|
🇺🇸
34.11.11.48
|
|
34.11.11.48 - - [11/Aug/2026:12:15:49 -0400] "GET /wp-json HTTP/2.0" 404 1649 "-" "Mozilla/5.0 (comp ...
show more
34.11.11.48 - - [11/Aug/2026:12:15:49 -0400] "GET /wp-json HTTP/2.0" 404 1649 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" "-"
34.11.11.48 - - [11/Aug/2026:12:15:49 -0400] "GET /dashboard HTTP/2.0" 404 1649 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 OPR/117.0.0.0" "-"
34.11.11.48 - - [11/Aug/2026:12:15:49 -0400] "GET /auth/login HTTP/2.0" 404 1649 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 OPR/117.0.0.0" "-"
34.11.11.48 - - [11/Aug/2026:12:15:49 -0400] "GET /admin HTTP/2.0" 404 1649 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 OPR/117.0.0.0" "-"
34.11.11.48 - - [11/Aug/2026:12:15:49 -0400] "GET /manage HTTP/2.0" 404 1649 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 OPR/117.0.0.0" "-"
...
show less
|
Web App Attack
|
|
🇧🇪
34.76.249.222
|
|
34.76.249.222 - - [11/Aug/2026:02:03:35 -0400] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\x03\x04 ...
show more
34.76.249.222 - - [11/Aug/2026:02:03:35 -0400] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\x03\x04\xA1\xF3\x9BS\xD4!qH\xD0\xEB\xBC" 400 150 "-" "-" "-"
34.76.249.222 - - [11/Aug/2026:02:03:40 -0400] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-" "-"
34.76.249.222 - - [11/Aug/2026:02:03:40 -0400] "\xEF1;\xB1\xE6_o\xAB\x13\xBB\xA5\xF1\x8Bm<\xCEcu8|p\x95D\xACDax\xA9\xF4k\x11\x93\x95\xB0I<\xF8{F\x03\xA72\x22\xC0\x91\xBE\xF6_ex.\xF4\xF2\xC8\x80\x83\xE4\x04cg\x0B\xDE\xB5\xA0" 400 150 "-" "-" "-"
34.76.249.222 - - [11/Aug/2026:02:04:19 -0400] "\x00\x1E\xA3s\x01\x00\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03" 400 150 "-" "-" "-"
34.76.249.222 - - [11/Aug/2026:02:04:28 -0400] "\x03\x00\x00\x13\x0E\xE0\x00\x00\x00\x00\x00\x01\x00\x08\x00\x0B\x00\x00\x00" 400 150 "-" "-" "-"
34.76.249.222 - - [11/Aug/2026:02:04:4
...
show less
|
Web App Attack
|
|
🇧🇪
34.76.138.140
|
|
34.76.138.140 - - [11/Aug/2026:01:39:11 -0400] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\xB3\xAD ...
show more
34.76.138.140 - - [11/Aug/2026:01:39:11 -0400] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\xB3\xAD\xDD\x1B\xFFt3}\x8E\x0C\x06\xCB\x85\x0F\x11\x12\xD7\xA9\x91{\xD0\x85!s\xB9\x9F\xF8\xE9\x89\x8AE\xBE E\xB7\xE7\xFET\x09\xB9\xFF-j<\x943\x0EZ\xEE\x9B\x1A\x95\xE9\x02\x02\x0B\xB6aa}\x99\xC7\xD3-\xC4\x002\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-" "-"
34.76.138.140 - - [11/Aug/2026:01:39:16 -0400] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-" "-"
34.76.138.140 - - [11/Aug/2026:01:39:16 -0400] "\xC4\xAC\x9C\xDB\x19\xB0^^\xEA\x1F\x8E8\x90V\x95x\xA1\x83V\xE5\xB7z\xE4\x00D}i\x08\xC8/\xB0^\xA3~aa\xC5rO\x1D\x84\x5C\xB1erg&/\xAEc\x12\xA5\x1A\xEAa\xA3?\xEBP\x0C\x16\xBD\xB3E" 400 150 "-" "-" "-"
34.76.138.140 - - [11/Aug/2026:01:39:53 -0400] "\x00\x1E\xD92\x01\x00\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x
...
show less
|
Web App Attack
|
|
🇧🇪
35.195.151.19
|
|
35.195.151.19 - - [11/Aug/2026:01:19:22 -0400] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\xB1H\xB ...
