🇧🇪
sid3windr
2026-10-21 13:03:11
(4 days ago)
GET /@fs/../.env?raw?? (Tarpitted for 12h18m4s, wasted 2.53MB)
Web App Attack
🇳🇱
Site.eu
2026-10-21 05:52:51
(4 days ago)
Excessive multi-domain requests
Brute-Force
2026-10-21 05:49:13
(4 days ago)
Scenarios: grafana-cve-2021-43798, http-bad-user-agent, http-crawl-non_statics, http-cve-2021-41773, ...
show more
Scenarios: grafana-cve-2021-43798, http-bad-user-agent, http-crawl-non_statics, http-cve-2021-41773, http-path-traversal-probing, http-probing, http-sensitive-files
Total requests: 429
show less
Web App Attack
🇩🇪
rh24
2026-10-21 05:30:13
(4 days ago)
(secretscan) Secret-Scanner (env/git/ssh/credentials) from 136.107.167.250 (US/United States/250.167 ...
show more
(secretscan) Secret-Scanner (env/git/ssh/credentials) from 136.107.167.250 (US/United States/250.167.107.136.bc.googleusercontent.com)
show less
Hacking
🇳🇱
ConsulHosting
2026-10-21 05:25:39
(4 days ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
🇵🇱
Budyn
2026-10-21 02:38:00
(4 days ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: test.budyn.ovh | URI: /.config/gcloud/credentials.db | UA: Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/) | BODY: [Empty / GET Request]
show less
Hacking
Web App Attack
🇩🇪
updown.io
2026-10-21 00:45:03
(4 days ago)
{"level":"info","ts":1792543500.9427257,"logger":"http.log.access.log1","msg":"handled request","req ...
show more
{"level":"info","ts":1792543500.9427257,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"136.107.167.250","remote_port":"34994","client_ip":"136.107.167.250","proto":"HTTP/2.0","method":"GET","host":"status.beeceptor.com","uri":"/static/manifest.json","headers":{"Sec-Ch-Ua":["\"Chromium\";v=\"153\", \"Brave\";v=\"153\", \"Not_A Brand\";v=\"8\""],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"],"X-Nextjs-Data":["1"],"Accept-Encoding":["gzip, deflate, br, zstd"],"Sec-Fetch-Mode":["navigate"],"Accept-Language":["en-US,en;q=0.9"],"Sec-Ch-Ua-Mobile":["?0"],"Sec-Fetch-User":["?1"],"Upgrade-Insecure-Requests":["1"],"Priority":["u=0, i"],"Sec-Fetch-Dest":["document"],"Sec-Ch-Ua-Platform":["\"Windows\""],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middlew
...
show less
DDoS Attack
Web App Attack
🇵🇱
Budyn
2026-10-21 00:38:01
(4 days ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: staging.budyn.ovh | URI: /wp-admin/ | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇧🇪
boxed-it
2026-10-20 22:23:51
(4 days ago)
GET /console (Tarpitted for 11s, wasted 720B)
Web App Attack
🇵🇱
Budyn
2026-10-20 22:06:06
(4 days ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: mail.budyn.ovh | URI: /@fs/src/.env?import&raw?? | UA: Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler) | BODY: [Empty / GET Request]
show less
Hacking
Web App Attack
2026-10-20 21:05:22
(4 days ago)
136.107.167.250 - - [20/Oct/2026:21:05:21 +0000] "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/.env HTTP/1.1" 40 ...
show more
136.107.167.250 - - [20/Oct/2026:21:05:21 +0000] "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/.env HTTP/1.1" 400 5381 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)"
...
show less
Brute-Force
Web App Attack
🇪🇸
bohl-aiG5aef
2026-10-20 19:43:46
(4 days ago)
Suricata Alert [SID:2066030] ET HUNTING Javascript Sandbox Escape via Global Object (process)
Hacking
🇵🇱
Budyn
2026-10-20 19:37:15
(4 days ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: forum.budyn.ovh | URI: /@fs/.env?raw?? | UA: Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36 | BODY: [Empty / GET Request]
show less
Hacking
Web App Attack
🇩🇪
LRob
2026-10-20 18:56:33
(4 days ago)
Crawler ignoring refusals | ua: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like G ...
show more
Crawler ignoring refusals | ua: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36, Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] ), Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/) (+12 more) | path: /dist/.vite/manifest.json, /.vite/manifest.json, /lib/terminal-xhr.php (+17 more)
show less
Bad Web Bot
🇵🇱
Budyn
2026-10-20 17:33:08
(4 days ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: auth.budyn.ovh | URI: /.vite/manifest.json | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Hacking
Web App Attack
