🇫🇷
dwmp
2026-09-20 15:05:23
(9 hours ago)
Url probing: /entrance
Web App Attack
🇺🇸
helios.live
2026-09-20 10:26:06
(13 hours ago)
2026/09/20 10:26:05 [error] 1575501#1575501: *3878784 access forbidden by rule, client: 34.150.119.4 ...
show more
2026/09/20 10:26:05 [error] 1575501#1575501: *3878784 access forbidden by rule, client: 34.150.119.43, server: kocerroxy.com, request: "GET /.env.local HTTP/1.1", host: "app.kocerroxy.com"
2026/09/20 10:26:05 [error] 1575501#1575501: *3878784 access forbidden by rule, client: 34.150.119.43, server: kocerroxy.com, request: "GET /.env.production HTTP/1.1", host: "app.kocerroxy.com"
2026/09/20 10:26:05 [error] 1575501#1575501: *3878784 access forbidden by rule, client: 34.150.119.43, server: kocerroxy.com, request: "GET /.env.staging HTTP/1.1", host: "app.kocerroxy.com"
2026/09/20 10:26:05 [error] 1575501#1575501: *3878784 access forbidden by rule, client: 34.150.119.43, server: kocerroxy.com, request: "GET /.env.development HTTP/1.1", host: "app.kocerroxy.com"
2026/09/20 10:26:05 [error] 1575501#1575501: *3878784 access forbidden by rule, client: 34.150.119.43, server: kocerroxy.com, request: "GET /.env.test HTTP/1.1", host: "app.kocerroxy.com"
...
show less
Web App Attack
🇧🇪
madeit
2026-09-20 07:21:45
(16 hours ago)
Web App Attack
🇸🇪
vaia.cloud
2026-09-19 13:10:03
(1 day ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
🇨🇦
polycoda
2026-09-19 12:40:58
(1 day ago)
AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based) - ⚙️ Configuration File Access (Non Decay-Based ...
show more
AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based) - ⚙️ Configuration File Access (Non Decay-Based) - ↪️ Excessive 30X Errors (Decay-Based)
show less
Hacking
Bad Web Bot
Web App Attack
🇩🇪
NewWavesApp
2026-09-19 06:04:57
(1 day ago)
(mod_security) mod_security triggered on hostname [redacted] 34.150.119.43 (HK/Hong Kong/43.119.150. ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.150.119.43 (HK/Hong Kong/43.119.150.34.bc.googleusercontent.com): (CF_ENABLE)
show less
SQL Injection
🇨🇦
Vianpyro
2026-09-19 03:34:33
(1 day ago)
Honeypot: 24 request(s) in 83 min. Paths: /, /.env, /.env.local, /.env.production, /.git/config. Met ...
show more
Honeypot: 24 request(s) in 83 min. Paths: /, /.env, /.env.local, /.env.production, /.git/config. Method(s): GET, POST. UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/13. ASN: 396982 (Google LLC).
show less
Hacking
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-09-19 03:29:43
(1 day ago)
Excessive multi-domain requests
Brute-Force
🇵🇱
Budyn
2026-09-19 01:09:01
(1 day ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: admin.teddypot.cloud | URI: /.git/config | UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-09-18 21:06:24
(2 days ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: admin.sweetpuddingtrap.online | URI: /.git/config | UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇫🇷
Octopuce
2026-09-18 19:25:17
(2 days ago)
Aggressive web search of vulnerable pages: /.env /.env.local /app/.env /apps/.env /api/.env ...
Web App Attack
🇩🇪
gadix
2026-09-18 13:48:44
(2 days ago)
[18/Sep/2026:15:48:43.273015 +0200] aq1BOw4eL01jxoSpZpUIAgAAAAM 34.150.119.43 47116 127.0.0.1 7081
[ ...
show more
[18/Sep/2026:15:48:43.273015 +0200] aq1BOw4eL01jxoSpZpUIAgAAAAM 34.150.119.43 47116 127.0.0.1 7081
[18/Sep/2026:15:48:43.837476 +0200] aq1BOyvknCQeXxOXcpKs-AAAAFU 34.150.119.43 47130 127.0.0.1 7081
[1
...
show less
Web App Attack
2026-09-18 13:23:15
(2 days ago)
IP matched detection query many 3xx errors.
Brute-Force
🇲🇾
Rizzy
2026-09-18 11:51:29
(2 days ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇳🇱
Savvii
2026-09-18 11:45:48
(2 days ago)
20 attempts against mh_ha-misbehave-ban on moon
Brute-Force
Bad Web Bot
Web App Attack