show more
35.195.151.19 - - [11/Aug/2026:01:19:22 -0400] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\xB1H\xB8u\x83" 400 150 "-" "-" "-"
35.195.151.19 - - [11/Aug/2026:01:19:28 -0400] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-" "-"
35.195.151.19 - - [11/Aug/2026:01:19:29 -0400] "\xE6\xC1\x1B\x5C2a\x8F[@\x9F\xBD\xB0\xE6\x22\x89\xFAM\x93Q\x96\xFC\x9B\x19\x8E\xA8fl\xC0D\x1D^T\xA3\x96\x13Q\xD0\xB3L\xD0\xF2\x04\x184G\xB6\xF0j{\x10\xBF\xAE\xA9\x89\xC9{\xB3\xB9'GmI\xACc" 400 150 "-" "-" "-"
35.195.151.19 - - [11/Aug/2026:01:19:49 -0400] "\x00\x1E\xA6\xDA\x01\x00\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03" 400 150 "-" "-" "-"
35.195.151.19 - - [11/Aug/2026:01:19:54 -0400] "\x03\x00\x00\x13\x0E\xE0\x00\x00\x00\x00\x00\x01\x00\x08\x00\x0B\x00\x00\x00" 400 150 "-" "-" "-"
35.195.151.19 - - [11/Aug/2026:01:20:05 -0400] "\
...
show less
|
Web App Attack
|
|
🇺🇸
8.228.100.206
|
|
8.228.100.206 - - [10/Aug/2026:15:46:10 -0400] "HEAD /wordpress/ HTTP/2.0" 404 0 "http://kc0zhq.com/ ...
show more
8.228.100.206 - - [10/Aug/2026:15:46:10 -0400] "HEAD /wordpress/ HTTP/2.0" 404 0 "http://kc0zhq.com/wordpress/" "Mozilla/5.0 (Linux; Android 13; Infinix X688B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.48 Mobile Safari/537.36" "-"
8.228.100.206 - - [10/Aug/2026:15:46:10 -0400] "HEAD /backup/ HTTP/2.0" 404 0 "http://kc0zhq.com/backup/" "Mozilla/5.0 (Linux; Android 11; moto g31) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.96 Mobile Safari/537.36" "-"
8.228.100.206 - - [10/Aug/2026:15:46:10 -0400] "HEAD /wp/ HTTP/2.0" 404 0 "http://kc0zhq.com/wp/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" "-"
8.228.100.206 - - [10/Aug/2026:15:46:10 -0400] "HEAD /blog/ HTTP/2.0" 404 0 "http://kc0zhq.com/blog/" "Mozilla/5.0 (Linux; Android 11; RMX2195) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.210 Mobile Safari/537.36 OPR/75.2.3995.72468" "-"
8.228.100.206 - - [10/Aug/2026:15:46:10 -0400] "H
...
show less
|
Web App Attack
|
|
🇺🇸
34.23.182.0
|
|
34.23.182.0 - - [10/Aug/2026:14:17:36 -0400] "GET /__/firebase/init.json HTTP/2.0" 404 1649 "-" "ant ...
show more
34.23.182.0 - - [10/Aug/2026:14:17:36 -0400] "GET /__/firebase/init.json HTTP/2.0" 404 1649 "-" "anthropic-ai" "-"
34.23.182.0 - - [10/Aug/2026:14:17:36 -0400] "GET /signin HTTP/2.0" 404 1649 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 OPR/117.0.0.0" "-"
34.23.182.0 - - [10/Aug/2026:14:17:36 -0400] "GET /config.json HTTP/2.0" 404 1649 "-" "anthropic-ai" "-"
34.23.182.0 - - [10/Aug/2026:14:17:36 -0400] "GET /auth/login HTTP/2.0" 404 1649 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 OPR/117.0.0.0" "-"
34.23.182.0 - - [10/Aug/2026:14:17:36 -0400] "GET /login HTTP/2.0" 404 1649 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 OPR/117.0.0.0" "-"
...
show less
|
Web App Attack
|
|
🇧🇪
34.77.158.1
|
|
34.77.158.1 - - [10/Aug/2026:02:52:55 -0400] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\x19e/!y\x ...
