26 -0400] "\x00\x1E\x82\xF7\x01\x00\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03" 400 150 "-" "-" "
...
show less
Web App Attack
🇩🇪
164.92.174.66
13 Aug 2026
164.92.174.66 - - [13/Aug/2026:13:35:18 -0400] "\x16\x03\x01\x02\x00\x01\x00\x01\xFC\x03\x03;\x9D\xE ...
show more
164.92.174.66 - - [13/Aug/2026:13:35:18 -0400] "\x16\x03\x01\x02\x00\x01\x00\x01\xFC\x03\x03;\x9D\xE7\xA4N\x01\x00\x10\x96\x92E\xFF\xCDFG\x22\x82\xCC\x91w\x09\xEF\xC2\x8A\xD1\xFD:`\xA0^\xBA\xB9 \xF6\xCA" 400 150 "-" "-" "-"
164.92.174.66 - - [13/Aug/2026:13:35:18 -0400] "\x16\x03\x01\x02\x00\x01\x00\x01\xFC\x03\x03\xA8\xCF\xEBf\xF8\xD3\xEDM\xC0cR\x11\xABc\x96\xB1\xDC\xBC\xFB\xD0W\xA0\x12\xF0[\x8D\xD2\xF9\xAFA\x17\x05 :=[\xC1\x9B1\xE3\xA9\x14\xED\xEA\xC5l\x22\xA4C\x8Ct,\xA8\xD0T7\xE6B\x85>\xEDs\x8D1\xD8\x00\x96\x13\x02\x13\x03\x13\x01\x003\x009\x005\x00/\xC0,\xC00\x00\xA3\x00\x9F\xCC\xA9\xCC\xA8\xCC\xAA\xC0\xAF\xC0\xAD\xC0\xA3\xC0\x9F\xC0]\xC0a\xC0W\xC0S\xC0+\xC0/\x00\xA2\x00\x9E\xC0\xAE\xC0\xAC\xC0\xA2\xC0\x9E\xC0\x5C\xC0`\xC0V\xC0R\xC0$\xC0(\x00k\x00j\xC0s\xC0w\x00\xC4\x00\xC3\xC0#\xC0'\x00g\x00@\xC0r\xC0v\x00\xBE\x00\xBD\xC0" 400 150 "-" "-" "-"
164.92.174.66 - - [13/Aug/2026:13:35:18 -0400] "\x16\x03\x01\x02\x00\x01\x00\x01\xFC\x03\x03\xCD\xF7\xDF\xFA\xB0uN\xEB\xFA\xDB1\x1C\x9F\x1B\
...
show less
Web App Attack
🇧🇪
34.79.146.159
13 Aug 2026
34.79.146.159 - - [13/Aug/2026:03:10:40 -0400] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\xA9t,\x ...
show more
34.79.146.159 - - [13/Aug/2026:03:10:40 -0400] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\xA9t,\xCF\x99\xF9\x22\xB6\xB2k\xF4+\x19h\xB4l\xFCV\x01\xB6\xB5\xB948\x22\xF80\x99\xF1\x93QD \xD3\xF3\x91V\x92\xC9\xB0\xD6U:?mxV\x857\xC0\x22\xEF\x8AGV\xFC\xCE\x83F\xB1mT\x03c\x9B\x002\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-" "-"
34.79.146.159 - - [13/Aug/2026:03:10:45 -0400] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-" "-"
34.79.146.159 - - [13/Aug/2026:03:10:46 -0400] "\x1D\x961\xCEh\xCD\xFF^\x9F\xFF1\xB7\xBC\xBC_\x0CHep\x8BP=\xBB\xDE:\x10\x82e\xE4-f\xDDc^n\xDB \x9D\xC1\xA9\x0F\xE9:@\xFC\xE7v\xD2+!\xF6\xA5!\x93r\xBD\xA5W\x90\x85\x1F8M\xA3" 400 150 "-" "-" "-"
34.79.146.159 - - [13/Aug/2026:03:11:24 -0400] "\x00\x1E\xA3D\x01\x00\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03" 400 150
...
show less
Web App Attack
🇧🇪
207.175.44.249
13 Aug 2026
207.175.44.249 - - [13/Aug/2026:02:43:02 -0400] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\xC3\x9 ...
