๐บ๐ธ
brantknudson.org
2026-07-18 07:56:50
(4 days ago)
Incorrect Host header
Web App Attack
Brute-Force
๐บ๐ธ
gu-alvareza
2026-07-18 07:05:33
(4 days ago)
Java.Debug.Wire.Protocol.Insecure.Configuration
Hacking
๐ฉ๐ช
Serpentex
2026-07-18 06:29:27
(4 days ago)
34.53.130.85 - - [18/Jul/2026:08:29:21 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x032\xECt\x0 ...
show more
34.53.130.85 - - [18/Jul/2026:08:29:21 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x032\xECt\x09\xA5a=y@\x04\xB0\xA8:@\x8F\xF4\xB8:\xFB?m\xD2\xB5\x03\xD1b\x95\x97\x81.)\x9D \x99Fg~8\xB0D\x8D\xAF\x85\x83\x0F\xEE\x83\x1B\xC6\xC8<>/B\x8D\xA3s\xC0x\xA6\xBDlw\xA39\x002\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-"
34.53.130.85 - - [18/Jul/2026:08:29:26 +0200] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-"
34.53.130.85 - - [18/Jul/2026:08:29:26 +0200] "T\xB7B\xFF \xC7\xFABg\xC3\xFCU\xF6,3\xC9\x03\xC7\xD6U\x09\xD5-aOPUQ\x80\xAA\x80l\x93\xAD\xD3\xACD\xDB\x06\xA8\xAF\xF8\xA1t\x7F\xC5\xF3\x85S\x15Y 5\xFD\x9A\x00T\xF4n\xB6\xA1\x86\xD5\xC2" 400 150 "-" "-"
...
show less
Bad Web Bot
Web App Attack
๐ท๐บ
mysh38
2026-07-18 06:14:39
(4 days ago)
fail2ban: nginx-bots jail ban
Web App Attack
๐บ๐ธ
itsnixk
2026-07-18 06:06:52
(4 days ago)
(mod_security) mod_security (id:913100) triggered by 34.53.130.85 (BE/Belgium/85.130.53.34.bc.google ...
show more
(mod_security) mod_security (id:913100) triggered by 34.53.130.85 (BE/Belgium/85.130.53.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Jul 18 02:06:50.149819 2026] [security2:error] [pid 373162:tid 373565] [client 34.53.130.85:34908] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "nmap" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity.d/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [redacted] [severity "CRITICAL"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/SCANNER-DETECTION"] [tag "capec/1000/118/224/541/310"] [redacted] [uri "/"] [unique_id "alsX-tzzohjxuS5wdXSX8wAAAEs"]
show less
Port Scan
๐ฉ๐ช
Trashware
2026-07-18 06:05:38
(4 days ago)
Malicious connection attempt
Hacking
Bad Web Bot
Web App Attack
๐ฉ๐ช
evilrave
2026-07-18 05:19:20
(4 days ago)
34.53.130.85 - - [18/Jul/2026:05:19:19 +0000] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\x1A(\xDE ...
show more
34.53.130.85 - - [18/Jul/2026:05:19:19 +0000] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\x1A(\xDER\xF1\xC7\x15\xC8\x80)\xCCT\x8B\xCBg\x13\x1E\xE7M\xF2.\xF1\x0E\xC4*Md\xCFI\xEA|\xD3 '\x7F\xC8\x89\x0FEC\xB9Z\x88\x02\xB9}8\xE3C\xDD\xD3\x911\x18\xB0\x19[\x16\x1C\xCD]d#\xAE~\x002\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 Host="_" SNI="-"
...
show less
Web App Attack
๐จ๐ฟ
Countryman
2026-07-18 04:20:26
(4 days ago)
IPS detection: Nmap.Script.Scanner
Port Scan
๐บ๐ธ
donarev419
2026-07-18 04:19:06
(4 days ago)
Connection to port 80 with data transfer.
Data preview: GET / HTTP/1.1
Host: 107.175.212.44:80
Use ...
show more
Connection to port 80 with data transfer.
Data preview: GET / HTTP/1.1
Host: 107.175.212.44:80
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) Apple
show less
Port Scan
Hacking
๐บ๐ธ
donarev419
2026-07-18 03:28:07
(4 days ago)
Connection to port 80 with data transfer.
Data preview: GET / HTTP/1.1
Host: 198.23.188.201:80
Use ...
show more
Connection to port 80 with data transfer.
Data preview: GET / HTTP/1.1
Host: 198.23.188.201:80
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) Apple
show less
Port Scan
Hacking
๐ฆ๐น
nomzamo
2026-07-18 03:21:24
(4 days ago)
Fail2Ban reported: nginx-bad-request
Brute-Force
๐ธ๐ฌ
WMK965
2026-07-18 03:08:15
(4 days ago)
34.53.130.85 - - [18/Jul/2026:11:08:09 +0800] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\xAF\xCFH ...
show more
34.53.130.85 - - [18/Jul/2026:11:08:09 +0800] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\xAF\xCFH\x1A\xDB\xAE[\xD1T\xDF\x07\x00W\xF7H\xC9B]\x8D/\xC2\xE1:\xB3\xB0\x02\x92\xD1\x9A\xFE\x17+ \xF7\xA3*" 400 154 "-" "-" "-"
34.53.130.85 - - [18/Jul/2026:11:08:14 +0800] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 154 "-" "-" "-"
34.53.130.85 - - [18/Jul/2026:11:08:15 +0800] ";\xD5c\xF9\xD8\x7F\xF9\xE0\xB3\x08\xEAI\x890\xC0\x9B\xC9\xE1\x11\xBCJ\xC0\xB8\x95Q\xAA;\x00\xFB\x1F\x17\xD6\xD9\x8D\x00\xFC.\x1B\xBC(\xC0\x1C\xD0\xB4\xDC\x92\xA1\x05\x80\xC4\xB5\xB5\xB4\xCC}\xD2\xCCi\x9B\xD7.\x84\xF9\x0B" 400 154 "-" "-" "-"
show less
Port Scan
Web App Attack
๐ซ๐ท
vincent_EUDIER
2026-07-18 03:00:01
(4 days ago)
ET SCAN NMAP -sS window 1024
Port Scan
๐ฉ๐ช
dpsbs
2026-07-18 02:36:07
(4 days ago)
multiple ips intrustions detected
Hacking