show more
34.77.158.1 - - [10/Aug/2026:02:52:55 -0400] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\x19e/!y\x1F\x03o4^\xE2g\x90\xD7\x9C\xD9N\x92\xD3\xA4\xAA\x8BR\xAC`\xCD\xAA5\xFA\xBC\xA4\x06 \xA3t*\xD4QJ\x06\xC9\x06gO\x99\xA8D7b\xE8\x9BN\x87\x97\x03\xE5\xD0\xAC_\x1A\x07L\x0E\xA7\xEB\x002\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-" "-"
34.77.158.1 - - [10/Aug/2026:02:53:00 -0400] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-" "-"
34.77.158.1 - - [10/Aug/2026:02:53:01 -0400] ")N\xF8=\xA8\x91" 400 150 "-" "-" "-"
34.77.158.1 - - [10/Aug/2026:02:53:39 -0400] "\x00\x1E\xD1S\x01\x00\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03" 400 150 "-" "-" "-"
34.77.158.1 - - [10/Aug/2026:02:53:49 -0400] "\x03\x00\x00\x13\x0E\xE0\x00\x00\x00\x00\x00\x01\x00\x08\x00\x0B\x00\x00\x00" 400 150 "-" "-" "-"
34
...
show less
|
Web App Attack
|
|
🇺🇸
34.11.89.252
|
|
34.11.89.252 - - [10/Aug/2026:02:53:20 -0400] "GET /z9x8c7v6b5-debug-trigger-kc0zhq.com HTTP/2.0" 40 ...
show more
34.11.89.252 - - [10/Aug/2026:02:53:20 -0400] "GET /z9x8c7v6b5-debug-trigger-kc0zhq.com HTTP/2.0" 404 1649 "-" "anthropic-ai" "-"
34.11.89.252 - - [10/Aug/2026:02:53:20 -0400] "GET /rclone.conf HTTP/2.0" 404 1649 "-" "anthropic-ai" "-"
34.11.89.252 - - [10/Aug/2026:02:53:20 -0400] "GET /.env.bak HTTP/2.0" 404 1649 "-" "anthropic-ai" "-"
34.11.89.252 - - [10/Aug/2026:02:53:20 -0400] "GET /user/login HTTP/2.0" 404 1649 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 OPR/117.0.0.0" "-"
34.11.89.252 - - [10/Aug/2026:02:53:20 -0400] "GET /.env.local HTTP/2.0" 404 1649 "-" "anthropic-ai" "-"
...
show less
|
Web App Attack
|
|
🇧🇪
34.53.231.155
|
|
34.53.231.155 - - [10/Aug/2026:02:28:34 -0400] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\xC5\x06 ...
show more
34.53.231.155 - - [10/Aug/2026:02:28:34 -0400] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\xC5\x06\xDC\x07\xE9[\x16\x80" 400 150 "-" "-" "-"
34.53.231.155 - - [10/Aug/2026:02:28:39 -0400] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-" "-"
34.53.231.155 - - [10/Aug/2026:02:28:40 -0400] "\x1B\xD6\xA7\xD5\xEE\x03P\xBE\xD7\xC9?\xC3\xCB\xD4v\xE9\x00o\xD5T\xED2\xA1\xF1w\xEC\x95\x1E'x\xEE\x90\xD2\x19p\xFE#\xA7ZgL*\x96\x11\xCA\xB1\xD7\xA1\x16\x11\xE9\xFE$\x976:\xDC\xD6E\xEB\xC9\x98*G" 400 150 "-" "-" "-"
34.53.231.155 - - [10/Aug/2026:02:29:18 -0400] "\x00\x1E\x8CC\x01\x00\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03" 400 150 "-" "-" "-"
34.53.231.155 - - [10/Aug/2026:02:29:28 -0400] "\x03\x00\x00\x13\x0E\xE0\x00\x00\x00\x00\x00\x01\x00\x08\x00\x0B\x00\x00\x00" 400 150 "-" "-" "-"
34.53.231.155 - - [10/Aug/2026:
...
show less
|
Web App Attack
|
|
🇧🇪
34.52.154.112
|
|
34.52.154.112 - - [10/Aug/2026:02:12:33 -0400] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03C' *\xC5 ...
show more
34.52.154.112 - - [10/Aug/2026:02:12:33 -0400] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03C' *\xC5\x90\xA35&\xD1%sk\xDE\x16W<\xD4\x02\xB6\xEF-\xE8o\xB0O!\xE6ey\xF7S \xFEN\xFB\xD5\xCF\xFAZ\xEF\x1A\xB3\x98" 400 150 "-" "-" "-"
34.52.154.112 - - [10/Aug/2026:02:12:38 -0400] "2\x8A\x02\xFF\x81\xC8nB\xA8\x99\x96\xF7\x08\x03\x9A\x819\xC1\xDD\x0E\x93\x08\xB2\xA5/\x8E\xD9\x9Dt\x04)C\x1Bm\xB1\x01[j\xFB\xA8\xBC\x14\xA7F\xDBqGq\xAA\xA0\x89\xD1\xFA\xB5\xFA5\xAA '/" 400 150 "-" "-" "-"
34.52.154.112 - - [10/Aug/2026:02:12:38 -0400] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-" "-"
34.52.154.112 - - [10/Aug/2026:02:12:57 -0400] "\x00\x1E\xC6" 400 150 "-" "-" "-"
34.52.154.112 - - [10/Aug/2026:02:13:00 -0400] "\x03\x00\x00\x13\x0E\xE0\x00\x00\x00\x00\x00\x01\x00\x08\x00\x0B\x00\x00\x00" 400 150 "-" "-" "-"
34.52.154.112 - - [10/Aug/2026:02:13:
...
