AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User KayCee joined AbuseIPDB in January 2020 and has reported 252,383 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER SUPPORTER

IP	Date	Comment	Categories
🇺🇸 209.38.70.156	20 Nov 2025	209.38.70.156 - - [20/Nov/2025:12:15:08 -0500] "" 400 0 "-" "-" "-" 209.38.70.156 - - [20/Nov/2025:1 ... show more 209.38.70.156 - - [20/Nov/2025:12:15:08 -0500] "" 400 0 "-" "-" "-" 209.38.70.156 - - [20/Nov/2025:12:15:08 -0500] "" 400 0 "-" "-" "-" 209.38.70.156 - - [20/Nov/2025:12:15:08 -0500] "" 400 0 "-" "-" "-" ... show less	Web App Attack
🇺🇸 206.168.34.50	20 Nov 2025	206.168.34.50 - - [20/Nov/2025:07:27:14 -0500] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03!\x89f\x ... show more 206.168.34.50 - - [20/Nov/2025:07:27:14 -0500] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03!\x89f\xA0~f(<\xC8\x13x\xFE\xE7\xAC\x88\x9C\xF33XW\xB1\x8D\x5C\xA8/\xFB%u\xB44G( W\x07\x81\x00\x84\xD5\x03\x82\x04\xE8\x86G\x1C\xAD\x9E%O\x7F\xBF\xA6H\xB3=" 400 150 "-" "-" "-" 206.168.34.50 - - [20/Nov/2025:07:27:16 -0500] "PRI * HTTP/2.0" 400 150 "-" "-" "-" 206.168.34.50 - - [20/Nov/2025:07:27:29 -0500] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\x01\xAD\x859\xAB\xB1\xE9\xB5\xA1\xC4\xF9\x0B\xC3c\x09\x92NRw\xE9\x1C\x91\xC7\xEB=\xE9\x0F(P\x11\xCF8 \xB5a\xDE\x8A\xE0\xB7Y~\xBA\xFB\xF9Y\x94\xDD\xBD=\x9F\xC5\x91\xEE\x96U')\xD3>\xE1\xC7\x9FF\xE4\xB8\x00&\xCC\xA8\xCC\xA9\xC0/\xC00\xC0+\xC0,\xC0\x13\xC0\x09\xC0\x14\xC0" 400 150 "-" "-" "-" ... show less	Web App Attack
🇳🇱 213.209.143.52	20 Nov 2025	213.209.143.52 - - [20/Nov/2025:06:31:03 -0500] "CONNECT api.ipify.org:443 HTTP/1.1" 400 150 "-" "-" ... show more 213.209.143.52 - - [20/Nov/2025:06:31:03 -0500] "CONNECT api.ipify.org:443 HTTP/1.1" 400 150 "-" "-" "-" 213.209.143.52 - - [20/Nov/2025:06:31:03 -0500] "CONNECT api.ipify.org:443 HTTP/1.1" 400 150 "-" "-" "-" 213.209.143.52 - - [20/Nov/2025:06:31:03 -0500] "CONNECT api.ipify.org:443 HTTP/1.1" 400 150 "-" "-" "-" ... show less	Web App Attack
🇺🇸 207.90.244.20	19 Nov 2025	207.90.244.20 - - [19/Nov/2025:14:11:13 -0500] "" 400 0 "-" "-" "-" 207.90.244.20 - - [19/Nov/2025:1 ... show more 207.90.244.20 - - [19/Nov/2025:14:11:13 -0500] "" 400 0 "-" "-" "-" 207.90.244.20 - - [19/Nov/2025:14:11:13 -0500] "" 400 0 "-" "-" "-" 207.90.244.20 - - [19/Nov/2025:14:11:13 -0500] "" 400 0 "-" "-" "-" ... show less	Web App Attack
