๐บ๐ธ
gu-alvareza
2026-06-03 07:05:29
(15 hours ago)
Java.Debug.Wire.Protocol.Insecure.Configuration
Hacking
Anonymous
2026-06-03 06:52:16
(16 hours ago)
35.195.49.251 46.39.185.24 - [03/Jun/2026:08:52:14 +0200] "OPTIONS / HTTP/1.1" 308 0 "-" "Mozilla/5. ...
show more
35.195.49.251 46.39.185.24 - [03/Jun/2026:08:52:14 +0200] "OPTIONS / HTTP/1.1" 308 0 "-" "Mozilla/5.0 (compatible)"
...
show less
Hacking
Web App Attack
๐ณ๐ฑ
soverin
2026-06-03 06:40:55
(16 hours ago)
Network scan on port 80
Email Spam
๐ฉ๐ช
0x44
2026-06-03 06:02:53
(17 hours ago)
Abusive host detected - Web probing for vulnerabilities
Web App Attack
Hacking
Anonymous
2026-06-03 05:43:50
(17 hours ago)
Fail2Ban triggered
Bad Web Bot
Anonymous
2026-06-03 05:29:17
(17 hours ago)
...
Bad Web Bot
๐ซ๐ฎ
6kilowatti
2026-06-03 05:00:15
(18 hours ago)
35.195.49.251 - - [03/Jun/2026:08:00:14 +0300] "\x16\x03\x00\x00i\x01\x00\x00e\x03\x03U\x1C\xA7\xE4r ...
show more
35.195.49.251 - - [03/Jun/2026:08:00:14 +0300] "\x16\x03\x00\x00i\x01\x00\x00e\x03\x03U\x1C\xA7\xE4random1random2random3random4\x00\x00\x0C\x00/\x00" 400 157 "-" "-"
...
show less
Web App Attack
๐บ๐ธ
itsnixk
2026-06-03 04:32:19
(18 hours ago)
(mod_security) mod_security (id:920350) triggered by 35.195.49.251 (BE/Belgium/251.49.195.35.bc.goog ...
show more
(mod_security) mod_security (id:920350) triggered by 35.195.49.251 (BE/Belgium/251.49.195.35.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Jun 03 00:32:14.940430 2026] [security2:error] [pid 1316993:tid 1317390] [client 35.195.49.251:38872] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "774"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.25.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "ah-uTidU-1e_6iL0gWjeEAAAAEA"]
show less
Port Scan
๐ซ๐ท
pm33
2026-06-03 04:26:41
(18 hours ago)
Unsolicited connection attempts or aggressive port scan.
Port Scan
๐บ๐ธ
crooze.net
2026-06-03 04:25:13
(18 hours ago)
35.195.49.251 - - [03/Jun/2026:00:25:13 -0400] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03C\x87OI\ ...
show more
35.195.49.251 - - [03/Jun/2026:00:25:13 -0400] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03C\x87OI\x96\xAA\x8D?f\xCF\xA7i4\x8E\x90v\xA0#C\x87\xA1\x18\xB7\xB0\x95\xDC\xD5[\xB1k\xCCr F\xF1\x02\x92&\x83\xF6{\xF80\xA4\xF8\xAD\xED\xC9\x85\xF9\xC8b#i\xE5\xC3\x84\x9C%\xFB\x12#\x1A\xF4Z\x002\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-"
...
show less
Hacking
Web App Attack
๐ฉ๐ช
Serpentex
2026-06-03 04:16:26
(18 hours ago)
35.195.49.251 - - [03/Jun/2026:06:16:20 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\x00\x97 ...
show more
35.195.49.251 - - [03/Jun/2026:06:16:20 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\x00\x97hS\xC5\x9D\x1Fi%Ax\x9E\xC9#\xE3\x10\x0F\xD0\xBC\x1ARw\xB2\xA1(\x84\x91\x95r\xB2\x15] \xCAX\xA9\xA0\x9C\x94\xE1\x8F\x8E`\xD67\xC0\x0E\xEF\x00{\xB5B@\x1B\x16:sx\xDDr\x83&\xE6\xFCL\x002\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-"
35.195.49.251 - - [03/Jun/2026:06:16:25 +0200] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-"
35.195.49.251 - - [03/Jun/2026:06:16:25 +0200] "\x9FT\x98\x053\xBDP\xC7\xC1\x8B\xA32F\x85j\x9F\x07\xD1\x07\xEB\xB6\xD6\x06bA\x9C(\xF5\x80\x84\x84Z\x13\x07\x0B\x1Ed[\x06\x122$`\xDD\xB8=L]\xA0\xF5\xCC\xC9\x1D\xFB\x09\xF2\x1D\x1Eh\xCD\xA2\xD0\x13" 400 150 "-" "-"
...
show less
Bad Web Bot
Web App Attack
๐ธ๐ฌ
WMK965
2026-06-03 03:44:20
(19 hours ago)
35.195.49.251 - - [03/Jun/2026:11:44:14 +0800] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03]\x03]\x ...
show more
35.195.49.251 - - [03/Jun/2026:11:44:14 +0800] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03]\x03]\xE3bb\x84\x9B\x9F\x83\x99(\xC4\xF6/(\xFE\x15W\xF3\x86S\x86I" 400 154 "-" "-" "-"
35.195.49.251 - - [03/Jun/2026:11:44:19 +0800] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 154 "-" "-" "-"
35.195.49.251 - - [03/Jun/2026:11:44:20 +0800] "4\xBFy1RW\xB1\xA5\xDEx\x802%\xF43\xE3\xFE\x18\xC2\x07^\x9D\xAA\xFA\x96\x84.\x89B\xB6\xCE#X\x02'8f\x87?\x00" 400 154 "-" "-" "-"
show less
Port Scan
Web App Attack
๐ฏ๐ต
knock
2026-06-03 02:39:56
(20 hours ago)
Knock-Knock honeypot brute-force: proto8 (1 total hits)
Brute-Force
๐ฏ๐ต
VXG-NET
2026-06-03 02:39:46
(20 hours ago)
port=80, indicator_type=hacktool
Hacking
๐ซ๐ท
pm33
2026-06-03 02:31:48
(20 hours ago)
Probing for resource vulnerabilities HTTP(S)
Web App Attack