show less
|
Web App Attack
|
|
🇺🇸
8.229.8.118
|
|
8.229.8.118 - - [09/Aug/2026:16:42:20 -0400] "HEAD /wordpress/ HTTP/2.0" 404 0 "http://kc0zhq.com/wo ...
show more
8.229.8.118 - - [09/Aug/2026:16:42:20 -0400] "HEAD /wordpress/ HTTP/2.0" 404 0 "http://kc0zhq.com/wordpress/" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edg/128.0.2790.25 Chrome/128.0.6540.22 Safari/537.36" "-"
8.229.8.118 - - [09/Aug/2026:16:42:20 -0400] "HEAD /blog/ HTTP/2.0" 404 0 "http://kc0zhq.com/blog/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.76 Safari/537.36" "-"
8.229.8.118 - - [09/Aug/2026:16:42:20 -0400] "HEAD /backup/ HTTP/2.0" 404 0 "http://kc0zhq.com/backup/" "Mozilla/5.0 (Linux; Android 10; vivo 1904) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.60 Mobile Safari/537.36" "-"
8.229.8.118 - - [09/Aug/2026:16:42:20 -0400] "HEAD /wp/ HTTP/2.0" 404 0 "http://kc0zhq.com/wp/" "Mozilla/5.0 (Linux; Android 14; OnePlus 12) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.102 Mobile Safari/537.36" "-"
8.229.8.118 - - [09/Aug/2026:16:42:20 -0400] "HEAD /new/ HTTP/2.0" 404 0 "ht
...
show less
|
Web App Attack
|
|
🇧🇪
34.38.96.213
|
|
34.38.96.213 - - [09/Aug/2026:02:53:23 -0400] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\x81`8Z,\ ...
show more
34.38.96.213 - - [09/Aug/2026:02:53:23 -0400] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\x81`8Z,\x5C\xD1\xD4\x03\x1D\x04\xE1Q\x07\x98%\x07A\xC8\x8FT\xAE" 400 150 "-" "-" "-"
34.38.96.213 - - [09/Aug/2026:02:53:29 -0400] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-" "-"
34.38.96.213 - - [09/Aug/2026:02:53:29 -0400] "\xE1\x8D;1\x9A\x86\xD9\x95*\xF0)N\xD9\xD2\xAF\xCE\x7F/]\xE4\x11\xAE\x8B\x87\xAB\xBE\x0C\x01\xCA\xF1`A" 400 150 "-" "-" "-"
34.38.96.213 - - [09/Aug/2026:02:54:07 -0400] "\x00\x1E\x00\x06\x01\x00\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03" 400 150 "-" "-" "-"
34.38.96.213 - - [09/Aug/2026:02:54:17 -0400] "\x03\x00\x00\x13\x0E\xE0\x00\x00\x00\x00\x00\x01\x00\x08\x00\x0B\x00\x00\x00" 400 150 "-" "-" "-"
34.38.96.213 - - [09/Aug/2026:02:54:36 -0400] "\x12\x01\x00X\x00\x00\x01\x00\x00\x00\x1F\x
...
show less
|
Web App Attack
|
|
🇧🇪
34.52.236.253
|
|
34.52.236.253 - - [09/Aug/2026:02:29:37 -0400] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\xED<\x1 ...
