🇨🇭
TheCoon
2026-10-24 16:32:23
(5 days ago)
Automated: Credential theft attempt - JSON bomb served
Web App Attack
Hacking
🇨🇭
TheCoon
2026-10-23 06:37:29
(6 days ago)
Automated: Credential theft attempt - JSON bomb served
Web App Attack
Hacking
🇨🇭
TheCoon
2026-10-21 06:59:08
(1 week ago)
Automated: Credential theft attempt - JSON bomb served
Web App Attack
Hacking
🇩🇪
IVski.com
2026-10-16 03:28:26
(1 week ago)
IVski WAF | Sensitive file probe detected - looking for config, backups or credentials
Hacking
Brute-Force
Web App Attack
🇪🇸
elcruzado.es
2026-10-15 12:29:07
(2 weeks ago)
(mod_security) mod_security triggered on hostname [redacted] 34.92.51.71 (HK/Hong Kong/71.51.92.34.bc.googleusercontent.com)
SQL Injection
🇳🇱
Site.eu
2026-10-15 09:12:57
(2 weeks ago)
Excessive multi-domain requests
Brute-Force
🇵🇱
Budyn
2026-10-15 03:10:58
(2 weeks ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: billing.teddypot.space | URI: /.env | UA: Mozilla ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: billing.teddypot.space | URI: /.env | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-10-14 19:32:32
(2 weeks ago)
Excessive 404/403 errors
Brute-Force
2026-10-14 10:13:49
(2 weeks ago)
(mod_security) mod_security triggered on hostname [redacted] 34.92.51.71 (HK/Hong Kong/71.51.92.34.bc.googleusercontent.com)
SQL Injection
🇵🇱
Budyn
2026-10-14 08:31:41
(2 weeks ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: vpn-pl.budyn.wtf | URI: /.env | UA: Mozilla/5. ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: vpn-pl.budyn.wtf | URI: /.env | UA: Mozilla/5.0 (iPhone; CPU iPhone OS 18_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Mobile/15E148 Safari/604.1 | BODY: [Empty / GET Request]
show less
Hacking
Web App Attack
2026-10-14 02:08:21
(2 weeks ago)
34.92.51.71 - - [14/Oct/2026:04:08:19 +0200] "GET /.git/config HTTP/1.1" 200 11215 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.92.51.71 - - [14/Oct/2026:04:08:20 +0200] "GET ...
show more
34.92.51.71 - - [14/Oct/2026:04:08:19 +0200] "GET /.git/config HTTP/1.1" 200 11215 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.92.51.71 - - [14/Oct/2026:04:08:20 +0200] "GET /.git/config.old HTTP/1.1" 200 11223 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.92.51.71 - - [14/Oct/2026:04:08:20 +0200] "GET /.git/config~ HTTP/1.1" 200 11217 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Mobile/15E148 Safari/604.1"
show less
Web App Attack
🇩🇪
IVski.com
2026-10-14 01:10:06
(2 weeks ago)
IVski WAF | Sensitive file probe detected - looking for .git
Hacking
Brute-Force
Web App Attack
🇨🇭
4server
2026-10-13 20:23:57
(2 weeks ago)
[TueOct1322:23:52.6464942026][security2:error][pid366360:tid366461][client34.92.51.71:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"710\"][id\"960720\"] ...
show more
[TueOct1322:23:52.6464942026][security2:error][pid366360:tid366461][client34.92.51.71:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"710\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"buonviaggio.ch\"][uri\"/.gitlab-ci.yml\"][unique_id\"as6TWLAtF8ccx2D_yPg-dAAAAQc\"]
show less
Hacking
Web App Attack
🇳🇱
Site.eu
2026-10-13 17:24:29
(2 weeks ago)
Excessive multi-domain requests
Brute-Force
🇪🇸
robotstxt
2026-10-13 17:05:38
(2 weeks ago)
2026/10/13 17:05:30 [error] 1987591#1987591: *872443 [client 34.92.51.71] ModSecurity: Access denied with code 403 (phase 2). Matched "Operator `Ge' with parameter `5' against variable `TX:BLOCKING_INBOUND_ANOMALY_SCORE' (Value: `5' ) [file "/var/lib ...
show more
2026/10/13 17:05:30 [error] 1987591#1987591: *872443 [client 34.92.51.71] ModSecurity: Access denied with code 403 (phase 2). Matched "Operator `Ge' with parameter `5' against variable `TX:BLOCKING_INBOUND_ANOMALY_SCORE' (Value: `5' ) [file "/var/lib/angie/modsecurity/coreruleset/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "222"] [id "949110"] [rev ""] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [data ""] [severity "0"] [ver "OWASP_CRS/4.30.0"] [maturity "0"] [accuracy "0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "www.nascapers.es"] [uri "/.env"] [unique_id "179191113016.123268"] [ref ""], client: "34.92.51.71", server: "www.nascapers.es", request_line: "GET /.env HTTP/1.1", host: "www.nascapers.es"
2026/10/13 17:05:31 [error] 1987591#1987591: *872443 [client 34.92.51.71] ModSecurity: Access denied with code 403 (phase 2). Matched "Operator `Ge' with parameter `5' against variable `TX:BLOCKING_INBOUND_ANOMALY_SCORE' (Value: `5' ) [file "/var/lib/angie/
...
show less
Web App Attack
