🇵🇱
Budyn
2026-09-18 04:17:38
(4 minutes ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: beta.goblinpot.online | URI: /.git/config | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-09-18 04:08:57
(13 minutes ago)
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: ...
show more
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: /.git/config (+17 more) | 2026-09-18 04:08 UTC
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-09-18 03:43:00
(39 minutes ago)
(mod_security) mod_security (id:210492) triggered by 34.158.153.75 (75.153.158.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.158.153.75 (75.153.158.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 23:42:53.789661 2026] [security2:error] [pid 9829:tid 9829] [client 34.158.153.75:59674] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "beta.flavornet.org"] [uri "/.git/config"] [unique_id "aqyzPeMCjLHoDvFimYGDvAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
BlueWire Hosting
2026-09-18 03:37:03
(45 minutes ago)
High-confidence malicious configuration/VCS probe
Web App Attack
🇩🇪
MusicLibrary
2026-09-18 03:15:52
(1 hour ago)
Attempted access to sensitive configuration files (.env, .git, etc.)
Bad Web Bot
Web App Attack
🇩🇪
SiyCah
2026-09-18 03:00:02
(1 hour ago)
IP banned by fail2ban; banned in jail apache-modsecurity. Report generated by fail2abuseipdb.
Hacking
Brute-Force
Web App Attack
🇬🇧
andypiper
2026-09-18 01:01:37
(3 hours ago)
CrowdSec ban for AbuseIPDB Top List
Brute-Force
Web App Attack
🇵🇱
Budyn
2026-09-18 00:13:12
(4 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: beta.astropot.online | URI: /.git/config | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇬🇧
foxxelabs
2026-09-17 23:46:16
(4 hours ago)
Automated report from FoxxeLabs Sentinel. Path probed: /.git/config | Project: anseo | Reason(s): Kn ...
show more
Automated report from FoxxeLabs Sentinel. Path probed: /.git/config | Project: anseo | Reason(s): Known exploit path: /.git/config; AbuseIPDB score: 100/100 | User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.3
show less
Web App Attack
🇺🇸
oralunal
2026-09-17 23:42:38
(4 hours ago)
IP banned by Fail2Ban in jail ah-suss access.log mvfnds
...
Bad Web Bot
Web App Attack
🇷🇴
iulianh
2026-09-17 23:41:30
(4 hours ago)
80,443
Brute-Force
SSH
2026-09-17 23:22:02
(5 hours ago)
Bot / scanning and/or hacking attempts: POST / HTTP/1.1, GET /.git/config HTTP/1.1
Hacking
Web App Attack
🇩🇪
FeG Deutschland
2026-09-17 21:29:05
(6 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247
Exploited Host
Web App Attack
🇭🇺
szasa
2026-09-17 14:28:24
(13 hours ago)
2026/09/17 16:28:21 [error] 1637722#1637722: *5116301 access forbidden by rule, client: 34.158.153.7 ...
show more
2026/09/17 16:28:21 [error] 1637722#1637722: *5116301 access forbidden by rule, client: 34.158.153.75, server: datamentor.hu, request: "GET /.git/config HTTP/1.1", host: "beszerzokozpont.hu"
2026/09/17 16:28:22 [error] 1637722#1637722: *5116301 access forbidden by rule, client: 34.158.153.75, server: datamentor.hu, request: "GET /.env HTTP/1.1", host: "beszerzokozpont.hu"
2026/09/17 16:28:24 [error] 1637722#1637722: *5116301 access forbidden by rule, client: 34.158.153.75, server: datamentor.hu, request: "GET /app/.env HTTP/1.1", host: "beszerzokozpont.hu"
2026/09/17 16:28:24 [error] 1637722#1637722: *5116301 access forbidden by rule, client: 34.158.153.75, server: datamentor.hu, request: "GET /apps/.env HTTP/1.1", host: "beszerzokozpont.hu"
...
show less
Web App Attack
🇳🇱
Webhoster
2026-09-17 14:23:44
(13 hours ago)
CrowdSec detected crowdsecurity/http-sensitive-files on a monitored service.
Web App Attack