show more
34.52.236.253 - - [09/Aug/2026:02:29:37 -0400] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\xED<\x14\x92bp\x19!I\xB1\x13\xCDL\x97}@\xD9\x80z\xF1\xA3J]9\xFA\x07\xA1\xC3\x22\x1D'\xCE \x1B\xF9\x0B\x9F\xD5#\x88&0\xEF\x1D\x8ER/}\xAA\xC3v\xEC8\x94\x1F\xD3\x85\xA5O\x22\xFE\xCD#\xF0Y\x002\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-" "-"
34.52.236.253 - - [09/Aug/2026:02:29:42 -0400] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-" "-"
34.52.236.253 - - [09/Aug/2026:02:29:43 -0400] "\x83na~\x00\x13\x01\xAE\xBD\xF1\xE9\x00#\x04\x84\xAC\xF1#\xADT\x1B\x01O\xCF\xD5N\x0F~\xE0\x11\x07\x97dl\x9A\x93E\xE3w\x17\x8E\xB5\x9B\xC0< \xF6\x5C;\xA6 *\x9F3\x11\x7Fd\xC7\x8Cg\xDC\x00>\x05" 400 150 "-" "-" "-"
34.52.236.253 - - [09/Aug/2026:02:30:21 -0400] "\x00\x1E\xE5o\x01\x00\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\
...
show less
|
Web App Attack
|
|
🇧🇪
34.76.60.26
|
|
34.76.60.26 - - [09/Aug/2026:02:12:47 -0400] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\x161\xEAJ ...
show more
34.76.60.26 - - [09/Aug/2026:02:12:47 -0400] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\x161\xEAJ\xE2\xE1q{j\xC6\x7F\x14\xF5\xF7y\x0F\xE49\x0C2'2\xF5yg\xD0\xC7\xC2\xC6G\x0E\x9F D\xC4\xC8t%\x8C\x8C\xD9\x19\x9B4\xEF\xCA{\x01l\xD0]\x07\xF4\x0Bxv\x12\x19\x15\xB1\xA6\xFFV\x91\xB5\x002\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-" "-"
34.76.60.26 - - [09/Aug/2026:02:12:52 -0400] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-" "-"
34.76.60.26 - - [09/Aug/2026:02:12:52 -0400] "\x11L*(\x92\xD8h\x95vVD+t7\xA0\x01\x00<\x92\x8AR5\xACP,\xF0]\x0C\xEA\xCD#u(F}M\xD8U\xBE\x93y=\x94\x96P\x1F3\xF3|p\xA6\xB9q]\x91_\xE1.\xE6" 400 150 "-" "-" "-"
34.76.60.26 - - [09/Aug/2026:02:13:11 -0400] "\x00\x1E\xA7?\x01\x00\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03" 400 150 "-" "-" "-"
34.76.60.26 - - [09/A
...
show less
|
Web App Attack
|
|
🇺🇸
136.64.56.79
|
|
136.64.56.79 - - [08/Aug/2026:18:33:27 -0400] "GET /.aws/credentials HTTP/2.0" 404 1649 "-" "anthrop ...
show more
136.64.56.79 - - [08/Aug/2026:18:33:27 -0400] "GET /.aws/credentials HTTP/2.0" 404 1649 "-" "anthropic-ai" "-"
136.64.56.79 - - [08/Aug/2026:18:33:27 -0400] "GET /login HTTP/2.0" 404 1649 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 OPR/117.0.0.0" "-"
136.64.56.79 - - [08/Aug/2026:18:33:27 -0400] "GET /signin HTTP/2.0" 404 1649 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 OPR/117.0.0.0" "-"
136.64.56.79 - - [08/Aug/2026:18:33:27 -0400] "GET /admin HTTP/2.0" 404 1649 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 OPR/117.0.0.0" "-"
136.64.56.79 - - [08/Aug/2026:18:33:27 -0400] "GET /.aws/config HTTP/2.0" 404 1649 "-" "anthropic-ai" "-"
...
show less
|
Web App Attack
|
|
🇫🇷
62.210.142.179
|
|
62.210.142.179 - - [08/Aug/2026:17:33:25 -0400] "GET / HTTP/1.1" 400 248 "-" "Mozilla/5.0 (compatibl ...
show more
62.210.142.179 - - [08/Aug/2026:17:33:25 -0400] "GET / HTTP/1.1" 400 248 "-" "Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)" "-"
62.210.142.179 - - [08/Aug/2026:17:33:25 -0400] "GET /manage/account/login HTTP/1.1" 400 248 "-" "Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)" "-"
62.210.142.179 - - [08/Aug/2026:17:33:25 -0400] "GET /admin/index.html HTTP/1.1" 400 248 "-" "Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)" "-"
62.210.142.179 - - [08/Aug/2026:17:33:26 -0400] "GET /index.html HTTP/1.1" 400 248 "-" "Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)" "-"
62.210.142.179 - - [08/Aug/2026:17:33:26 -0400] "GET /+CSCOE+/logon.html HTTP/1.1" 400 248 "-" "Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)" "-"
62.210.142.179 - - [08/Aug/2026:17:33:26 -0400] "GET /cgi-bin/login.cgi HTTP/1.1" 400 248 "-" "Mozilla/5.0
...
