|
๐ซ๐ท
carpes0708
|
|
|
Port Scan
Web App Attack
|
|
|
๐บ๐ธ
withfallback.com
|
|
Attempt to connect to Java debugger (JDWP)
|
Port Scan
|
|
|
๐บ๐ธ
IndigoRidge
|
|
Knock-Knock HTTP honeypot activity; time=2026-09-14 07:13:33; http_method=GET; http_path=/; http_pur ...
show more
Knock-Knock HTTP honeypot activity; time=2026-09-14 07:13:33; http_method=GET; http_path=/; http_purpose=basic_probe; http_user_agent=Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Sa
show less
|
Web App Attack
|
|
|
๐ฏ๐ต
gomasy
|
|
_:80 34.78.253.142 - - [14/Sep/2026:16:02:14 +0900] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\x8 ...
show more
_:80 34.78.253.142 - - [14/Sep/2026:16:02:14 +0900] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\x8B\x19\x06\xF8\xB3'\xCAd\xF6\x81{(j\xEA\xE9/\xDC\xA1\xE8\xE2m\x13tCcs5\xE8*RFY \xD7e\x0E\x7F~\xCA\xEE\xCFb\x02\xA0T\x5C\xEF\xDD" 500 170 "-" "-"
...
show less
|
Web App Attack
|
|
|
๐ฉ๐ช
MaxMeier
|
|
34.78.253.142 - - [14/Sep/2026:08:57:46 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 1 ...
show more
34.78.253.142 - - [14/Sep/2026:08:57:46 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
34.78.253.142 - - [14/Sep/2026:08:57:46 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03o\xB3C6\xD2\xDEj\xF9\x81j6<\xED\x9A\x9F]=|\x90\xA0$6\xEF\xB4\xE6\x82*\x850\x1E[\x8C \xA8\x98\x9C\xFA\xDC\xFE\xCA\xC3\xDF \x17\xCD\xCEr\xBBn)K\xC5{h\x98\xE5\x1C\x82\x90\xE0J\xC1\xE4\x81\xD9\x002\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-"
34.78.253.142 - - [14/Sep/2026:08:57:46 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
34.78.253.142 - - [14/Sep/2026:08:57:51 +0200] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-"
34.78.253.142
...
show less
|
Bad Web Bot
Web App Attack
|
|
|
๐ซ๐ท
masterguru
|
|
Host header is a numeric IP address. Pattern match "(?:^( (920350-201)
|
Hacking
Bad Web Bot
|
|
|
Anonymous
|
|
34.78.253.142 - - [14/Sep/2026:08:12:41 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03F\xA3a\x ...
show more
34.78.253.142 - - [14/Sep/2026:08:12:41 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03F\xA3a\xCAu\xA0\xF0\x10\xAA\xDB\xD3\xAE\xA5\xD0\xB4\xF9k\xED\x1F\x02s.\x5C\xB3\xC1\xAD\xE9\x1D\x1A'w\xEE p\xD5\xA5\xC2\x0B\x0F\x9A`\x17\xA7?\xB5\xE0\xC1\xE4\x89\xDE,v\xEC\xA2\xB6I\xAA\xA0,`\x8A\xEC21|\x002\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-" "-"
34.78.253.142 - - [14/Sep/2026:08:12:46 +0200] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-" "-"
34.78.253.142 - - [14/Sep/2026:08:12:46 +0200] "\xD4\xE7\xD5g\x1CC\x8E\x93sB\x05|]a\x13;\x06\xC0\xF4Y\xE1\x92\x0C\x06N\x8C\x08\xF8\x80\xCBC\xEF*\xD8\xD5\xA6Jd\xCBr\xF24\xAE\x22\x07\xF4\x0C\x91\x01\x1C\xB9\xD0\xD7\x13\x1Eh\x88\xBF\x8A9%\xEA3r" 400 150 "-" "-" "-"
...
show less
|
Hacking
Web App Attack
|
|
|
Anonymous
|
|
34.78.253.142 - - [14/Sep/2026:08:06:23 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 1 ...
show more
34.78.253.142 - - [14/Sep/2026:08:06:23 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
34.78.253.142 - - [14/Sep/2026:08:06:24 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03}\xB5\x0F\xF8K\x1E?\x88\xC3\x9E\x0B\x7F\xA1zx\x5C\xCA\x06\xC9\xBBP\x8BD\xE5`\xFEd\xE4\x16\x1D~\x97 \xFA\x09&\xA5\xF6E4\x04\xE0\x1D\x8D\xE6L\xB2sj\xFF\xE6\xFB;\xBB\xE4\xCE\xA0\xFAQ0\x85\x9A\xE4\xDER\x002\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-"
...
show less
|
Bad Web Bot
Web App Attack
|
|
|
๐บ๐ธ
RogueAutomata
|
|
Detected malicious request: GET /
Detections triggered: Access via IP addr (v4)
|
Web App Attack
|
|
|
๐ซ๐ท
pm33
|
|
Unsolicited connection attempts or aggressive port scan.
|
Port Scan
|
|
|
๐บ๐ธ
NXTwoThou
|
|
Verb
|
Web App Attack
|
|
|
๐ณ๐ฑ
ItsJustStan
|
|
Multi-protocol port scanner sending binary payloads to HTTP port
|
Port Scan
|
|
|
๐จ๐ฆ
lakered
|
|
Detectors: [NGINX, nginx_monitor] | Reasons: Nginx: Default server trap hit | Invalid HTTP protocol ...
show more
Detectors: [NGINX, nginx_monitor] | Reasons: Nginx: Default server trap hit | Invalid HTTP protocol or SSTP scan attempt detected on sinkhole | Evidence: High-Criminality-Signature (p0f:*:64:0:*:mss*30,7:mss,sok,ts,nop,ws:df,id+:0 - Ratio:0.97), OS-Signature-Mismatch (UA:Windows/p0f:Linux) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36 | TCP Fingerprint: Linux (Legacy/Embedded) (Link:generic tunnel or VPN, Uptime:225m)
show less
|
Port Scan
Exploited Host
|
|
|
๐บ๐ธ
gu-alvareza
|
|
Java.Debug.Wire.Protocol.Insecure.Configuration
|
Hacking
|
|
|
๐ฎ๐ณ
nadnitin
|
|
Automated trigger via Nginx Police. Reason: IP-SCANNER. Trigger Log: 34.78.253.142 - - [14/Sep/2026: ...
show more
Automated trigger via Nginx Police. Reason: IP-SCANNER. Trigger Log: 34.78.253.142 - - [14/Sep/2026:10:30:31 +0530] "GET / HTTP/1.1" 404 162 "-" "Mozilla/5.0 (compatible)"
show less
|
Port Scan
|
|