2026-06-07 12:16:11
(3 hours ago)
Fuzzing/Looking for credentials files.
Brute-Force
Web App Attack
🇵🇱
Roper123
2026-06-07 07:37:58
(7 hours ago)
Web app exploits
Web App Attack
🇳🇱
ItsJustStan
2026-06-07 07:35:25
(7 hours ago)
Multi-protocol port scanner sending binary payloads to HTTP port
Port Scan
🇫🇷
pm33
2026-06-07 07:32:21
(7 hours ago)
Probing for resource vulnerabilities HTTP(S)
Web App Attack
🇺🇸
gu-alvareza
2026-06-07 07:05:19
(8 hours ago)
Java.Debug.Wire.Protocol.Insecure.Configuration
Hacking
🇩🇪
ManagedStack
2026-06-07 06:30:02
(8 hours ago)
Probing access to unauthorized locations
Hacking
Exploited Host
Web App Attack
🇨🇳
WMK965
2026-06-07 06:01:18
(9 hours ago)
34.140.134.36 - - [07/Jun/2026:14:01:09 +0800] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\xA6\xC5 ...
show more
34.140.134.36 - - [07/Jun/2026:14:01:09 +0800] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\xA6\xC5\x11Z\xDD\xDB5[\xB6\xBA\xD9\xDFR\x02\xC4" 400 154 "-" "-" "-"
34.140.134.36 - - [07/Jun/2026:14:01:16 +0800] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 154 "-" "-" "-"
34.140.134.36 - - [07/Jun/2026:14:01:17 +0800] ">*}\xA5\xBA\x01\x5C\x90\xD4,&\x09T\xCD\xF4\xD11\xB7b\xFB\x82\xF5\xC0\x18\xE9\xA8\xC0u\x1FI\xE0\x0EN\x17(\x7F" 400 154 "-" "-" "-"
show less
Port Scan
Web App Attack
🇺🇸
crooze.net
2026-06-07 05:24:39
(9 hours ago)
34.140.134.36 - - [07/Jun/2026:01:24:38 -0400] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\xBF\xE0 ...
show more
34.140.134.36 - - [07/Jun/2026:01:24:38 -0400] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\xBF\xE0+\xF6Z\x174z\xBE\xAE\xDC2\xA4\x15\xCBo@\xBAO\xE2\x95\xC8\xE8p#(\x10\xEF\xB5Oh\xFC S\x1D\xA51\x18\x06Mak1#i I\x90\xA7\xA4\xF1a\x9BK-" 400 150 "-" "-"
...
show less
Hacking
Web App Attack
🇺🇸
NXTwoThou
2026-06-07 05:13:08
(10 hours ago)
Verb
Web App Attack
🇺🇸
conrad10781
2026-06-07 05:02:03
(10 hours ago)
nginx-direct-ip
Port Scan
2026-06-07 04:46:38
(10 hours ago)
bad ssl requests
Port Scan
Hacking
Web App Attack
🇸🇬
WMK965
2026-06-07 04:40:36
(10 hours ago)
34.140.134.36 - - [07/Jun/2026:12:40:30 +0800] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\x1A\xF0 ...
show more
34.140.134.36 - - [07/Jun/2026:12:40:30 +0800] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\x1A\xF0$>>\x1FM\xF6u\x19\xD2\xCET\xFC\xCB\x1B\xF4e\x15aM\xF2\xB9Hj\xD1\xC0\x96-\xAAV\x0F *\x0Ef,V\xDE2\x9E_\xE2\xE6\xD18\x82\xC2\x22oq\xE5\x05\x06\x17bT\xEF8\xB3\xB7?j\xF9\xC0\x002\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 154 "-" "-" "-"
34.140.134.36 - - [07/Jun/2026:12:40:35 +0800] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 154 "-" "-" "-"
34.140.134.36 - - [07/Jun/2026:12:40:35 +0800] "\xBE\xF3Q\x0E}\xB6\x80\xE1#kOj" 400 154 "-" "-" "-"
show less
Port Scan
Web App Attack
🇺🇸
itsnixk
2026-06-07 03:37:51
(11 hours ago)
(mod_security) mod_security (id:913100) triggered by 34.140.134.36 (BE/Belgium/36.134.140.34.bc.goog ...
show more
(mod_security) mod_security (id:913100) triggered by 34.140.134.36 (BE/Belgium/36.134.140.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Jun 06 23:37:47.849169 2026] [security2:error] [pid 2391540:tid 2391617] [client 34.140.134.36:24372] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "nmap" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity.d/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [redacted] [severity "CRITICAL"] [ver "OWASP_CRS/4.26.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/SCANNER-DETECTION"] [tag "capec/1000/118/224/541/310"] [redacted] [uri "/"] [unique_id "aiTni-zEJ5XNwjN8jv358gAAAEo"]
show less
Port Scan
🇫🇮
kumiko
2026-06-07 03:12:26
(12 hours ago)
[2026-06-07 06:12:25] Probing for exploits [1 requests]
"\x16\x03" 301
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
0xffffffff
2026-06-07 03:08:34
(12 hours ago)
[2026-06-07 06:08:32.248549] [authz_core:error] [pid 4138110:tid 133408453813952] [client 34.140.134 ...
show more
[2026-06-07 06:08:32.248549] [authz_core:error] [pid 4138110:tid 133408453813952] [client 34.140.134.36:46618] AH01630: client denied by server configuration: /var/www/html/ , error_notes:wrong-host , URI:'/'
[2026-06-07 06:08:32.298723] [authz_core:error] [pid 4138109:tid 133409074779840] [client 34.140.134.36:46632] AH01630: client denied by server configuration: /var/www/html/ , error_notes:wrong-host , URI:'/'
[2026-06-07 06:08:32.400445] [authz_core:error] [pid 4138109:tid 133409083172544] [client 34.140.134.36:46634] AH01630: client denied by server configuration: /var/www/html/ , error_notes:wrong-host , URI:'/'
[2026-06-07 06:08:32.551451] [authz_core:error] [pid 4138110:tid 133409116743360] [client 34.140.134.36:46648] AH01630: client denied by server configuration: /var/www/html/favicon.ico , error_notes:wrong-host , URI:'/favicon.ico'
[2026-06-07 06:08:32.551710] [authz_core:error] [pid 4138110:tid 133408445421248] [client 34.140.134.36:46640] AH01630: client denied by server configuration: /var/ww
show less
Web App Attack
Bad Web Bot