🇩🇪
MaxMeier
2026-08-21 07:47:22
(2 days ago)
34.76.170.216 - - [21/Aug/2026:09:46:21 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 1 ...
show more
34.76.170.216 - - [21/Aug/2026:09:46:21 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
34.76.170.216 - - [21/Aug/2026:09:46:21 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\xC7z\xCE/G\xE3\xA1Y\xC8\x17d\xEF6\xB7\xD2\x98\x95\xDC\xCC\x1Ch\x17\xE2\x81\xB85\x04a\x22$\xCE\xF3 \xA1c\xE0\xEB\x92:,3g\x97\xCFF\xE1\x82\x1E\x19\xC3\x85!v\x16U:b\x1E\xCB\xE8W\x00\x0B\x00W\x002\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-"
34.76.170.216 - - [21/Aug/2026:09:46:21 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
34.76.170.216 - - [21/Aug/2026:09:46:26 +0200] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-"
34.76.170.216
...
show less
Bad Web Bot
Web App Attack
🇯🇵
VXG-NET
2026-08-21 06:20:28
(2 days ago)
port=80, indicator_type=hacktool
Hacking
🇺🇸
antlac1
2026-08-21 06:15:47
(2 days ago)
crowdsecurity/http-probing
Brute-Force
Web App Attack
🇬🇧
cybersteve99
2026-08-21 05:48:23
(2 days ago)
Invalid HEX string in URL request - Attack suspected.
Brute-Force
Web App Attack
2026-08-21 05:47:26
(2 days ago)
34.76.170.216 - - [21/Aug/2026:07:47:21 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x0352N\xA4\ ...
show more
34.76.170.216 - - [21/Aug/2026:07:47:21 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x0352N\xA4\xCF\x83I\xEA>\xCA[\xC6\xB9\xC3\x15\xC4\x18\xC1\x84'Ks\x03l\xB9\xB1\x00\xD8\xE8\x0E\xED\xAE %\x90\x1C\xF4\xD4[\xAD\x1C\xAE0K\xD7E\xDD\xD4W@\x82\xC780^\x8C\xDD\xAC\x95\xE2\xD56w\xF2l\x002\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-" "-"
34.76.170.216 - - [21/Aug/2026:07:47:26 +0200] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-" "-"
34.76.170.216 - - [21/Aug/2026:07:47:26 +0200] "\xC7t\x83\x9F\x8E\x81*\x86US\xAC\xED#\x07\x85 d\xEA_0\x7F\xBF#q\xB43\xC77\x96\x195\x12\xF9\x1E\x03\x1Bha\x0E:{i\xAE\x13\xB5*\x00\x8C\x86\x1B\xA3F[m\xFB[SwjE\xDC\x1B\xFC\x12" 400 150 "-" "-" "-"
...
show less
Hacking
Web App Attack
🇸🇪
SkyDancer
2026-08-21 05:29:17
(2 days ago)
Multiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by Sk ...
show more
Multiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by SkyDancer Ai. EXT-SYS-Vx
show less
Hacking
Brute-Force
SSH
🇧🇷
SOC Blue Team
2026-08-21 05:26:05
(2 days ago)
IPs get by Hunting on SIEM
Phishing
Web Spam
Port Scan
Hacking
🇺🇸
gu-alvareza
2026-08-21 05:05:33
(2 days ago)
Java.Debug.Wire.Protocol.Insecure.Configuration
Hacking
🇯🇵
HeliJP
2026-08-21 04:45:11
(2 days ago)
2026-08-21T03:54:31Z - Recognized attacks\bad behavior from IP address 34.76.170.216 on port 443\80 ...
show more
2026-08-21T03:54:31Z - Recognized attacks\bad behavior from IP address 34.76.170.216 on port 443\80 (7 daily hits): client denied by server configuration
show less
Port Scan
Hacking
SQL Injection
Brute-Force
Web App Attack
🇺🇸
LotPhantom
2026-08-21 04:34:57
(2 days ago)
34.76.170.216 - - [21/Aug/2026:04:34:49 +0000] "GET / HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT ...
show more
34.76.170.216 - - [21/Aug/2026:04:34:49 +0000] "GET / HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" "0"
...
show less
Web App Attack
🇺🇸
johnkarlhill
2026-08-21 04:30:03
(2 days ago)
WebKnight blocked malicious web request on johnkarlhill.com
Brute-Force
SSH
🇬🇧
essinghigh
2026-08-21 03:55:23
(2 days ago)
IPS Detection: 34.76.170.216 -> DPT: 80
Port Scan
🇩🇰
swrlly
2026-08-21 02:55:59
(2 days ago)
1 unauthorized webserver connection
Web App Attack
🇨🇦
lakered
2026-08-21 02:45:05
(2 days ago)
Detectors: [NGINX] | Reasons: Nginx: Default server trap hit | Evidence: High-Criminality-Signature ...
show more
Detectors: [NGINX] | Reasons: Nginx: Default server trap hit | Evidence: High-Criminality-Signature (p0f:*:64:0:*:mss*30,7:mss,sok,ts,nop,ws:df,id+:0 - Ratio:0.98), OS-Signature-Mismatch (UA:Windows/p0f:Linux) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36 | TCP Fingerprint: Linux (Legacy/Embedded) (Link:generic tunnel or VPN, Uptime:8620m)
show less
Port Scan
Exploited Host
🇩🇪
MSC IT for Business GmbH
2026-08-21 02:40:09
(2 days ago)
GASTO/CrowdSec: gasto/modsec-critical triggered (via crowdsec-agent, categories 15,21)
Hacking
Web App Attack