🇨🇦 4.205.243.218	19 Nov 2025	4.205.243.218 - - [19/Nov/2025:13:35:05 -0500] "GET /cgi-bin/ HTTP/1.1" 404 1649 "https://www.google ... show more 4.205.243.218 - - [19/Nov/2025:13:35:05 -0500] "GET /cgi-bin/ HTTP/1.1" 404 1649 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" "32.24.240.137" 4.205.243.218 - - [19/Nov/2025:13:35:09 -0500] "GET /wp-login.php HTTP/1.1" 404 1649 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" "94.39.247.76" 4.205.243.218 - - [19/Nov/2025:13:35:10 -0500] "GET /wp-signup.php HTTP/1.1" 404 1649 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" "16.177.146.176" ... show less	Bad Web Bot
🇺🇸 172.232.9.106	19 Nov 2025	172.232.9.106 - - [19/Nov/2025:13:01:30 -0500] "GET /cgi-bin/info.cgi HTTP/1.1" 404 1649 "-" "Mozill ... show more 172.232.9.106 - - [19/Nov/2025:13:01:30 -0500] "GET /cgi-bin/info.cgi HTTP/1.1" 404 1649 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML" "-" 172.232.9.106 - - [19/Nov/2025:13:01:30 -0500] "GET /cgi-bin/param.cgi?get_device_conf HTTP/1.1" 404 1649 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML" "-" 172.232.9.106 - - [19/Nov/2025:13:01:31 -0500] "GET /cgi-bin/authLogin.cgi HTTP/1.1" 404 1649 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML" "-" ... show less	Bad Web Bot
🇺🇸 66.132.153.128	19 Nov 2025	66.132.153.128 - - [19/Nov/2025:10:23:36 -0500] "PRI * HTTP/2.0" 400 150 "-" "-" "-" 66.132.153.128 ... show more 66.132.153.128 - - [19/Nov/2025:10:23:36 -0500] "PRI * HTTP/2.0" 400 150 "-" "-" "-" 66.132.153.128 - - [19/Nov/2025:10:23:39 -0500] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\xC1U\x9C\xBF\xACju\xF1\x91\xA4\xE3rV+(\x15 <;z'\x8F\xAE\xC8+\xCF\xC6\x86" 400 150 "-" "-" "-" 66.132.153.128 - - [19/Nov/2025:10:23:48 -0500] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03U\xFB\xD1\xB6\x06\xEDO\x88\x0BT\xEFM&\x1F\x03\xE6\x16'\x918\xE9\x98\xCC\xB8\xEE\xB6#\xEDd\x8D$C f\x81\x08o#\x0C\xE0\xF0a0?\xDFt\x12\x85\xEBhZ\xDE\xE6\xB0\xCF-\xBF\x94\xA5BGn\x89\x0FK\x00&\xCC\xA8\xCC\xA9\xC0/\xC00\xC0+\xC0,\xC0\x13\xC0\x09\xC0\x14\xC0" 400 150 "-" "-" "-" ... show less	Web App Attack
🇺🇸 57.154.71.194	19 Nov 2025	57.154.71.194 - - [19/Nov/2025:08:14:01 -0500] "GET /cgi-bin/ HTTP/1.1" 404 1649 "https://duckduckgo ... show more 57.154.71.194 - - [19/Nov/2025:08:14:01 -0500] "GET /cgi-bin/ HTTP/1.1" 404 1649 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" "165.54.211.118" 57.154.71.194 - - [19/Nov/2025:08:14:12 -0500] "GET /wp-login.php HTTP/1.1" 404 1649 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" "54.85.25.200" 57.154.71.194 - - [19/Nov/2025:08:14:14 -0500] "GET /wp-signup.php HTTP/1.1" 404 1649 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" "79.56.235.117" ... show less	Bad Web Bot
🇩🇪 167.94.146.63	19 Nov 2025	167.94.146.63 - - [18/Nov/2025:21:12:39 -0500] "PRI * HTTP/2.0" 400 150 "-" "-" "-" 167.94.146.63 - ... show more 167.94.146.63 - - [18/Nov/2025:21:12:39 -0500] "PRI * HTTP/2.0" 400 150 "-" "-" "-" 167.94.146.63 - - [18/Nov/2025:21:12:43 -0500] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\xA7\xF4j\xC3uS\xF2]\xC7\xC0\x0BG\x87\xCF\x19\xA6\x98\x02\xA2\xF0#\xC4\xAF,\xD5[\xF3\x8Fr\xED\x83\xBF }\x0Bn\xD0\xD9\xC8\xDC\x95>\x94\xC4\xCA\xA9\x8D\x89(\xB1P\x8DI\x8C\xB1v\xB2\x1FG\xF1\x93\x99\xF9t\xA7\x00&\xCC\xA8\xCC\xA9\xC0/\xC00\xC0+\xC0,\xC0\x13\xC0\x09\xC0\x14\xC0" 400 150 "-" "-" "-" 167.94.146.63 - - [18/Nov/2025:21:13:36 -0500] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\xF0\xADB\xA1\xB3\xFB\x01\xF6\xD3\xBB\xD8\xC9\x8F\x94iD\x04\xFF]\x86v\x9A\xD71\x87\xA4k\xEEN\x84\xB3$ \xECM\xCF\xA3/\x90\x97H\xE1\x80\xA4q\xF7Mz\xB2\xD3\xD4\xB1\xA3\xF3z\xD0\x1C\x07\xC2\x84\xE2s\xCD[\xC5\x00&\xCC\xA8\xCC\xA9\xC0/\xC00\xC0+\xC0,\xC0\x13\xC0\x09\xC0\x14\xC0" 400 150 "-" "-" "-" ... show less	Web App Attack
🇳🇱 176.65.148.229	18 Nov 2025	176.65.148.229 - - [18/Nov/2025:16:27:10 -0500] "\x16\x03\x01\x05\xAC\x01\x00\x05\xA8\x03\x03\xF1~&\ ... show more 176.65.148.229 - - [18/Nov/2025:16:27:10 -0500] "\x16\x03\x01\x05\xAC\x01\x00\x05\xA8\x03\x03\xF1~&\x95\xB1\x844\xBE\x18\xB8J\xE9\xCD\x1A\x0FS\x962\xF8\xB3\x1A\xD5h\xBC0\xE3$EiK\x0C\xD1 \xF4W2iN\xA3\x87\x91\xD9\xCD\x19\xB9\xBB#\x00\x8D-\xB1\xF4\xF6\x88\xE7\xF5\xBC)\xAC/8i\xFB\xE5\xB2\x00\x1A\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-" "-" 176.65.148.229 - - [18/Nov/2025:16:27:16 -0500] "1111\x88\x00\x00\x00\x01\x01\x00\x00\x00%\xAD\x11>" 400 150 "-" "-" "-" 176.65.148.229 - - [18/Nov/2025:16:27:18 -0500] "1111\x0C\x01\x00\x00\x04\x00\x00\x01\x1B\x09\x00\x00\x02\x01\x00\x00\xFC\x00\x00\x00admin\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00queryBasicCfg\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x ... show less	Web App Attack
🇺🇸 66.132.153.126	18 Nov 2025	66.132.153.126 - - [18/Nov/2025:06:24:31 -0500] "PRI * HTTP/2.0" 400 150 "-" "-" "-" 66.132.153.126 ... show more 66.132.153.126 - - [18/Nov/2025:06:24:31 -0500] "PRI * HTTP/2.0" 400 150 "-" "-" "-" 66.132.153.126 - - [18/Nov/2025:06:24:35 -0500] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03G\xC5\xBED\x1C\x87\xB7\xF0\xE0\xB8}\xBB0\xA3WA\x0C\xADdL\x1AP\x94\xA5\x10kb\xA6r\xD4\xFB" 400 150 "-" "-" "-" 66.132.153.126 - - [18/Nov/2025:06:27:01 -0500] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03vP\x9AN`\xD2\x9D\xAC:D[\x08\xC3){0A\x0F\xF2\xD7x\x8BN\xCCA\xD49\xAE0w\xE5\xD6 l:\xB6\xB67\x0CB\x1ELJy\xEB\x9C\xBA\xBE\xAE\xE1YL\x93=\xB6R\xB2\x08K\x9CA\x83czF\x00&\xCC\xA8\xCC\xA9\xC0/\xC00\xC0+\xC0,\xC0\x13\xC0\x09\xC0\x14\xC0" 400 150 "-" "-" "-" ... show less	Web App Attack
