🇺🇸
167.94.138.41
04 Jan 2026
167.94.138.41 - - [04/Jan/2026:00:12:52 -0500] "PRI * HTTP/2.0" 400 150 "-" "-" "-"
167.94.138.41 - ...
show more
167.94.138.41 - - [04/Jan/2026:00:12:52 -0500] "PRI * HTTP/2.0" 400 150 "-" "-" "-"
167.94.138.41 - - [04/Jan/2026:00:12:56 -0500] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\xEFj,*A\xBB\xCCATK\x89\x17\xBBq\xDFr\x07\xF7i\x8C1\x03o_\x14\x86)\x81\xB7\xEC\x03h K\xB0\xA2" 400 150 "-" "-" "-"
167.94.138.41 - - [04/Jan/2026:00:13:10 -0500] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\xA8\x8D\xD5\xB1\x159:\x9C!\xBE,\x87rQ\xEE\xCA\xA7s}\xDBv\x98I5D\xFE\x95\xD08h\x1E\x8B N,*\x05j\xA3\x08\xCB\x93I'\x02\x8EpI\xDC\xCF7|\x13\xA2mW\xCDA\xAFr\x06*\x10\x04\x88\x00&\xCC\xA8\xCC\xA9\xC0/\xC00\xC0+\xC0,\xC0\x13\xC0\x09\xC0\x14\xC0" 400 150 "-" "-" "-"
...
show less
Web App Attack
🇺🇸
167.94.138.115
04 Jan 2026
167.94.138.115 - - [03/Jan/2026:22:07:41 -0500] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03X\x0E\x ...
show more
167.94.138.115 - - [03/Jan/2026:22:07:41 -0500] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03X\x0E\x8AlY7\x92aIQo\x84^\xAE\x91{'qrb\x7FH \x16\xD6\xF6\xF3\xD1g\x8E\xA5\xB1 \xC7\xCAn\xF2#\xB9l\x90\x13\x1C%\xC4NL\x9D\xC7\xC7\x95Z\x81h\x80\xAF9*C.\x8C^\xAD(\x9C\x00&\xCC\xA8\xCC\xA9\xC0/\xC00\xC0+\xC0,\xC0\x13\xC0\x09\xC0\x14\xC0" 400 150 "-" "-" "-"
167.94.138.115 - - [03/Jan/2026:22:07:47 -0500] "PRI * HTTP/2.0" 400 150 "-" "-" "-"
167.94.138.115 - - [03/Jan/2026:22:08:31 -0500] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\x9D\x19l\xBA\x85\x1DG\xC7UO6\xCA\x968f\xB4W\xC3\xD0\x88{\xBF\xD1\xC5\x9E\x9DF\x84BL.\x1E \x10\xC3\x98\xA7I\xE5\x1D\xA6{n/E\xFB\x99\xF3]=\xB7\xD6k\x18\xEAu\x8A\xB2K\x8Dx@\x94\x92A\x00&\xCC\xA8\xCC\xA9\xC0/\xC00\xC0+\xC0,\xC0\x13\xC0\x09\xC0\x14\xC0" 400 150 "-" "-" "-"
...
show less
Web App Attack
🇦🇺
134.199.164.25
03 Jan 2026
134.199.164.25 - - [03/Jan/2026:10:54:25 -0500] "GET / HTTP/1.1" 400 650 "-" "Mozilla/5.0 (Windows N ...
show more
134.199.164.25 - - [03/Jan/2026:10:54:25 -0500] "GET / HTTP/1.1" 400 650 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" "-"
134.199.164.25 - - [03/Jan/2026:10:54:26 -0500] "GET /t4 HTTP/1.1" 400 248 "-" "Mozilla/5.0" "-"
134.199.164.25 - - [03/Jan/2026:10:54:26 -0500] "GET /favicon.ico HTTP/1.1" 400 650 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" "-"
...
show less
Web App Attack
🇺🇸
167.94.138.191
02 Jan 2026
167.94.138.191 - - [02/Jan/2026:16:52:39 -0500] "PRI * HTTP/2.0" 400 150 "-" "-" "-"
167.94.138.191 ...
