🇫🇷
SpaceHost-Server
2026-10-15 22:23:19
UTC ·
(3 weeks ago)
Brute-Force
Web App Attack
🇧🇷
ICS Labs
2026-10-15 13:44:53
UTC ·
(3 weeks ago)
ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-10-15 UTC.
Brute-Force
🇫🇮
mnazibo
2026-10-15 11:00:09
UTC ·
(3 weeks ago)
Date: 15/Oct/2026 13:23:27 | Reported IP: 34.53.159.98 mod_security | id: 911100 | BE/group.my_domain/- | Connections: 1 | Blocked: Permanent Block: [LF_MODSEC] | URIs: / | Logs: Method is not allowed by policy
SQL Injection
Brute-Force
Bad Web Bot
Anonymous
2026-10-15 10:58:22
UTC ·
(3 weeks ago)
PAD: Bad_Web_Bot_D,ModSec_Scanner! detected
Bad Web Bot
🇪🇸
robotstxt
2026-10-15 10:50:32
UTC ·
(3 weeks ago)
34.53.159.98 - - [15/Oct/2026:10:50:30 +0000] "GET /favicon.ico HTTP/1.1" 400 291 "-" "Mozilla/5.0 (compatible)" "-" edge="34.53.159.98"
34.53.159.98 - - [15/Oct/2026:10:50:30 +0000] "GET / HTTP/1.1" 400 291 "-" "Mozilla/5.0 (compatible)" "-" edge="3 ...
show more
34.53.159.98 - - [15/Oct/2026:10:50:30 +0000] "GET /favicon.ico HTTP/1.1" 400 291 "-" "Mozilla/5.0 (compatible)" "-" edge="34.53.159.98"
34.53.159.98 - - [15/Oct/2026:10:50:30 +0000] "GET / HTTP/1.1" 400 291 "-" "Mozilla/5.0 (compatible)" "-" edge="34.53.159.98"
34.53.159.98 - - [15/Oct/2026:10:50:30 +0000] "HEAD / HTTP/1.1" 400 0 "-" "Mozilla/5.0 (compatible)" "-" edge="34.53.159.98"
34.53.159.98 - - [15/Oct/2026:10:50:30 +0000] "POST / HTTP/1.1" 400 291 "-" "Mozilla/5.0 (compatible)" "-" edge="34.53.159.98"
34.53.159.98 - - [15/Oct/2026:10:50:30 +0000] "OPTIONS / HTTP/1.1" 400 291 "-" "Mozilla/5.0 (compatible)" "-" edge="34.53.159.98"
...
show less
Web Spam
Web App Attack
🇧🇷
diego
2026-10-15 10:47:18
UTC ·
(3 weeks ago)
[arem1] 2026-10-15 10:28:04, Client: 34.53.159.98, Protocol: 6, Unauthorized activity to HTTP: GET /
Web App Attack
🇳🇱
0xffffffff
2026-10-15 10:34:05
UTC ·
(3 weeks ago)
[2026-10-15 13:33:56.781615] [authz_core:error] [pid 11795:tid 123370284758720] [client 34.53.159.98:27600] AH01630: client denied by server configuration: /var/www/*/ , error_notes:wrong-host , URI:'/'
[2026-10-15 13:34:03.917403] [authz_core:error] ...
show more
[2026-10-15 13:33:56.781615] [authz_core:error] [pid 11795:tid 123370284758720] [client 34.53.159.98:27600] AH01630: client denied by server configuration: /var/www/*/ , error_notes:wrong-host , URI:'/'
[2026-10-15 13:34:03.917403] [authz_core:error] [pid 11796:tid 123370234402496] [client 34.53.159.98:22524] AH01630: client denied by server configuration: /var/www/*/ , error_notes:wrong-host , URI:'/'
[2026-10-15 13:34:04.068380] [authz_core:error] [pid 11795:tid 123370293151424] [client 34.53.159.98:22526] AH01630: client denied by server configuration: /var/www/*/ , error_notes:wrong-host , URI:'/'
[2026-10-15 13:34:04.220403] [authz_core:error] [pid 11795:tid 123370309936832] [client 34.53.159.98:22542] AH01630: client denied by server configuration: /var/www/*/ , error_notes:wrong-host , URI:'/'
[2026-10-15 13:34:04.372734] [authz_core:error] [pid 11796:tid 123370242795200] [client 34.53.159.98:22554] AH01630: client denied by server configuration: /var/www/*/ , error_notes:wrong-host , URI:'/'
[2026-10-
show less
Web App Attack
Bad Web Bot
🇳🇱
Selckie
2026-10-15 10:26:45
UTC ·
(3 weeks ago)
fail2ban: NGINX unusual impact
Web App Attack
🇺🇸
xxkodedxx
2026-10-15 08:52:51
UTC ·
(3 weeks ago)
[Zorvexus edge-defense] Edge-block (probe URI / bad UA / hostile vhost)
Trigger: 2× edge-block in 10m window.
Origin: BE / AS396982 Google LLC
Active: 08:52:45→08:52:46 UTC
Volume: 2 HTTP req
Probed: /
Status mix: 444×2
Vhost fishing: 67.217.240.72
U ...
show more
[Zorvexus edge-defense] Edge-block (probe URI / bad UA / hostile vhost)
Trigger: 2× edge-block in 10m window.
Origin: BE / AS396982 Google LLC
Active: 08:52:45→08:52:46 UTC
Volume: 2 HTTP req
Probed: /
Status mix: 444×2
Vhost fishing: 67.217.240.72
UA: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
Auto-banned 30d. zorvexus-banner.
show less
Bad Web Bot
Web App Attack
🇺🇸
OceanTreasure
2026-10-15 07:52:15
UTC ·
(3 weeks ago)
tcp/443; SPNEGO/NTLM Negotiate (NTLMSSP type-1) authentication blob sent as raw bytes to the HTTPS port during a multi-protocol service sweep: "07\xA0\x03\x02\x01`\xA100.0,\xA0*\x04(NTLMSSP\x00\x01\x00\x00\x00\xF7\xBA\xDB\xE2\x00\x00\x00\x00\x00\x00\ ...
show more
tcp/443; SPNEGO/NTLM Negotiate (NTLMSSP type-1) authentication blob sent as raw bytes to the HTTPS port during a multi-protocol service sweep: "07\xA0\x03\x02\x01`\xA100.0,\xA0*\x04(NTLMSSP\x00\x01\x00\x00\x00\xF7\xBA\xDB\xE2\x00\x00\x00\x00\x00\x00\x00\x
show less
Port Scan
🇩🇪
larse99
2026-10-15 07:49:10
UTC ·
(3 weeks ago)
Detected Scanning / Hacking activity
Port Scan
Hacking
Anonymous
2026-10-15 07:47:58
UTC ·
(3 weeks ago)
443/tcp (1 or more attempts)
Port Scan
🇺🇸
HamSammich
2026-10-15 07:46:20
UTC ·
(3 weeks ago)
Automated sensor: 8 HTTPS connection/probe attempts over the last 24h (latest 2026-10-15T07:46Z).
Brute-Force
Web App Attack
🇺🇸
CollideTech
2026-10-15 06:11:41
UTC ·
(3 weeks ago)
found poking around where they should not be
Bad Web Bot
Web App Attack
🇺🇸
NXTwoThou
2026-10-15 06:00:48
UTC ·
(3 weeks ago)
174.78
Web App Attack