🇳🇱
homeshowdomain.nl
2026-10-14 21:59:34
UTC ·
(1 month ago)
Auto-ban: >3000 req/min op 2026-10-14
Web App Attack
SSH
Hacking
🇳🇱
Alt255
2026-10-13 21:10:43
UTC ·
(1 month ago)
[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 104.207.43.50 - - [13/Oct/2026:23:10:13 +0200] "GET /laravel/.env.copy HTTP/1.1" 301 6235 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWeb ...
show more
[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 104.207.43.50 - - [13/Oct/2026:23:10:13 +0200] "GET /laravel/.env.copy HTTP/1.1" 301 6235 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-10-12 20:52:24
UTC ·
(1 month ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Web Spam (Form Abuse). Unsolicited bulk message (Form Spam) captured. Evidence:
HOST: teddypot.website | URI: /contact.php | UA: Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Web Spam (Form Abuse). Unsolicited bulk message (Form Spam) captured. Evidence:
HOST: teddypot.website | URI: /contact.php | UA: Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1 | BODY: name=Ginger&company_website=&email=domains%40search-teddypot.website&message=Dear+Sir%2FMadam%0D%0A%0D%0AFeature+teddypot.website+in+Google%27s+Search+Index+to+be+visible+in+online+search+results%21%0D%0A%0D%0AInclude+teddypot.website+today%3A+indexregister.live
--- SPAM DATA ---
(From: domains@search-ted
show less
Web Spam
Web App Attack
🇺🇸
drewf.ink
2026-09-29 15:48:01
UTC ·
(1 month ago)
[15:48] Attempted HTTPS GlobalProtect login with credentials medina:Pa*****d1
Web App Attack
🇫🇷
Sklurk
2026-09-10 03:58:30
UTC ·
(2 months ago)
Web App Attack
Web App Attack
🇨🇿
lp
2026-09-03 09:21:20
UTC ·
(2 months ago)
Unauthorized VPN login attempts: 3 attempts were recorded from 104.207.43.50
2026-09-03T10:46:06+02:00 vpn Access-Reject 'pvillalba' station: 104.207.43.50 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redac ...
show more
Unauthorized VPN login attempts: 3 attempts were recorded from 104.207.43.50
2026-09-03T10:46:06+02:00 vpn Access-Reject 'pvillalba' station: 104.207.43.50 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-09-03T10:47:35+02:00 vpn Access-Reject 'usuario' station: 104.207.43.50 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-09-03T10:49:13+02:00 vpn Access-Reject 'operation' station: 104.207.43.50 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇫🇷
Sklurk
2026-08-10 05:11:10
UTC ·
(3 months ago)
Web App Attack
Web App Attack
🇫🇷
Sklurk
2026-07-31 02:19:43
UTC ·
(3 months ago)
Web App Attack
Web App Attack
🇫🇷
ELYAZ
2026-06-10 12:51:24
UTC ·
(5 months ago)
(y4) Failed scan -byebye- from 104.207.43.50 (US/United States/-): (CF_ENABLE)
Hacking
🇦🇺
RedBear IT
2026-03-26 10:00:37
UTC ·
(7 months ago)
"DDoS against public endpoint"
DDoS Attack
🇳🇱
jjnxpct
2026-02-20 04:54:21
UTC ·
(8 months ago)
Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /backup/.git/config (Rule ID: 930130) - Restricted File Access Attempt
Web App Attack
Hacking
🇺🇸
mnsf
2026-02-19 14:05:20
UTC ·
(8 months ago)
Too many Status 40X (12)
Scanning/Probing (12)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-02-19 05:13:04
UTC ·
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.43.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 19 00:12:55.550180 2026] [security2:error] [pid 7155:tid 7155] [client 104.207.43.50:35239] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.43.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 19 00:12:55.550180 2026] [security2:error] [pid 7155:tid 7155] [client 104.207.43.50:35239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "krakowski.net"] [uri "/.env"] [unique_id "aZab197Zzn7JXlRRFVqENwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
jjnxpct
2026-02-19 04:49:57
UTC ·
(8 months ago)
Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /config/.env (Rule ID: 930130) - Restricted File Access Attempt [Suspicious: .env found within REQUEST_FILENAME: /config/.env]
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-02-19 03:52:15
UTC ·
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.43.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 22:52:11.202033 2026] [security2:error] [pid 13230:tid 13230] [client 104.207.43.50:17051] M ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.43.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 22:52:11.202033 2026] [security2:error] [pid 13230:tid 13230] [client 104.207.43.50:17051] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kingmansvc.com"] [uri "/api/.git/config"] [unique_id "aZaI60XHVWGBUspIC2RllgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
