2026-10-09 12:07:03
(7 hours ago)
Automated web scanner. Requested suspicious paths: /asset-manifest.json | /_nuxt/manifest.json | /.v ...
show more
Automated web scanner. Requested suspicious paths: /asset-manifest.json | /_nuxt/manifest.json | /.vite/manifest.json | /.git/HEAD. UTC: 2026-10-09 11:12:34.
show less
Web App Attack
🇵🇱
Budyn
2026-10-09 06:05:23
(13 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: beta.teddypot.tech | URI: /.git/HEAD | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-10-08 13:45:55
(1 day ago)
Web attack/malicious scanning detected
Web App Attack
🇳🇱
Site.eu
2026-10-08 12:14:38
(1 day ago)
Excessive multi-domain requests
Brute-Force
🇳🇱
Alt255
2026-10-08 12:13:54
(1 day ago)
[ti-05al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-05al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.141.241.221 - - [08/Oct/2026:14:13:45 +0200] "GET /wp-config.php.bak HTTP/1.1" 404 50879 "-" "Mozilla/5.0 (compatible; scanner/1.0)"
...
show less
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2026-10-07 19:53:34
(1 day ago)
140 requests with url.path *.sql.gz
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-07 19:37:55
(1 day ago)
(mod_security) mod_security (id:248270) triggered by 34.141.241.221 (221.241.141.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:248270) triggered by 34.141.241.221 (221.241.141.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 15:37:51.981795 2026] [security2:error] [pid 21498:tid 21498] [client 34.141.241.221:1746] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\$\\\\{jndi:(ldaps?|rmi|dns|iiop|nis|nds|corba|\\\\$\\\\{(?:lower|upper)):" at REQUEST_HEADERS:Referer. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "7626"] [id "248270"] [rev "1"] [msg "COMODO WAF: Remote code execution in Apache log4j||autodiscover.contrarianadvisors.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "autodiscover.contrarianadvisors.com"] [uri "/"] [unique_id "asafjzPpX9e-JKakGw-gIQAAAAA"], referer: ${jndi:ldap://127.0.0.1/bifrost-probe}
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-10-07 11:48:19
(2 days ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: metrics.astropot.website | URI: /.vite/manifest.json | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Hacking
Web App Attack
🇳🇱
ConsulHosting
2026-10-07 08:36:12
(2 days ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
🇨🇦
Bots.go.to.hell
2026-10-07 03:45:25
(2 days ago)
This IP was detected by CrowdSec triggering crowdsecurity/vpatch-env-access
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-10-06 16:01:38
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.141.241.221 (221.241.141.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.141.241.221 (221.241.141.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 12:01:31.127478 2026] [security2:error] [pid 28278:tid 28278] [client 34.141.241.221:29324] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.istare.com"] [uri "/.env"] [unique_id "asUbWyBd01eawwmUkiSp4QAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-10-06 10:58:19
(3 days ago)
20 attempts against mh-misbehave-ban on ozone
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-10-05 22:52:35
(3 days ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Web Spam (Form Abuse). Unsolicite ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Web Spam (Form Abuse). Unsolicited bulk message (Form Spam) captured. Evidence:
HOST: elastic.sweetpuddingtrap.xyz | URI: /contact.php | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
--- SPAM DATA ---
(From: [email protected] )
[Empty / GET Request]
show less
Web Spam
Web App Attack
🇳🇱
Savvii
2026-10-05 16:37:18
(4 days ago)
20 attempts against mh-misbehave-ban on chive
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-10-05 12:47:30
(4 days ago)
Excessive 404/403 errors
Brute-Force