show more
207.175.44.249 - - [13/Aug/2026:02:43:02 -0400] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\xC3\x9FB\x8C\xABGm\x5C\xED\x11^\xE0\x98\xD8\xEB\xD6\xC95s\xC8v%\x19gV8_\x1F\xB2\x18\xBF\xB9 \xF2a\xEF\x13\xF7\xCD+\x16!\x82\x7F\x95\x9Eb\xCB_\xCE\xD6\xFE`?\x85]\xB4\x08tO" 400 150 "-" "-" "-"
207.175.44.249 - - [13/Aug/2026:02:43:05 -0400] "\x0F\xF8=^\x85\xDFF\x9D~x\xE347Q\x83'\x05\x22\xE9\xEBR\xB3/\x17u5\xDB\xCE\x8E\x06\xF9ke&\xDF\xFF\xDD.\x92:\x11\xA5I2S\xB2\x868)\x87\xE6\xF0.\xB2\xA2HN\xFB?\x8E\x81$ \x1F" 400 150 "-" "-" "-"
207.175.44.249 - - [13/Aug/2026:02:43:07 -0400] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-" "-"
207.175.44.249 - - [13/Aug/2026:02:43:49 -0400] "\x00\x1E\x93\xD1\x01\x00\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03" 400 150 "-" "-" "-"
207.175.44.249 - - [13/Aug/2026:02:43:59 -0400] "\x0
...
show less
Web App Attack
🇧🇪
34.156.126.106
13 Aug 2026
34.156.126.106 - - [13/Aug/2026:02:28:01 -0400] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\x08j)\ ...
show more
34.156.126.106 - - [13/Aug/2026:02:28:01 -0400] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\x08j)\x89\x92=\xD3Qi\xB2" 400 150 "-" "-" "-"
34.156.126.106 - - [13/Aug/2026:02:28:06 -0400] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-" "-"
34.156.126.106 - - [13/Aug/2026:02:28:07 -0400] "T\xE6\x8FK\x82\xB0\xDC\x0FM\xDF" 400 150 "-" "-" "-"
34.156.126.106 - - [13/Aug/2026:02:28:25 -0400] "\x00\x1E\xDA\xC9\x01\x00\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03" 400 150 "-" "-" "-"
34.156.126.106 - - [13/Aug/2026:02:28:30 -0400] "\x03\x00\x00\x13\x0E\xE0\x00\x00\x00\x00\x00\x01\x00\x08\x00\x0B\x00\x00\x00" 400 150 "-" "-" "-"
34.156.126.106 - - [13/Aug/2026:02:28:39 -0400] "\x12\x01\x00X\x00\x00\x01\x00\x00\x00\x1F\x00\x06\x01\x00%\x00\x01\x02\x00&\x00\x01\x03\x00'\x00\x04\x04\x00+\x00\x01\x05\x00,\x00$\xFF\x11\
...
show less
Web App Attack
🇺🇸
34.24.218.21
13 Aug 2026
34.24.218.21 - - [12/Aug/2026:23:23:44 -0400] "GET /@fs/.env?raw?? HTTP/1.1" 404 1649 "-" "Mozilla/5 ...
show more
34.24.218.21 - - [12/Aug/2026:23:23:44 -0400] "GET /@fs/.env?raw?? HTTP/1.1" 404 1649 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" "-"
34.24.218.21 - - [12/Aug/2026:23:23:44 -0400] "GET /@fs/root/.env?raw?? HTTP/1.1" 404 1649 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" "-"
34.24.218.21 - - [12/Aug/2026:23:23:44 -0400] "GET /@fs/src/.env?raw?? HTTP/1.1" 404 1649 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" "-"
34.24.218.21 - - [12/Aug/2026:23:23:44 -0400] "GET /@fs/root/rootkey.csv?raw?? HTTP/1.1" 404 1649 "-" "Mozilla/5.0 (compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" "-"
34.24.218.21 - - [12/Aug/2026:23:23:44 -0400] "GET /@fs/.env.development?raw?? HTTP/1.1" 404 1649 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot
...
show less
Web App Attack
🇺🇸
34.26.45.18
12 Aug 2026
2026/08/12 18:24:09 [error] 374502#374502: *23419 limiting requests, excess: 5.955 by zone "rate_lim ...
