πΊπΈ
Omega Threat-ID
2026-10-26 10:31:06
(9 minutes ago)
Omega Point Threat ID honeypot sensor observed: abuse-reported, otx-flagged
Port Scan
πͺπΈ
robotstxt
2026-10-26 10:21:05
(19 minutes ago)
34.31.120.130 - - [26/Oct/2026:10:20:40 +0000] "GET /.git/credentials HTTP/1.1" 403 18153 "https://f ...
show more
34.31.120.130 - - [26/Oct/2026:10:20:40 +0000] "GET /.git/credentials HTTP/1.1" 403 18153 "https://fucsa.com/.git/credentials" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 Vivaldi/7.1.3570.50" "-" edge="34.31.120.130"
34.31.120.130 - - [26/Oct/2026:10:20:41 +0000] "GET /.git-credentials HTTP/1.1" 403 18153 "https://fucsa.com/.git-credentials" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 Vivaldi/7.1.3570.50" "-" edge="34.31.120.130"
34.31.120.130 - - [26/Oct/2026:10:20:41 +0000] "GET /.env HTTP/1.1" 403 18153 "https://fucsa.com/.env" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 Vivaldi/7.1.3570.50" "-" edge="34.31.120.130"
34.31.120.130 - - [26/Oct/2026:10:20:42 +0000] "GET /.env.production HTTP/1.1" 403 18153 "https://fucsa.com/.env.production" "Mozilla/5.0 (Macintosh; Intel M
...
show less
Web App Attack
Anonymous
2026-10-26 07:52:41
(2 hours ago)
Blocked by siteaihub.com: auto: matched exact:/.git/config
Hacking
Bad Web Bot
π΅π±
Budyn
2026-10-26 07:30:37
(3 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: app.teddypot.pro | URI: /.git/config | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 15_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 Vivaldi/7.1.3570.50 | BODY: [Empty / GET Request] | HEADERS: {"X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"US","Cf-Connecting-Ip":"34.31.120.130","Cdn-Loop":"cloudflare; loops=1","Connection":"Keep-Alive","Cf-Ray":"a507c1b25999e822-ORD","Accept":"text\/html,application\/xhtml+xml,application\/xml;q
show less
Bad Web Bot
Web App Attack
πΊπΈ
JonathanYoung2161
2026-10-26 05:23:29
(5 hours ago)
poolpad.simplifiedmedia.net 34.31.120.130 - - [26/Oct/2026:00:23:27 -0500] "GET /.git/config HTTP/2. ...
show more
poolpad.simplifiedmedia.net 34.31.120.130 - - [26/Oct/2026:00:23:27 -0500] "GET /.git/config HTTP/2.0" 404 106 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:137.0) Gecko/20100101 Firefox/137.0"
poolpad.simplifiedmedia.net 34.31.120.130 - - [26/Oct/2026:00:23:27 -0500] "GET /.git/credentials HTTP/2.0" 404 106 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:137.0) Gecko/20100101 Firefox/137.0"
poolpad.simplifiedmedia.net 34.31.120.130 - - [26/Oct/2026:00:23:27 -0500] "GET /.git-credentials HTTP/2.0" 404 106 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:137.0) Gecko/20100101 Firefox/137.0"
...
show less
Brute-Force
Web App Attack
πΊπΈ
WellSpring
2026-10-26 04:43:36
(5 hours ago)
env leak on transparency.wellspr.ing/.env β WellSpr.ing/NetSentinel civic-AI security layer
Web App Attack
π΅π±
Budyn
2026-10-26 04:14:52
(6 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: gitlab.goblinpot.website | URI: /.git/config | UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 | BODY: [Empty / GET Request] | HEADERS: {"X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"US","Cf-Connecting-Ip":"34.31.120.130","Cdn-Loop":"cloudflare; loops=1","Connection":"Keep-Alive","Cf-Ray":"a506a2f6b912f92b-ORD","Accept":"text\/html,application\/xhtml+xml,application\/xml;q=0.9,*\/*;q=0.8","Accept-
show less
Bad Web Bot
Web App Attack
π΅π±
Budyn
2026-10-26 02:14:47
(8 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: grafana.teddypot.store | URI: /.git/config | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 | BODY: [Empty / GET Request] | HEADERS: {"X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"US","Cf-Connecting-Ip":"34.31.120.130","Cdn-Loop":"cloudflare; loops=1","Connection":"Keep-Alive","Cf-Ray":"a505f30cdea0d2e5-ORD","Accept":"text\/html,application\/xhtml+xml,application\/xml;q=0.9,*\/*;q
show less
Bad Web Bot
Web App Attack
π¦πΉ
RenΓ© Hickersberger
2026-10-26 02:13:27
(8 hours ago)
malicious bot detected: violations="hit-honeypot"; user_agent="Mozilla/5.0 (Windows NT 10.0; Win64; ...
show more
malicious bot detected: violations="hit-honeypot"; user_agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:138.0) Gecko/20100101 Firefox/138.0"
show less
Web App Attack
π¨π¦
Sakusen
2026-10-26 00:16:32
(10 hours ago)
Automated web attack: 10 reqs, 10 paths probed, 9 returned 404; probed: 3 .git, 2 .env, 2 .yml, 2 ot ...
show more
Automated web attack: 10 reqs, 10 paths probed, 9 returned 404; probed: 3 .git, 2 .env, 2 .yml, 2 other, 1 cloud-cred
show less
Hacking
Bad Web Bot
Web App Attack
π΅π±
Budyn
2026-10-26 00:13:35
(10 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: forum.goblinpot.space | URI: /.git/config | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:139.0) Gecko/20100101 Firefox/139.0 | BODY: [Empty / GET Request] | HEADERS: {"X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"US","Cf-Connecting-Ip":"34.31.120.130","Cdn-Loop":"cloudflare; loops=1","Connection":"Keep-Alive","Cf-Ray":"a50541872bdbeae4-ORD","Accept":"text\/html,application\/xhtml+xml,application\/xml;q=0.9,*\/*;q=0.8","Accept-Encoding":"gzip, br","Ac
show less
Bad Web Bot
Web App Attack
π¬π§
consul.to
2026-10-25 23:47:04
(10 hours ago)
Web attack/malicious scanning detected
Web App Attack
π«π·
SpaceHost-Server
2026-10-25 23:20:51
(11 hours ago)
Brute-Force
Web App Attack
π΅π±
Budyn
2026-10-25 21:02:42
(13 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: keycloak.astropot.space | URI: /.git/config | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Edg/134.0.0.0 | BODY: [Empty / GET Request] | HEADERS: {"X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"US","Cf-Connecting-Ip":"34.31.120.130","Cdn-Loop":"cloudflare; loops=1","Connection":"Keep-Alive","Cf-Ray":"a50429e8dbeeafb4-ATL","Accept":"text\/html,application\/xhtml+xml,application\/xml;q=0
show less
Bad Web Bot
Web App Attack
Anonymous
2026-10-25 19:11:06
(15 hours ago)
Banned by Fail2Ban on server
Web App Attack