🇫🇷
geot
2026-09-08 12:20:45
(2 hours ago)
<<removed>> / HTTP/1.1
\x16\x03
POST / HTTP/1.1
OPTIONS / HTTP/1.1
Port Scan
Hacking
Web App Attack
Anonymous
2026-09-08 11:14:18
(3 hours ago)
34.78.245.117 - - [08/Sep/2026:13:13:25 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\xC6\xE2 ...
show more
34.78.245.117 - - [08/Sep/2026:13:13:25 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\xC6\xE2Z\x9C\xFBOL\x7F\xFA\x9FW\x18\xC6n\x14\xC1\xF8b\x83n`\x7F\x22\x80N\xAFE\xBA\xBD\xF4\xC0Q \xFD\x8A\xA6g\xE2\xEC\x9C\x90O\x83\xE5E\xDD\xA5\xA0\xB0\x1D\xB6N,/r\x1D\x8C\xB1d\x9C\xABg\x95\xB8\xE5\x002\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-"
34.78.245.117 - - [08/Sep/2026:13:13:30 +0200] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-"
34.78.245.117 - - [08/Sep/2026:13:13:30 +0200] "\xE7O\xD9\xB8\x95EkUw\xA7\xE2\xF2\x94\xB4n\xCE5\x83\x81\xD2-\x10\xCA\xDB\x87(\x04\x8BPo[7\x15S\xF0\xF6A\xC9\xBE\xBF\xCBD\x0F\xD0\xE5#Q\x0B\x05aI\x13\xB0H\xAF\x106\x91LP\xCB\x849\x8A" 400 150 "-" "-"
34.78.245.117 - - [08/Sep/2026:13:14:08 +0200] "\x00\x1E~W\x01\x00\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\
...
show less
Web App Attack
🇩🇪
paradox-hub.fr
2026-09-08 08:00:08
(6 hours ago)
vps-secure / CrowdSec: suricata: Generic Protocol Command Decode
Brute-Force
Web App Attack
🇳🇱
donarev419
2026-09-08 07:48:26
(6 hours ago)
Connection to port 80 with data transfer.
Data preview: GET / HTTP/1.1
Host: 87.229.95.155:80
User ...
show more
Connection to port 80 with data transfer.
Data preview: GET / HTTP/1.1
Host: 87.229.95.155:80
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleW
show less
Port Scan
Hacking
🇩🇪
Ilop
2026-09-08 07:30:06
(7 hours ago)
[hp-100] 32 unsolicited packets to honeypot ports 80 (OCI DShield sensor)
Port Scan
🇳🇴
jad-abuse
2026-09-08 06:04:31
(8 hours ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: tls_scann ...
show more
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: tls_scanner. Observed by 1 sensor(s); 6 hits.
show less
Port Scan
Bad Web Bot
🇩🇪
dpsbs
2026-09-08 05:52:19
(8 hours ago)
multiple ips intrustions detected
Hacking
🇺🇸
gu-alvareza
2026-09-08 05:07:44
(9 hours ago)
Java.Debug.Wire.Protocol.Insecure.Configuration
Hacking
🇩🇪
MSC IT for Business GmbH
2026-09-08 05:05:03
(9 hours ago)
GASTO/CrowdSec: gasto/modsec-critical triggered (via crowdsec-agent, categories 15,21)
Hacking
Web App Attack
🇩🇪
MaxMeier
2026-09-08 05:03:35
(9 hours ago)
34.78.245.117 - - [08/Sep/2026:07:02:34 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 1 ...
show more
34.78.245.117 - - [08/Sep/2026:07:02:34 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
34.78.245.117 - - [08/Sep/2026:07:02:36 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\x10\x92r\xA6\xA0i\x19\xE5r\x02\xDB\xB1{}/\x00n\xF2\xDD$4\xADI>D\x19TW\x91\xD5\xAD\x8B \x97:=\xFAr\xCF\x19\x15\x0FJ\xEB\xF0\x0F\x09\x19\xB9\xD4\xF5\x11\xF0\x11\xB6!\xD0\xAF\x01\xE0\xA3\xAA\x89KX\x002\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-"
34.78.245.117 - - [08/Sep/2026:07:02:38 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
34.78.245.117 - - [08/Sep/2026:07:02:42 +0200] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-"
34.78.24
...
show less
Bad Web Bot
Web App Attack
🇺🇸
crooze.net
2026-09-08 05:01:53
(9 hours ago)
34.78.245.117 - - [08/Sep/2026:01:01:52 -0400] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x033\x87" 4 ...
show more
34.78.245.117 - - [08/Sep/2026:01:01:52 -0400] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x033\x87" 400 150 "-" "-"
...
show less
Hacking
Web App Attack
🇩🇪
Serpentex
2026-09-08 04:04:50
(10 hours ago)
34.78.245.117 - - [08/Sep/2026:06:04:43 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\x18%\x9 ...
show more
34.78.245.117 - - [08/Sep/2026:06:04:43 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\x18%\x99\x8Ca\xF6\xC5\xDC\xF8^\xA4\xB7\x08\xE8+&\x02\xA7gc\xA1R\xAF\x9A\xFB\x09\xDD\x91>U\x18\xA8 u\xD9\x8A!\x9D\xB3\x87N\xE04\xB1\xB9j\x03\xF5\x11\x08\xF1\x9D\xE2\x07_\x7F\xF8\xC8\xDB\xF2\x02\x1EZ/\xAC\x002\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-"
34.78.245.117 - - [08/Sep/2026:06:04:49 +0200] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-"
34.78.245.117 - - [08/Sep/2026:06:04:49 +0200] "Cf\x96\xB9X\xEB\x08 \xBB\xB8\xB9\xA7\x1E<\xF0\xCE|\x11-\xA0N\xAEXP\xC5\x5C\x09\xE5\x88F\xA0M_\xD3\xB0Y\x9Bx\xDD/\x18Z\xC4~D\x17r\xE6\x92\x05q\xC7FT\x9A*\x16$\x06\x9F7\x7Fr\xDD" 400 150 "-" "-"
...
show less
Bad Web Bot
Web App Attack
🇬🇧
cybersteve99
2026-09-08 04:00:30
(10 hours ago)
Invalid HEX string in URL request - Attack suspected.
Brute-Force
Web App Attack
🇫🇷
Faeeth
2026-09-08 03:58:14
(10 hours ago)
Multiple hits on Honeypot UID:PTRW50NM46 Port:Http (80)
Brute-Force
🇺🇸
IndigoRidge
2026-09-08 03:57:40
(10 hours ago)
Knock-Knock HTTP honeypot activity; time=2026-09-08 03:56:47; http_method=GET; http_path=/; http_pur ...
show more
Knock-Knock HTTP honeypot activity; time=2026-09-08 03:56:47; http_method=GET; http_path=/; http_purpose=basic_probe; http_user_agent=Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Sa
show less
Web App Attack