show more
167.94.138.191 - - [02/Jan/2026:16:52:39 -0500] "PRI * HTTP/2.0" 400 150 "-" "-" "-"
167.94.138.191 - - [02/Jan/2026:16:52:43 -0500] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\xE52\xC3\xACX\xFA\x89Z\xC8\xD24\x14-\x83\xDC\x9F_z/\xE0\xF9m#x\xDB\xF9Y\xF3U'\xC8\x8B QA\xF1\xE3\xB3u/\xF0\x94Yx\xAB\xAC\x8Cnn\x8D\xFC\xA8\xF4\xCA\xC9\x1Ct" 400 150 "-" "-" "-"
167.94.138.191 - - [02/Jan/2026:16:53:23 -0500] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\xD4@D\x5C\x81K\xDB\xD3C" 400 150 "-" "-" "-"
...
show less
Web App Attack
🇳🇱
204.76.203.125
02 Jan 2026
204.76.203.125 - - [02/Jan/2026:07:19:38 -0500] "GET /@fs/..%2f..%2f..%2f..%2f..%2froot/.env?raw?? H ...
show more
204.76.203.125 - - [02/Jan/2026:07:19:38 -0500] "GET /@fs/..%2f..%2f..%2f..%2f..%2froot/.env?raw?? HTTP/1.1" 400 150 "-" "-" "-"
204.76.203.125 - - [02/Jan/2026:07:19:38 -0500] "GET /@fs/..%2f..%2f..%2f..%2f..%2fproc/self/environ?raw?? HTTP/1.1" 400 150 "-" "-" "-"
204.76.203.125 - - [02/Jan/2026:07:19:38 -0500] "GET /@fs/..%2f..%2f..%2f..%2f..%2fapp/.env?raw?? HTTP/1.1" 400 150 "-" "-" "-"
...
show less
Web App Attack
🇨🇦
2604:a880:cad:d0:0:1:355c:5001
02 Jan 2026
02-Jan-2026 06:23:38.091 client @0x7f2ecce6a9b8 2604:a880:cad:d0:0:1:355c:5001#52068 (darksoulz.org) ...
show more
02-Jan-2026 06:23:38.091 client @0x7f2ecce6a9b8 2604:a880:cad:d0:0:1:355c:5001#52068 (darksoulz.org): view external: zone transfer 'darksoulz.org/AXFR/IN' denied
...
show less
Hacking
🇻🇳
160.187.246.202
02 Jan 2026
160.187.246.202 - - [01/Jan/2026:19:40:07 -0500] "\x05\x01\x00" 400 150 "-" "-" "-"
160.187.246.202 ...
show more
160.187.246.202 - - [01/Jan/2026:19:40:07 -0500] "\x05\x01\x00" 400 150 "-" "-" "-"
160.187.246.202 - - [01/Jan/2026:19:40:07 -0500] "\x04\x01\x01\xBBh\x10\xB9\xF1\x00" 400 150 "-" "-" "-"
160.187.246.202 - - [01/Jan/2026:19:40:08 -0500] "CONNECT icanhazip.com:443 HTTP/1.1" 400 150 "-" "-" "-"
...
show less
Web App Attack
🇺🇸
143.198.65.196
01 Jan 2026
01-Jan-2026 17:43:39.962 client @0x7f2ec405ce08 143.198.65.196#51870 (darksoulz.org): view external: ...
show more
01-Jan-2026 17:43:39.962 client @0x7f2ec405ce08 143.198.65.196#51870 (darksoulz.org): view external: zone transfer 'darksoulz.org/AXFR/IN' denied
...
show less
Hacking
🇺🇸
167.94.138.207
01 Jan 2026
167.94.138.207 - - [01/Jan/2026:15:46:23 -0500] "PRI * HTTP/2.0" 400 150 "-" "-" "-"
167.94.138.207 ...
