2026-09-12 08:18:33
(18 minutes ago)
[Sat Sep 12 10:18:31.478947 2026] [authz_core:error] [pid 643:tid 649] [client 34.62.130.176:46716] ...
show more
[Sat Sep 12 10:18:31.478947 2026] [authz_core:error] [pid 643:tid 649] [client 34.62.130.176:46716] AH01630: client denied by server configuration: /var/www/html/
[Sat Sep 12 10:18:32.116717 2026] [authz_core:error] [pid 643:tid 675] [client 34.62.130.176:46728] AH01630: client denied by server configuration: /var/www/html/
[Sat Sep 12 10:18:32.319157 2026] [authz_core:error] [pid 643:tid 653] [client 34.62.130.176:46740] AH01630: client denied by server configuration: /var/www/html/
[Sat Sep 12 10:18:32.322741 2026] [authz_core:error] [pid 643:tid 651] [client 34.62.130.176:46732] AH01630: client denied by server configuration: /var/www/html/favicon.ico
[Sat Sep 12 10:18:32.470139 2026] [authz_core:error] [pid 643:tid 664] [client 34.62.130.176:46744] AH01630: client denied by server configuration: /var/www/html/
...
show less
Web App Attack
🇺🇸
crooze.net
2026-09-12 06:09:35
(2 hours ago)
34.62.130.176 - - [12/Sep/2026:02:09:34 -0400] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\xAF\xC8 ...
show more
34.62.130.176 - - [12/Sep/2026:02:09:34 -0400] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\xAF\xC8J\xBC\x97\x08\x18Vffy\xC87\x0EL/\xFF^\x9F\xB4\xD2\xE9\xE3\xC7\xC76n?\xB2\x92\xBA\xD0 5\x09#\xC9{|\xF0\xF2d\x7F\x80L\x94\xFB\xB9\x16\xBCY\xB3\xD2\x97\xCBIO\xEB;W\x15\xD4U\xB3p\x002\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-"
...
show less
Hacking
Web App Attack
🇩🇪
0x44
2026-09-12 05:54:30
(2 hours ago)
Abusive host detected - Web probing for vulnerabilities
Web App Attack
Hacking
🇲🇽
impra
2026-09-12 05:39:24
(2 hours ago)
Detected 55 connection attempts across 7 ports.
Port Scan
Hacking
Web App Attack
🇩🇪
Ilop
2026-09-12 05:30:03
(3 hours ago)
[hp-100] 32 unsolicited packets to honeypot ports 80 (OCI DShield sensor)
Port Scan
🇺🇸
antlac1
2026-09-12 02:55:21
(5 hours ago)
crowdsecurity/http-probing
Brute-Force
Web App Attack
2026-09-12 02:53:57
(5 hours ago)
34.62.130.176 - - [12/Sep/2026:04:53:03 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\xB5k+\x ...
show more
34.62.130.176 - - [12/Sep/2026:04:53:03 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\xB5k+\x82\xE8" 400 150 "-" "-"
34.62.130.176 - - [12/Sep/2026:04:53:08 +0200] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-"
34.62.130.176 - - [12/Sep/2026:04:53:08 +0200] "~\xC6\xE6Lc[\xEBU:\x18\xC7\x01\x08+0\x93\xA3\x08I\xA6\xC2\xD2\xEA\xDC:\xBF\xD8[8N\xC4\x87\x11r\xFBA\x92\x07\xC7\xE0\xB2\xCF\xBF\x95H\xD1\xEC\xC4\xEE\x84ci;3N\xED\xA3\xDF5\xCD\xCC\xFD\xB2J" 400 150 "-" "-"
34.62.130.176 - - [12/Sep/2026:04:53:44 +0200] "\x00\x1Ei\x9C\x01\x00\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03" 400 150 "-" "-"
34.62.130.176 - - [12/Sep/2026:04:53:56 +0200] "\x03\x00\x00\x13\x0E\xE0\x00\x00\x00\x00\x00\x01\x00\x08\x00\x0B\x00\x00\x00" 400 150 "-" "-"
...
show less
Web App Attack
🇺🇸
ratcarcher-labs
2026-09-12 02:42:11
(5 hours ago)
[Ratcarcher Labs/MutantShield honeypot CTI] actor=human vector=bot_scanner risk=75 attacks=5 depth=0 ...
show more
[Ratcarcher Labs/MutantShield honeypot CTI] actor=human vector=bot_scanner risk=75 attacks=5 depth=0 node=node-us-east canary=no human_score=50 agentic=15 cc=BE asn=Google LLC | Data provided by Ratcarcher Labs · https://ratcarcher-labs.com · docs https://api.ratcarcher-labs.com/api/v1/public/docs
show less
Port Scan
Bad Web Bot
🇹🇷
pashait
2026-09-12 02:19:47
(6 hours ago)
Auto-blocked by Seczar SecureOps — IPS Web Attack Signature (1 events in 5min) at 2026-09-12 02:19
Web App Attack
Bad Web Bot
🇬🇧
knock
2026-09-12 02:15:11
(6 hours ago)
Knock-Knock honeypot brute-force: HTTP (1 total hits)
Web App Attack