show more
2026/08/12 18:24:09 [error] 374502#374502: *23419 limiting requests, excess: 5.955 by zone "rate_limit", client: 34.26.45.18, server: kc0zhq.com, request: "GET /manage HTTP/2.0", host: "kc0zhq.com"
2026/08/12 18:24:09 [error] 374502#374502: *23419 limiting requests, excess: 5.955 by zone "rate_limit", client: 34.26.45.18, server: kc0zhq.com, request: "GET /dashboard HTTP/2.0", host: "kc0zhq.com"
2026/08/12 18:24:09 [error] 374502#374502: *23419 limiting requests, excess: 5.953 by zone "rate_limit", client: 34.26.45.18, server: kc0zhq.com, request: "GET /z9x8c7v6b5-debug-trigger-kc0zhq.com HTTP/2.0", host: "kc0zhq.com"
2026/08/12 18:24:09 [error] 374502#374502: *23419 limiting requests, excess: 5.953 by zone "rate_limit", client: 34.26.45.18, server: kc0zhq.com, request: "GET /signin HTTP/2.0", host: "kc0zhq.com"
2026/08/12 18:24:09 [error] 374502#374502: *23419 limiting requests, excess: 5.952 by zone "rate_limit", client: 34.26.45.18, server: kc0zhq.com, request: "GET /login HTTP/2.0"
...
show less
DDoS Attack
🇧🇪
34.52.225.238
12 Aug 2026
34.52.225.238 - - [12/Aug/2026:05:25:29 -0400] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\xFF\xD1 ...
show more
34.52.225.238 - - [12/Aug/2026:05:25:29 -0400] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\xFF\xD1\xF6\xE8'\x81bb\xB0\xA0h\x86S\xC6U\xF2\xCE\x9C^\xE6\xC2&#\xE2\xDB'\x18O3\xF7nr o\x82\x8F\xDBE\xF9\x1Ci\x9A\x8D{\xA9=\xC9l\xC6}\xC0l\xFF\xE7Yu\x02d/7\x13\xCDa\x5C\x94\x002\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-" "-"
34.52.225.238 - - [12/Aug/2026:05:25:34 -0400] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-" "-"
34.52.225.238 - - [12/Aug/2026:05:25:34 -0400] "\x94\xAC\xE3\xEF\xD6\xB5\xE8\xA0\x99,k9\xDB\x99\x88\x1FL1l\xBC\x833C\xBDf\xBB\x0E\xC6\x97BV\xC1\xF2\x0B\xFA\x09\xBF\xBAG\xB1\xC3T\x0E,mb8\x02\xEB\xADB\xDD:\xFA\xA6\xF2\xDD\xDC\x1A\xE1\xD1\xE9,\x08" 400 150 "-" "-" "-"
34.52.225.238 - - [12/Aug/2026:05:26:12 -0400] "\x00\x1EV\x81\x01\x00\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x1
...
show less
Web App Attack
🇧🇪
34.38.125.46
12 Aug 2026
34.38.125.46 - - [12/Aug/2026:05:01:28 -0400] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03E\xB6\x89 ...
show more
34.38.125.46 - - [12/Aug/2026:05:01:28 -0400] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03E\xB6\x89\x8F\xBD>\x0C\xCA\xF3\xA7s\xF5j=\xF5\xC4\xAF`,\x1B\xC9\x94'\x90S\x9F\xD60uR\x0E\xED \x80^\x93\xFB\xCAB\xEF\xFC\x83\xD0\xD5\x01z\x02v\xB0\xD7\x18\x05\xDD\xC2\xC3M\xF4\xD5\xB8\xA3h\xF4K" 400 150 "-" "-" "-"
34.38.125.46 - - [12/Aug/2026:05:01:33 -0400] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-" "-"
34.38.125.46 - - [12/Aug/2026:05:01:34 -0400] "\xDDFK\xD2" 400 150 "-" "-" "-"
34.38.125.46 - - [12/Aug/2026:05:02:12 -0400] "\x00\x1E\xC9~\x01\x00\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03" 400 150 "-" "-" "-"
34.38.125.46 - - [12/Aug/2026:05:02:22 -0400] "\x03\x00\x00\x13\x0E\xE0\x00\x00\x00\x00\x00\x01\x00\x08\x00\x0B\x00\x00\x00" 400 150 "-" "-" "-"
34.38.125.46 - - [12/Aug/2026:05:02:41 -0400] "\x12\x01\
...
