🇩🇪
Jochen Pretli
2026-10-07 12:49:45
(1 day ago)
connection to honeypot
Email Spam
Port Scan
2026-10-07 07:27:14
(1 day ago)
CrowdSec detection: crowdsecurity/http-probing
Hacking
Web App Attack
🇵🇱
ToJa
2026-10-07 06:46:57
(1 day ago)
Web App Attack:
34.140.57.186 - - [07/Oct/2026:08:46:50 +0200] "GET / HTTP/1.1" 403 168 "-" "Mozilla ...
show more
Web App Attack:
34.140.57.186 - - [07/Oct/2026:08:46:50 +0200] "GET / HTTP/1.1" 403 168 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
show less
Web App Attack
🇨🇱
ifiguero
2026-10-07 06:46:15
(1 day ago)
Web Attack (\x00\x00\x00\x00\x00). 7d ban
Web App Attack
🇺🇸
NXTwoThou
2026-10-07 06:24:14
(1 day ago)
Verb
Web App Attack
🇧🇷
maviei
2026-10-07 06:09:06
(1 day ago)
_ 34.140.57.186 - - [07/Oct/2026:03:08:06 -0300] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\xA0\x ...
show more
_ 34.140.57.186 - - [07/Oct/2026:03:08:06 -0300] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\xA0\x09x\xF1\x16\xD5b\xFF\x81\xB2\xFE\x12'y}\xE6\xA7\xD2\x8F\xEDn\xFFi\xC6\x83\xF9\xE3#\xDB\x16<\xDB C\xAAn\xF4\xC0tI\xFA\xD1\x01XxB\xE1\xEC\x8C\x10\xFA\xF2.B\xDD" 400 150 "-" "-" 0.424
_ 34.140.57.186 - - [07/Oct/2026:03:08:11 -0300] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-" 5.388
_ 34.140.57.186 - - [07/Oct/2026:03:08:13 -0300] "\x0F\xBB\xA3*\x99B\x8F\xE7\x05\xBE\x22\xB4G\x9C\xB3-\xE0qx\xA86D\x09\xF7P\xAD\x13\x1Br\xC4W't\x16\x87\x90V\xB1z\x03l7\xAD\x87]\xF6\xB4go<\x0E%\xF9\x03" 400 150 "-" "-" 5.002
_ 34.140.57.186 - - [07/Oct/2026:03:08:54 -0300] "\x00\x1E~\xC9\x01\x00\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03" 400 150 "-" "-" 5.004
_ 34.140.57.186 - - [07/Oct/2026:03:09:04 -0300] "\x03\x00\x00\x13\x0E
...
show less
Bad Web Bot
🇷🇺
mysh38
2026-10-07 06:06:37
(1 day ago)
fail2ban: nginx-bots jail ban
Web App Attack
🇺🇸
legionMCCXV
2026-10-07 05:57:14
(1 day ago)
Non-HTTP protocol data (e.g. MQTT/TLS handshake bytes) sent to HTTP(S) port.
Port Scan
Hacking
🇸🇪
eagle
2026-10-07 05:40:32
(1 day ago)
34.140.57.186 - - [07/Oct/2026:05:40:32 +0000] "\x16\x03\x00\x00i\x01\x00\x00e\x03\x03U\x1C\xA7\xE4r ...
show more
34.140.57.186 - - [07/Oct/2026:05:40:32 +0000] "\x16\x03\x00\x00i\x01\x00\x00e\x03\x03U\x1C\xA7\xE4random1random2random3random4\x00\x00\x0C\x00/\x00" 400 150 "-" "-"
...
show less
Port Scan
Web App Attack
🇺🇸
LotPhantom
2026-10-07 05:29:55
(1 day ago)
34.140.57.186 - - [07/Oct/2026:05:28:54 +0000] "GET / HTTP/1.1" 404 146 "-" "Mozilla/5.0 (compatible ...
show more
34.140.57.186 - - [07/Oct/2026:05:28:54 +0000] "GET / HTTP/1.1" 404 146 "-" "Mozilla/5.0 (compatible; nmap-http-info)" "0"
...
show less
Web App Attack
🇺🇸
withfallback.com
2026-10-07 04:38:15
(1 day ago)
Attempt to connect to Java debugger (JDWP)
Port Scan
🇺🇸
donarev419
2026-10-07 04:24:12
(1 day ago)
Connection to port 80 with data transfer.
Data preview: GET / HTTP/1.1
Host: 67.215.244.172:80
Use ...
show more
Connection to port 80 with data transfer.
Data preview: GET / HTTP/1.1
Host: 67.215.244.172:80
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) Apple
show less
Port Scan
Hacking
🇹🇷
Domainhizmetleri.com
2026-10-07 04:10:50
(2 days ago)
Source: DH Hunter (Honeypot) | Reason: HTTP Probe (80/tcp)
Web App Attack
🇩🇪
joharikop
2026-10-07 04:03:11
(2 days ago)
Malformed HTTP request or known bad user agent detected by fail2ban on nginx reverse proxy
Bad Web Bot
2026-10-07 03:50:50
(2 days ago)
34.140.57.186 - - [07/Oct/2026:05:50:44 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\x94\xE5 ...
show more
34.140.57.186 - - [07/Oct/2026:05:50:44 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\x94\xE5\xC4\xF2\x09\xB0f\xAB\xCB\xFA\x04\xAA\xE2\x81\xDE\x87\xD0\x9B\xF0\xFD=q}\x90/\xAFE\x9Emf\xC7\xFB G\xCE\x0F\x03\xFF\x168C\xE9\xF0\x0B\xF5\x1DUQ\xA7\xD1zJ\x5C\xC4\xC7[\xA6Au.\xC0\x86\x03\xA8\xD5\x002\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-" "-"
34.140.57.186 - - [07/Oct/2026:05:50:49 +0200] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-" "-"
34.140.57.186 - - [07/Oct/2026:05:50:49 +0200] "9\xE3\x0E\xC0\xFC\x82K\xF3irC}%'\x16\xBE\xFD\xCA\xE2\x8F+Z\x83\xF5\xA9ii\xA92R\x0F\x14\x06\xFAZ!b\x977s\x801\x0F\x15\xC0r\xA1\xD8p\xB4" 400 150 "-" "-" "-"
...
show less
Hacking
Web App Attack
