🇵🇱
Budyn
2026-10-15 02:59:27
(46 minutes ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: www.budyn.ovh | URI: /secrets.yaml | UA: Mozilla/5.0 (compatible; Applebot/0.1; +http://www.apple.com/go/applebot) | BODY: [Empty / GET Request]
show less
Hacking
Web App Attack
🇩🇪
macrob
2026-10-14 22:36:39
(5 hours ago)
2026/10/14 22:36:25 [error] 22647#22647: *52796415 access forbidden by rule, client: 2a0b:8bc0:2:a89 ...
show more
2026/10/14 22:36:25 [error] 22647#22647: *52796415 access forbidden by rule, client: 2a0b:8bc0:2:a893::1, server: binixo.co, request: "GET /.env HTTP/2.0", host: "www.binixo.co"
2026/10/14 22:36:26 [error] 22647#22647: *52796423 access forbidden by rule, client: 2a0b:8bc0:2:a893::1, server: binixo.co, request: "GET /.env.bak HTTP/2.0", host: "www.binixo.co"
2026/10/14 22:36:37 [error] 22646#22646: *52796757 access forbidden by rule, client: 2a0b:8bc0:2:a893::1, server: binixo.co, request: "GET /local.env HTTP/2.0", host: "www.binixo.co"
...
show less
Web App Attack
🇳🇱
Site.eu
2026-10-14 22:04:56
(5 hours ago)
Excessive 404/403 errors
Brute-Force
🇵🇱
Budyn
2026-10-14 15:56:27
(11 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: www.astropot.tech | URI: /.env | UA: Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html) | BODY: [Empty / GET Request]
show less
Hacking
Web App Attack
🇳🇱
Site.eu
2026-10-14 13:56:08
(13 hours ago)
Excessive multi-domain requests
Brute-Force
🇨🇦
Vianpyro
2026-10-14 01:43:07
(1 day ago)
Honeypot: 75 request(s) in 1 min. Paths: /.aws/credentials, /.docker/config.json, /.env, /.env.backu ...
show more
Honeypot: 75 request(s) in 1 min. Paths: /.aws/credentials, /.docker/config.json, /.env, /.env.backup, /.env.bak. Method(s): GET. UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +http. ASN: 41608 (NextGenWebs, S.L.).
show less
Hacking
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-10-13 08:29:27
(1 day ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: vpn.astropot.online | URI: /.env | UA: Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html) | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-10-13 07:37:05
(1 day ago)
[ti-07al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-07al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 2a0b:8bc0:2:a893::1 - - [13/Oct/2026:09:36:45 +0200] "GET /.env.production HTTP/1.1" 403 5696 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
...
show less
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-10-10 05:54:44
(4 days ago)
Excessive multi-domain requests
Brute-Force
🇳🇱
Site.eu
2026-10-09 22:26:21
(5 days ago)
Excessive 404/403 errors
Brute-Force
🇩🇪
updown.io
2026-10-09 16:28:48
(5 days ago)
{"level":"info","ts":1791562942.0444283,"logger":"http.log.access.log1","msg":"handled request","req ...
show more
{"level":"info","ts":1791562942.0444283,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"2a0b:8bc0:2:a893::1","remote_port":"41090","client_ip":"2a0b:8bc0:2:a893::1","proto":"HTTP/1.1","method":"GET","host":"up.hearty.studio","uri":"/","headers":{"User-Agent":["Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)"],"Accept":["*/*"],"Accept-Encoding":["gzip,deflate,br"]}},"bytes_read":0,"user_id":"","duration":0.000092597,"size":0,"status":308,"resp_headers":{"Location":["https://up.hearty.studio/"],"Content-Type":[],"Server":["Caddy"],"Connection":["close"]}}
{"level":"info","ts":1791563318.3160157,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"2a0b:8bc0:2:a893::1","remote_port":"36048","client_ip":"2a0b:8bc0:2:a893::1","proto":"HTTP/1.1","method":"GET","host":"up.hearty.studio","uri":"/.env.prod.bak","headers":{"User-Agent":["Mozilla/5.0 (compatible; GoogleOther; +https://developers.google.com/search/)"],"Acce
...
show less
DDoS Attack
Web App Attack
🇳🇱
Site.eu
2026-10-08 07:08:23
(6 days ago)
Excessive 404/403 errors
Brute-Force
🇩🇪
Marco711
2026-10-06 04:44:54
(1 week ago)
port/URL scanning
Port Scan
Web App Attack
🇳🇱
Site.eu
2026-10-06 01:21:09
(1 week ago)
Excessive 404/403 errors
Brute-Force
🇳🇱
Site.eu
2026-10-02 16:00:44
(1 week ago)
Excessive multi-domain requests
Brute-Force