🇺🇸 206.168.34.118	18 Nov 2025	206.168.34.118 - - [18/Nov/2025:03:46:44 -0500] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\xCFG\x ... show more 206.168.34.118 - - [18/Nov/2025:03:46:44 -0500] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\xCFG\xB1\x86\xF3T\xA7\xB4(,\xAC\x9D\xA5:M\xE1\xFF\x1F:\x1E\xF7\x0EC\x86\xF4\x9Fr\x08\xA2\xB8\xE7\x93 ,7\xA14Z\xB9\xC3\x1F1\x92\xE8\xAD\x0F{\xE1\x98\x8F7\xB1in\x9D\x18\xC8t\xBB?\x09)\x9C_\xE7\x00&\xCC\xA8\xCC\xA9\xC0/\xC00\xC0+\xC0,\xC0\x13\xC0\x09\xC0\x14\xC0" 400 150 "-" "-" "-" 206.168.34.118 - - [18/Nov/2025:03:46:46 -0500] "PRI * HTTP/2.0" 400 150 "-" "-" "-" 206.168.34.118 - - [18/Nov/2025:03:47:56 -0500] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\xD1B\xAE3\xB7\xFB\xA9\xDA\xE3,\x19\x9Ct&\xD9\xA8\x11a\x1E\xE2b\xB9:\x0F^\xAC\xA3I~\xC6\x0E\xDF {\xBC\xC66d\x8CMG\x89" 400 150 "-" "-" "-" ... show less	Web App Attack
🇳🇱 176.65.149.159	18 Nov 2025	176.65.149.159 - - [17/Nov/2025:21:42:46 -0500] "GET / HTTP/1.1" 400 248 "-" "-" "-" 176.65.149.159 ... show more 176.65.149.159 - - [17/Nov/2025:21:42:46 -0500] "GET / HTTP/1.1" 400 248 "-" "-" "-" 176.65.149.159 - - [17/Nov/2025:21:42:55 -0500] "1111\x88\x00\x00\x00\x01\x01\x00\x00\x00%\xAD\x11>" 400 150 "-" "-" "-" 176.65.149.159 - - [17/Nov/2025:21:42:58 -0500] "1111\x0C\x01\x00\x00\x04\x00\x00\x01\x1B\x09\x00\x00\x02\x01\x00\x00\xFC\x00\x00\x00admin\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00queryBasicCfg\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00<?xml version=\x221.0\x22 encoding=\x22UTF-8\x22?>" 400 150 "-" "-" "-" ... show less	Web App Attack
🇺🇸 207.90.244.21	18 Nov 2025	207.90.244.21 - - [17/Nov/2025:19:54:56 -0500] "" 400 0 "-" "-" "-" 207.90.244.21 - - [17/Nov/2025:1 ... show more 207.90.244.21 - - [17/Nov/2025:19:54:56 -0500] "" 400 0 "-" "-" "-" 207.90.244.21 - - [17/Nov/2025:19:54:57 -0500] "" 400 0 "-" "-" "-" 207.90.244.21 - - [17/Nov/2025:19:54:58 -0500] "" 400 0 "-" "-" "-" ... show less	Web App Attack
🇺🇸 143.198.225.197	17 Nov 2025	143.198.225.197 - - [17/Nov/2025:17:49:55 -0500] "" 400 0 "-" "-" "-" 143.198.225.197 - - [17/Nov/20 ... show more 143.198.225.197 - - [17/Nov/2025:17:49:55 -0500] "" 400 0 "-" "-" "-" 143.198.225.197 - - [17/Nov/2025:17:49:56 -0500] "" 400 0 "-" "-" "-" 143.198.225.197 - - [17/Nov/2025:17:49:56 -0500] "" 400 0 "-" "-" "-" ... show less	Web App Attack
🇳🇱 64.225.74.178	17 Nov 2025	64.225.74.178 - - [17/Nov/2025:05:05:25 -0500] "" 400 0 "-" "-" "-" 64.225.74.178 - - [17/Nov/2025:0 ... show more 64.225.74.178 - - [17/Nov/2025:05:05:25 -0500] "" 400 0 "-" "-" "-" 64.225.74.178 - - [17/Nov/2025:05:05:25 -0500] "" 400 0 "-" "-" "-" 64.225.74.178 - - [17/Nov/2025:05:05:25 -0500] "" 400 0 "-" "-" "-" ... show less	Web App Attack