show more
167.94.138.207 - - [01/Jan/2026:15:46:23 -0500] "PRI * HTTP/2.0" 400 150 "-" "-" "-"
167.94.138.207 - - [01/Jan/2026:15:46:24 -0500] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03;pY\xA8w1u\x09@i\xCE\x8E4\xA1\xC3\xF8\x0F\xA22\x1D\xD8Ka\xE2&)\x16" 400 150 "-" "-" "-"
167.94.138.207 - - [01/Jan/2026:15:46:46 -0500] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\xEE7[\xA1\xFF/~\xD3\xF7\x16\x96\xFDX\x96Mb@/\xD0\x14\x9A:" 400 150 "-" "-" "-"
...
show less
Web App Attack
🇺🇸
167.94.138.205
31 Dec 2025
167.94.138.205 - - [31/Dec/2025:15:25:29 -0500] "PRI * HTTP/2.0" 400 150 "-" "-" "-"
167.94.138.205 ...
show more
167.94.138.205 - - [31/Dec/2025:15:25:29 -0500] "PRI * HTTP/2.0" 400 150 "-" "-" "-"
167.94.138.205 - - [31/Dec/2025:15:25:34 -0500] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\xCC\x01\xD1\xC0X\x93\xE2\x91\x04Y%\xDE\x80%!\x94~\xAC[\xC6\x8E{*\x16\xB1\xBE\x0Ca\xCD\x0F\xA5m \xD4\xCB\xD7\xA4\x04\x9E\xF7\x11\xE1l[\xFE\x03\x9E\x05" 400 150 "-" "-" "-"
167.94.138.205 - - [31/Dec/2025:15:25:38 -0500] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\xD4/S\xAA\xBC\x95\x92\xE33\x94b\xA2\xB5\xE8\xA5\xBB4\xC77\x84V\xB1\x0B\xD5\xDD~\x9At\xCF{\x9C, Y" 400 150 "-" "-" "-"
...
show less
Web App Attack
🇺🇸
148.153.56.58
31 Dec 2025
148.153.56.58 - - [30/Dec/2025:22:25:19 -0500] "GET /CPzO HTTP/1.1" 400 248 "-" "Mozilla/5.0 (Macint ...
show more
148.153.56.58 - - [30/Dec/2025:22:25:19 -0500] "GET /CPzO HTTP/1.1" 400 248 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:32.0) Gecko/20100101 Firefox/32.0" "-"
148.153.56.58 - - [30/Dec/2025:22:25:19 -0500] "GET /jQ4n HTTP/1.1" 400 248 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:32.0) Gecko/20100101 Firefox/32.0" "-"
148.153.56.58 - - [30/Dec/2025:22:25:20 -0500] "GET /aab8 HTTP/1.1" 400 248 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:32.0) Gecko/20100101 Firefox/32.0" "-"
...
show less
Web App Attack
🇭🇰
45.142.154.15
31 Dec 2025
45.142.154.15 - - [30/Dec/2025:20:23:38 -0500] "GET / HTTP/1.1" 400 150 "-" "NTRIP GNSSInternetRadio ...
show more
45.142.154.15 - - [30/Dec/2025:20:23:38 -0500] "GET / HTTP/1.1" 400 150 "-" "NTRIP GNSSInternetRadio" "-"
45.142.154.15 - - [30/Dec/2025:20:23:39 -0500] "GET /version HTTP/1.1" 400 248 "-" "-" "-"
45.142.154.15 - - [30/Dec/2025:20:23:40 -0500] "GET / HTTP/1.1" 400 248 "-" "-" "-"
...
show less
Web App Attack
🇺🇸
162.142.125.35
30 Dec 2025
162.142.125.35 - - [30/Dec/2025:05:48:47 -0500] "PRI * HTTP/2.0" 400 150 "-" "-" "-"
162.142.125.35 ...
