๐ฉ๐ช
Jochen Pretli
2026-10-17 10:33:34
(3 days ago)
connection to honeypot
Email Spam
Port Scan
๐น๐ท
pashait
2026-10-17 07:18:30
(4 days ago)
Auto-blocked by Seczar SecureOps โ IPS Web Attack Signature (1 events in 5min) at 2026-10-17 07:18
Web App Attack
Bad Web Bot
๐ป๐ณ
edata-vn
2026-10-17 07:08:57
(4 days ago)
"GET / HTTP/1.1" 444 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Geck ...
show more
"GET / HTTP/1.1" 444 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
cwytech
2026-10-17 07:03:02
(4 days ago)
Fleet-wide ban from the Ghostfleet ๐ป. Triggered by scenario: cwy/tactical-rmm-lockdown-high.
Hacking
๐ฌ๐ง
cybersteve99
2026-10-17 06:38:43
(4 days ago)
Invalid HEX string in URL request - Attack suspected.
Brute-Force
Web App Attack
๐ญ๐บ
HoneyPotEu
2026-10-17 06:29:12
(4 days ago)
34.34.190.226 - - _ [17/Oct/2026:08:28:55 +0200] "\x16\x03\x00\x00i\x01\x00\x00e\x03\x03U\x1C\xA7\xE ...
show more
34.34.190.226 - - _ [17/Oct/2026:08:28:55 +0200] "\x16\x03\x00\x00i\x01\x00\x00e\x03\x03U\x1C\xA7\xE4random1random2random3random4\x00\x00\x0C\x00/\x00" 400 150 "-" "-" 0.103 - -
...
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
Bedios GmbH
2026-10-17 06:27:07
(4 days ago)
Automated protocol probing and service fingerprinting
Port Scan
๐ฆ๐บ
FEWA
2026-10-17 06:13:46
(4 days ago)
Fail2Ban Ban Triggered
Hacking
Bad Web Bot
Web App Attack
๐บ๐ธ
HamSammich
2026-10-17 06:00:04
(4 days ago)
Automated sensor: 1 HTTP connection/probe attempts over the last 24h (latest 2026-10-17T06:00Z).
Brute-Force
Web App Attack
๐ฉ๐ช
Serpentex
2026-10-17 05:52:10
(4 days ago)
34.34.190.226 - - [17/Oct/2026:07:52:03 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\xB1\x88 ...
show more
34.34.190.226 - - [17/Oct/2026:07:52:03 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\xB1\x88:\x83H\x9E\xD2\x0E\xAE\x9B\xE0I\xB0\xC5\x01+4f\x12)\xE4\xB9\xF8\xAC\xCD\x14\x8C\xECC-\xA2} Y\x90\xCF[\xFC\x9A\xDE6\xA9\xA7W\x01\xD2\x03Z\xAE\xACC\xBC\xEBi\x83e*\xF1\xB4\x22bI]\xE5\x15\x002\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-"
34.34.190.226 - - [17/Oct/2026:07:52:08 +0200] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-"
34.34.190.226 - - [17/Oct/2026:07:52:08 +0200] "\xE8\x94\x15^\x0F\xD4\xCA\xA0\xD4\x83\xCE\xBC\xA7\xDBG\x95\x0C\x02\xB7\x8D\x09\x91K\x9F\xC1\x5C\x8F\x97{*\xBC\xF5\x06i\xA0\x83\x16\x14\xF2\x8CR\x22\xCD\x01\x96\xCE!\xE1\x00\x0E\xFC\x05\xF1\x11\xCD\x8B\xC6\xA2\xF0`\xC2\x88[R" 400 150 "-" "-"
...
show less
Bad Web Bot
Web App Attack
๐ท๐บ
genokrad
2026-10-17 05:32:44
(4 days ago)
Website scan TCP 80/443 "/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KH"
Port Scan
Web App Attack
๐จ๐ฆ
lakered
2026-10-17 05:20:58
(4 days ago)
Detectors: [nginx_monitor, NGINX] | Reasons: Nginx: Default server trap hit | Invalid HTTP protocol ...
show more
Detectors: [nginx_monitor, NGINX] | Reasons: Nginx: Default server trap hit | Invalid HTTP protocol or SSTP scan attempt detected on sinkhole | Evidence: High-Criminality-Signature (p0f:*:64:0:*:mss*30,7:mss,sok,ts,nop,ws:df,id+:0 - Ratio:0.99), OS-Signature-Mismatch (UA:Windows/p0f:Linux) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36 | TCP Fingerprint: Linux (Legacy/Embedded) (Link:generic tunnel or VPN, Uptime:19696m)
show less
Port Scan
Exploited Host
๐บ๐ธ
gu-alvareza
2026-10-17 05:07:09
(4 days ago)
Nmap.Script.Scanner
Port Scan
Anonymous
2026-10-17 04:26:56
(4 days ago)
[Sat Oct 17 06:26:56.169844 2026] [:error] [pid 3198272:tid 3198272] [client 34.34.190.226:56766] Mo ...
show more
[Sat Oct 17 06:26:56.169844 2026] [:error] [pid 3198272:tid 3198272] [client 34.34.190.226:56766] ModSecurity: Warning. Matched "Operator `PmFromFile' with parameter `scanners-user-agents.data' against variable `REQUEST_HEADERS:User-Agent' (Value: `Mozilla/5.0 (compatible; nmap-http-info)' ) [file "/usr/local/modsecurity-crs/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "38"] [id "913100"] [rev ""] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: nmap found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (compatible; nmap-http-info)"] [severity "2"] [ver "OWASP_CRS/4.31.0-dev"] [maturity "0"] [accuracy "0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/SCANNER-DETECTION"] [tag "capec/1000/118/224/541/310"] [uri "/"] [unique_id "179221121673.028665"] [ref "o25,4v45,40"]
...
show less
Web App Attack
๐จ๐ฆ
smithoo4
2026-10-17 04:26:02
(4 days ago)
34.34.190.226 - - [17/Oct/2026:00:26:01 -0400] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 1 ...
show more
34.34.190.226 - - [17/Oct/2026:00:26:01 -0400] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
34.34.190.226 - - [17/Oct/2026:00:26:01 -0400] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\xCA!\xEE\xC6\xD4\xB9\xEE\x01|\xF7:\xBD\xE9\x9A1\xA2\x0E\xA3\x1E\xC1\x04T\x0E\xF2\xE5\xEA\x15\xE4\x14: ^ \xCBoG>\xF4\xE1}\x87\xCE\xDB\x81\xFD\xB8\x09\x89\xA6\x07\xA8\xA3\x0B\xD6\x14\xB7\x81i\xA6`\xE2\x99\x17L\x14\x002\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 193 "-" "-"
...
show less
Port Scan
Bad Web Bot