π©πͺ
sojan
2026-10-24 14:31:18
(1 hour ago)
34.62.87.48 - - [24/Oct/2026:16:31:18 +0200] "\x00\x00\x00C\x00\x12\x00\x00\x1E3\xF4\x81\x00\x1Fcons ...
show more
34.62.87.48 - - [24/Oct/2026:16:31:18 +0200] "\x00\x00\x00C\x00\x12\x00\x00\x1E3\xF4\x81\x00\x1Fconsumer-Offset Explorer 2.2-18\x00\x12apache-kafka-java\x062.4.0\x00" 400 150 "-" "-"
34.62.87.48 - - [24/Oct/2026:16:31:18 +0200] "\x00\x00\x00#\x00\x03\x00\x00\x1E3\xF4\x81\x00" 400 150 "-" "-"
34.62.87.48 - - [24/Oct/2026:16:31:18 +0200] "\x10\x11\x00\x04MQTT\x03\x02\x00<\x00\x05AAAAA" 400 150 "-" "-"
...
show less
Bad Web Bot
π§π·
diego
2026-10-24 14:16:11
(1 hour ago)
[probe-168-134] 2026-10-24 13:59:40, Client: 34.62.87.48, Protocol: 6, Unauthorized activity to HTTP ...
show more
[probe-168-134] 2026-10-24 13:59:40, Client: 34.62.87.48, Protocol: 6, Unauthorized activity to HTTP: GET /
show less
Web App Attack
π¬π§
rooster
2026-10-24 13:52:20
(1 hour ago)
[24/Oct/2026:14:52:19 +0100] 400 - GET http 144.21.63.93 "/" [Client 34.62.87.48] [Length 252] [Gzip ...
show more
[24/Oct/2026:14:52:19 +0100] 400 - GET http 144.21.63.93 "/" [Client 34.62.87.48] [Length 252] [Gzip -] "Mozilla/5.0 (compatible)" "-"
[24/Oct/2026:14:52:19 +0100] 400 - OPTIONS http 144.21.63.93 "/" [Client 34.62.87.48] [Length 252] [Gzip -] "Mozilla/5.0 (compatible)" "-"
[24/Oct/2026:14:52:19 +0100] 400 - TEEB http 144.21.63.93 "/" [Client 34.62.87.48] [Length 252] [Gzip -] "Mozilla/5.0 (compatible)" "-"
[24/Oct/2026:14:52:19 +0100] 400 - GET http 144.21.63.93 "/favicon.ico" [Client 34.62.87.48] [Length 252] [Gzip -] "Mozilla/5.0 (compatible)" "-"
[24/Oct/2026:14:52:20 +0100] 400 - GET http 144.21.63.93 "/" [Client 34.62.87.48] [Length 252] [Gzip -] "Mozilla/5.0 (compatible)" "-"
...
show less
Hacking
Web App Attack
π©πͺ
BlueWire Hosting
2026-10-24 13:49:17
(1 hour ago)
Bad bot ignoring robot.txt
Bad Web Bot
Anonymous
2026-10-24 13:27:44
(2 hours ago)
...
Bad Web Bot
πΊπΈ
solantex
2026-10-24 12:08:36
(3 hours ago)
Malformed and abusive traffic directed at Solantex services.
Port Scan
π©πͺ
bescared
2026-10-24 11:59:21
(3 hours ago)
F2B - Malicious activity detected. URL Probing. -8ff06ede-
Hacking
Bad Web Bot
Web App Attack
π±πΉ
Selckie
2026-10-24 10:42:48
(4 hours ago)
fail2ban: NGINX unusual impact
Web App Attack
π©πͺ
dpsbs
2026-10-24 10:40:39
(4 hours ago)
url scanning on multiple public ips detected
Bad Web Bot
πΊπΈ
conrad10781
2026-10-24 10:21:02
(5 hours ago)
nginx-direct-ip
Port Scan
πͺπΈ
Michael McCarthy
2026-10-24 10:18:25
(5 hours ago)
Web Spam
πΈπ¬
WMK965
2026-10-24 08:36:56
(6 hours ago)
Malicious requests
IP: 34.62.87.48
Time: 24/Oct/2026:16:36:43 +0800
User-Agent: -
Activities:
" ...
