🇺🇸
legionMCCXV
2026-08-22 11:27:37
(5 days ago)
Non-HTTP protocol data (e.g. MQTT/TLS handshake bytes) sent to HTTP(S) port.
Port Scan
Hacking
🇺🇸
NXTwoThou
2026-08-22 11:10:06
(5 days ago)
Verb
Web App Attack
🇬🇧
thetomtaylor.co.uk
2026-08-22 11:07:02
(5 days ago)
Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [ice01,wa01,wa02]
Hacking
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
thetomtaylor.co.uk
2026-08-22 10:08:01
(5 days ago)
Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [ice02]
Hacking
Brute-Force
Bad Web Bot
Web App Attack
🇳🇴
noteng.no
2026-08-22 06:48:23
(5 days ago)
34.79.253.14 - - [22/Aug/2026:08:48:13 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\x96p\xDA ...
show more
34.79.253.14 - - [22/Aug/2026:08:48:13 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\x96p\xDAe\xB7\x89d\xAF;\xBD\x00o\x97es\xD3\xA6\x0E`\x94\xEF\xCC\xE4DdT\x0Ci\xFF8\xA7J %\xDE\x0B!-\xB6[_\x03\xB2>yS\xD0\x94\xAB*V\xA8v\x00kP\xAF\x10\x81\xCB\xF1p\x8C`C\x002\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-"
34.79.253.14 - - [22/Aug/2026:08:48:18 +0200] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-"
34.79.253.14 - - [22/Aug/2026:08:48:18 +0200] "\xA0\xBC\xE6\xE0\xB0y\xF3>\xD4~\xB5\xE5\xCF\xB9\xEE\x0B\xF4I2t\x89^r\xC9\x93\xB5\xC2\xED\x81" 400 150 "-" "-"
...
show less
Hacking
Web App Attack
🇬🇧
essinghigh
2026-08-22 06:44:56
(5 days ago)
IPS Detection: 34.79.253.14 -> DPT: 80
Port Scan
🇺🇸
nyt
2026-08-22 06:24:25
(5 days ago)
Empty UA + error
Web App Attack
🇺🇸
gu-alvareza
2026-08-22 05:05:23
(6 days ago)
Java.Debug.Wire.Protocol.Insecure.Configuration
Hacking
🇺🇸
crooze.net
2026-08-22 05:01:00
(6 days ago)
34.79.253.14 - - [22/Aug/2026:01:00:59 -0400] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03 6:P\x81, ...
show more
34.79.253.14 - - [22/Aug/2026:01:00:59 -0400] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03 6:P\x81,\xA5\x18<d\xA0\x17\xA7ic\xE6\xF3\xEA\xDC7\x8B" 400 150 "-" "-"
...
show less
Hacking
Web App Attack
🇺🇸
xxkodedxx
2026-08-22 04:53:17
(6 days ago)
[Zorvexus edge-defense] Edge-block (probe URI / bad UA / hostile vhost)
Trigger: 2× edge-block in 10 ...
show more
[Zorvexus edge-defense] Edge-block (probe URI / bad UA / hostile vhost)
Trigger: 2× edge-block in 10m window.
Origin: BE / AS396982 Google LLC
Active: 04:52:31→04:53:16 UTC
Volume: 3 HTTP req
Probed: /, \xC7\xA3\xEF\x07\xB4w
Status mix: 444×2 400×1
Vhost fishing: 67.217.240.72
UA: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
Auto-banned 30d. zorvexus-banner.
show less
Bad Web Bot
Web App Attack
🇦🇺
gregoo23
2026-08-22 04:25:53
(6 days ago)
34.79.253.14 - - [22/Aug/2026:14:25:50 +1000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10 ...
show more
34.79.253.14 - - [22/Aug/2026:14:25:50 +1000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
34.79.253.14 - - [22/Aug/2026:14:25:52 +1000] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\xC9_\xCE\x1B\xD2q\xEA\xE7\x11\x8B\xF3S2\xD6\xBBo\xCF\xAF~\xDA\xF7\x98Q\x15\xFF\xED/\x22\xE3\xC8\xFF\xED \xAD06,\xFB\x8E?\xFB\xA0MF\xDEv\xB1\x5C%\xCC\xB1\xA5>?\xDF\xC6\x0C]\xE9\xD3bk\xFA\xF7\xC2\x002\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 154 "-" "-"
34.79.253.14 - - [22/Aug/2026:14:25:53 +1000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇳🇱
knock
2026-08-22 04:24:25
(6 days ago)
Knock-Knock honeypot brute-force: proto8 (1 total hits)
Brute-Force
🇸🇬
anotherwatcher
2026-08-22 04:23:35
(6 days ago)
bad bot
Bad Web Bot
2026-08-22 04:05:35
(6 days ago)
Probing for known exploit paths (.env, .git, wp-admin, shell files, etc.). Single-strike ban policy ...
show more
Probing for known exploit paths (.env, .git, wp-admin, shell files, etc.). Single-strike ban policy — zero tolerance for exploit scanning. Banned Aug 22, 04:05 UTC. Origin: Belgium, Brussels.
show less
Hacking
Bad Web Bot
Web App Attack
2026-08-22 04:04:18
(6 days ago)
34.79.253.14 - - [22/Aug/2026:04:04:13 +0000] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03k1\x18\xF ...
show more
34.79.253.14 - - [22/Aug/2026:04:04:13 +0000] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03k1\x18\xF3K\x9C_\xCAkx\x8D\xCFf\xCF[\x0C\xC0\x10\x96T\x00\xAF\x06C\x7F<y\xF3\xCA\xE7\xA3\xC8 \x97\xC4#\xF1\xC1h4FQ\xAC\xC8\xCF\x19'\xE0H,\x90xs\xF9N\xC0v\xC9\x93x}>\x9E\xAF<\x002\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-" "-"
34.79.253.14 - - [22/Aug/2026:04:04:18 +0000] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-" "-"
...
show less
Port Scan
Brute-Force