show less
|
Web App Attack
|
|
🇺🇸
34.23.60.217
|
|
34.23.60.217 - - [08/Aug/2026:16:01:30 -0400] "GET /auth/login HTTP/2.0" 404 1649 "-" "Mozilla/5.0 ( ...
show more
34.23.60.217 - - [08/Aug/2026:16:01:30 -0400] "GET /auth/login HTTP/2.0" 404 1649 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 OPR/117.0.0.0" "-"
34.23.60.217 - - [08/Aug/2026:16:01:30 -0400] "GET /user/login HTTP/2.0" 404 1649 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 OPR/117.0.0.0" "-"
34.23.60.217 - - [08/Aug/2026:16:01:30 -0400] "GET /.aws/credentials HTTP/2.0" 404 1649 "-" "anthropic-ai" "-"
34.23.60.217 - - [08/Aug/2026:16:01:30 -0400] "GET /admin/login HTTP/2.0" 404 1649 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 OPR/117.0.0.0" "-"
34.23.60.217 - - [08/Aug/2026:16:01:30 -0400] "GET /admin HTTP/2.0" 404 1649 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 OPR/117.0.0.0" "-"
...
show less
|
Web App Attack
|
|
🇺🇸
34.75.218.145
|
|
34.75.218.145 - - [08/Aug/2026:14:35:38 -0400] "GET /@fs/root/.env?raw?? HTTP/1.1" 404 1649 "-" "Moz ...
show more
34.75.218.145 - - [08/Aug/2026:14:35:38 -0400] "GET /@fs/root/.env?raw?? HTTP/1.1" 404 1649 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" "-"
34.75.218.145 - - [08/Aug/2026:14:35:38 -0400] "GET /@fs/proc/self/environ?raw?? HTTP/1.1" 404 1649 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected])" "-"
34.75.218.145 - - [08/Aug/2026:14:35:38 -0400] "GET /@fs/app/.env?raw?? HTTP/1.1" 404 1649 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" "-"
34.75.218.145 - - [08/Aug/2026:14:35:38 -0400] "GET /@fs/..%252f..%252f..%252f..%252f..%252fapp/.env?raw?? HTTP/1.1" 404 1649 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" "-"
34.75.218.145 - - [08/Aug/2026:14:35:38 -0400] "GET /@fs/etc/passwd?raw?? HTTP/1.1" 404 1649 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://openai.
...
show less
|
Web App Attack
|
|
🇺🇸
34.138.172.142
|
|
2026/08/08 07:12:10 [error] 374503#374503: *16742 limiting requests, excess: 5.960 by zone "rate_lim ...
show more
2026/08/08 07:12:10 [error] 374503#374503: *16742 limiting requests, excess: 5.960 by zone "rate_limit", client: 34.138.172.142, server: kc0zhq.com, request: "GET /signin HTTP/2.0", host: "www.kc0zhq.com"
2026/08/08 07:12:10 [error] 374503#374503: *16742 limiting requests, excess: 5.956 by zone "rate_limit", client: 34.138.172.142, server: kc0zhq.com, request: "GET /admin/login HTTP/2.0", host: "www.kc0zhq.com"
2026/08/08 07:12:10 [error] 374503#374503: *16742 limiting requests, excess: 5.956 by zone "rate_limit", client: 34.138.172.142, server: kc0zhq.com, request: "GET /wp-json HTTP/2.0", host: "www.kc0zhq.com"
2026/08/08 07:12:10 [error] 374503#374503: *16742 limiting requests, excess: 5.954 by zone "rate_limit", client: 34.138.172.142, server: kc0zhq.com, request: "GET /login HTTP/2.0", host: "www.kc0zhq.com"
2026/08/08 07:12:10 [error] 374503#374503: *16742 limiting requests, excess: 5.950 by zone "rate_limit", client: 34.138.172.142, server: kc0zhq.com, request: "GET /auth/login
...
show less
|
DDoS Attack
|
|
🇧🇪
34.62.192.100
|
|
34.62.192.100 - - [07/Aug/2026:23:04:40 -0400] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\x91" 40 ...
