๐ฉ๐ช
LavrinenkoRM
2026-10-15 19:11:28
(3 days ago)
Sentinel WAF: web/Correlation Engine; Threat Score 85; confidence=90; blocked_at=2026-10-15T18:56:10 ...
show more
Sentinel WAF: web/Correlation Engine; Threat Score 85; confidence=90; blocked_at=2026-10-15T18:56:10.121220+00:00
show less
Web App Attack
๐ฉ๐ช
LavrinenkoRM
2026-10-15 11:11:17
(4 days ago)
Sentinel WAF: web/Correlation Engine; Threat Score 85; confidence=90; blocked_at=2026-10-15T10:55:48 ...
show more
Sentinel WAF: web/Correlation Engine; Threat Score 85; confidence=90; blocked_at=2026-10-15T10:55:48.498429+00:00
show less
Web App Attack
๐ฉ๐ช
fds.io
2026-10-15 07:26:53
(4 days ago)
detected and blocked repeated malformed HTTP requests / protocol violations (HTTP 400)
Bad Web Bot
Web App Attack
๐ฉ๐ช
ManagedStack
2026-10-15 07:15:02
(4 days ago)
Probing access to unauthorized locations
Hacking
Exploited Host
Web App Attack
๐ฉ๐ช
LavrinenkoRM
2026-10-15 07:11:10
(4 days ago)
Sentinel WAF: web/Correlation Engine; Threat Score 85; confidence=90; blocked_at=2026-10-15T06:55:27 ...
show more
Sentinel WAF: web/Correlation Engine; Threat Score 85; confidence=90; blocked_at=2026-10-15T06:55:27.409744+00:00
show less
Web App Attack
๐ณ๐ด
Bots.go.to.hell
2026-10-15 06:57:48
(4 days ago)
This IP was detected by CrowdSec triggering custom/ip-honeypot
Web App Attack
Bad Web Bot
๐น๐ท
pashait
2026-10-15 06:35:38
(4 days ago)
Auto-blocked by Seczar SecureOps โ IPS Web Attack Signature (1 events in 5min) at 2026-10-15 06:35
Web App Attack
Bad Web Bot
๐ฉ๐ช
sojan
2026-10-15 06:25:52
(4 days ago)
34.156.204.53 - - [15/Oct/2026:08:25:08 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\x976&\x ...
show more
34.156.204.53 - - [15/Oct/2026:08:25:08 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\x976&\xE2\xE9\xB9z\x99\xFB\xBE`\x84K\xC1\x19\x1E\x9Ex\xA2J\xD5\x9E\xFB\x03R\xEB\xAC\x0E\xE5\x8EN\x8D \x17h\x16nF\xBC\xB2\xB4\x8E\x074\xF0aW\xF0\xBFQ\xC4\x91\x8B<\x8B\xADm}f\xDBN\xB7\xD9J\xC3\x002\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-"
34.156.204.53 - - [15/Oct/2026:08:25:13 +0200] "\x979\x80e\x97<\xE5\x02\xC14\x87\xD4\xA0z\xFF\x04\xD4?\xCC\xAE\x18\xFA!\xF3\xBE\xB4Ef\x9B(\x9A\x84\x8D\xC1\xF2\x8B\xDD\xA2_nf\x87\x9Es\xDE\x05Zg\x9EY&\xBA\x89\xF97%*\xC2\x8D\xD0\x14e\x9F\xB0" 400 150 "-" "-"
34.156.204.53 - - [15/Oct/2026:08:25:51 +0200] "\x00\x1E\x06\xE1\x01\x00\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03" 400 150 "-" "-"
...
show less
Bad Web Bot
๐บ๐ธ
cwytech
2026-10-15 06:10:01
(4 days ago)
Fleet-wide ban from the Ghostfleet ๐ป. Triggered by scenario: cwy/web-asn-lockdown-high.
Bad Web Bot
Web App Attack
๐ฏ๐ต
pixelboost.kr
2026-10-15 05:52:36
(4 days ago)
34.156.204.53 - - [15/Oct/2026:14:52:35 +0900] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 1 ...
show more
34.156.204.53 - - [15/Oct/2026:14:52:35 +0900] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
dpsbs
2026-10-15 05:34:14
(4 days ago)
multiple ips intrustions detected
Hacking
๐ฉ๐ช
AetherFox
2026-10-15 05:32:01
(4 days ago)
AetherFox VoidGuard detected: [Thu Oct 15 05:32:00.436209 2026] [authz_core:error] [pid 3004162:tid ...
show more
AetherFox VoidGuard detected: [Thu Oct 15 05:32:00.436209 2026] [authz_core:error] [pid 3004162:tid 3004185] [client 34.156.204.53:7248] AH01630: client denied by server configuration: proxy:http://[MASKED]/
[Thu Oct 15 05:32:00.436345 2026] [authz_core:error] [pid 3004162:tid 3004185] [client 34.156.204.53:7248] AH01630: client denied by server configuration: /var/www/html/ERRORpages/403.html
[Thu Oct 15 05:32:00.589360 2026] [authz_core:error] [pid 3004163:tid 3004194] [client 34.156.204.53:7258] AH01630: client denied by server configuration: proxy:http://[MASKED]/
[Thu Oct 15 05:32:00.589459 2026] [authz_core:error] [pid 3004163:tid 3004194] [client 34.156.204.53:7258] AH01630: client denied by server configuration: /var/www/html/ERRORpages/403.html
[Thu Oct 15 05:32:00.747334 2026] [authz_core:error] [pid 3004163:tid 3004197] [client 34.156.204.53:7274] AH01630: client denied by server configuration: proxy:http://[MASKED]/
...
show less
Bad Web Bot
Web App Attack
๐ง๐ท
SOC Blue Team
2026-10-15 05:27:44
(4 days ago)
IPs get by Hunting on SIEM
Phishing
Web Spam
Port Scan
Hacking
๐ซ๐ท
Bensay
2026-10-15 05:22:41
(4 days ago)
Repeated suspicious HTTP service scan against a blocked web sinkhole; threshold=3 events/10m; result ...
show more
Repeated suspicious HTTP service scan against a blocked web sinkhole; threshold=3 events/10m; result=blocked; user-agent=Mozilla/5.0 (compatible; nmap-http-info)
show less
Port Scan
๐ฉ๐ช
LavrinenkoRM
2026-10-15 05:11:09
(4 days ago)
Sentinel WAF: web/Correlation Engine; Threat Score 85; confidence=90; blocked_at=2026-10-15T04:55:05 ...
show more
Sentinel WAF: web/Correlation Engine; Threat Score 85; confidence=90; blocked_at=2026-10-15T04:55:05.590080+00:00
show less
Web App Attack