show more
162.142.125.35 - - [30/Dec/2025:05:48:47 -0500] "PRI * HTTP/2.0" 400 150 "-" "-" "-"
162.142.125.35 - - [30/Dec/2025:05:48:49 -0500] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\xFEuv\x1A\xD2\xFA\xA0V/\xF4\xD8\x22\x90\x99-pA\x16\x93\xC5\x8F\xF7vP\xBC\xE6s\x8D\x14\x7F0| \xB6q:\xBAo5\xFE\x97I\xA4\xA0\x94\xF7\xCA\xA2\x9C+[\x95\xD3\x81\xDD\xB9\xF5\x8A\x09\x98\xF1\xEC\x0E\xD7T\x00&\xCC\xA8\xCC\xA9\xC0/\xC00\xC0+\xC0,\xC0\x13\xC0\x09\xC0\x14\xC0" 400 150 "-" "-" "-"
162.142.125.35 - - [30/Dec/2025:05:49:44 -0500] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\x1BO\xF3\x06x\xBCR\xE7\xBD\xEE\x12\xEDtm\xFB\xE1\xA5we:B_\xBD\x16t\x94d\xDF\xA3t\x14\xD9 \x9D\xC3\xA5\x0B\xE7\x15\xDD$\x9A\xB5\xA0\xFF<\x8C+\x04%\x8DY\xB8\x0E\x89\x9B|\xBF\xE8\xA0?[\x98\xF1\x17\x00&\xCC\xA8\xCC\xA9\xC0/\xC00\xC0+\xC0,\xC0\x13\xC0\x09\xC0\x14\xC0" 400 150 "-" "-" "-"
...
show less
Web App Attack
🇮🇳
209.38.120.148
30 Dec 2025
209.38.120.148 - - [30/Dec/2025:05:43:08 -0500] "GET / HTTP/1.1" 400 650 "-" "Mozilla/5.0 (Windows N ...
show more
209.38.120.148 - - [30/Dec/2025:05:43:08 -0500] "GET / HTTP/1.1" 400 650 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" "-"
209.38.120.148 - - [30/Dec/2025:05:43:10 -0500] "GET /t4 HTTP/1.1" 400 248 "-" "Mozilla/5.0" "-"
209.38.120.148 - - [30/Dec/2025:05:43:10 -0500] "GET /favicon.ico HTTP/1.1" 400 650 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" "-"
...
show less
Web App Attack
🇺🇸
51.81.155.131
30 Dec 2025
51.81.155.131 - - [29/Dec/2025:23:31:40 -0500] "GET /cgi-bin/info.cgi HTTP/1.1" 404 1649 "-" "curl/7 ...
show more
51.81.155.131 - - [29/Dec/2025:23:31:40 -0500] "GET /cgi-bin/info.cgi HTTP/1.1" 404 1649 "-" "curl/7.54.0" "-"
51.81.155.131 - - [29/Dec/2025:23:31:41 -0500] "GET /cgi-bin/param.cgi?get_device_conf HTTP/1.1" 404 1649 "-" "curl/7.54.0" "-"
51.81.155.131 - - [29/Dec/2025:23:31:43 -0500] "GET /cgi-bin/authLogin.cgi HTTP/1.1" 404 1649 "-" "curl/7.54.0" "-"
...
show less
Bad Web Bot
🇦🇷
200.114.169.214
30 Dec 2025
200.114.169.214 - - [29/Dec/2025:20:52:43 -0500] "GET /wp-login.php HTTP/1.1" 404 1649 "-" "Mozilla/ ...
show more
200.114.169.214 - - [29/Dec/2025:20:52:43 -0500] "GET /wp-login.php HTTP/1.1" 404 1649 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/609.0.0.0 Safari/537.36" "-"
200.114.169.214 - - [29/Dec/2025:20:52:44 -0500] "GET /phpmyadmin/ HTTP/1.1" 404 1649 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.66 (KHTML, like Gecko) Chrome/135.0.0.0 Whale/4.29.282.14 Safari/537.36" "-"
200.114.169.214 - - [29/Dec/2025:20:52:44 -0500] "GET /phpMyAdmin/ HTTP/1.1" 404 1649 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.46 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/237.36" "-"
...