🇭🇰 199.45.154.141	17 Nov 2025	199.45.154.141 - - [17/Nov/2025:02:46:05 -0500] "PRI * HTTP/2.0" 400 150 "-" "-" "-" 199.45.154.141 ... show more 199.45.154.141 - - [17/Nov/2025:02:46:05 -0500] "PRI * HTTP/2.0" 400 150 "-" "-" "-" 199.45.154.141 - - [17/Nov/2025:02:46:09 -0500] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\|\xC2\x19\x99q\x1Fh\xE4U\xBA\x92\xAE\xDF\x108i\xC5O\x12\xB3m\x9D\xFBj]\xFEH\xF2\xE6W\x00\xBA \xFA\xF8\x19m\xB7e\xD9L\xDD,\x87Z#J\xD5\xE9\x1Ahh\xAAM\xBB\x9E\xEB?7]\x80\x18\xECpw\x00&\xCC\xA8\xCC\xA9\xC0/\xC00\xC0+\xC0,\xC0\x13\xC0\x09\xC0\x14\xC0" 400 150 "-" "-" "-" 199.45.154.141 - - [17/Nov/2025:02:46:17 -0500] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\xC1\x90\xC4\x87B\x89@\xB8PB\x16'/z\xB1M\xDC\x81\xD0)\xA4\xB2\xDB-@\xAD\xAA\xF9\xEEg\xF5\xD2 ;\xFA\xBA\x1A\|\xCE/\x05\xD3lw9\x01a\x13\x89\xA2\x83(\xB4\x9Bi\xE3\xA2J\xBA\xBFX\x18\xEF\xF5s\x00&\xCC\xA8\xCC\xA9\xC0/\xC00\xC0+\xC0,\xC0\x13\xC0\x09\xC0\x14\xC0" 400 150 "-" "-" "-" ... show less	Web App Attack
🇭🇰 2602:80d:1004::30	17 Nov 2025	2602:80d:1004::30 - - [16/Nov/2025:19:00:23 -0500] "PRI * HTTP/2.0" 400 150 "-" "-" "-" 2602:80d:100 ... show more 2602:80d:1004::30 - - [16/Nov/2025:19:00:23 -0500] "PRI * HTTP/2.0" 400 150 "-" "-" "-" 2602:80d:1004::30 - - [16/Nov/2025:19:00:23 -0500] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03o\x86\x17`e\xD8\x96@\x1E\x04\xF9\xBF\x09/\xCA\x97\xF0 C\xAB\xA0\xEF\x1Dh\xD1\xDF\xF5\xE5\xB6U \xC6+\x88N\xD0\xC3_\xBC\xCD\xA8`\x1AhC<\x8F\x09u\xCD\xCE\xD4\xC0\x9B__(\x19\xA7\x8Bz\xFE\x00&\xCC\xA8\xCC\xA9\xC0/\xC00\xC0+\xC0,\xC0\x13\xC0\x09\xC0\x14\xC0" 400 150 "-" "-" "-" 2602:80d:1004::30 - - [16/Nov/2025:19:00:49 -0500] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\xAE\x80\x85W\x04\xB7!\x1F\xAC%\xCF^\x0B\x1A\xEC\xA8\x86\xE4\xAC\xBB\xEA;\xC5\xB6J\xA2\xC4'/\xA1\x12\xB5 \xE0\|\xD6\x9D\xF5\x0B\xCBC}Dv\x8Fd$`\xFC\x00v\xE3\xC4\xAE\xB5\xD4.<\xAAT\xC9\xF9b>\x1B\x00&\xCC\xA8\xCC\xA9\xC0/\xC00\xC0+\xC0,\xC0\x13\xC0\x09\xC0\x14\xC0" 400 150 "-" "-" "-" ... show less	Web App Attack
🇺🇸 2602:80d:1006::3b	16 Nov 2025	2602:80d:1006::3b - - [16/Nov/2025:18:49:14 -0500] "PRI * HTTP/2.0" 400 150 "-" "-" "-" 2602:80d:100 ... show more 2602:80d:1006::3b - - [16/Nov/2025:18:49:14 -0500] "PRI * HTTP/2.0" 400 150 "-" "-" "-" 2602:80d:1006::3b - - [16/Nov/2025:18:49:15 -0500] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\x17p\xE7\xB8\xF8\x12\xEC\xCE\xA7\x01\xA0\x9F\xED\xF8B\xDB\xBCL\xCA(\xD7\x9F\xED\xB3\xBF\xDCkc\x9A/u\x83 \xD3\xC0f \xF1\xD4\x8E\xF1\xA9\xA4<\xB1cT)" 400 150 "-" "-" "-" 2602:80d:1006::3b - - [16/Nov/2025:18:49:41 -0500] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\x9D\x81l\x83x\xA6A_q]1\xF7\xB1\xB1D\xEB\x0F\xF5\xA8\x8B\xDF\x06\x05Y4c\x15\x00\xD4w\xA7\xE9 \x08\xA2\xC9\x01U\xE3\xA4\xC5\x7F+}\xAE\x99\xAB\x16\x7F\x90k\x10\x95\xFD\x22[bsF\xDC\xCE\x1BL\xE3C\x00&\xCC\xA8\xCC\xA9\xC0/\xC00\xC0+\xC0,\xC0\x13\xC0\x09\xC0\x14\xC0" 400 150 "-" "-" "-" ... show less	Web App Attack
