🇺🇸
SX Communications
2026-09-24 17:06:01
(1 hour ago)
HTTP application-layer DoS / botnet traffic from 16.216.88.112: repeated high-cost dynamic page and ...
show more
HTTP application-layer DoS / botnet traffic from 16.216.88.112: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host.
show less
DDoS Attack
Bad Web Bot
Exploited Host
🇵🇱
Budyn
2026-09-24 16:37:38
(1 hour ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: status.dont-eat-the-pudding.xyz | URI: /backup.sql | UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Reflectionbot/1.0; +https://reflection.ai/bot) Chrome/151.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇩🇪
AetherFox
2026-09-24 14:07:41
(4 hours ago)
AetherFox VoidGuard detected: [Thu Sep 24 14:07:40.827985 2026] [authz_core:error] [pid 3964198:tid ...
show more
AetherFox VoidGuard detected: [Thu Sep 24 14:07:40.827985 2026] [authz_core:error] [pid 3964198:tid 3964218] [client 16.216.88.112:26624] AH01630: client denied by server configuration: proxy:https://[MASKED]/posting.php
...
show less
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-09-24 10:39:01
(7 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: cache.budyn.xyz | URI: /backup.sql | UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Reflectionbot/1.0; +https://reflection.ai/bot) Chrome/151.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
2026-09-24 10:02:56
(8 hours ago)
Web attack
Bad Web Bot
Web App Attack
🇫🇷
GoodOldTOS
2026-09-24 09:45:57
(8 hours ago)
Highly suspect IP
Hacking
Web App Attack
2026-09-24 08:44:27
(9 hours ago)
Botnet activity
Web App Attack
🇫🇷
MatStef132
2026-09-24 07:28:33
(10 hours ago)
MatShield L7: blocked on mathost.eu (suspicious behaviour)
DDoS Attack
🇩🇪
FeG Deutschland
2026-09-24 06:32:46
(11 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2
Exploited Host
Web App Attack
🇩🇪
bancix
2026-09-24 04:45:44
(13 hours ago)
Heimdallr NIDS: Automatic ban triggered. Reason: RST_LIMIT_EXCEEDED (10/10)
Port Scan
2026-09-24 03:45:09
(14 hours ago)
IP banned by Fail2Ban in jail nginx-abusive-ips
Web App Attack
Brute-Force
Bad Web Bot
🇵🇱
Budyn
2026-09-24 03:06:56
(15 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: ldap.teddypot.cloud | URI: /backup.sql | UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Reflectionbot/1.0; +https://reflection.ai/bot) Chrome/151.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
2026-09-24 02:32:52
(15 hours ago)
Automated report (2026-09-23T22:32:52-04:00). Scraper detected.
Bad Web Bot
🇷🇺
genokrad
2026-09-24 02:02:28
(16 hours ago)
Website scan TCP 80/443 "/robots.txt" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible ...
show more
Website scan TCP 80/443 "/robots.txt" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; R"
show less
Port Scan
Web App Attack
🇮🇩
hermawan
2026-09-24 01:57:02
(16 hours ago)
[Thu Sep 24 08:56:57.006470 2026] [security2:error] [pid 23900:tid 139821536220864] [client 16.216.8 ...
show more
[Thu Sep 24 08:56:57.006470 2026] [security2:error] [pid 23900:tid 139821536220864] [client 16.216.88.112:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "bot" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "274"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: bot found within REQUEST_HEADERS:user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Reflectionbot/1.0; +https://reflection.ai/bot) Chrome/151.0.0.0 Safari/537.36 request_line = GET /index.php/monitoring-hari-tanpa-hujan-berturut-turut/4162-monitoring-hari-tanpa-hujan-berturut-turut-propinsi-jawa-timur/analisis-dasarian-monitoring-hari-tanpa-hujan-berturut-turut-provinsi-jawa-timur-tahun-2023/555560515-analisis-dasarian-monitoring-hari-tanpa-hujan-berturut-turut-updat..."] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/monitoring-hari-tanpa-hujan-berturu
...
show less
Email Spam
Hacking