🇩🇪
Viveronese
2026-10-14 11:19:44
(9 hours ago)
HTTP vulnerability scanning
Web App Attack
🇳🇱
homeshowdomain.nl
2026-10-13 21:59:47
(22 hours ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-10-12.
show less
Web App Attack
SSH
Hacking
🇵🇱
Budyn
2026-10-13 17:22:35
(1 day ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: beta.goblinpot.site | URI: /.env.txt | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
2026-10-13 13:45:05
(1 day ago)
Observed scanned 7 known-sensitive endpoint(s), e.g.: /.env, /.env.bak, /.env.old, /.env.swp, /.git/ ...
show more
Observed scanned 7 known-sensitive endpoint(s), e.g.: /.env, /.env.bak, /.env.old, /.env.swp, /.git/HEAD, /.git/config
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 13:05:20
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:63:4520::1 (srv1861728.hstgr.cloud): ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:63:4520::1 (srv1861728.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 09:05:14.092573 2026] [security2:error] [pid 11853:tid 11880] [client 2a02:4780:63:4520::1:38432] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mooks.chat.n2play.net"] [uri "/.env.txt"] [unique_id "as4sipa2isTdQLfdke5JQQAAAFY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
HerrWolf
2026-10-13 06:30:04
(1 day ago)
CrowdSec Detection: crowdsecurity/http-sensitive-files
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 04:37:59
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:63:4520::1 (srv1861728.hstgr.cloud): ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:63:4520::1 (srv1861728.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 00:37:51.321046 2026] [security2:error] [pid 884:tid 884] [client 2a02:4780:63:4520::1:34266] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aupapierjaponais.com"] [uri "/.env.txt"] [unique_id "as21n8Y6B17C0xqanduRFwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 04:15:35
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:63:4520::1 (srv1861728.hstgr.cloud): ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:63:4520::1 (srv1861728.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 00:15:30.943434 2026] [security2:error] [pid 4622:tid 4622] [client 2a02:4780:63:4520::1:60676] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "test.plaisance.us"] [uri "/.env.txt"] [unique_id "as2wYrzUwBKLkBxlHrcuvgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-10-13 03:31:40
(1 day ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: admin.teddypot.pro | URI: /.env.txt | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 01:52:24
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:63:4520::1 (srv1861728.hstgr.cloud): ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:63:4520::1 (srv1861728.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 21:52:18.691978 2026] [security2:error] [pid 25174:tid 25174] [client 2a02:4780:63:4520::1:54116] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.boilers.modelengines.info"] [uri "/.env.txt"] [unique_id "as2O0h26HkbFDMFOraA_ywAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
big-cloud.nl
2026-10-12 12:24:57
(2 days ago)
Try to access /wp-content/plugins/elementor-pro/readme.txt
Web App Attack
🇮🇹
VHosting
2026-10-12 11:20:08
(2 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇳🇱
Alt255
2026-10-12 10:28:43
(2 days ago)
[ti-24al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-24al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 2a02:4780:63:4520::1 - - [12/Oct/2026:12:28:23 +0200] "GET /.env.txt HTTP/1.1" 301 395 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