🇺🇸 162.142.125.39	16 Nov 2025	162.142.125.39 - - [16/Nov/2025:07:37:58 -0500] "PRI * HTTP/2.0" 400 150 "-" "-" "-" 162.142.125.39 ... show more 162.142.125.39 - - [16/Nov/2025:07:37:58 -0500] "PRI * HTTP/2.0" 400 150 "-" "-" "-" 162.142.125.39 - - [16/Nov/2025:07:38:02 -0500] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03%\xA0\xA7\xF2\xE8\x1D\xFB?\x87\x927\xF9(\xEA*\xEBx\x91\x8Cld\xA9\xDA}" 400 150 "-" "-" "-" 162.142.125.39 - - [16/Nov/2025:07:38:23 -0500] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\xB3I_\xDFDs\xA4K\x91\x08\x82\xE2\xFDi\x92<\x12\xA0t\xC6\xF74%\xBE\x03.\xAE\xDC\x9F\x85-G \xF0O}\xBB\xC4J\x8F8\xC6\xEC6-w\x84\x9E\x01\xFD\xAE-f^>\xAB\xCB\x88!4\x09\xEF\x00\x19\xDC\x00&\xCC\xA8\xCC\xA9\xC0/\xC00\xC0+\xC0,\xC0\x13\xC0\x09\xC0\x14\xC0" 400 150 "-" "-" "-" ... show less	Web App Attack
🇩🇪 167.94.146.49	16 Nov 2025	167.94.146.49 - - [16/Nov/2025:07:25:23 -0500] "PRI * HTTP/2.0" 400 150 "-" "-" "-" 167.94.146.49 - ... show more 167.94.146.49 - - [16/Nov/2025:07:25:23 -0500] "PRI * HTTP/2.0" 400 150 "-" "-" "-" 167.94.146.49 - - [16/Nov/2025:07:25:26 -0500] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\xC4eA\x96e\x007V)\xCB\xC6\x8A\xE0\x8D9\xE1\xD3\xC5\xF6\xEB\x0EG\x98\x0B\xFB\x04ds\xB1<i\x0C \xD7%\x10FF\xFAK\|\xF5\x17\x1D\xDF:\xFA\x1Fj7\xAAv=<@\x9BT\xB2\x1AkSN\xF8\xF2\xC3\x00&\xCC\xA8\xCC\xA9\xC0/\xC00\xC0+\xC0,\xC0\x13\xC0\x09\xC0\x14\xC0" 400 150 "-" "-" "-" 167.94.146.49 - - [16/Nov/2025:07:25:31 -0500] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\x99e\xC9f\x9E\xD3z\xFB\x92y\x00(x\xDE\xEB\x0F\x94'\xC6\xBD\xEE\xE8~q\x97 >\xC1\x0B];\x91 \x15\x92]bbK\xC9r\xB4\xADF\xFA\xBDY\x10 d:\xB4\xD0\x15yni\xA8xfg;Q\xA1\xAD\x00&\xCC\xA8\xCC\xA9\xC0/\xC00\xC0+\xC0,\xC0\x13\xC0\x09\xC0\x14\xC0" 400 150 "-" "-" "-" ... show less	Web App Attack
🇺🇸 192.159.99.95	16 Nov 2025	192.159.99.95 - - [16/Nov/2025:03:23:40 -0500] "POST /cgi-bin/login.cgi HTTP/1.0" 404 1649 "-" "Mozi ... show more 192.159.99.95 - - [16/Nov/2025:03:23:40 -0500] "POST /cgi-bin/login.cgi HTTP/1.0" 404 1649 "-" "Mozilla/5.0 ([email protected])" "-" 192.159.99.95 - admin [16/Nov/2025:03:23:40 -0500] "POST /cgi-bin/cgi_main.cgi HTTP/1.1" 404 1649 "http://168.235.90.7/cfg_system_time.htm" "Mozilla/5.0 ([email protected])" "-" 192.159.99.95 - admin [16/Nov/2025:03:23:40 -0500] "POST /cgi-bin/server/server.cgi?func=server02_main_submit&counter=5.22497857400916&TEST_BTN4= HTTP/1.1" 404 1649 "http://168.235.90.7/cgi-bin/server/server.cgi?func=server02_main_submit&counter=6.7496022225883&TEST_BTN4=" "Mozilla/5.0 ([email protected])" "-" ... show less	Bad Web Bot
