🇩🇪
paprika
2026-06-18 04:02:09
(1 day ago)
Automated report #1: 5 attacks detected. Types: Brute-force (login).
Brute-Force
Email Spam
🇧🇷
SOC PR
2026-06-17 04:57:50
(2 days ago)
IPS: Sensitive Configuration File Disclosure.
Hacking
2026-06-17 04:02:50
(2 days ago)
Multiple web server 400 error codes from same source ip
Web App Attack
🇹🇭
Sawasdee
2026-06-17 03:36:45
(2 days ago)
Port Scan
...
Port Scan
🇺🇸
Power Ca
2026-06-17 01:19:47
(2 days ago)
13.83.161.81 - - [17/Jun/2026:01:19:47 +0000] "GET /.htpasswd HTTP/1.1" 301 178 "-" "Mozilla/5.0 (co ...
show more
13.83.161.81 - - [17/Jun/2026:01:19:47 +0000] "GET /.htpasswd HTTP/1.1" 301 178 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
show less
Web App Attack
Hacking
🇯🇵
VXG-NET
2026-06-17 00:34:56
(2 days ago)
port=80, indicator_type=info-leak
Hacking
🇷🇸
Scan
2026-06-17 00:25:47
(2 days ago)
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan
Hacking
🇯🇵
SentinalX by uzumaru
2026-06-15 06:24:48
(4 days ago)
Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ...
show more
Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: api.binance.com:443
show less
Open Proxy
Port Scan
🇺🇸
TPI-Abuse
2026-06-14 02:00:00
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 13.83.161.81 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 13.83.161.81 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 21:59:55.320928 2026] [security2:error] [pid 2106:tid 2106] [client 13.83.161.81:38277] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.167"] [uri "/.git/HEAD"] [unique_id "ai4LG_a7YjrOJGRYVPxxegAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
knock
2026-06-14 00:48:41
(5 days ago)
Knock-Knock honeypot brute-force: proto8 (17 total hits)
Brute-Force
🇷🇸
Scan
2026-06-14 00:41:37
(5 days ago)
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan
Hacking
🇺🇸
ISPLtd
2026-06-14 00:04:47
(5 days ago)
Jun 13 21:04:46 13.83.161.81 TCP SPT=38481 DPT=2078 SYN
Jun 13 21:04:46 13.83.161.81 TCP SPT=38473 D ...
show more
Jun 13 21:04:46 13.83.161.81 TCP SPT=38481 DPT=2078 SYN
Jun 13 21:04:46 13.83.161.81 TCP SPT=38473 DPT=2082 SYN
Jun 13 21:04:46 13.83.161.81 TCP SPT=38476 DPT=2083 SYN
...
show less
Port Scan
🇩🇪
Yachiyo Runami
2026-06-13 22:41:16
(5 days ago)
Port Scan on Honeypot | Ports: 80/HTTP | Proto: TCP(1) | Flags: all SYN | TTL: 41 | Len: 60B | Win: ...
show more
Port Scan on Honeypot | Ports: 80/HTTP | Proto: TCP(1) | Flags: all SYN | TTL: 41 | Len: 60B | Win: 64240(1) | F2B/ufw-honeypot@2026-06-13T22:41:16Z
show less
Port Scan
Hacking
🇺🇸
drewf.ink
2026-06-13 22:38:30
(5 days ago)
[22:38] Port scanning. Port(s) scanned: TCP/2082
Port Scan
🇩🇪
Hary74656
2026-06-13 22:15:28
(5 days ago)
[Sun Jun 14 00:15:13.413898 2026] [security2:error] [pid 199355:tid 199488] [client 13.83.161.81:385 ...
show more
[Sun Jun 14 00:15:13.413898 2026] [security2:error] [pid 199355:tid 199488] [client 13.83.161.81:38545] [client 13.83.161.81] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "78.46.107.184"] [uri "/.git/config"] [unique_id "ai3WcGLU-yNi1yAMUMJ4mgAAA-k"]
[Sun Jun 14 00:15:14.628761 2026] [security2:error] [pid 199419:tid 199499] [client 13.83.161.81:38546] [client 13.83.161.81] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/sh
...
show less
Web App Attack