๐ช๐ธ
barbarella
2026-10-22 08:58:24
(5 hours ago)
Multiple (8) times attack on http port 80: Illegal http header rejected by modsecurity (GET /)
10 ...
show more
Multiple (8) times attack on http port 80: Illegal http header rejected by modsecurity (GET /)
10:58:27 Illegal http header rejected by modsecurity (GET /)
10:58:33 Illegal http header rejected by modsecurity (GET /)
10:58:33 Illegal http header rejected by modsecurity (GET /)
10:58:34 Illegal http header rejected by modsecurity (GET /)
10:58:34 Illegal http header rejected by modsecurity (GET /)
10:58:34 Illegal http header rejected by modsecurity (GET /)
10:58:36 Illegal http header rejected by modsecurity (GET /)
show less
Hacking
Web App Attack
๐ฉ๐ช
hostero
2026-10-22 08:07:13
(6 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
๐ฏ๐ต
VXG-NET
2026-10-22 07:32:58
(6 hours ago)
port=80, indicator_type=hacktool
Hacking
๐ฉ๐ช
Mykola Spesivtsev
2026-10-22 07:10:36
(7 hours ago)
HTTP Tarpit detected bot activity:TargetPort:80, Path:/, Method:GET, UA:Mozilla/5.0 (Windows NT 10.0 ...
show more
HTTP Tarpit detected bot activity:TargetPort:80, Path:/, Method:GET, UA:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Sa
show less
Port Scan
Web App Attack
Bad Web Bot
Anonymous
2026-10-22 07:02:41
(7 hours ago)
SSH brute force detected by CrowdSec
Brute-Force
๐ฉ๐ช
bescared
2026-10-22 06:57:35
(7 hours ago)
F2B - Malicious activity detected. URL Probing. -151302cd-
Hacking
Bad Web Bot
Web App Attack
๐ณ๐ฑ
soverin
2026-10-22 06:41:11
(7 hours ago)
Network scan on port 80
Email Spam
๐ซ๐ท
Kejult
2026-10-22 06:33:42
(7 hours ago)
Honeypot Finding: repeated TCP service probing on TCP/80 (HTTP); 6 application-level events across 6 ...
show more
Honeypot Finding: repeated TCP service probing on TCP/80 (HTTP); 6 application-level events across 6 source port(s). Sensor(s): Tanner.
show less
Port Scan
๐ณ๐ฑ
ItsJustStan
2026-10-22 06:26:10
(7 hours ago)
Multi-protocol port scanner sending binary payloads to HTTP port
Port Scan
๐ท๐บ
mysh38
2026-10-22 05:42:23
(8 hours ago)
fail2ban: nginx-bots jail ban
Web App Attack
๐ฉ๐ช
sojan
2026-10-22 05:22:42
(9 hours ago)
35.240.109.33 - - [22/Oct/2026:07:22:11 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\xBD\xF0 ...
show more
35.240.109.33 - - [22/Oct/2026:07:22:11 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\xBD\xF0\x85\xEE\xA3\xA3\xFB\xCD\x10X]\xC8\xEC\x8A\x90\x8B2 \x87;\xC7\xA8?\x8B%\xD0\xF2W\x03r4P Xn\x8B\x0E" 400 150 "-" "-"
35.240.109.33 - - [22/Oct/2026:07:22:36 +0200] "\x00\x1E\x8F\xFE\x01\x00\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03" 400 150 "-" "-"
35.240.109.33 - - [22/Oct/2026:07:22:41 +0200] "\x03\x00\x00\x13\x0E\xE0\x00\x00\x00\x00\x00\x01\x00\x08\x00\x0B\x00\x00\x00" 400 150 "-" "-"
...
show less
Bad Web Bot
๐ฉ๐ช
Serpentex
2026-10-22 05:04:03
(9 hours ago)
35.240.109.33 - - [22/Oct/2026:07:03:56 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\xCBK\x9 ...
show more
35.240.109.33 - - [22/Oct/2026:07:03:56 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\xCBK\x94\xDCR\xC5\x80d\x07\xA3\xE9\xAC&\xBAN<S\xB33z\x02\x1Af:\xBEG\xC2\x9D\xF8^\xF6\x1C \x9A\xAB\x8D*\xD7!\x08\xFF\x8E8}\x14\xD2\xFEw'\x9B\xC2\xA7A\xAB\xAC\xCE\x14\xBC\xA6\x97\x84X\x86\xEB\xC7\x002\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-"
35.240.109.33 - - [22/Oct/2026:07:04:01 +0200] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-"
35.240.109.33 - - [22/Oct/2026:07:04:01 +0200] "\x0B\x03'_Ya\x5C\xA1Q\xE0\x17\xC4\xE88\x09iR-\x87J\x91?s\xC2O\x17\x13\x1A\xB9Zmg\x0Frd5g,\xE8y\xB1\xA3\x9A7\x9Bl\x17\xA2`~\xF7F\x99W\x9Be(\xE2h2\x16g\x97\xFF" 400 150 "-" "-"
...
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
dpsbs
2026-10-22 05:03:19
(9 hours ago)
multiple ips intrustions detected
Hacking
Anonymous
2026-10-22 04:56:26
(9 hours ago)
35.240.109.33 - - [22/Oct/2026:06:55:48 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\x1B\xDE ...
show more
35.240.109.33 - - [22/Oct/2026:06:55:48 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\x1B\xDEZf\x91{6\x9D\x00\x17\xB9vi_\x13\x19\x00\xE9\xED`)\x07\x1Cu\xA4n\xAC.+\x5C1\xF2 \xBC\xC6\xF3\x9E\xB1\xF4 \x92\xF3\xBD\xF2\x1D\x84ba\xE6\x92\xA0\xF7.\xFD\xE2\xD7T\xFD!\x088\xC9\x09#\xB6\x002\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-"
35.240.109.33 - - [22/Oct/2026:06:55:54 +0200] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-"
35.240.109.33 - - [22/Oct/2026:06:55:57 +0200] "F\xBB\xA9D\xFC\xB7\xB6\x82\xC5\xA7f\x00~,/\xC3\xD5\xA3\x91q\x86\x85)\x9C\x08:\x85\xC9\xFD=\x05{0\xB9\x06\x10n9\xE7L\x0E_\x8F\x5C\xF54\xA3\x0C\x99[\x025\xE3\x89\x0F\xC8\xAB\xBA,\xF2\xFC\xE1h\x92" 400 150 "-" "-"
35.240.109.33 - - [22/Oct/2026:06:56:18 +0200] "\x00\x1E\xB5k\x01\x00\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00
...
show less
Web App Attack
๐ธ๐ช
KIDOS
2026-10-22 04:48:38
(9 hours ago)
Apache monitor: ssrf_log_spoofing
Brute-Force
SSH