๐ฌ๐ง
gbzret4d
2026-01-19 10:27:37
(8 months ago)
Honeypot [uk-production01]: Empty payload (likely service probe); 20722 [1] TCP
Port Scan
๐ฉ๐ช
sthoyer.de
2025-01-29 18:05:56
(1 year ago)
170.64.137.121 - - [29/Jan/2025:19:05:54 +0100] "GET /.git/config HTTP/1.1" 302 495 "-" "Mozilla/5.0 ...
show more
170.64.137.121 - - [29/Jan/2025:19:05:54 +0100] "GET /.git/config HTTP/1.1" 302 495 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
170.64.137.121 - - [29/Jan/2025:19:05:55 +0100] "GET /.git/config HTTP/1.1" 404 711 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
...
show less
Web App Attack
๐ฉ๐ช
sthoyer.de
2025-01-29 13:14:16
(1 year ago)
170.64.137.121 - - [29/Jan/2025:14:13:36 +0100] "GET /.git/config HTTP/1.1" 302 495 "-" "Mozilla/5.0 ...
show more
170.64.137.121 - - [29/Jan/2025:14:13:36 +0100] "GET /.git/config HTTP/1.1" 302 495 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
170.64.137.121 - - [29/Jan/2025:14:13:37 +0100] "GET /.git/config HTTP/1.1" 404 711 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
170.64.137.121 - - [29/Jan/2025:14:14:15 +0100] "GET /.git/config HTTP/1.1" 302 495 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
...
show less
Web App Attack
๐ฉ๐ช
XICTRON
2025-01-29 12:30:08
(1 year ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
๐ฉ๐ช
gadix
2025-01-29 09:48:08
(1 year ago)
[29/Jan/2025:10:37:30.900305 +0100] Z5n22r5J4Px8txQXg3jhEwAAAAU 170.64.137.121 34094 127.0.0.1 7081
...
show more
[29/Jan/2025:10:37:30.900305 +0100] Z5n22r5J4Px8txQXg3jhEwAAAAU 170.64.137.121 34094 127.0.0.1 7081
[29/Jan/2025:10:48:07.036813 +0100] Z5n5V6u57mrwT7cAsUDkYgAAAAM 170.64.137.121 60554 127.0.0.1 7080
[29/Jan/2025:10:48:07.897570 +0100] Z5n5V3kClkaCtlfoM6rL4AAAAAQ 170.64.137.121 55198 127.0.0.1 7081
...
show less
Web App Attack
๐ฉ๐ช
gadix
2025-01-29 06:36:13
(1 year ago)
[29/Jan/2025:06:23:26.708364 +0100] Z5m7TpbVSDTRkkejjNtcWAAAAAI 170.64.137.121 59114 127.0.0.1 7081
...
show more
[29/Jan/2025:06:23:26.708364 +0100] Z5m7TpbVSDTRkkejjNtcWAAAAAI 170.64.137.121 59114 127.0.0.1 7081
[29/Jan/2025:07:36:12.099529 +0100] Z5nMXJbVSDTRkkejjNtckAAAAAI 170.64.137.121 36478 127.0.0.1 7080
[29/Jan/2025:07:36:13.085934 +0100] Z5nMXXkClkaCtlfoM6rLIwAAAAQ 170.64.137.121 36580 127.0.0.1 7081
...
show less
Web App Attack
๐ฉ๐ช
gadix
2025-01-28 21:18:35
(1 year ago)
[28/Jan/2025:21:20:00.890675 +0100] Z5k78K0xO0BmzUhF6eN7gwAAAAs 170.64.137.121 46880 127.0.0.1 7080
...
show more
[28/Jan/2025:21:20:00.890675 +0100] Z5k78K0xO0BmzUhF6eN7gwAAAAs 170.64.137.121 46880 127.0.0.1 7080
[28/Jan/2025:21:20:02.011614 +0100] Z5k78mF0KRaw-mcL2_LFawAAAAI 170.64.137.121 57292 127.0.0.1 7081
[28/Jan/2025:22:18:34.332136 +0100] Z5lJqunHagnkoup7FVHXpAAAAAk 170.64.137.121 47672 127.0.0.1 7081
...
show less
Web App Attack
๐ฉ๐ช
Ba-Yu
2025-01-28 19:01:54
(1 year ago)
General hacking/exploits/scanning
Web Spam
Hacking
Brute-Force
Exploited Host
Web App Attack
๐ฉ๐ช
Linux-Tech
2025-01-28 17:32:20
(1 year ago)
170.64.137.121 - - [28/Jan/2025:18:32:18 +0100] "GET /.git/config HTTP/1.1" 301 162 "-" "Mozilla/5.0 ...
show more
170.64.137.121 - - [28/Jan/2025:18:32:18 +0100] "GET /.git/config HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 170.64.137.121 - - [28/Jan/2025:18:32:20 +0100] "GET /.git/config HTTP/1.1" 400 154 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
show less
Port Scan
Bad Web Bot
Web App Attack
๐บ๐ธ
EricTheRedFL
2025-01-28 15:47:14
(1 year ago)
web.ab-data.us:80 170.64.137.121 - - [28/Jan/2025:04:03:38 -0500] "GET /.git/config HTTP/1.1" 301 59 ...
show more
web.ab-data.us:80 170.64.137.121 - - [28/Jan/2025:04:03:38 -0500] "GET /.git/config HTTP/1.1" 301 598 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
web.ab-data.us:443 170.64.137.121 - - [28/Jan/2025:04:03:39 -0500] "GET /.git/config HTTP/1.1" 301 2258 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
web.ab-data.us:80 170.64.137.121 - - [28/Jan/2025:07:07:13 -0500] "GET /.git/config HTTP/1.1" 301 598 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
web.ab-data.us:443 170.64.137.121 - - [28/Jan/2025:07:07:14 -0500] "GET /.git/config HTTP/1.1" 301 2258 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
web.ab-data.us:80 170.64.137.121 - - [28/Jan/2025:10:47:04 -0500] "GET /.git/config HTTP/1.1" 301 598 "-" "Mozilla/5.0 (X11; Linux x86_64) A
...
show less
Hacking
Brute-Force
Web App Attack
๐บ๐ธ
brantknudson.org
2025-01-28 14:53:21
(1 year ago)
Client attempted attack using request path '/.git/config' to honeypot.
Web App Attack
๐บ๐ธ
Cannoli
2025-01-28 14:25:00
(1 year ago)
TCP/80 multiple attempts
Port Scan
๐บ๐ธ
bulkvm.com
2025-01-28 14:11:37
(1 year ago)
[bulkvm.com/honeypot] SSH-Multi login Attempt
Brute-Force
SSH
Anonymous
2025-01-28 13:16:56
(1 year ago)
Fuzzing/Looking for credentials files.
Brute-Force
Web App Attack
๐ฆ๐บ
FEWA
2025-01-28 12:53:11
(1 year ago)
Fail2Ban Ban Triggered
Hacking
Bad Web Bot
Web App Attack