🇬🇧
knock
2026-06-25 08:43:36
(1 day ago)
Knock-Knock honeypot brute-force: proto8 (1 total hits)
Brute-Force
2026-06-25 08:17:39
(1 day ago)
34.14.44.66 - - [25/Jun/2026:10:17:39 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10. ...
show more
34.14.44.66 - - [25/Jun/2026:10:17:39 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
34.14.44.66 - - [25/Jun/2026:10:17:39 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03WS/k\xFCOT=\x05" 400 150 "-" "-"
...
show less
Bad Web Bot
Web App Attack
2026-06-25 07:34:29
(1 day ago)
34.14.44.66 - - [25/Jun/2026:07:34:23 +0000] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\xE3\xAF>\ ...
show more
34.14.44.66 - - [25/Jun/2026:07:34:23 +0000] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\xE3\xAF>\xA1\xF2\x04\xA2/\x93\xA3pa@\x02\xB8\xBA\xA6\x90\xB9\xB2\xA4t%\xC3\x89\xBA\xF5Z0\xA7\x7F\x9E c\xB1|u\x1Fd\x1Fu\x85zJ\x10\xB9\x15\xDB<h%,D\x17\x82\x89i\x03\xFF\x0CS\xE93E\xCF\x002\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-" "-"
34.14.44.66 - - [25/Jun/2026:07:34:28 +0000] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-" "-"
...
show less
Port Scan
Brute-Force
🇺🇸
johnkarlhill
2026-06-25 07:30:03
(1 day ago)
WebKnight blocked malicious web request on johnkarlhill.com
Brute-Force
SSH
🇨🇳
Peter Yu
2026-06-25 07:08:44
(1 day ago)
Bad Web Bot
Web App Attack
🇺🇸
gu-alvareza
2026-06-25 07:05:48
(1 day ago)
Java.Debug.Wire.Protocol.Insecure.Configuration
Hacking
🇺🇸
nyt
2026-06-25 06:47:06
(1 day ago)
Empty UA + error, Unusual status code 444, potential scanning activity
Bad Web Bot
Web App Attack
🇩🇪
ManagedStack
2026-06-25 06:30:02
(1 day ago)
Probing access to unauthorized locations
Hacking
Exploited Host
Web App Attack
2026-06-25 06:19:41
(1 day ago)
Probing for known exploit paths (.env, .git, wp-admin, shell files, etc.). Single-strike ban policy ...
show more
Probing for known exploit paths (.env, .git, wp-admin, shell files, etc.). Single-strike ban policy — zero tolerance for exploit scanning. Banned Jun 25, 06:19 UTC. Origin: Belgium, Brussels.
show less
Hacking
Bad Web Bot
Web App Attack
🇺🇸
antlac1
2026-06-25 05:18:22
(1 day ago)
crowdsecurity/http-probing
Brute-Force
Web App Attack
🇺🇸
xxkodedxx
2026-06-25 05:10:09
(1 day ago)
[Zorvexus edge-defense] Edge-block (probe URI / bad UA / hostile vhost)
Trigger: 2× edge-block in 10 ...
show more
[Zorvexus edge-defense] Edge-block (probe URI / bad UA / hostile vhost)
Trigger: 2× edge-block in 10m window.
Origin: BE / AS396982 Google LLC
Active: 05:09:09→05:09:58 UTC
Volume: 2 HTTP req
Probed: /
Status mix: 444×2
Vhost fishing: 67.217.240.72
UA: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
Auto-banned 30d. zorvexus-banner.
show less
Bad Web Bot
Web App Attack
2026-06-25 04:17:43
(1 day ago)
Fuzzing/Looking for credentials files.
Brute-Force
Web App Attack
🇦🇺
gregoo23
2026-06-25 04:04:30
(1 day ago)
34.14.44.66 - - [25/Jun/2026:14:04:27 +1000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10. ...
show more
34.14.44.66 - - [25/Jun/2026:14:04:27 +1000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
34.14.44.66 - - [25/Jun/2026:14:04:27 +1000] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\xB3m\xE6\xA1\xF1\xCA\xAC\xC1\xF8\x05\xCF\xA3\xE89\xE8\x16\x5C[\x5C\x19\x11\xD7v\x85\xEEf\x8D\xB6\x03X\xA3\xBE h\xC4\xDC\x8F\xD0\xC0\xD8O\xD0\xEE\xE0\xA1I=" 400 154 "-" "-"
34.14.44.66 - - [25/Jun/2026:14:04:28 +1000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇨🇳
WMK965
2026-06-25 04:04:20
(1 day ago)
34.14.44.66 - - [25/Jun/2026:12:04:11 +0800] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\xB5\xFEB\ ...
show more
34.14.44.66 - - [25/Jun/2026:12:04:11 +0800] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\xB5\xFEB\xD9\xFA\x97B\xED\xBC\xEC\x8D{\xE1\xD0\xB1" 400 154 "-" "-" "-"
34.14.44.66 - - [25/Jun/2026:12:04:16 +0800] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 154 "-" "-" "-"
34.14.44.66 - - [25/Jun/2026:12:04:17 +0800] "\xB3\xE5-\xCA\xB9.\xAB\x106$)1]9\x81\x9E\xCC\x1C\xB8\xB4t\x95\x1F6J\x84\xC5\xE0]\x81\xF3\x15\xD6\xBC\x0C\x8DR-\x8B1\xB3\x073\xC8\xDE/\xD6\xC57\x18\xB4\xF4\xC0S\xCB\x01\xDC\x9C\x93n$\x92\xD1d" 400 154 "-" "-" "-"
show less
Port Scan
Web App Attack
🇺🇸
Starburst SysOp Team
2026-06-25 04:02:41
(1 day ago)
Host header is a numeric IP address. Pattern match "(?:^( (920350-stl2-13)
Hacking
Bad Web Bot