|
Anonymous
|
|
Fail2ban Nginx log integration.
|
Brute-Force
SSH
Port Scan
|
|
Anonymous
|
|
GET / HTTP/1.1
GET / HTTP/1.1
07\xA0\x03\x02\x01`\xA100.0,\xA0*\x04(NTLMSSP\x00\
|
Bad Web Bot
Web App Attack
|
|
🇦🇹
vikal
|
|
34.53.210.7 - - [28/Oct/2026:14:29:27 +0100] "07\xA0\x03\x02\x01`\xA100.0,\xA0*\x04(NTLMSSP\x00\x01\x00\x00\x00\xF7\xBA\xDB\xE2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00" 400 150 "-" "-"
34.53.210 ...
show more
34.53.210.7 - - [28/Oct/2026:14:29:27 +0100] "07\xA0\x03\x02\x01`\xA100.0,\xA0*\x04(NTLMSSP\x00\x01\x00\x00\x00\xF7\xBA\xDB\xE2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00" 400 150 "-" "-"
34.53.210.7 - - [28/Oct/2026:14:29:37 +0100] "0:\x02\x04\x1Bz\x1B\xC2`2\x02\x01\x03\x04\x17cn=jawdibgetfwwpkiibyqb\x80\x14jawdibgetfwwpkiibyqb" 400 150 "-" "-"
34.53.210.7 - - [28/Oct/2026:14:29:47 +0100] "\x00\x00\x00C\x00\x12\x00\x00\x1E3\xF4\x81\x00\x1Fconsumer-Offset Explorer 2.2-18\x00\x12apache-kafka-java\x062.4.0\x00" 400 150 "-" "-"
34.53.210.7 - - [28/Oct/2026:14:29:48 +0100] "\x00\x00\x00#\x00\x03\x00\x00\x1E3\xF4\x81\x00" 400 150 "-" "-"
34.53.210.7 - - [28/Oct/2026:14:29:48 +0100] "*1" 400 150 "-" "-"
...
show less
|
Brute-Force
SSH
|
|
🇺🇸
masterguru
|
|
Host header is a numeric IP address. Pattern match "^ (920350-165)
|
Hacking
Bad Web Bot
|
|
🇩🇪
AetherFox
|
|
AetherFox VoidGuard detected: [Wed Oct 28 11:51:35.165054 2026] [authz_core:error] [pid 124979:tid 125052] [client 34.53.210.7:5852] AH01630: client denied by server configuration: proxy:https://91.200.103.154/
[Wed Oct 28 11:51:35.165502 2026] [auth ...
show more
AetherFox VoidGuard detected: [Wed Oct 28 11:51:35.165054 2026] [authz_core:error] [pid 124979:tid 125052] [client 34.53.210.7:5852] AH01630: client denied by server configuration: proxy:https://91.200.103.154/
[Wed Oct 28 11:51:35.165502 2026] [authz_core:error] [pid 124979:tid 125052] [client 34.53.210.7:5852] AH01630: client denied by server configuration: /var/www/ERRORpages/403.html
[Wed Oct 28 11:51:35.316916 2026] [authz_core:error] [pid 124982:tid 125068] [client 34.53.210.7:5862] AH01630: client denied by server configuration: proxy:https://91.200.103.154/favicon.ico
[Wed Oct 28 11:51:35.317419 2026] [authz_core:error] [pid 124982:tid 125068] [client 34.53.210.7:5862] AH01630: client denied by server configuration: /var/www/ERRORpages/403.html
[Wed Oct 28 11:51:35.862814 2026] [authz_core:error] [pid 124979:tid 125084] [client 34.53.210.7:5870] AH01630: client denied by server configuration: proxy:https://91.200.103.154/pub/
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇬🇧
thetomtaylor.co.uk
|
|
Fail2Ban - [WAF]ModSecurity rule violation on modsecurity ... [ice01]
|
Hacking
SQL Injection
Web App Attack
|
|
🇺🇸
NXTwoThou
|
|
174.78
|
Web App Attack
|
|
🇺🇸
www.winos.me
|
|
Shield: Layer4 Port 9 Trap
|
Port Scan
Hacking
|
|
🇦🇺
Starburst SysOp Team
|
|
Host header is a numeric IP address. Pattern match "(?:^( (920350-syd2-4)
|
Hacking
Bad Web Bot
|
|
🇱🇹
Selckie
|
|
fail2ban: NGINX unusual impact
|
Web App Attack
|
|
🇯🇵
gomasy
|
|
_:443 34.53.210.7 - - [28/Oct/2026:19:39:43 +0900] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 500 170 "-" ...
show more
_:443 34.53.210.7 - - [28/Oct/2026:19:39:43 +0900] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 500 170 "-" "-"
...
show less
|
Web App Attack
|
|
🇺🇸
LSPCCU
|
|
TSEC Honeypot Network report. Threat score: 75/100. Categories: DDoS Attack, Port Scan, Hacking, Brute-Force, Web App Attack, SSH. Honeypot: galah, h0neytr4p. Context: 34.53.210.7 classified as botnet node participating in coordinated attack campaign ...
show more
TSEC Honeypot Network report. Threat score: 75/100. Categories: DDoS Attack, Port Scan, Hacking, Brute-Force, Web App Attack, SSH. Honeypot: galah, h0neytr4p. Context: 34.53.210.7 classified as botnet node participating in coordinated attack campaigns (high confidence).
show less
|
DDoS Attack
Port Scan
Hacking
Brute-Force
Web App Attack
SSH
|
|
🇩🇪
Tamsy
|
|
HTTPD - 4xx scan
|
Web App Attack
|
|
Anonymous
|
|
|
Web App Attack
|
|
🇩🇪
MarKup
|
|
34.53.210.7 - - [28/Oct/2026:09:13:35 +0100] "GET /pub/ HTTP/1.1" 404 5325 "-" "Mozilla/5.0 (compatible)"
34.53.210.7 - - [28/Oct/2026:09:13:36 +0100] "GET /files/ HTTP/1.1" 404 5325 "-" "Mozilla/5.0 (compatible)"
...
|
Hacking
Web App Attack
|