🇺🇸 2602:80d:1006::68	15 Nov 2025	2602:80d:1006::68 - - [15/Nov/2025:17:50:56 -0500] "PRI * HTTP/2.0" 400 150 "-" "-" "-" 2602:80d:100 ... show more 2602:80d:1006::68 - - [15/Nov/2025:17:50:56 -0500] "PRI * HTTP/2.0" 400 150 "-" "-" "-" 2602:80d:1006::68 - - [15/Nov/2025:17:50:59 -0500] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\xA5\xD7K\x8D\x059\xD9\xB7I\x11\x7F\x8B\xB9\x98\xD4\xC5" 400 150 "-" "-" "-" 2602:80d:1006::68 - - [15/Nov/2025:17:51:08 -0500] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\xE3-\x92\x1C/r\x1A\xD7\xE4\xB4\xB3\xC0\xBB6\x0EAz\xF6\x98A\x91\xF5\x1Dt\x8D\x8C\xF7\xCB\xCC\x0B\xFD\x8E \x8A\xF11\x04\xB9\xBA\xBF1\x96q\x0F\xDF!\xDE\x1A\xDE\xE5\xDA\xC3UY}\xD1lc\xA8\xAC\x0E\xF11\x10\x18\x00&\xCC\xA8\xCC\xA9\xC0/\xC00\xC0+\xC0,\xC0\x13\xC0\x09\xC0\x14\xC0" 400 150 "-" "-" "-" ... show less	Web App Attack
🇮🇩 182.253.20.51	15 Nov 2025	182.253.20.51 - - [15/Nov/2025:07:05:30 -0500] "GET /phpMyAdmin5.2/index.php?lang=en HTTP/1.1" 404 1 ... show more 182.253.20.51 - - [15/Nov/2025:07:05:30 -0500] "GET /phpMyAdmin5.2/index.php?lang=en HTTP/1.1" 404 1649 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" "-" 182.253.20.51 - - [15/Nov/2025:07:05:31 -0500] "GET /phpMyAdmin3/index.php?lang=en HTTP/1.1" 404 1649 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" "-" 182.253.20.51 - - [15/Nov/2025:07:05:31 -0500] "GET /phpMyAdmin-5.1.3/index.php?lang=en HTTP/1.1" 404 1649 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" "-" ... show less	Bad Web Bot
🇺🇸 162.142.125.113	15 Nov 2025	162.142.125.113 - - [15/Nov/2025:03:56:24 -0500] "PRI * HTTP/2.0" 400 150 "-" "-" "-" 162.142.125.11 ... show more 162.142.125.113 - - [15/Nov/2025:03:56:24 -0500] "PRI * HTTP/2.0" 400 150 "-" "-" "-" 162.142.125.113 - - [15/Nov/2025:03:56:28 -0500] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03?Y\xEF\x7F]0p\xD9\xDF\x15l\x19\xB8ug\x06\x94\x5Czz\x05.\xA0\xF7\xCAkF\xFE\xF3\xE0x\xA8 D/;\xC5\x10h\xE8\x15\x10dH\x0F'\xB6\xC2\xCA\x1CC\xF5ty\x1E\x1B\xCB\x818\xA6Vj\xD8\xEC\xE2\x00&\xCC\xA8\xCC\xA9\xC0/\xC00\xC0+\xC0,\xC0\x13\xC0\x09\xC0\x14\xC0" 400 150 "-" "-" "-" 162.142.125.113 - - [15/Nov/2025:03:56:35 -0500] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03)\x93\x86\|3p\xF947\x80\x9B5t=O\x22y\x02\xED b\xFB5\x9B\xFC\x11\x8A6Y\x95\xA1V `\xCB@\xBA\xF8\x08\xA9_[\xCEZ\xF7\xD5\xD1<\x04Y$\xFF2x\x9C\xFD\xAF\x98\x1C\x15.\xC2\x17\xD2\xE6\x00&\xCC\xA8\xCC\xA9\xC0/\xC00\xC0+\xC0,\xC0\x13\xC0\x09\xC0\x14\xC0" 400 150 "-" "-" "-" ... show less	Web App Attack