🇸🇪
Per-Erik Runebert
2026-10-22 08:39:22
UTC ·
(2 weeks ago)
Excessive unauthorized requests
Hacking
🇺🇸
gu-alvareza
2026-10-22 05:05:04
UTC ·
(2 weeks ago)
Java.Debug.Wire.Protocol.Insecure.Configuration
Hacking
Anonymous
2026-10-21 11:43:48
UTC ·
(2 weeks ago)
Probing for known exploit paths (.env, .git, wp-admin, shell files, etc.). Single-strike ban policy — zero tolerance for exploit scanning. Banned Oct 21, 11:43 UTC. Origin: Belgium, Brussels.
Hacking
Bad Web Bot
Web App Attack
🇳🇱
erwindecker
2026-10-21 11:35:36
UTC ·
(2 weeks ago)
[21/Oct/2026:13:35:35 +0200] 400 - OPTIONS http 195.240.146.102 "/" [Client 34.22.158.165] [Length 252] [Gzip -] "Mozilla/5.0 (compatible)" "-"
[21/Oct/2026:13:35:35 +0200] 400 - GET http 195.240.146.102 "/" [Client 34.22.158.165] [Length 252] [Gzip ...
show more
[21/Oct/2026:13:35:35 +0200] 400 - OPTIONS http 195.240.146.102 "/" [Client 34.22.158.165] [Length 252] [Gzip -] "Mozilla/5.0 (compatible)" "-"
[21/Oct/2026:13:35:35 +0200] 400 - GET http 195.240.146.102 "/" [Client 34.22.158.165] [Length 252] [Gzip -] "Mozilla/5.0 (compatible)" "-"
[21/Oct/2026:13:35:35 +0200] 400 - LFIZ http 195.240.146.102 "/" [Client 34.22.158.165] [Length 252] [Gzip -] "Mozilla/5.0 (compatible)" "-"
[21/Oct/2026:13:35:35 +0200] 400 - GET http 195.240.146.102 "/favicon.ico" [Client 34.22.158.165] [Length 252] [Gzip -] "Mozilla/5.0 (compatible)" "-"
[21/Oct/2026:13:35:36 +0200] 400 - GET http 195.240.146.102 "/" [Client 34.22.158.165] [Length 252] [Gzip -] "Mozilla/5.0 (compatible)" "-"
...
show less
Port Scan
Bad Web Bot
Web App Attack
Anonymous
2026-10-21 11:33:33
UTC ·
(2 weeks ago)
DNS Compromise
DDoS Attack
🇺🇸
knock
2026-10-21 11:11:07
UTC ·
(2 weeks ago)
Knock-Knock honeypot brute-force: HTTP (10 total hits)
Web App Attack
Anonymous
2026-10-21 11:07:45
UTC ·
(2 weeks ago)
Web application attack detected.
Web App Attack
🇦🇹
vikal
2026-10-21 09:56:46
UTC ·
(2 weeks ago)
34.22.158.165 - - [21/Oct/2026:11:56:22 +0200] "07\xA0\x03\x02\x01`\xA100.0,\xA0*\x04(NTLMSSP\x00\x01\x00\x00\x00\xF7\xBA\xDB\xE2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00" 400 150 "-" "-"
34.22.1 ...
show more
34.22.158.165 - - [21/Oct/2026:11:56:22 +0200] "07\xA0\x03\x02\x01`\xA100.0,\xA0*\x04(NTLMSSP\x00\x01\x00\x00\x00\xF7\xBA\xDB\xE2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00" 400 150 "-" "-"
34.22.158.165 - - [21/Oct/2026:11:56:34 +0200] "0:\x02\x04d\xBB\x1D\x16`2\x02\x01\x03\x04\x17cn=qndyatfavxzpflwvxsvr\x80\x14qndyatfavxzpflwvxsvr" 400 150 "-" "-"
34.22.158.165 - - [21/Oct/2026:11:56:44 +0200] "\x00\x00\x00C\x00\x12\x00\x00\x1E3\xF4\x81\x00\x1Fconsumer-Offset Explorer 2.2-18\x00\x12apache-kafka-java\x062.4.0\x00" 400 150 "-" "-"
34.22.158.165 - - [21/Oct/2026:11:56:45 +0200] "\x00\x00\x00#\x00\x03\x00\x00\x1E3\xF4\x81\x00" 400 150 "-" "-"
34.22.158.165 - - [21/Oct/2026:11:56:45 +0200] "*1" 400 150 "-" "-"
...
show less
Brute-Force
SSH
Anonymous
2026-10-21 09:52:15
UTC ·
(2 weeks ago)
Reported from Nginx log analysis 16. Log: 34.22.158.165 - - [21/Oct/2026:xx:xx:xx 0200] "GET / HTTP/1.1" xxx xxx "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" "-" "BE Belgium Br ...
show more
Reported from Nginx log analysis 16. Log: 34.22.158.165 - - [21/Oct/2026:xx:xx:xx 0200] "GET / HTTP/1.1" xxx xxx "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" "-" "BE Belgium Brussels" "AS396982" "Google LLC" | 34.22.158.165 - - [21/Oct/2026:xx:xx:xx 0200] "GET / HTTP/1.1" xxx xxx "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" "-" "BE Belgium Brussels" "AS396982" "Google LLC"
show less
Port Scan
Brute-Force
SSH
🇷🇴
UnixRo
2026-10-21 08:42:23
UTC ·
(2 weeks ago)
17 unsolicited connection attempts against SSTP / HTTPS between 2026-10-21 08:47 and 2026-10-21 08:47 UTC. Blocked by NetAudit.
Hacking
Brute-Force
🇯🇵
www.winos.me
2026-10-21 07:40:02
UTC ·
(2 weeks ago)
Shield: Layer4 Port 9 Trap
Port Scan
Hacking
🇩🇪
Selckie
2026-10-21 07:29:24
UTC ·
(2 weeks ago)
fail2ban: NGINX unusual impact
Web App Attack
🇺🇸
donarev419
2026-10-21 07:25:00
UTC ·
(2 weeks ago)
Connection to port 443 with data transfer.
Data preview: �
Port Scan
Hacking
🇫🇷
pm33
2026-10-21 07:17:21
UTC ·
(2 weeks ago)
Probing for resource vulnerabilities HTTP(S)
Web App Attack
🇩🇪
sojan
2026-10-21 06:55:58
UTC ·
(2 weeks ago)
34.22.158.165 - - [21/Oct/2026:08:55:56 +0200] "\x00\x00\x00C\x00\x12\x00\x00\x1E3\xF4\x81\x00\x1Fconsumer-Offset Explorer 2.2-18\x00\x12apache-kafka-java\x062.4.0\x00" 400 150 "-" "-"
34.22.158.165 - - [21/Oct/2026:08:55:56 +0200] "\x00\x00\x00#\x00 ...
show more
34.22.158.165 - - [21/Oct/2026:08:55:56 +0200] "\x00\x00\x00C\x00\x12\x00\x00\x1E3\xF4\x81\x00\x1Fconsumer-Offset Explorer 2.2-18\x00\x12apache-kafka-java\x062.4.0\x00" 400 150 "-" "-"
34.22.158.165 - - [21/Oct/2026:08:55:56 +0200] "\x00\x00\x00#\x00\x03\x00\x00\x1E3\xF4\x81\x00" 400 150 "-" "-"
34.22.158.165 - - [21/Oct/2026:08:55:57 +0200] "\x10\x11\x00\x04MQTT\x03\x02\x00<\x00\x05AAAAA" 400 150 "-" "-"
...
show less
Bad Web Bot