🇺🇸
gu-alvareza
2026-07-27 07:05:17
(2 days ago)
Java.Debug.Wire.Protocol.Insecure.Configuration
Hacking
2026-07-27 06:52:06
(2 days ago)
34.156.220.114 - - [27/Jul/2026:08:52:01 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\xD3\xE ...
show more
34.156.220.114 - - [27/Jul/2026:08:52:01 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\xD3\xEDh\x8F4\xDC\x02\x89\xF1\x09\x17\xF5\x8D\xF8Ff~mj\xDE\xFEWe\xEF\xB4\x02\x0F\xF3b\xD4\xEB# \xB3\xAE\xF6\xF2\x09{r&\x09\xDEc]+\xABbG\xE73\x5C;\xE2\xE3\xC0>Y\x0B\x00\xC7)\xB0\xD3\xC7\x002\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-" "-"
34.156.220.114 - - [27/Jul/2026:08:52:06 +0200] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-" "-"
34.156.220.114 - - [27/Jul/2026:08:52:06 +0200] "tb\xC0R\xFD\xF4\xCF\x07\x12Z\xFF\x83ENn@[\xEA\x98jk\xD6\x8BV+\x8E2\x91;\xE0<%5OV\x9B7\xFF\xFB\x831\xAE\xB3\xE2B\xEE<\xEE\x94\x94\x99\x96v\xCB\xAB\xA1\xEE\x9Bu\xB9\xA2\xC1G\xE7" 400 150 "-" "-" "-"
...
show less
Hacking
Web App Attack
🇨🇦
lakered
2026-07-27 06:49:33
(2 days ago)
Detectors: [NGINX] | Reasons: Nginx: Default server trap hit | Evidence: High-Criminality-Signature ...
show more
Detectors: [NGINX] | Reasons: Nginx: Default server trap hit | Evidence: High-Criminality-Signature (p0f:*:64:0:*:mss*30,7:mss,sok,ts,nop,ws:df,id+:0 - Ratio:0.98), OS-Signature-Mismatch (UA:Windows/p0f:Linux) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36 | TCP Fingerprint: Linux (Legacy/Embedded) (Link:generic tunnel or VPN, Uptime:53070m)
show less
Port Scan
Exploited Host
🇹🇭
MWA SOC
2026-07-27 06:33:39
(2 days ago)
Hacking
🇺🇸
cybertailor
2026-07-27 05:39:43
(2 days ago)
34.156.220.114 - - [27/Jul/2026:10:39:39 +0500] "GET / HTTP/1.1" 404 146 "-" "Mozilla/5.0 (compatibl ...
show more
34.156.220.114 - - [27/Jul/2026:10:39:39 +0500] "GET / HTTP/1.1" 404 146 "-" "Mozilla/5.0 (compatible)"
34.156.220.114 - - [27/Jul/2026:10:39:39 +0500] "GET /favicon.ico HTTP/1.1" 404 146 "-" "Mozilla/5.0 (compatible)"
34.156.220.114 - - [27/Jul/2026:10:39:40 +0500] "GET / HTTP/1.1" 404 146 "-" "Mozilla/5.0 (compatible)"
34.156.220.114 - - [27/Jul/2026:10:39:40 +0500] "HEAD / HTTP/1.1" 404 0 "-" "Mozilla/5.0 (compatible)"
34.156.220.114 - - [27/Jul/2026:10:39:40 +0500] "POST / HTTP/1.1" 404 146 "-" "Mozilla/5.0 (compatible)"
...
show less
Port Scan
🇦🇺
FEWA
2026-07-27 05:15:46
(2 days ago)
Fail2Ban Ban Triggered
Hacking
Bad Web Bot
Web App Attack
🇦🇹
nomzamo
2026-07-27 05:15:31
(2 days ago)
Fail2Ban reported: nginx-bad-request
Brute-Force
🇩🇪
nidaren
2026-07-27 05:09:26
(2 days ago)
34.156.220.114 - - [27/Jul/2026:07:09:25 +0200] "\x16\x03\x00\x00i\x01\x00\x00e\x03\x03U\x1C\xA7\xE4 ...
show more
34.156.220.114 - - [27/Jul/2026:07:09:25 +0200] "\x16\x03\x00\x00i\x01\x00\x00e\x03\x03U\x1C\xA7\xE4random1random2random3random4\x00\x00\x0C\x00/\x00" 400 150 "-" "-"
...
show less
Bad Web Bot
Web App Attack
🇨🇦
smithoo4
2026-07-27 04:59:22
(2 days ago)
34.156.220.114 - - [27/Jul/2026:00:59:21 -0400] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT ...
show more
34.156.220.114 - - [27/Jul/2026:00:59:21 -0400] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
34.156.220.114 - - [27/Jul/2026:00:59:21 -0400] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\xC0\x0E\xB4\xA5\x08\xF4\xF9\xFB\xC9\xCA\xCCi\xDD\x81\x1B9%c\x04\xDD\xCE{P\x1B\xAA\xD01)(\xE3\xE8\x7F \xEF0\x05\x8A\xE5(\xC7\x88\x01\x18B#\xCE\xACQf\x95\x89\x01f/\xE1\x22T(\x9F\xD2\xF4\xE9\xBA\xB08\x002\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-"
...
show less
Port Scan
Bad Web Bot
🇫🇷
pm33
2026-07-27 04:32:51
(2 days ago)
Probing for resource vulnerabilities HTTP(S)
Web App Attack
🇺🇸
HamSammich
2026-07-27 04:06:03
(2 days ago)
Automated sensor: 1 HTTP connection/probe attempts over the last 24h (latest 2026-07-27T04:06Z).
Brute-Force
Web App Attack
🇩🇪
Ilop
2026-07-27 04:00:51
(2 days ago)
[hp-100] 4 unsolicited packets to honeypot ports 80 (OCI DShield sensor)
Port Scan
🇸🇪
SkyDancer
2026-07-27 03:57:41
(2 days ago)
Multiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by Sk ...
show more
Multiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by SkyDancer Ai. EXT-SYS-Vx
show less
Hacking
Brute-Force
SSH
🇺🇸
kosada.com
2026-07-27 03:56:55
(2 days ago)
Web vulnerability probing: / (bogus vhost/SNI)
Web App Attack
🇩🇪
Ano_Nym
2026-07-27 03:46:14
(2 days ago)
CrowdSec IDS alert on VPS 85.215.198.123 (DE). Scenario: crowdsecurity/http-probing
Web App Attack