show less
Bad Web Bot
🇩🇪
209.38.196.199
29 Dec 2025
209.38.196.199 - - [29/Dec/2025:14:37:04 -0500] "GET / HTTP/1.1" 400 248 "-" "Mozilla/5.0 (compatibl ...
show more
209.38.196.199 - - [29/Dec/2025:14:37:04 -0500] "GET / HTTP/1.1" 400 248 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" "-"
209.38.196.199 - - [29/Dec/2025:14:37:04 -0500] "GET /v2/_catalog HTTP/1.1" 400 248 "-" "Go-http-client/1.1" "-"
209.38.196.199 - - [29/Dec/2025:14:37:05 -0500] "GET / HTTP/1.1" 400 248 "-" "Go-http-client/1.1" "-"
...
show less
Web App Attack
🇩🇪
209.38.250.42
29 Dec 2025
209.38.250.42 - - [29/Dec/2025:14:37:04 -0500] "GET /query?q=SHOW+DIAGNOSTICS HTTP/1.1" 400 248 "-" ...
show more
209.38.250.42 - - [29/Dec/2025:14:37:04 -0500] "GET /query?q=SHOW+DIAGNOSTICS HTTP/1.1" 400 248 "-" "Go-http-client/1.1" "-"
209.38.250.42 - - [29/Dec/2025:14:37:04 -0500] "GET /solr/admin/info/system HTTP/1.1" 400 248 "-" "Go-http-client/1.1" "-"
209.38.250.42 - - [29/Dec/2025:14:37:04 -0500] "GET /solr/admin/cores?action=STATUS&wt=json HTTP/1.1" 400 248 "-" "Go-http-client/1.1" "-"
...
show less
Web App Attack
🇳🇱
45.148.10.244
29 Dec 2025
45.148.10.244 - - [29/Dec/2025:09:21:31 -0500] "\x16\x03\x01\x05\xA8\x01\x00\x05\xA4\x03\x03\x01\xE7 ...
show more
45.148.10.244 - - [29/Dec/2025:09:21:31 -0500] "\x16\x03\x01\x05\xA8\x01\x00\x05\xA4\x03\x03\x01\xE7\xA8a\xD9&\xB6\x86\x0E\xC374E\x94\xF2\xAA\xFD\x16S\xB6\x9C\xDB\xBCn#TW\xDF\xB4\xFFa+ \xC4\x8F[\xA0J\xDE@ &\x7FM~\x0C\xF6" 400 150 "-" "-" "-"
45.148.10.244 - - [29/Dec/2025:09:21:31 -0500] "\x16\x03\x01\x05\xA8\x01\x00\x05\xA4\x03\x03\xE1Cy\xF2\xB1\xBD\xDED\xCCc\x19\xF9w\xF1s\xEF\xFE\x9A\xD7\xFF\xE7m\x1AYW\x9D+\xF8\xF7\xFD\xAE\xDC q\xEA>]S\x9A\x9A\xAA\xF7\xF4\x00\x02\x80\xE1\xC9\xAFA\xDB/\xFC\x92\x9Elh\x84 \xAD{\x85d\x8E\x83\x00\x1A\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-" "-"
45.148.10.244 - - [29/Dec/2025:09:21:34 -0500] "\x16\x03\x01\x05\xA8\x01\x00\x05\xA4\x03\x03\x1E\xC6\x9B\xCD/EBV\xC1'E\xAA\x07r\xC7u&r\xE9\x09\xA2{\xA0\x9FL\xE4\xE5\xAB;\x94\x0C\x10 {\x1Du\x15\x87\x94\xA5i+\x08+\x01b\x1F(~\xEA\x15\x0EP\x04\xA6h{\x8288 \xC3i+r\x00\x1A\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-" "-"
...
show less
Web App Attack
🇯🇵
20.27.216.90
29 Dec 2025
20.27.216.90 - - [29/Dec/2025:06:14:15 -0500] "GET /cgi-bin/file.php HTTP/1.1" 404 1649 "https://duc ...
