🇵🇱
Budyn
2026-09-06 18:01:39
(5 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: dont-eat-the-pudding.online | URI: /wp-login.php | UA: Mozilla/5.0 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇨🇳
pengpeng
2026-06-03 07:02:11
(3 months ago)
monitor: on VM-0-7-ubuntu | port: 45225 | ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ...
show more
monitor: on VM-0-7-ubuntu | port: 45225 | ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
🇮🇹
VHosting
2026-05-28 22:16:39
(3 months ago)
Detected mail brute force attack from 4 different servers
Brute-Force
🇫🇷
Baking333
2026-05-26 18:57:57
(3 months ago)
[redacted] 104.234.32.47 - - [26/May/2026:19:57:56 +0100] "GET /[redacted] HTTP/1.1" 302 5273 0/1336 ...
show more
[redacted] 104.234.32.47 - - [26/May/2026:19:57:56 +0100] "GET /[redacted] HTTP/1.1" 302 5273 0/133689 "-" "Mozilla/5.0" [redacted] 104.234.32.47 - - [26/May/2026:19:57:56 +0100] "GET /wp-admin/ HTTP/1.1" 301 606 0/348 "-" "Mozilla/5.0"
show less
Bad Web Bot
Web App Attack
🇫🇮
Shaik Sai Meera
2026-04-30 00:03:43
(4 months ago)
IM360 WAF: Infectors: Suspicious access attempt (webshell)
Brute-Force
FTP Brute-Force
Open Proxy
🇫🇮
Shaik Sai Meera
2026-04-28 00:04:00
(4 months ago)
IM360 WAF: Infectors: Suspicious access attempt (webshell)
Brute-Force
FTP Brute-Force
Open Proxy
🇺🇸
dtorrer
2026-04-27 10:03:38
(4 months ago)
Brute-force general attack.
Brute-Force
🇦🇺
screwlooseit.com.au
2026-04-07 01:39:11
(4 months ago)
Blocked by CSF 13 firewall - Rule: WPLOGIN
CA/Canada/-
Web App Attack
🇮🇩
securejdprop
2026-03-29 18:48:12
(5 months ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing. crowdsecurity/http-probing
Hacking
Web App Attack
2026-03-07 09:40:10
(5 months ago)
Unauthorized connection attempt detected in the last 24 hours
Hacking
2026-03-04 09:35:17
(6 months ago)
Unauthorized connection attempt detected in the last 24 hours
Hacking
🇳🇱
homeshowdomain.nl
2026-02-03 22:59:27
(7 months ago)
Auto-ban: >3000 req/min op 2026-02-03
Hacking
Web App Attack
SSH
🇺🇸
TPI-Abuse
2026-02-03 12:14:48
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 104.234.32.47 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.234.32.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 03 07:14:44.572341 2026] [security2:error] [pid 20371:tid 20371] [client 104.234.32.47:59317] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.156"] [uri "/.env"] [unique_id "aYHmtG_XZ3JJYGjTBguReQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-03 11:20:38
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 104.234.32.47 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.234.32.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 03 06:20:16.961811 2026] [security2:error] [pid 30130:tid 30130] [client 104.234.32.47:38363] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.215"] [uri "/backend/.env"] [unique_id "aYHZ8OLaGYs0xT4eCeDp3wAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-03 07:06:07
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 104.234.32.47 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.234.32.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 03 02:05:57.346927 2026] [security2:error] [pid 2449855:tid 2449855] [client 104.234.32.47:27957] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.99"] [uri "/blog/.env"] [unique_id "aYGeVfN27YtHz2QwP9YIyQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
