🇫🇷
agroman93
2026-10-14 14:22:03
(2 days ago)
T-Pot honeypot: 410 hits on ports [8000, 8080, 8081, 9999] (automated)
Port Scan
Web App Attack
🇩🇪
heyzg
2026-10-14 14:12:21
(2 days ago)
HTTP Web Scanning (observed): 7 HTTP, 8s
Bad Web Bot
Web App Attack
🇫🇷
Kejult
2026-10-14 13:55:27
(2 days ago)
Honeypot Finding: repeated TCP service probing on TCP/443 (HTTPS); 5 application-level events across ...
show more
Honeypot Finding: repeated TCP service probing on TCP/443 (HTTPS); 5 application-level events across 5 source port(s). Sensor(s): H0neytr4p.
show less
Port Scan
🇫🇷
Kejult
2026-10-14 13:55:27
(2 days ago)
Honeypot Finding: verified TCP multi-port scan/probing; 16 application-level events across 2 target ...
show more
Honeypot Finding: verified TCP multi-port scan/probing; 16 application-level events across 2 target ports and 11 source port(s). Ports: 8000/service, 443/HTTPS. Sensors: Honeytrap, H0neytr4p.
show less
Port Scan
🇺🇸
lavnet.net
2026-10-14 13:35:02
(2 days ago)
206.71.149.28 - - [14/Oct/2026:13:34:53 +0000] "GET / HTTP/1.0" 400 292 "-" "-"
206.71.149.28 - - [1 ...
show more
206.71.149.28 - - [14/Oct/2026:13:34:53 +0000] "GET / HTTP/1.0" 400 292 "-" "-"
206.71.149.28 - - [14/Oct/2026:13:34:53 +0000] "GET / HTTP/1.0" 400 292 "-" "-"
206.71.149.28 - - [14/Oct/2026:13:34:53 +0000] "GET / HTTP/1.0" 400 292 "-" "-"
206.71.149.28 - - [14/Oct/2026:13:34:53 +0000] "GET / HTTP/1.0" 400 292 "-" "-"
206.71.149.28 - - [14/Oct/2026:13:35:01 +0000] "GET / HTTP/1.0" 400 292 "-" "-"
206.71.149.28 - - [14/Oct/2026:13:35:01 +0000] "GET / HTTP/1.0" 400 292 "-" "-"
...
show less
Brute-Force
2026-10-14 13:28:26
(2 days ago)
206.71.149.28 - - [14/Oct/2026:15:28:25 +0200] "\x16\x03\x01\x02\x00\x01\x00\x01\xFC\x03\x03\xE9\x0B ...
show more
206.71.149.28 - - [14/Oct/2026:15:28:25 +0200] "\x16\x03\x01\x02\x00\x01\x00\x01\xFC\x03\x03\xE9\x0B_8V\x91\xB8\xFF.\xD1\xCDc\x1C7q\xEA\xB0\x1F\xB0\xE8\xC2\x02\xAF-\xEE-\x0E\x9C\xD2\xB7w\xB2 \xD9\xC5\xDCZ\xCF;\xBFQjw\xDF\xF2?:\x98\x86\xC0\xD9\xA4\xD1/\xA6`!" 400 150 "-" "-" "-"
206.71.149.28 - - [14/Oct/2026:15:28:25 +0200] "\x16\x03\x01\x02\x00\x01\x00\x01\xFC\x03\x03\xEFiG\xC3\xE0\xA2\x12\xB3:T\x84\xA33eD\xC2Y\xCF\x06\xEF\xA7\xC3\xB0\xFB\x93\x09c\xBB\xAD\xD1\xB1\x97 \x97M\x99#\x08\xE7\xA5S\xA7-$`_\x98\xB41(\x8F\xA1Q\xFDF\x91\xA5G\xD8c4\xA3\x8F\x8BY\x00>\x13\x02\x13\x03\x13\x01\xC0,\xC00\x00\x9F\xCC\xA9\xCC\xA8\xCC\xAA\xC0+\xC0/\x00\x9E\xC0$\xC0(\x00k\xC0#\xC0'\x00g\xC0" 400 150 "-" "-" "-"
...
show less
Bad Web Bot
Web App Attack
🇵🇱
dzpk
2026-10-14 13:15:53
(2 days ago)
206.71.149.28 - - [14/Oct/2026:15:15:53 +0200] "GET / HTTP/1.1" 400 248 "-" "-"
Web App Attack
🇨🇳
PrivateLiu
2026-10-14 12:48:06
(2 days ago)
[AbuseIPDB auto-report] Rules: Rule3, Rule4. Region: non-CN. Non-standard HTTP methods: ; Unsupporte ...
show more
[AbuseIPDB auto-report] Rules: Rule3, Rule4. Region: non-CN. Non-standard HTTP methods: ; Unsupported/malformed requests: HTTP 400 responses or POST to static/read-only paths. Sample paths: , /. Statuses: 400. Methods: , GET. UA: N/A
show less
Hacking
Bad Web Bot
Web App Attack
🇩🇪
pigro
2026-10-14 12:27:44
(2 days ago)
206.71.149.28 - - [14/Oct/2026:14:27:43 +0200] "GET /api/metrics/run HTTP/1.1" 404 153 "-" "-"
206.7 ...
show more
206.71.149.28 - - [14/Oct/2026:14:27:43 +0200] "GET /api/metrics/run HTTP/1.1" 404 153 "-" "-"
206.71.149.28 - - [14/Oct/2026:14:27:43 +0200] "\x94\x00\xD0\xB4\xD026AAA9541F0\xBC\xBD\xCD\xB9@37A\x0F+\x5C3936AAA9541F0CB2FA36AAA9541F0CB2FA36AAA9541F0CB2FA36AAA9541F0C.]% _^.259541F0CB2FA36AAA9541F0CB2FA36AAA9541F0CB2FA36AAA9541F0CB\x07hp\x06\x18qlx\x08\x18ST(U1+QFA36AAA9541F0CB2FA36AAA9541F0CB2FA36AAA9541F0CB2ep\x13e\x0C\x11A9541F0CB2FA36AAA9541F0CB2FA36AAA9541F0CB2FA36AAA9541F0CB2F9\x0B\x00\x1Ewu9541F0CB2FA36AAA9541F0CB2FA36AAA9541F0CB2FA36AAA9541F0CB2FA\x1BX./$\x10541F0CB2FA36AAA9541F0CB2FA36AAA9541F0CB2FA36AAA9541F0CB2FA3rp\x05hq\x1D\x06opa9" 400 157 "-" "-"
...
show less
Web App Attack
🇬🇧
Apache
2026-10-14 12:27:41
(2 days ago)
(mod_security) mod_security (id:920350) triggered by 206.71.149.28 (GB/United Kingdom/-): 5 in the l ...
show more
(mod_security) mod_security (id:920350) triggered by 206.71.149.28 (GB/United Kingdom/-): 5 in the last 300 secs (CF_ENABLE)
show less
Brute-Force
Web App Attack
🇫🇷
Kejult
2026-10-14 12:17:39
(2 days ago)
Honeypot Finding: active TCP application payload captured by Honeytrap; 11 payload-bearing connectio ...
show more
Honeypot Finding: active TCP application payload captured by Honeytrap; 11 payload-bearing connection/event(s), 3643 payload byte(s) total, maximum payload 517 byte(s). Target port(s): 9999.
show less
Port Scan
Hacking
🇺🇸
Phil Schuyler
2026-10-14 00:00:00
(2 days ago)
Probing of sensitive web paths and exposed admin/config endpoints. Captured by a web honeypot.
Web App Attack