🇷🇴
ait
2026-11-09 02:20:31
UTC ·
(49 minutes ago)
Web vulnerability scan: requested /.git/config
Web App Attack
🇳🇱
Alt255
2026-11-09 02:02:00
UTC ·
(1 hour ago)
[ti-10al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.153.140.171 - - [09/Nov/2026:03:01:49 +0100] "GET /.git/config HTTP/1.1" 301 518 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/53 ...
show more
[ti-10al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.153.140.171 - - [09/Nov/2026:03:01:49 +0100] "GET /.git/config HTTP/1.1" 301 518 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
Anonymous
2026-11-09 01:39:19
UTC ·
(1 hour ago)
Fail2Ban triggered
Web App Attack
🇺🇦
URAN Publishing Service
2026-11-09 01:36:13
UTC ·
(1 hour ago)
[09/Nov/2026:03:36:12 +0200] -- 34.153.140.171 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.git/config HTTP/1.1
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-11-08 22:59:09
UTC ·
(4 hours ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-11-07.
Web App Attack
SSH
Hacking
Anonymous
2026-11-08 03:00:24
UTC ·
(1 day ago)
Auto-reported by Fail2Ban (NPM-Auth)
Web App Attack
🇪🇸
robotstxt
2026-11-07 08:28:04
UTC ·
(1 day ago)
34.153.140.171 - - [07/Nov/2026:08:27:34 +0000] "POST /docs/ HTTP/1.1" 403 31 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.153.140.171"
34.153.140.171 - - [07/Nov/2026:08:27: ...
show more
34.153.140.171 - - [07/Nov/2026:08:27:34 +0000] "POST /docs/ HTTP/1.1" 403 31 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.153.140.171"
34.153.140.171 - - [07/Nov/2026:08:27:34 +0000] "POST /docs/ HTTP/1.1" 403 31 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.153.140.171"
34.153.140.171 - - [07/Nov/2026:08:27:34 +0000] "GET /.git/config HTTP/1.1" 403 31 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.153.140.171"
34.153.140.171 - - [07/Nov/2026:08:27:35 +0000] "GET /.env HTTP/1.1" 403 10977 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.153.140.171"
34.153.140.171 - - [07/Nov/2026:08:27:35 +0000] "GET /.env.local HTTP/1.1" 403 10977 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTM
...
show less
Web App Attack
🇪🇸
robotstxt
2026-11-07 06:13:07
UTC ·
(1 day ago)
34.153.140.171 - - [07/Nov/2026:06:12:04 +0000] "POST /docs/ HTTP/1.1" 403 31 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.153.140.171"
34.153.140.171 - - [07 ...
show more
34.153.140.171 - - [07/Nov/2026:06:12:04 +0000] "POST /docs/ HTTP/1.1" 403 31 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.153.140.171"
34.153.140.171 - - [07/Nov/2026:06:12:05 +0000] "POST /docs/ HTTP/1.1" 403 31 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.153.140.171"
34.153.140.171 - - [07/Nov/2026:06:12:05 +0000] "GET /.git/config HTTP/1.1" 403 31 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.153.140.171"
34.153.140.171 - - [07/Nov/2026:06:12:06 +0000] "GET /.env HTTP/1.1" 403 10977 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.153.140.171"
34.153.140.171 - - [07/Nov/2026:06:12:06 +0000] "GET /.env.local HTTP/1.1" 403 109
...
show less
Web App Attack
🇵🇱
Budyn
2026-11-07 04:56:24
UTC ·
(1 day ago)
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: docker.sweetpuddingtrap.top | Path: /.git/config | User-Agent: Mozilla/5.0 (Windows NT 10.0; ...
show more
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: docker.sweetpuddingtrap.top | Path: /.git/config | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | Request: [Empty / GET Request]
show less
Hacking
Web App Attack
🇩🇪
snhosting
2026-11-07 03:46:46
UTC ·
(1 day ago)
34.153.140.171 - - [07/Nov/2026:04:46:36 +0100] "POST /accounts/login/ HTTP/1.1" 403 742 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.153.140.171 - - [07/Nov/2026:04:46 ...
show more
34.153.140.171 - - [07/Nov/2026:04:46:36 +0100] "POST /accounts/login/ HTTP/1.1" 403 742 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.153.140.171 - - [07/Nov/2026:04:46:36 +0100] "POST /accounts/login/ HTTP/1.1" 403 742 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.153.140.171 - - [07/Nov/2026:04:46:36 +0100] "POST /accounts/login/ HTTP/1.1" 403 742 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.153.140.171 - - [07/Nov/2026:04:46:36 +0100] "GET /.git/config HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.153.140.171 - - [07/Nov/2026:04:46:36 +0100] "POST / HTTP/1.1" 403 742 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, l
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
🇪🇸
robotstxt
2026-11-07 03:44:12
UTC ·
(1 day ago)
34.153.140.171 - - [07/Nov/2026:03:43:12 +0000] "POST /docs/ HTTP/1.1" 403 31 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.153.140.171"
34.153.140.171 - - [07/Nov/2 ...
show more
34.153.140.171 - - [07/Nov/2026:03:43:12 +0000] "POST /docs/ HTTP/1.1" 403 31 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.153.140.171"
34.153.140.171 - - [07/Nov/2026:03:43:12 +0000] "POST /docs/ HTTP/1.1" 403 31 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.153.140.171"
34.153.140.171 - - [07/Nov/2026:03:43:12 +0000] "GET /.git/config HTTP/1.1" 403 31 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.153.140.171"
34.153.140.171 - - [07/Nov/2026:03:43:13 +0000] "GET /.env HTTP/1.1" 403 10977 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.153.140.171"
34.153.140.171 - - [07/Nov/2026:03:43:13 +0000] "GET /.env.local HTTP/1.1" 403 10977 "-" "Mozilla/5.0 (Win
...
show less
Web App Attack
Anonymous
2026-11-07 02:51:46
UTC ·
(2 days ago)
Auto-reported by Fail2Ban (NPM-Auth)
Web App Attack
🇵🇱
Budyn
2026-11-07 02:44:53
UTC ·
(2 days ago)
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: docker.sweetpuddingtrap.top | Path: /.git/config | User-Agent: Mozilla/5.0 (X11; Linux x86_64 ...
show more
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: docker.sweetpuddingtrap.top | Path: /.git/config | User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | Request: [Empty / GET Request]
show less
Hacking
Web App Attack
🇨🇦
Vianpyro
2026-11-06 17:42:16
UTC ·
(2 days ago)
Honeypot: 12 request(s) in 0 min. Paths: /, /.env, /.env.local, /.env.production, /.git/config. Method(s): GET, POST. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko). ASN: 396982 (Google LLC).
Hacking
Bad Web Bot
Web App Attack
Anonymous
2026-11-06 17:23:11
UTC ·
(2 days ago)
Bot / seems abusive / Apache connections: 30
DDoS Attack
Web Spam
Bad Web Bot
Web App Attack