show more
34.62.192.100 - - [07/Aug/2026:23:04:40 -0400] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\x91" 400 150 "-" "-" "-"
34.62.192.100 - - [07/Aug/2026:23:04:45 -0400] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-" "-"
34.62.192.100 - - [07/Aug/2026:23:04:45 -0400] "K\xC9\xF5\x86\x99&?#\x93\x06 L2\xC5\xC1\xA9}\xD0\x8A?eb\x8F\x19\x7F\x1Cc\xE9\xA2\xFF\x92\x1E\x01\xFF3" 400 150 "-" "-" "-"
34.62.192.100 - - [07/Aug/2026:23:05:24 -0400] "\x00\x1E\xCDd\x01\x00\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03" 400 150 "-" "-" "-"
34.62.192.100 - - [07/Aug/2026:23:05:33 -0400] "\x03\x00\x00\x13\x0E\xE0\x00\x00\x00\x00\x00\x01\x00\x08\x00\x0B\x00\x00\x00" 400 150 "-" "-" "-"
34.62.192.100 - - [07/Aug/2026:23:05:53 -0400] "\x12\x01\x00X\x00\x00\x01\x00\x00\x00\x1F\x00\x06\x01\x00%\x00\x01\x02\x00&\x00\x01\x03\x00'\x00\x04
...
show less
|
Web App Attack
|
|
🇧🇪
35.187.162.98
|
|
35.187.162.98 - - [07/Aug/2026:22:39:11 -0400] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03P\x86\xF ...
show more
35.187.162.98 - - [07/Aug/2026:22:39:11 -0400] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03P\x86\xF9\xA1R<\xFA\xB5I\x9E\x86\x9B\xA3d\xF5'|\xDD\xE3\x92y$\x1FI3\xBA\x85\x9AJ\xE6" 400 150 "-" "-" "-"
35.187.162.98 - - [07/Aug/2026:22:39:16 -0400] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-" "-"
35.187.162.98 - - [07/Aug/2026:22:39:16 -0400] "v\x14l\xE1b\xF5\xA6\xB3V\xA00Q\x0C\x89\xDE\x15Q+\xCD\x1B\xA4\xBC\x8E\x97\xDA7" 400 150 "-" "-" "-"
35.187.162.98 - - [07/Aug/2026:22:39:55 -0400] "\x00\x1E\xF2\x1B\x01\x00\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03" 400 150 "-" "-" "-"
35.187.162.98 - - [07/Aug/2026:22:40:05 -0400] "\x03\x00\x00\x13\x0E\xE0\x00\x00\x00\x00\x00\x01\x00\x08\x00\x0B\x00\x00\x00" 400 150 "-" "-" "-"
35.187.162.98 - - [07/Aug/2026:22:40:25 -0400] "\x12\x01\x00X\x00\x00\x01\x00\x00\x00\x1F
...
show less
|
Web App Attack
|
|
🇧🇪
34.76.153.167
|
|
34.76.153.167 - - [07/Aug/2026:22:26:24 -0400] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03j&\x80\x ...
show more
34.76.153.167 - - [07/Aug/2026:22:26:24 -0400] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03j&\x80\xA8\xB4i\xB8\xCF\xB2\xA5V:\x88\xFB\x15\x10\xAF\xA5\x97f\xCF$\x5C<^\xE8\x94\xF2\xB4`\x96f \xC0N\x09\xD0k\xC5\xA7\xB1/\x93n\xC8\xF6\x92\xD3}#\x86\xCD\xE0dLl\xBA\xBE:\xFE~\xEA\x83\x5C\x0F\x002\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-" "-"
34.76.153.167 - - [07/Aug/2026:22:26:29 -0400] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-" "-"
34.76.153.167 - - [07/Aug/2026:22:26:31 -0400] "gg\x97mi8\xB5\x0Bh\xB1\xF0~xTY\xBC\xAE\x98>\xBF\x92.\x14Q4y\x88duZ\xEA\xE7\xD1X\x22w\xEB\x83\xF7\xFB\xF2Xh\x8A[\x17aY" 400 150 "-" "-" "-"
34.76.153.167 - - [07/Aug/2026:22:26:51 -0400] "\x00\x1El@\x01\x00\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03" 400 150 "-" "-" "-"
34.76.153.167 - - [07/Aug/2026:22
...
show less
|
Web App Attack
|
|
🇩🇪
165.232.114.23
|
|
165.232.114.23 - - [07/Aug/2026:18:14:19 -0400] "\x16\x03\x01\x02\x00\x01\x00\x01\xFC\x03\x03!\x0B\x ...
