🇧🇷
ICS Labs
2026-10-24 00:04:14
(4 days ago)
ICS Labs threat intelligence (ICS Feeds): Brute-Force, Exploited Host. Last observed 2026-10-24 UTC.
Brute-Force
Exploited Host
🇵🇱
Budyn
2026-10-23 22:06:04
(4 days ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: backup.budyn.top | URI: /.env | UA: Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36 | BODY: [Empty / GET Request] | HEADERS: {"Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"US","Cf-Connecting-Ip":"34.127.95.112","Cdn-Loop":"cloudflare; loops=1","Sec-Fetch-User":"?1","Sec-Fetch-Site":"none","Sec-Fetch-Mode":"navigate","Sec-Fetch-Dest":"document","Sec-Ch-Ua-Mobil
show less
Bad Web Bot
Web App Attack
🇫🇮
as211431.net
2026-10-23 16:10:25
(4 days ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇵🇱
Budyn
2026-10-23 16:05:54
(4 days ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: app.definitelynotahoneypot.online | URI: /.env | UA: Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36 | BODY: [Empty / GET Request] | HEADERS: {"Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"US","Cf-Connecting-Ip":"34.127.95.112","Cdn-Loop":"cloudflare; loops=1","Sec-Fetch-User":"?1","Sec-Fetch-Site":"none","Sec-Fetch-Mode":"navigate","Sec-Fetch-Dest":"document"
show less
Bad Web Bot
Web App Attack
🇩🇪
ghostwarriors
2026-10-23 06:50:24
(4 days ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ksol-hostmaster
2026-10-23 06:33:59
(4 days ago)
2026/10/23 08:33:58 [error] 53081#100871: *399098 access forbidden by rule, client: 34.127.95.112, s ...
show more
2026/10/23 08:33:58 [error] 53081#100871: *399098 access forbidden by rule, client: 34.127.95.112, server: hondaforum.hu, request: "GET / HTTP/1.1", host: "hondaforum.hu"
...
show less
Web Spam
🇺🇸
TPI-Abuse
2026-10-23 04:11:12
(5 days ago)
(mod_security) mod_security (id:210730) triggered by 34.127.95.112 (112.95.127.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.127.95.112 (112.95.127.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 00:11:08.979648 2026] [security2:error] [pid 8880:tid 8880] [client 34.127.95.112:52468] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||69strains.com|F|2"] [data ".cannapages.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "69strains.com"] [uri "/www.cannapages.com"] [unique_id "atreXKb4KBMeiMfdIn_ecgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-10-23 04:05:05
(5 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇳🇱
Brict IT
2026-10-23 03:57:11
(5 days ago)
Bad Web Bot
Web App Attack
🇳🇱
Cloud86 B.V.
2026-10-23 03:18:02
(5 days ago)
categories: DDoS Attack
DDoS Attack
