🇵🇱
Budyn
2026-11-13 17:36:48
UTC ·
(3 hours ago)
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: grafana.sweetpuddingtrap.top | Path: /.env | User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 1 ...
show more
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: grafana.sweetpuddingtrap.top | Path: /.env | User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 18_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Mobile/15E148 Safari/604.1 | Request: [Empty / GET Request]
show less
Hacking
Web App Attack
🇵🇱
Budyn
2026-11-13 13:01:18
UTC ·
(8 hours ago)
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: status.goblinpot.online | Path: /.env | User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:133.0) ...
show more
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: status.goblinpot.online | Path: /.env | User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0 | Request: [Empty / GET Request]
show less
Hacking
Web App Attack
🇵🇱
Budyn
2026-11-13 09:24:40
UTC ·
(11 hours ago)
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: metrics.goblinpot.website | Path: /.env | User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 18_1 ...
show more
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: metrics.goblinpot.website | Path: /.env | User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 18_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Mobile/15E148 Safari/604.1 | Request: [Empty / GET Request]
show less
Hacking
Web App Attack
🇳🇱
Site.eu
2026-11-13 07:57:25
UTC ·
(13 hours ago)
Scanning for secret files (.env, .git, credentials, config backups)
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-11-13 02:34:30
UTC ·
(18 hours ago)
[ti-26al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 136.80.158.234 - - [13/Nov/2026:03:34:18 +0100] "GET /.env HTTP/1.1" 301 6602 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firef ...
show more
[ti-26al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 136.80.158.234 - - [13/Nov/2026:03:34:18 +0100] "GET /.env HTTP/1.1" 301 6602 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0"
...
show less
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-11-13 01:35:08
UTC ·
(19 hours ago)
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: db.astropot.site | Path: /.env | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleW ...
show more
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: db.astropot.site | Path: /.env | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | Request: [Empty / GET Request]
show less
Hacking
Web App Attack
🇨🇦
Anytech
2026-11-13 00:58:59
UTC ·
(20 hours ago)
Blocked by Conn-Monitor: env-probing
Web App Attack
Hacking
🇬🇧
gigatech
2026-11-13 00:50:03
UTC ·
(20 hours ago)
Webserver Probing
Web App Attack
🇩🇪
jbcrn
2026-11-13 00:40:53
UTC ·
(20 hours ago)
Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Disguised bots, ruleset: faked-browser. Requested honeypot path: /.env. User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/ ...
show more
Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Disguised bots, ruleset: faked-browser. Requested honeypot path: /.env. User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 Edg/130.0.0.0
show less
Bad Web Bot
Web App Attack
Anonymous
2026-11-13 00:05:27
UTC ·
(21 hours ago)
Aggressive web scan
Web App Attack
🇬🇧
consul.to
2026-11-12 21:15:37
UTC ·
(1 day ago)
Web attack/malicious scanning detected
Web App Attack
🇵🇱
Budyn
2026-11-12 18:01:54
UTC ·
(1 day ago)
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: api.dont-eat-the-pudding.top | Path: /.env | User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS ...
show more
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: api.dont-eat-the-pudding.top | Path: /.env | User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 14_7_2) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Safari/605.1.15 | Request: [Empty / GET Request]
show less
Hacking
Web App Attack
Anonymous
2026-11-12 12:07:00
UTC ·
(1 day ago)
IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/http-sensitive-files; Action=ban; Events=5; Hosts=incognet-checkout.isp.llc; Paths=/.env,/.env.backup,/.env.development,/.env.local,/.env.staging; Country=US; ASN=396982 GOOGLE-CLOUD-PLATFO ...
show more
IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/http-sensitive-files; Action=ban; Events=5; Hosts=incognet-checkout.isp.llc; Paths=/.env,/.env.backup,/.env.development,/.env.local,/.env.staging; Country=US; ASN=396982 GOOGLE-CLOUD-PLATFORM
show less
Hacking
Web App Attack
🇳🇱
e.fierstra
2026-11-12 11:36:12
UTC ·
(1 day ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-11-12 11:25:53
UTC ·
(1 day ago)
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: cdn.sweetpuddingtrap.online | Path: /.env | User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 18 ...
show more
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: cdn.sweetpuddingtrap.online | Path: /.env | User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 18_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Mobile/15E148 Safari/604.1 | Request: [Empty / GET Request]
show less
Hacking
Web App Attack