๐ฉ๐ช
MaxMeier
2026-06-15 07:56:26
(7 hours ago)
35.240.37.117 - - [15/Jun/2026:09:55:35 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 1 ...
show more
35.240.37.117 - - [15/Jun/2026:09:55:35 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
35.240.37.117 - - [15/Jun/2026:09:55:37 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03%\xB4\xA2\xDF\xED\xB7\xCE%\xFBQA\xE8\xAE0\x89eX\xBA\xCF\xB3" 400 150 "-" "-"
35.240.37.117 - - [15/Jun/2026:09:55:39 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
35.240.37.117 - - [15/Jun/2026:09:55:43 +0200] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-"
35.240.37.117 - - [15/Jun/2026:09:55:45 +0200] "\x8A\x9E\xAAd\x18\xB6\xB0\xE4\x19VU-!\xFC\xF3[\xA3\x01\xD2\xD2F" 400 150 "-" "-"
35.240.37.117 - - [15/Jun/2026:09:56:05 +0200] "\x00\x1E\xB7\x01\x01\x00\x0
...
show less
Bad Web Bot
Web App Attack
๐จ๐ฆ
lakered
2026-06-15 07:37:52
(8 hours ago)
Detectors: [NGINX] | Reasons: Nginx: Default server trap hit | Automated scan targeting an unauthori ...
show more
Detectors: [NGINX] | Reasons: Nginx: Default server trap hit | Automated scan targeting an unauthorized host or default server sinkhole | Tech Evidence: Incomplete-Browser-Profile (Missing: Accept, Accept-Language), Fake-Chrome-Desktop (No-CH) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36 | ASN: 396982 (Google LLC)
show less
Port Scan
Exploited Host
Bad Web Bot
๐ต๐ฑ
Roper123
2026-06-15 07:33:38
(8 hours ago)
Web app exploits
Web App Attack
๐บ๐ธ
brantknudson.org
2026-06-15 07:20:03
(8 hours ago)
Incorrect Host header
Web App Attack
Brute-Force
๐บ๐ธ
gu-alvareza
2026-06-15 07:05:28
(8 hours ago)
Nmap.Script.Scanner
Port Scan
๐ฉ๐ช
nyt
2026-06-15 06:22:49
(9 hours ago)
Empty UA + error
Web App Attack
๐บ๐ธ
xxkodedxx
2026-06-15 06:14:57
(9 hours ago)
[Zorvexus edge-defense] Edge-block (probe URI / bad UA / hostile vhost)
Trigger: 2ร edge-block in 10 ...
show more
[Zorvexus edge-defense] Edge-block (probe URI / bad UA / hostile vhost)
Trigger: 2ร edge-block in 10m window.
Origin: BE / AS396982 Google LLC
Active: 06:14:44โ06:14:54 UTC
Volume: 2 HTTP req
Probed: /
Status mix: 444ร2
Vhost fishing: 67.217.240.72
UA: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
Auto-banned 30d. zorvexus-banner.
show less
Bad Web Bot
Web App Attack
๐ฆ๐บ
FEWA
2026-06-15 05:10:38
(10 hours ago)
Fail2Ban Ban Triggered
Hacking
Bad Web Bot
Web App Attack
๐จ๐ฟ
sajmon0011
2026-06-15 05:02:24
(10 hours ago)
35.240.37.117 - - [15/Jun/2026:07:02:23 +0200] "\x16\x03" 400 226 "-" "-"
...
Web App Attack
Anonymous
2026-06-15 04:34:04
(11 hours ago)
35.240.37.117 - - [15/Jun/2026:06:34:03 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 1 ...
show more
35.240.37.117 - - [15/Jun/2026:06:34:03 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
35.240.37.117 - - [15/Jun/2026:06:34:03 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x03\xB2\xF6\xC3\x1EW\x95\x88U\xD97\xADe\xBA?\xB2\xF3\xDD@/\x1D\x10" 400 150 "-" "-"
...
show less
Bad Web Bot
Web App Attack
Anonymous
2026-06-15 04:21:55
(11 hours ago)
35.240.37.117 - - [15/Jun/2026:06:21:02 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x039\xF1\x1 ...
show more
35.240.37.117 - - [15/Jun/2026:06:21:02 +0200] "\x16\x03\x01\x05\xC4\x01\x00\x05\xC0\x03\x039\xF1\x13\x83r\xCF" 400 150 "-" "-"
35.240.37.117 - - [15/Jun/2026:06:21:07 +0200] ";\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xD4\x07\x00\x00\x00\x00\x00\x00admin.$cmd\x00\x00\x00\x00\x00\xFF\xFF\xFF\xFF\x14\x00\x00\x00\x01hello\x00\x00\x00\x00\x00\x00\x00\xF0?\x00" 400 150 "-" "-"
35.240.37.117 - - [15/Jun/2026:06:21:07 +0200] "\xCA\xC73pma\xA9\xCF\x1F\x01\xE6m\xA5\x03i\xB8\xE8\x0F\xD05%\xA7s \x16\xE2\x1F\xE5\x1C\xA7K\xD7\x14a\xCDn;\xAE\x93\xCD\xC5\xFC/\xDD\xB1D\xC4\x1F\x84\xA7\x81\xA6\x13\xF3o/\x9D\xBB\x87\x13\x9A,VX" 400 150 "-" "-"
35.240.37.117 - - [15/Jun/2026:06:21:45 +0200] "\x00\x1E\x94$\x01\x00\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03" 400 150 "-" "-"
35.240.37.117 - - [15/Jun/2026:06:21:55 +0200] "\x03\x00\x00\x13\x0E\xE0\x00\x00\x00\x00\x00\x01\x00\x08\x00\x0B\x00\x00\x00" 400 150 "-" "-"
...
show less
Web App Attack
๐ณ๐ด
Bots.go.to.hell
2026-06-15 04:01:26
(11 hours ago)
This IP was detected by CrowdSec triggering custom/ip-honeypot
Web App Attack
Bad Web Bot
๐ฏ๐ต
VXG-NET
2026-06-15 02:45:01
(13 hours ago)
port=80, indicator_type=hacktool
Hacking