🇩🇪
TheDjRider
2026-10-29 03:19:00
(39 minutes ago)
CrowdSec detected Web application reconnaissance. Scenario: local/framework-recon. Automatic ban triggered. Detection time (UTC): 2026-10-29T03:18:59.729326257Z. Context: http_status=302
Web App Attack
🇵🇱
Budyn
2026-10-29 03:13:16
(45 minutes ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: app.budyn.ovh | URI: /docker-compose.yml | UA: Go ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: app.budyn.ovh | URI: /docker-compose.yml | UA: Go-http-client/2.0 | BODY: [Empty / GET Request] | HEADERS: {"Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"NL","Cf-Connecting-Ip":"81.171.74.60","Cdn-Loop":"cloudflare; loops=1","Cf-Ray":"a51f00decceeae62-AMS","Accept-Encoding":"gzip, br","X-Forwarded-For":"81.171.74.60"}
show less
Bad Web Bot
Web App Attack
🇩🇪
lightaffaire
2026-10-29 02:38:37
(1 hour ago)
Oct 29 03:38:37 cloud.declico.com 81.171.74.60 - - [29/Oct/2026:03:38:37 +0100] "GET /.git/HEAD HTTP/2.0" 403 0 "-" "Go-http-client/2.0" 0.000051457
...
Bad Web Bot
Web App Attack
🇺🇸
Mundo Bueno
2026-10-29 01:50:58
(2 hours ago)
[ISILIA Protection v2.3] Tentative d'accès: /api/.env [RATE LIMITED - 1800s quarantine] | Pays: NL | UA: Go-http-client/2.0
Hacking
Web App Attack
🇧🇷
dominioz
2026-10-29 01:19:45
(2 hours ago)
2026-10-29 01:18:50 GET / - - 81.171.74.60 HTTP/2 Go-http-client/2.0 - 200 587
...
Bad Web Bot
Web App Attack
🇫🇷
Tilellit.PRO
2026-10-29 01:18:43
(2 hours ago)
Malicious web traffic detected by CrowdSec
Hacking
🇫🇷
dynamix
2026-10-29 01:02:08
(2 hours ago)
Multiple WAF Violations
Web App Attack
🇵🇱
Budyn
2026-10-29 00:14:13
(3 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: billing.teddypot.space | URI: /.ssh/id_rsa | U ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: billing.teddypot.space | URI: /.ssh/id_rsa | UA: Go-http-client/2.0 | BODY: [Empty / GET Request] | HEADERS: {"Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"NL","Cf-Connecting-Ip":"81.171.74.60","Cdn-Loop":"cloudflare; loops=1","Cf-Ray":"a51dfa941a56ea2a-AMS","Accept-Encoding":"gzip, br","X-Forwarded-For":"81.171.74.60","X-Waf-Trigger":"1"}
show less
Hacking
Web App Attack
🇦🇺
Proxay Fox
2026-10-28 23:38:27
(4 hours ago)
81.171.74.60 - - [29/Oct/2026:09:38:23 +1000] "GET /storage/logs/laravel.log HTTP/2.0" 403 146 "-" "Go-http-client/2.0" "81.171.74.60" 48 562 TLSv1.3/TLS_AES_256_GCM_SHA384 . 768a1ebfe2e90c51d3f4059b4e76b9e946c267366cf95d1eef1e530ac285d8b1
81.171.74 ...
show more
81.171.74.60 - - [29/Oct/2026:09:38:23 +1000] "GET /storage/logs/laravel.log HTTP/2.0" 403 146 "-" "Go-http-client/2.0" "81.171.74.60" 48 562 TLSv1.3/TLS_AES_256_GCM_SHA384 . 768a1ebfe2e90c51d3f4059b4e76b9e946c267366cf95d1eef1e530ac285d8b1
81.171.74.60 - - [29/Oct/2026:09:38:23 +1000] "GET /.ssh/id_rsa HTTP/2.0" 403 146 "-" "Go-http-client/2.0" "81.171.74.60" 39 562 TLSv1.3/TLS_AES_256_GCM_SHA384 . 768a1ebfe2e90c51d3f4059b4e76b9e946c267366cf95d1eef1e530ac285d8b1
81.171.74.60 - - [29/Oct/2026:09:38:24 +1000] "GET /.svn/wc.db HTTP/2.0" 403 146 "-" "Go-http-client/2.0" "81.171.74.60" 39 562 TLSv1.3/TLS_AES_256_GCM_SHA384 . 768a1ebfe2e90c51d3f4059b4e76b9e946c267366cf95d1eef1e530ac285d8b1
81.171.74.60 - - [29/Oct/2026:09:38:24 +1000] "GET /_vti_pvt/service.pwd HTTP/2.0" 403 146 "-" "Go-http-client/2.0" "81.171.74.60" 46 562 TLSv1.3/TLS_AES_256_GCM_SHA384 . 768a1ebfe2e90c51d3f4059b4e76b9e946c267366cf95d1eef1e530ac285d8b1
81.171.74.60 - - [29/Oct/2026:09:38:24 +1000] "GET /.ssh/id_ed25519
...
show less
Brute-Force
Web App Attack
🇵🇱
lns.bz
2026-10-28 22:53:12
(5 hours ago)
Too many 404 requests [BY]
Web App Attack
🇺🇸
KellerConcepts
2026-10-28 22:45:30
(5 hours ago)
Automated scraping/abuse of epsteinexposed.com. Threat score: 0.80. Detected by Sentinel anti-abuse system.
Bad Web Bot
Web App Attack
🇩🇪
altenglaner
2026-10-28 22:01:26
(5 hours ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
Hacking
Web App Attack
🇬🇧
KTSTechnology
2026-10-28 21:48:17
(6 hours ago)
Web vulnerability scanning detected by our ISP firewall
Web App Attack
🇺🇸
Nodez3r0
2026-10-28 21:41:37
(6 hours ago)
WOPR honeypot nedry.wopr.systems: 14 path_probe, 2 admin_probe, 1 git_svn_probe (e.g. /.ssh/id_ed25519, /.ssh/zzcanary-1f2c58a04a74a37, /actuator/heapdump); CrowdSec ban: crowdsecurity/http-sensitive-files (e.g. /backup.sql); first seen 2026-10-28T21 ...
show more
WOPR honeypot nedry.wopr.systems: 14 path_probe, 2 admin_probe, 1 git_svn_probe (e.g. /.ssh/id_ed25519, /.ssh/zzcanary-1f2c58a04a74a37, /actuator/heapdump); CrowdSec ban: crowdsecurity/http-sensitive-files (e.g. /backup.sql); first seen 2026-10-28T21:41:34Z, last seen 2026-10-28T21:41:37Z
show less
Web App Attack
Hacking
Bad Web Bot
🇵🇱
Budyn
2026-10-28 21:07:00
(6 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: auth.astropot.site | URI: /database.sql | UA: Go- ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: auth.astropot.site | URI: /database.sql | UA: Go-http-client/2.0 | BODY: [Empty / GET Request] | HEADERS: {"Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"NL","Cf-Connecting-Ip":"81.171.74.60","Cdn-Loop":"cloudflare; loops=1","Cf-Ray":"a51ce8585d4db121-AMS","Accept-Encoding":"gzip, br","X-Forwarded-For":"81.171.74.60"}
show less
Bad Web Bot
Web App Attack