show more
20.27.216.90 - - [29/Dec/2025:06:14:15 -0500] "GET /cgi-bin/file.php HTTP/1.1" 404 1649 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" "180.10.88.251"
20.27.216.90 - - [29/Dec/2025:06:14:15 -0500] "GET /cgi-bin/index.php HTTP/1.1" 404 1649 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" "219.198.66.157"
20.27.216.90 - - [29/Dec/2025:06:14:46 -0500] "GET /wp-login.php HTTP/1.1" 404 1649 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" "197.59.154.94"
...
show less
Bad Web Bot
🇺🇸
206.168.34.211
29 Dec 2025
206.168.34.211 - - [29/Dec/2025:04:50:31 -0500] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\xE6\xD ...
show more
206.168.34.211 - - [29/Dec/2025:04:50:31 -0500] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\xE6\xDD\xEC\x8B\x83q\xDD\xBD\xB5*z\xC0\xF1^\xB4" 400 150 "-" "-" "-"
206.168.34.211 - - [29/Dec/2025:04:50:39 -0500] "PRI * HTTP/2.0" 400 150 "-" "-" "-"
206.168.34.211 - - [29/Dec/2025:04:51:25 -0500] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\x13\x03\xB6\xA9\xFEK\x9B\xAD\x1F4\x8F\xC6m\xDB\xC8\x9DY\x06\x85\xADV\x9D\x07\xAE\x8E\xA1B\xA0\xC74\x86\xFD %Gz\xDF\xAB4m\xC8\xD84\x9D\xC6R%{y\x96c)\xD9\xB2\xBC^\x0C\xC7\x05d\x9AUs\xFC\xF8\x00&\xCC\xA8\xCC\xA9\xC0/\xC00\xC0+\xC0,\xC0\x13\xC0\x09\xC0\x14\xC0" 400 150 "-" "-" "-"
...
show less
Web App Attack
🇸🇬
4.194.41.74
29 Dec 2025
4.194.41.74 - - [28/Dec/2025:19:33:27 -0500] "GET /cgi-bin/file.php HTTP/1.1" 404 1649 "https://www. ...
show more
4.194.41.74 - - [28/Dec/2025:19:33:27 -0500] "GET /cgi-bin/file.php HTTP/1.1" 404 1649 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" "89.172.1.162"
4.194.41.74 - - [28/Dec/2025:19:33:28 -0500] "GET /cgi-bin/index.php HTTP/1.1" 404 1649 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" "203.250.130.8"
4.194.41.74 - - [28/Dec/2025:19:33:48 -0500] "GET /wp-login.php HTTP/1.1" 404 1649 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" "144.94.161.116"
...
show less
Bad Web Bot
🇩🇪
167.94.146.55
28 Dec 2025
167.94.146.55 - - [28/Dec/2025:04:17:30 -0500] "PRI * HTTP/2.0" 400 150 "-" "-" "-"
167.94.146.55 - ...
show more
167.94.146.55 - - [28/Dec/2025:04:17:30 -0500] "PRI * HTTP/2.0" 400 150 "-" "-" "-"
167.94.146.55 - - [28/Dec/2025:04:17:33 -0500] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\xE7w*\xE0\x96\xDE\xA7\xCC\xB4\xC7n\x1C\xB3\xBBH\x15\x86c\x17\x00+em\x8E\x93\xD2<9\x8F.o[ -\x89c\x08\x8C\xB1#\xC9^\x96\xAE\x8D\xF1!D6\x7F-\x12\x99\xA9\xE1\xB7\x9Dq}\xBA\x84\x0BH\xB2\x80\x00&\xCC\xA8\xCC\xA9\xC0/\xC00\xC0+\xC0,\xC0\x13\xC0\x09\xC0\x14\xC0" 400 150 "-" "-" "-"
167.94.146.55 - - [28/Dec/2025:04:17:39 -0500] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03N\xAB\xDC7\x14\xC4\x00\xD2F(\x8A.\xF7\x96\xEE'F\x87\xDC\x13%\xD08\x87\x86*\xBFq\xAFK\x1F\xB4 \x8D\xE3mgW\xF2yh\xDF'\x17f\x8E;\xCA\xF1[i\xE6\x196\xA0\xB5\xCA\xA0\xD7A/(" 400 150 "-" "-" "-"
...