show more
165.232.114.23 - - [07/Aug/2026:18:14:19 -0400] "\x16\x03\x01\x02\x00\x01\x00\x01\xFC\x03\x03!\x0B\xFFc&\xCF\x22\x9F#\xAE\xE0\xD8u\x8A\x14\xF4\xB5p\xFEan\xD3lI\x02&2\xB5pfh\x94 `\x871\xCE\xA6\x85\x07\xDC{+\x1B" 400 150 "-" "-" "-"
165.232.114.23 - - [07/Aug/2026:18:14:19 -0400] "\x16\x03\x01\x02\x00\x01\x00\x01\xFC\x03\x03\x8A\xBE\x17f\x0F\xEB\xACV\x1B\xAEt\xB6\xC92y\xED\xAF\xD1\xD6\x8B\x8A#\xFDS\x0B\xD1\x17\xF0" 400 150 "-" "-" "-"
165.232.114.23 - - [07/Aug/2026:18:14:19 -0400] "\x16\x03\x01\x02\x00\x01\x00\x01\xFC\x03\x03S\x18JB*\xBBh\x11\x97\xDC{\xD8{Z\xA4\x01Q~\xCD\x05\xEE\xC4\xC4\xE0W\xC6\x99\xB9[\xE2\xDF\x02 \x93\xE2\x08\x16j\xB5\xC9\xEA\xD1\xAA\xDA\xE9]\xF7\xB2{\x05*\xD1\x9F\xBBB[Y\xF7\x93\x92\x8C\xBF\x19\xB0S\x00\x96\x13\x02\x13\x03\x13\x01\x003\x009\x005\x00/\xC0,\xC00\x00\xA3\x00\x9F\xCC\xA9\xCC\xA8\xCC\xAA\xC0\xAF\xC0\xAD\xC0\xA3\xC0\x9F\xC0]\xC0a\xC0W\xC0S\xC0+\xC0/\x00\xA2\x00\x9E\xC0\xAE\xC0\xAC\xC0\xA2\xC0\x9E\xC0\x5C\xC0`\xC0V\xC0R\xC0$\xC0(\x00k\x00j\xC0s\xC0w\x00\xC4
...
show less
|
Web App Attack
|
|
🇺🇸
34.181.130.126
|
|
34.181.130.126 - - [07/Aug/2026:17:24:41 -0400] "GET /portal HTTP/2.0" 404 1649 "-" "Mozilla/5.0 (X1 ...
show more
34.181.130.126 - - [07/Aug/2026:17:24:41 -0400] "GET /portal HTTP/2.0" 404 1649 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 OPR/117.0.0.0" "-"
34.181.130.126 - - [07/Aug/2026:17:24:41 -0400] "GET /dashboard HTTP/2.0" 404 1649 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 OPR/117.0.0.0" "-"
34.181.130.126 - - [07/Aug/2026:17:24:41 -0400] "GET /admin HTTP/2.0" 404 1649 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 OPR/117.0.0.0" "-"
34.181.130.126 - - [07/Aug/2026:17:24:41 -0400] "GET /wp-json HTTP/2.0" 404 1649 "-" "anthropic-ai" "-"
34.181.130.126 - - [07/Aug/2026:17:24:41 -0400] "GET /rclone.conf HTTP/2.0" 404 1649 "-" "anthropic-ai" "-"
...
show less
|
Web App Attack
|
|
🇺🇸
8.230.103.53
|
|
8.230.103.53 - - [07/Aug/2026:13:58:25 -0400] "HEAD /wp/ HTTP/2.0" 404 0 "http://kc0zhq.com/wp/" "Mo ...
show more
8.230.103.53 - - [07/Aug/2026:13:58:25 -0400] "HEAD /wp/ HTTP/2.0" 404 0 "http://kc0zhq.com/wp/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.6534.42 Safari/537.36" "-"
8.230.103.53 - - [07/Aug/2026:13:58:25 -0400] "HEAD /wordpress/ HTTP/2.0" 404 0 "http://kc0zhq.com/wordpress/" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Mobile/15E148 Safari/604.1" "-"
8.230.103.53 - - [07/Aug/2026:13:58:25 -0400] "HEAD /old/ HTTP/2.0" 404 0 "http://kc0zhq.com/old/" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0" "-"
8.230.103.53 - - [07/Aug/2026:13:58:26 -0400] "HEAD /blog/ HTTP/2.0" 404 0 "http://kc0zhq.com/blog/" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.5993.90 Safari/537.36" "-"
8.230.103.53 - - [07/Aug/2026:13:58:26 -0400] "HEAD /backup/ HTTP/2.0" 404 0 "http://kc0zhq.com/backup/" "Mozilla/5.0 (Windows NT 10.0;
...
show less
|
Web App Attack
|