show more
Malicious requests
IP: 34.62.87.48
Time: 24/Oct/2026:16:36:43 +0800
User-Agent: -
Activities:
"07\xA0\x03\x02\x01`\xA100.0,\xA0*\x04(NTLMSSP\x00\x01\x00\x00\x00\xF7\xBA\xDB\xE2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00" 400 154 "-"
"0:\x02\x04\x02\xFD\x9A[`2\x02\x01\x03\x04\x17cn=aceuhtshqrecntyzcyvz\x80\x14aceuhtshqrecntyzcyvz" 400 154 "-"
"\x00\x00\x00C\x00\x12\x00\x00\x1E3\xF4\x81\x00\x1Fconsumer-Offset Explorer 2.2-18\x00\x12apache-kafka-java\x062.4.0\x00" 400 154 "-"
show less
Port Scan
Web App Attack
π¦πΉ
vikal
2026-10-24 07:39:27
(7 hours ago)
34.62.87.48 - - [24/Oct/2026:09:39:07 +0200] "07\xA0\x03\x02\x01`\xA100.0,\xA0*\x04(NTLMSSP\x00\x01\ ...
show more
34.62.87.48 - - [24/Oct/2026:09:39:07 +0200] "07\xA0\x03\x02\x01`\xA100.0,\xA0*\x04(NTLMSSP\x00\x01\x00\x00\x00\xF7\xBA\xDB\xE2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00" 400 150 "-" "-"
34.62.87.48 - - [24/Oct/2026:09:39:16 +0200] "0:\x02\x04p\xDEi\xC4`2\x02\x01\x03\x04\x17cn=xrpyblsugwsolhgdrrrg\x80\x14xrpyblsugwsolhgdrrrg" 400 150 "-" "-"
34.62.87.48 - - [24/Oct/2026:09:39:26 +0200] "\x00\x00\x00C\x00\x12\x00\x00\x1E3\xF4\x81\x00\x1Fconsumer-Offset Explorer 2.2-18\x00\x12apache-kafka-java\x062.4.0\x00" 400 150 "-" "-"
34.62.87.48 - - [24/Oct/2026:09:39:26 +0200] "\x00\x00\x00#\x00\x03\x00\x00\x1E3\xF4\x81\x00" 400 150 "-" "-"
34.62.87.48 - - [24/Oct/2026:09:39:26 +0200] "*1" 400 150 "-" "-"
...
show less
Brute-Force
SSH
Anonymous
2026-10-24 07:34:53
(7 hours ago)
[Sat Oct 24 09:34:52.009861 2026] [:error] [pid 3058994:tid 3058994] [client 34.62.87.48:29698] ModS ...
show more
[Sat Oct 24 09:34:52.009861 2026] [:error] [pid 3058994:tid 3058994] [client 34.62.87.48:29698] ModSecurity: Warning. Matched "Operator `PmFromFile' with parameter `scanners-user-agents.data' against variable `REQUEST_HEADERS:User-Agent' (Value: `Mozilla/5.0 (compatible; nmap-http-info)' ) [file "/usr/local/modsecurity-crs/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "38"] [id "913100"] [rev ""] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: nmap found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (compatible; nmap-http-info)"] [severity "2"] [ver "OWASP_CRS/4.31.0-dev"] [maturity "0"] [accuracy "0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/SCANNER-DETECTION"] [tag "capec/1000/118/224/541/310"] [uri "/"] [unique_id "179282729278.067243"] [ref "o25,4v27,40"]
...
show less
Web App Attack
ππΊ
Geppetto
2026-10-24 07:24:52
(8 hours ago)
Connection to IP instead of Domain-Name, HTTP request to HTTPS port [24/Oct/2026:09:24:51 +0200] 400 ...
show more
Connection to IP instead of Domain-Name, HTTP request to HTTPS port [24/Oct/2026:09:24:51 +0200] 400 - GET http "/" [Client 34.62.87.48] [Length 252] [Gzip -] "Mozilla/5.0 (compatible)" "-"
...
show less
Bad Web Bot
Web App Attack