Anonymous
2026-10-19 12:17:04
(2 hours ago)
Fuzzing/Looking for credentials files.
Brute-Force
Web App Attack
๐บ๐ธ
scharsey
2026-10-19 10:22:10
(4 hours ago)
Honeypot: 10 HTTP events, 3 HTTP paths probed
Web App Attack
Anonymous
2026-10-19 09:52:20
(5 hours ago)
Reported from Nginx log analysis 6. Log: 34.156.103.13 - - [19/Oct/2026:xx:xx:xx 0200] "GET / HTTP/ ...
show more
Reported from Nginx log analysis 6. Log: 34.156.103.13 - - [19/Oct/2026:xx:xx:xx 0200] "GET / HTTP/1.1" xxx xxx "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" "-" "BE Belgium Brussels" "AS396982" "Google LLC"
show less
Port Scan
Brute-Force
SSH
๐บ๐ธ
distorx
2026-10-19 09:47:39
(5 hours ago)
[19/Oct/2026:09:47:38 +0000] 400 - GET http 209.141.57.83 "/" [Client 34.156.103.13] [Length 654] [G ...
show more
[19/Oct/2026:09:47:38 +0000] 400 - GET http 209.141.57.83 "/" [Client 34.156.103.13] [Length 654] [Gzip -] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" "-"
...
show less
Port Scan
Bad Web Bot
Anonymous
2026-10-19 09:25:51
(5 hours ago)
[Mon Oct 19 11:25:46.822515 2026] [authz_core:error] [pid 2232799] [client 34.156.103.13:37278] AH01 ...
show more
[Mon Oct 19 11:25:46.822515 2026] [authz_core:error] [pid 2232799] [client 34.156.103.13:37278] AH01630: client denied by server configuration: /var/www/html/default/
[Mon Oct 19 11:25:47.024094 2026] [authz_core:error] [pid 2225437] [client 34.156.103.13:37294] AH01630: client denied by server configuration: /var/www/html/default/favicon.ico
[Mon Oct 19 11:25:50.743467 2026] [authz_core:error] [pid 2232785] [client 34.156.103.13:16906] AH01630: client denied by server configuration: /var/www/html/default/pub
[Mon Oct 19 11:25:51.249248 2026] [authz_core:error] [pid 2232784] [client 34.156.103.13:16910] AH01630: client denied by server configuration: /var/www/html/default/files
[Mon Oct 19 11:25:51.447576 2026] [authz_core:error] [pid 2228900] [client 34.156.103.13:16924] AH01630: client denied by server configuration: /var/www/html/default/
...
show less
Web App Attack
๐ฉ๐ช
Roper123
2026-10-19 09:18:35
(5 hours ago)
Web exploits
Web App Attack
๐ง๐ท
diego
2026-10-19 08:49:00
(6 hours ago)
[probe-44-49] 2026-10-19 08:33:15, Client: 34.156.103.13, Protocol: 6, Unauthorized activity to HTTP ...
show more
[probe-44-49] 2026-10-19 08:33:15, Client: 34.156.103.13, Protocol: 6, Unauthorized activity to HTTP: GET /
show less
Web App Attack
๐ช๐น
AlienBase
2026-10-19 08:39:00
(6 hours ago)
34.156.103.13 - - [19/Oct/2026:02:50:56 +0000] "GET / HTTP/1.1" 403 146 "-" "Mozilla/5.0 (compatible ...
show more
34.156.103.13 - - [19/Oct/2026:02:50:56 +0000] "GET / HTTP/1.1" 403 146 "-" "Mozilla/5.0 (compatible)"
34.156.103.13 - - [19/Oct/2026:02:51:02 +0000] "GET /pub/ HTTP/1.1" 403 146 "-" "Mozilla/5.0 (compatible)"
34.156.103.13 - - [19/Oct/2026:02:51:02 +0000] "GET /files/ HTTP/1.1" 403 146 "-" "Mozilla/5.0 (compatible)"
34.156.103.13 - - [19/Oct/2026:02:51:02 +0000] "GET /downloads/ HTTP/1.1" 403 146 "-" "Mozilla/5.0 (compatible)"
show less
Hacking
Anonymous
2026-10-19 08:10:29
(6 hours ago)
Web application attack detected.
Web App Attack
Anonymous
2026-10-19 07:47:37
(7 hours ago)
34.156.103.13 - visio.sliver85.eu - [19/Oct/2026:09:04:27 +0200] "GET / HTTP/1.1" 444 "Mozilla/5.0 ( ...
show more
34.156.103.13 - visio.sliver85.eu - [19/Oct/2026:09:04:27 +0200] "GET / HTTP/1.1" 444 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
34.156.103.13 - visio.sliver85.eu - [19/Oct/2026:09:04:27 +0200] "GET / HTTP/1.1" 444 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
34.156.103.13 - visio.sliver85.eu - [19/Oct/2026:09:47:36 +0200] "GET / HTTP/1.1" 444 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
34.156.103.13 - visio.sliver85.eu - [19/Oct/2026:09:47:36 +0200] "GET / HTTP/1.1" 444 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
...
show less
Brute-Force
Web App Attack
๐น๐ผ
tyebstx
2026-10-19 07:20:50
(7 hours ago)
Wazuh Alert Evidence: 34.156.103.13 - - [19/Oct/2026:07:20:48 +0000] "GET / HTTP/1.1" 444 0 "-" "Moz ...
show more
Wazuh Alert Evidence: 34.156.103.13 - - [19/Oct/2026:07:20:48 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" "-"
show less
Web App Attack
๐ง๐ท
diego
2026-10-19 07:19:00
(7 hours ago)
[probe-44-49] 2026-10-19 07:00:48, Client: 34.156.103.13, Protocol: 6, Unauthorized activity to HTTP ...
show more
[probe-44-49] 2026-10-19 07:00:48, Client: 34.156.103.13, Protocol: 6, Unauthorized activity to HTTP: GET /
show less
Web App Attack
๐ฉ๐ช
D3vNu11
2026-10-19 07:06:33
(8 hours ago)
Level: (LOW): Reputation Unknown via CitrixHoneypot IOC Country: Belgium 8x -> Target Country: Germa ...
show more
Level: (LOW): Reputation Unknown via CitrixHoneypot IOC Country: Belgium 8x -> Target Country: Germany HTTPS
show less
Hacking
Web App Attack
๐ฎ๐ฉ
leomardsy_
2026-10-19 07:05:03
(8 hours ago)
Port Scan
๐บ๐ธ
solantex
2026-10-19 06:56:39
(8 hours ago)
Malformed and abusive traffic directed at Solantex services.
Port Scan