🇵🇱
Budyn
2026-11-15 16:04:58
UTC ·
(6 hours ago)
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: api.goblinpot.online | Path: /.git/config | User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS ...
show more
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: api.goblinpot.online | Path: /.git/config | User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | Request: [Empty / GET Request]
show less
Hacking
Web App Attack
🇵🇱
Budyn
2026-11-15 12:23:40
UTC ·
(10 hours ago)
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: api.dont-eat-the-pudding.online | Path: /.git/config | User-Agent: Mozilla/5.0 (X11; Linux x8 ...
show more
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: api.dont-eat-the-pudding.online | Path: /.git/config | User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | Request: [Empty / GET Request]
show less
Hacking
Web App Attack
🇵🇱
Budyn
2026-11-15 10:09:49
UTC ·
(12 hours ago)
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: api.definitelynotahoneypot.online | Path: /.git/config | User-Agent: Mozilla/5.0 (Macintosh; ...
show more
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: api.definitelynotahoneypot.online | Path: /.git/config | User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | Request: [Empty / GET Request]
show less
Hacking
Web App Attack
🇵🇱
Budyn
2026-11-15 07:10:42
UTC ·
(15 hours ago)
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: api.budyn.ovh | Path: /.git/config | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) Ap ...
show more
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: api.budyn.ovh | Path: /.git/config | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | Request: [Empty / GET Request]
show less
Hacking
Web App Attack
🇳🇱
Alt255
2026-11-15 05:21:58
UTC ·
(17 hours ago)
[livebd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 101.32.179.13 - - [15/Nov/2026:06:21:47 +0100] "GET /.git/config HTTP/1.1" 404 2162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebK ...
show more
[livebd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 101.32.179.13 - - [15/Nov/2026:06:21:47 +0100] "GET /.git/config HTTP/1.1" 404 2162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-11-15 04:48:30
UTC ·
(18 hours ago)
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: api.astropot.online | Path: /.git/config | User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleW ...
show more
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: api.astropot.online | Path: /.git/config | User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | Request: [Empty / GET Request]
show less
Hacking
Web App Attack
🇳🇱
homeshowdomain.nl
2026-11-14 23:00:57
UTC ·
(23 hours ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-11-13.
Web App Attack
SSH
Hacking
🇹🇷
Jova
2026-11-13 21:38:19
UTC ·
(2 days ago)
Probing a web server for sensitive files (.env, backups, configs): 3 requests.
Web App Attack
🇵🇱
Budyn
2026-11-12 10:38:42
UTC ·
(3 days ago)
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: api.astropot.online | Path: /.git/config | User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleW ...
show more
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: api.astropot.online | Path: /.git/config | User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | Request: [Empty / GET Request]
show less
Hacking
Web App Attack
🇫🇷
masterguru
2026-11-12 01:37:18
UTC ·
(3 days ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)
Hacking
Web App Attack
🇩🇪
hotzmatic
2026-11-11 01:35:15
UTC ·
(4 days ago)
None (90 events observed on private honeypot sensor)
Hacking
Anonymous
2026-11-10 09:07:45
UTC ·
(5 days ago)
Web application attack detected.
Web App Attack
🇱🇻
GooddayGroup
2026-11-10 00:13:21
UTC ·
(5 days ago)
Automated probing for sensitive configuration files and environment leaks.
Hacking
Brute-Force
🇳🇱
Site.eu
2026-11-09 13:58:29
UTC ·
(6 days ago)
Scanning for secret files (.env, .git, credentials, config backups)
Bad Web Bot
Web App Attack
🇺🇸
oralunal
2026-11-09 12:41:06
UTC ·
(6 days ago)
Banned by Fail2Ban - access.log - mavifinds
Web App Attack
Bad Web Bot