🇵🇹
nuno
2026-06-03 07:37:45
(1 week ago)
35.195.175.74 - - [03/Jun/2026:08:37:43 +0100] host:80 "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Wind ...
show more
35.195.175.74 - - [03/Jun/2026:08:37:43 +0100] host:80 "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" "-" 0.000 -
35.195.175.74 - - [03/Jun/2026:08:37:43 +0100] host:80 "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" "-" 0.000 -
...
show less
Web App Attack
🇺🇸
johnkarlhill
2026-06-03 07:30:02
(1 week ago)
WebKnight blocked malicious web request on johnkarlhill.com
Brute-Force
SSH
🇺🇸
gu-alvareza
2026-06-03 07:05:29
(1 week ago)
Java.Debug.Wire.Protocol.Insecure.Configuration
Hacking
🇩🇪
Progetto1
2026-06-03 06:19:01
(1 week ago)
Detected via HAProxyScanner at 2026-06-03 06:19:01 UTC on destination port WEB (80/443). Repeated sc ...
show more
Detected via HAProxyScanner at 2026-06-03 06:19:01 UTC on destination port WEB (80/443). Repeated scan / connection.
show less
Port Scan
Hacking
Brute-Force
🇧🇷
SOC Blue Team
2026-06-03 05:26:20
(1 week ago)
IPs get by Hunting on SIEM
Phishing
Web Spam
Port Scan
Hacking
🇷🇺
genokrad
2026-06-03 04:41:28
(1 week ago)
Website scan TCP 80/443 "/" "Mozilla/5.0 (compatible)"
Port Scan
Web App Attack
🇺🇸
itsnixk
2026-06-03 04:32:19
(1 week ago)
(mod_security) mod_security (id:920350) triggered by 35.195.175.74 (BE/Belgium/74.175.195.35.bc.goog ...
show more
(mod_security) mod_security (id:920350) triggered by 35.195.175.74 (BE/Belgium/74.175.195.35.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Jun 03 00:32:16.237338 2026] [security2:error] [pid 1316994:tid 1317491] [client 35.195.175.74:26586] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "774"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.25.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "ah-uUAzvg3uGSv7kHwZpXQAAALE"]
show less
Port Scan
🇺🇸
LSPCCU
2026-06-03 04:15:54
(1 week ago)
TSEC Honeypot Network report. Threat score: 78/100. Categories: Port Scan, Hacking, Brute-Force, Web ...
show more
TSEC Honeypot Network report. Threat score: 78/100. Categories: Port Scan, Hacking, Brute-Force, Web App Attack, SSH. Honeypot: ssh-telnet, cowrie. Context: 35.
show less
Port Scan
Hacking
Brute-Force
Web App Attack
SSH
🇦🇺
gregoo23
2026-06-03 03:49:39
(1 week ago)
35.195.175.74 - - [03/Jun/2026:13:49:36 +1000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 1 ...
show more
35.195.175.74 - - [03/Jun/2026:13:49:36 +1000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
35.195.175.74 - - [03/Jun/2026:13:49:36 +1000] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\xD9\xC8\x8D/\xD6ZR\x06\x92F\x97G\xD7'\x04\x01\xF1\xB1\x10\x02\x98\x1C\xF6k\x8F\x9C[\xB2\xDF\xDD\x11` @\xF0c\x03\x9D/s\x96\x97\x9CM#\x98\xCFLs\xB3\x1D\x0CsZ\xD6\xC4\x98\x01fy\x8E=\xAFLx\x002\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 154 "-" "-"
35.195.175.74 - - [03/Jun/2026:13:49:37 +1000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
nyt
2026-06-03 03:28:37
(1 week ago)
Empty UA + error
Web App Attack
🇺🇸
Operator873
2026-06-03 03:24:48
(1 week ago)
2026/06/02 22:24:45 [error] 2715722#0: *3633335 access forbidden by rule, client: 35.195.175.74, ser ...
show more
2026/06/02 22:24:45 [error] 2715722#0: *3633335 access forbidden by rule, client: 35.195.175.74, server: [OBFUSCATED], request: "OPTIONS / HTTP/1.1", host: "45.19.251.225"
2026/06/02 22:24:45 [error] 2715722#0: *3633335 access forbidden by rule, client: 35.195.175.74, server: [OBFUSCATED], request: "OPTIONS / HTTP/1.1", host: "45.19.251.225"
2026/06/02 22:24:46 [error] 2715722#0: *3633336 access forbidden by rule, client: 35.195.175.74, server: [OBFUSCATED], request: "NZWP / HTTP/1.1", host: "45.19.251.225"
2026/06/02 22:24:46 [error] 2715722#0: *3633336 access forbidden by rule, client: 35.195.175.74, server: [OBFUSCATED], request: "NZWP / HTTP/1.1", host: "45.19.251.225"
2026/06/02 22:24:46 [error] 2715722#0: *3633338 access forbidden by rule, client: 35.195.175.74, server: [OBFUSCATED], request: "GET / HTTP/1.1", host: "45.19.251.225"
...
show less
Brute-Force
Web App Attack
🇬🇧
knock
2026-06-03 03:18:37
(1 week ago)
Knock-Knock honeypot brute-force: proto8 (1 total hits)
Brute-Force
🇩🇪
Roper123
2026-06-03 03:13:45
(1 week ago)
Web exploits
Web App Attack
🇩🇪
Kreisausschuss des Odenwaldkreises
2026-06-03 03:12:11
(1 week ago)
HAProxy NOSRV or BADREQ
Web App Attack
🇧🇬
Stoyko Stoykov
2026-06-03 03:01:01
(1 week ago)
35.195.175.74 - - [03/Jun/2026:06:01:01 +0300] "\x16\x03\x00\x00i\x01\x00\x00e\x03\x03U\x1C\xA7\xE4r ...
show more
35.195.175.74 - - [03/Jun/2026:06:01:01 +0300] "\x16\x03\x00\x00i\x01\x00\x00e\x03\x03U\x1C\xA7\xE4random1random2random3random4\x00\x00\x0C\x00/\x00" 400 150 "-" "-"
...
show less
Hacking
Web App Attack