show less
Web App Attack
🇧🇪
34.140.54.37
12 Aug 2026
34.140.54.37 - - [12/Aug/2026:04:49:09 -0400] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\xB71\x14 ...
show more
34.140.54.37 - - [12/Aug/2026:04:49:09 -0400] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\xB71\x14\x8D\xFEhz\xF4\x8FD\xE1\xA9\x03\xB9\xDE\x8B9h\x10^\xA9\x9C\xED\x0C\x9E\xF9oN\x12\x9D\xD6\x0E \xF6\xD0C\xBF\xDA\x94P\x18\x03\x1E\xAD\xED\xF3S[\xAA\x85\xDA\x1A\xC6\x9A\x86[\xB9?0P\xD0\xDF\xDB<'\x002\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-" "-"
34.140.54.37 - - [12/Aug/2026:04:49:14 -0400] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-" "-"
34.140.54.37 - - [12/Aug/2026:04:49:15 -0400] "\xE7\xD2U[\xEC\xE0\x8D\x16\xE1=K\xC3\x89\xE0YL\xBE~\xB0'\xB2\xABk\xBE\x10\x8D\xCC\xB0\x0E2\xDAvL$|\xF2\xF8L`\x17x\xB5\xE3\xB4iZ\x83\xC2\xBAC\xEA\xC8\xC2-\xC8\xF0\xF5;\x072\xE4/\x08\xF5" 400 150 "-" "-" "-"
34.140.54.37 - - [12/Aug/2026:04:49:33 -0400] "\x00\x1E\x85\x9B\x01\x00\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04b
...
show less
Web App Attack
🇺🇸
136.70.131.31
12 Aug 2026
136.70.131.31 - - [11/Aug/2026:23:46:16 -0400] "GET /admin/login HTTP/2.0" 404 1649 "-" "Mozilla/5.0 ...
show more
136.70.131.31 - - [11/Aug/2026:23:46:16 -0400] "GET /admin/login HTTP/2.0" 404 1649 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 OPR/117.0.0.0" "-"
136.70.131.31 - - [11/Aug/2026:23:46:16 -0400] "GET /login HTTP/2.0" 404 1649 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 OPR/117.0.0.0" "-"
136.70.131.31 - - [11/Aug/2026:23:46:16 -0400] "GET /manage HTTP/2.0" 404 1649 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 OPR/117.0.0.0" "-"
136.70.131.31 - - [11/Aug/2026:23:46:16 -0400] "GET /auth/login HTTP/2.0" 404 1649 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 OPR/117.0.0.0" "-"
136.70.131.31 - - [11/Aug/2026:23:46:16 -0400] "GET /signin HTTP/2.0" 404 1649 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0
...
show less
Web App Attack
🇺🇸
35.197.10.131
11 Aug 2026
2026/08/11 15:52:07 [error] 374503#374503: *22034 limiting requests, excess: 5.920 by zone "rate_lim ...
show more
2026/08/11 15:52:07 [error] 374503#374503: *22034 limiting requests, excess: 5.920 by zone "rate_limit", client: 35.197.10.131, server: kc0zhq.com, request: "GET /signin HTTP/2.0", host: "kc0zhq.com"
2026/08/11 15:52:07 [error] 374503#374503: *22034 limiting requests, excess: 5.913 by zone "rate_limit", client: 35.197.10.131, server: kc0zhq.com, request: "GET /wp-json HTTP/2.0", host: "kc0zhq.com"
2026/08/11 15:52:07 [error] 374503#374503: *22034 limiting requests, excess: 5.868 by zone "rate_limit", client: 35.197.10.131, server: kc0zhq.com, request: "GET /login HTTP/2.0", host: "kc0zhq.com"
2026/08/11 15:52:07 [error] 374503#374503: *22034 limiting requests, excess: 5.868 by zone "rate_limit", client: 35.197.10.131, server: kc0zhq.com, request: "GET /user/login HTTP/2.0", host: "kc0zhq.com"
2026/08/11 15:52:07 [error] 374503#374503: *22034 limiting requests, excess: 5.868 by zone "rate_limit", client: 35.197.10.131, server: kc0zhq.com, request: "GET /rclone.conf HTTP/2.0", host: "kc0
...
show less
DDoS Attack