show less
Web App Attack
🇺🇸
206.168.34.124
28 Dec 2025
206.168.34.124 - - [27/Dec/2025:21:51:34 -0500] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\x8C\xB ...
show more
206.168.34.124 - - [27/Dec/2025:21:51:34 -0500] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\x8C\xBD\xE4(w\xC4\xCCrr\xED\xB9\x8D\x98\xBE;I\xD8B\xFB\xB2\xF3\x04\x14\x83\x14\xF6\x05\x06K8-\x9B \xF3b\x82(\x00\xD3\x96\xF1R\x0E7\x1C8A\xE4V\x9B\xA2\xAC\xD2" 400 150 "-" "-" "-"
206.168.34.124 - - [27/Dec/2025:21:51:38 -0500] "PRI * HTTP/2.0" 400 150 "-" "-" "-"
206.168.34.124 - - [27/Dec/2025:21:52:39 -0500] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03oa\x10\xE9F\xBB(\xB4H\x01\xD9\x1B\xB3\x12I\x90\x02\xEB*\xFF\xF5\x8B9\xBE\x7FP\x1FS\xCF\xDD\xDF\x9E <z\xC3\x1A\xC6\xF0Y\xF5tF\x95B3u\x09o<\x81\xC5\x02\x8B\x9BE+\xC4e\xC6\x15\x93Ui\xD4\x00&\xCC\xA8\xCC\xA9\xC0/\xC00\xC0+\xC0,\xC0\x13\xC0\x09\xC0\x14\xC0" 400 150 "-" "-" "-"
...
show less
Web App Attack
🇺🇸
161.35.102.1
27 Dec 2025
161.35.102.1 - - [27/Dec/2025:14:05:15 -0500] "lv|'|'|VHJvamFuX0M0NkY2RTk=|'|'|MARK|'|'|user|'|'|201 ...
show more
161.35.102.1 - - [27/Dec/2025:14:05:15 -0500] "lv|'|'|VHJvamFuX0M0NkY2RTk=|'|'|MARK|'|'|user|'|'|2013-11-22|'|'||'|'|Win XP|'|'|No|'|'|0.6.4|'|'|..|'|'||'|'|[endof]" 400 150 "-" "-" "-"
161.35.102.1 - - [27/Dec/2025:14:05:15 -0500] "Gh0st\xAD\x00\x00\x00\xE0\x00\x00\x00x\x9CKS``\x98\xC3\xC0\xC0\xC0\x06\xC4\x8C@\xBCQ\x96\x81\x81\x09H\x07\xA7\x16\x95e&\xA7*\x04$&g+\x182\x94\xF6\xB000\xAC\xA8rc\x00\x01\x11\xA0\x82\x1F\x5C`&\x83\xC7K7\x86\x19\xE5n\x0C9\x95n\x0C;\x84\x0F3\xAC\xE8sch\xA8^\xCF4'J\x97\xA9\x82\xE30\xC3\x91h]&\x90\xF8\xCE\x97S\xCBA4L?2=\xE1\xC4\x92\x86\x0B@\xF5`\x0CT\x1F\xAE\xAF]" 400 150 "-" "-" "-"
161.35.102.1 - - [27/Dec/2025:14:05:15 -0500] "145.ll|'|'|SGFjS2VkX0Q0OTkwNjI3|'|'|WIN-JNAPIER0859|'|'|JNapier|'|'|19-02-01|'|'||'|'|Win 7 Professional SP1 x64|'|'|No|'|'|0.7d|'|'|..|'|'|AA==|'|'|112.inf|'|'|SGFjS2VkDQoxOTIuMTY4LjkyLjIyMjo1NTUyDQpEZXNrdG9wDQpjbGllbnRhLmV4ZQ0KRmFsc2UNCkZhbHNlDQpUcnVlDQpGYWxzZQ==12.act|'|'|AA==" 400 150 "-" "-" "-"
...
show less
Web App Attack