๐ณ๐ฑ
homeshowdomain.nl
2026-10-02 21:59:21
(1 day ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-10-01.
show less
Web App Attack
SSH
Hacking
๐จ๐ญ
copestack
2026-10-02 01:30:09
(2 days ago)
Honeypot hit on ov-4e5936 (fail2ban jail: nginx-compat)
Web App Attack
๐ณ๐ฑ
oisecnet
2026-10-01 21:01:58
(2 days ago)
Automated report: Unauthorized vulnerability scanning detected on 2026-10-01. 2 requests from this I ...
show more
Automated report: Unauthorized vulnerability scanning detected on 2026-10-01. 2 requests from this IP.
show less
Port Scan
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-01 16:30:10
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 130.195.243.22 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 130.195.243.22 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 12:30:03.292743 2026] [security2:error] [pid 13899:tid 13899] [client 130.195.243.22:59670] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "theateroobleck.com"] [uri "/.env"] [unique_id "ar6Ki6V8pEoZv7yS_Tas-wAAACs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ต๐ฑ
Budyn
2026-10-01 13:40:11
(2 days ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: docker.dont-eat-the-pudding.xyz | URI: /.env.example | UA: Mozilla/5.0 (Android 15; Mobile; rv:136.0) Gecko/136.0 Firefox/136. | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
Anonymous
2026-10-01 13:19:43
(2 days ago)
sensitive path probe detected by fail2ban
...
Port Scan
Web App Attack
๐ฌ๐ง
foxxelabs
2026-10-01 12:21:09
(2 days ago)
Automated report from FoxxeLabs Sentinel. Path probed: /.env | Project: anseo | Reason(s): Known exp ...
show more
Automated report from FoxxeLabs Sentinel. Path probed: /.env | Project: anseo | Reason(s): Known exploit path: /.env | User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:128.0) Gecko/20100101 Firefox/128.0
show less
Web App Attack
๐บ๐ธ
Rip
2026-10-01 10:25:02
(2 days ago)
Restricted File Access Attempts
Port Scan
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-01 09:34:50
(2 days ago)
[ti-02ra] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-02ra] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 130.195.243.22 - - [01/Oct/2026:11:34:38 +0200] "GET /.env HTTP/2.0" 404 95315 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Mobile/15E148 Safari/604."
...
show less
Bad Web Bot
Web App Attack
๐ต๐ฑ
Budyn
2026-10-01 09:27:07
(2 days ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: portal.teddypot.online | URI: /.env | UA: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:136.0) Gecko/20100101 Firefox/136.0 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
๐ธ๐ฌ
securejdprop
2026-10-01 04:57:18
(3 days ago)
This IP was detected by CrowdSec triggering crowdsecurity/vpatch-env-access.
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-01 02:38:56
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 130.195.243.22 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 130.195.243.22 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 22:38:51.865497 2026] [security2:error] [pid 3331:tid 3331] [client 130.195.243.22:23562] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "net-gal.com"] [uri "/.env.example"] [unique_id "ar3HuxTxf6H4PRBrQ0ecNgAAACo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-01 02:35:02
(3 days ago)
suspicious request in access.log
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-01 01:21:16
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 130.195.243.22 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 130.195.243.22 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 21:21:10.853759 2026] [security2:error] [pid 15298:tid 15298] [client 130.195.243.22:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gibit.me"] [uri "/.env"] [unique_id "ar21hoJeruEmvLAffwkMngAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ต๐ฑ
Budyn
2026-10-01 00:24:11
(3 days ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: docker.astropot.store | URI: /.env | UA: Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:136.0) Gecko/20100101 Firefox/136.0 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack