Anonymous
2026-07-06 08:55:07
(6 hours ago)
Bad Request d83cd279
Port Scan
Hacking
Bad Web Bot
Web App Attack
πΈπ¬
serverutama
2026-07-06 08:16:57
(7 hours ago)
fail2ban[nginx-bad-request]: malformed/bad HTTP requests.
Web App Attack
π¨π¦
smithoo4
2026-07-06 08:06:04
(7 hours ago)
34.22.138.32 - - [06/Jul/2026:04:06:03 -0400] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10 ...
show more
34.22.138.32 - - [06/Jul/2026:04:06:03 -0400] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
34.22.138.32 - - [06/Jul/2026:04:06:03 -0400] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03:\x8A\x09^\xC5|\xBD\x89\xADi\x96\xE5\xFF\x13'\x98_\xD023\x87\xAC\xC7\xFE\xCC^kbly\xC5\xD8 Ce\x85L$\x17\xD0W\xB5\xDE\xB6\xE5\x8E\xB4\x08\xDC]|\xB6\xE1\xD5)c_\x08u.\xD4\xA6Xm\x83\x002\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-"
...
show less
Port Scan
Bad Web Bot
π©πͺ
london2038.com
2026-07-06 07:07:36
(8 hours ago)
Malformed or malicious web request
34.22.138.32 - - [06/Jul/2026:09:07:29 +0200] "\x16\x03\x00\x00i\ ...
show more
Malformed or malicious web request
34.22.138.32 - - [06/Jul/2026:09:07:29 +0200] "\x16\x03\x00\x00i\x01\x00\x00e\x03\x03U\x1C\xA7\xE4random1random2random3random4\x00\x00\x0C\x00/\x00" 400 157 "-" "-"
show less
Hacking
Web App Attack
πΊπΈ
gu-alvareza
2026-07-06 07:05:05
(8 hours ago)
Java.Debug.Wire.Protocol.Insecure.Configuration
Hacking
Anonymous
2026-07-06 07:03:06
(8 hours ago)
34.22.138.32 - - [06/Jul/2026:09:03:03 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03E\x92\x97 ...
show more
34.22.138.32 - - [06/Jul/2026:09:03:03 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03E\x92\x97!Qi:\xBE\xE9\xC2\xB0\x0B\xB2j\x0F\x81E]\xC6\xFD\xFA\xF1\xD2\xDE\xFC\x98\xCDXB}\xA56 \xBE\xD6\x80\x1A\x10\xD2\x8D\xEE\xA6\xDCU\xEB!A\x03 \x1C\xD5\xEDa\xB19\xC6\xE4\xB0\x92\xEARcu\xF7\x8E\x002\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-" "-"
34.22.138.32 - - [06/Jul/2026:09:03:06 +0200] "9QZa\x0E7U\xAD_\xC3\x89r\xE3\xD2!\x0E\x97\xC2\xE9\xC0\xA1\xAE\xFF`\xCD\xDA?\x0C\xEE\xF0\xBD\xBC$*\x14\xBF\xBE\xB1\x1E\x19n8\x93\xDEBh\xE1\xCB\xCB\x10\xDD\xCF\xCFEQp\x9C\xFE<\xE6\x146*\xB6" 400 150 "-" "-" "-"
34.22.138.32 - - [06/Jul/2026:09:03:06 +0200] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-" "-"
...
show less
Hacking
Web App Attack
πΊπΈ
NXTwoThou
2026-07-06 06:45:43
(8 hours ago)
Verb
Web App Attack
π΅π±
mkey
2026-07-06 06:43:01
(9 hours ago)
[First: 2026-07-06 06:37:30/single] HITS=1 Repeated suspicious IDS-detected activity; sample=WEB-ATA ...
show more
[First: 2026-07-06 06:37:30/single] HITS=1 Repeated suspicious IDS-detected activity; sample=WEB-ATACK: Invalid destination host in header
show less
Port Scan
Hacking
Web App Attack
πΊπΈ
donarev419
2026-07-06 06:19:47
(9 hours ago)
Connection to port 80 with data transfer.
Data preview: GET / HTTP/1.1
Host: 167.253.66.144:80
Use ...
show more
Connection to port 80 with data transfer.
Data preview: GET / HTTP/1.1
Host: 167.253.66.144:80
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) Apple
show less
Port Scan
Hacking
πΊπΈ
Starburst SysOp Team
2026-07-06 06:14:32
(9 hours ago)
Host header is a numeric IP address. Pattern match "(?:^( (920350-iad5-2)
Hacking
Bad Web Bot
π©πͺ
dpsbs
2026-07-06 05:57:13
(9 hours ago)
multiple ips intrustions detected
Hacking
π§π·
mubusys.com
2026-07-06 05:37:51
(10 hours ago)
34.22.138.32 - - [06/Jul/2026:02:37:39 -0300] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\xCE \xD4 ...
show more
34.22.138.32 - - [06/Jul/2026:02:37:39 -0300] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\xCE \xD48h~o\x00\xA5\x0C(\x1C\xD5JE\x86\x83 mN\x16\xA8\xF9\xCBj\xC6\x80b*\xB0?o \xBA\xCE0{\xD6\x8C\xC8\xA9xy'\x92s\xDB49\x1C1qO\x93\xA2t\x9EJ\xA214\xF6P\x8Bt\x002\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 157 "-" "-" "-"
34.22.138.32 - - [06/Jul/2026:02:37:45 -0300] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 157 "-" "-" "-"
show less
Hacking
Brute-Force
π©πͺ
ghostwarriors
2026-07-06 04:50:04
(10 hours ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
Anonymous
2026-07-06 04:38:53
(11 hours ago)
34.22.138.32 - - [06/Jul/2026:06:38:24 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x035\xA3\xE1 ...
show more
34.22.138.32 - - [06/Jul/2026:06:38:24 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x035\xA3\xE1\x03U\xDEJ\xF4\xC8<\xC4\x1B\xAC\x8C\x83\xB0\xC9\x94\xB5\xFCaw\xC8_mK\x1B+\xE2\xC3\x0B\x11 :\xF0B\xD4\xAFk\xE0,\xE6\x0C\xAC\x02\x09\x060P\x03\xB6\xBE\xC5nXS\xD49<\xD1|\xF1\xE1\x13\xC4\x002\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-"
34.22.138.32 - - [06/Jul/2026:06:38:29 +0200] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-"
34.22.138.32 - - [06/Jul/2026:06:38:29 +0200] "4\xEAi\x9F\x1A\x859\xAC\xB6\x9F\xDBJ\x97\xD3/S|M\xD4Dyv\xE8e]\xFB|t\xE1\xC1\x05\x8D\xBB\x8B1\xEF>L`=\xE7\x8F\xA6\x89\x8C=x\xFF\xB2\xFF\x9F\xC5\xE1m\x90\xF0p\xEEki\x00h\xB3*" 400 150 "-" "-"
34.22.138.32 - - [06/Jul/2026:06:38:47 +0200] "\x00\x1E/2\x01\x00\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03" 400 150 "-" "-
...
show less
Web App Attack
Anonymous
2026-07-06 04:35:32
(11 hours ago)
Fail2Ban triggered
Web App Attack