๐ฉ๐ช
MaxMeier
2026-09-16 11:26:53
(10 minutes ago)
35.233.18.215 - - [16/Sep/2026:13:25:51 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 1 ...
show more
35.233.18.215 - - [16/Sep/2026:13:25:51 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
35.233.18.215 - - [16/Sep/2026:13:25:52 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03w#\xCC\x10\xCD\x11d\xE9~\x83\x99%K\x9D=\x863\xE8fA\xE8\x9AC./y\xA2\xD0h\xD4\x17\xC2 \xD2\x93\x8CAnP" 400 150 "-" "-"
35.233.18.215 - - [16/Sep/2026:13:25:52 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
35.233.18.215 - - [16/Sep/2026:13:25:57 +0200] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-"
35.233.18.215 - - [16/Sep/2026:13:25:58 +0200] "\xAF\x8AM\xA8\xCF&~\x85H\xE2\x03;#\xA6\xC4\x95\x7Fz\xDB\xA3B`\xC5\x8F\xA8\xCC\x07\x9B\x1BC\x84r\x8E\xD3\xCDh\xB4\x9E
...
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
kosada.com
2026-09-16 11:17:24
(19 minutes ago)
Repeated requests for suspicious nonexistent URLs, for example: / (HTTP/1.1 port 80, bogus vhost, us ...
show more
Repeated requests for suspicious nonexistent URLs, for example: / (HTTP/1.1 port 80, bogus vhost, user agent: "Mozilla/5.0 (compatible)")
show less
Web App Attack
๐ฉ๐ช
mist x
2026-09-16 09:54:05
(1 hour ago)
Honeypot Web Sensor: Malicious HTTP scanner probe targeting sensitive path:
Bad Web Bot
Web App Attack
๐ฉ๐ช
sojan
2026-09-16 09:28:42
(2 hours ago)
35.233.18.215 - - [16/Sep/2026:11:27:57 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\x88\x8A ...
show more
35.233.18.215 - - [16/Sep/2026:11:27:57 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\x88\x8A\x98\x8Eu\xFF\xE4\xC9+\xB3\xA7\xDA*\xCA\xA8\x22\xD24V\x9E$\x02N\x1BE\xC1r\xF4\x1C\xDE)\xDB \xA8\x97\x91\xD7\xBF\xC25>\xA7t\x12\xA2?\xBC\x826\x8CM\xB1\xC9\xE9H\xBF\xA2\x08L\xB9\xA0\x1C\xD8\x7F\xC5\x002\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 157 "-" "-"
35.233.18.215 - - [16/Sep/2026:11:28:02 +0200] "\x15\x8E\x9FYHb(\xC23\xCD\xB0\x0F \xC0\xF1Q\xDE\x7F7wB\x11\xA8\xBF\x8D\xD5\x8C\x82z\xC22\x03\x93\x8F\x15\xD3!\xF5l\x8F\x07\xD7\xD0\xAB\x16\x95\xE2!\xA7\x9F\xAB\xF3D\x93\x1DM\xB5\xB9{\x12\xF3\x227I" 400 157 "-" "-"
35.233.18.215 - - [16/Sep/2026:11:28:41 +0200] "\x00\x1E\x0BR\x01\x00\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03" 400 157 "-" "-"
...
show less
Bad Web Bot
๐บ๐ธ
donarev419
2026-09-16 08:46:35
(2 hours ago)
Connection to port 80 with data transfer.
Data preview: GET / HTTP/1.1
Host: 67.215.244.172:80
Use ...
show more
Connection to port 80 with data transfer.
Data preview: GET / HTTP/1.1
Host: 67.215.244.172:80
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) Apple
show less
Port Scan
Hacking
๐ฉ๐ช
schuerholz
2026-09-16 08:30:04
(3 hours ago)
Confirmed intrusion/exploit attempt detected and blocked by IPS (automated detection).
Hacking
Web App Attack
๐ฉ๐ช
Serpentex
2026-09-16 08:18:14
(3 hours ago)
35.233.18.215 - - [16/Sep/2026:10:18:08 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\x89\xE0 ...
show more
35.233.18.215 - - [16/Sep/2026:10:18:08 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\x89\xE0\xF8KLD)^\xC1\xF0\xE9M\xFDjG2\x14*\x05u:/s\x14|\xD4U\xC4zwXj \x1C\x14&\x888\xAB\xBDdHJ\x99s{L\x82\xEF\xF8\x9D\xA0I)*\x04\x95N\xA3\xB8&P$\xA9\x03\x002\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-"
35.233.18.215 - - [16/Sep/2026:10:18:13 +0200] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-"
35.233.18.215 - - [16/Sep/2026:10:18:13 +0200] ".++T" 400 150 "-" "-"
...
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
cwytech
2026-09-16 08:02:41
(3 hours ago)
Fleet-wide ban from the Ghostfleet ๐ป. Triggered by scenario: cwy/tpot-web-high.
Bad Web Bot
Web App Attack
๐ฉ๐ช
dpsbs
2026-09-16 08:02:19
(3 hours ago)
multiple ips intrustions detected
Hacking
๐ฉ๐ช
v1nc
2026-09-16 07:34:51
(4 hours ago)
35.233.18.215 - - [16/Sep/2026:07:34:50 +0000] "\x16\x03\x00\x00i\x01\x00\x00e\x03\x03U\x1C\xA7\xE4r ...
show more
35.233.18.215 - - [16/Sep/2026:07:34:50 +0000] "\x16\x03\x00\x00i\x01\x00\x00e\x03\x03U\x1C\xA7\xE4random1random2random3random4\x00\x00\x0C\x00/\x00" 400 150 "-" "-"
...
show less
Hacking