🇵🇱
Budyn
2026-11-10 04:13:12
UTC ·
(1 hour ago)
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: kibana.astropot.online | Path: /.git/config | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64 ...
show more
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: kibana.astropot.online | Path: /.git/config | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | Request: [Empty / GET Request]
show less
Hacking
Web App Attack
🇨🇦
CentiDevOps
2026-11-10 03:21:51
UTC ·
(2 hours ago)
Web app scan: 29 requests in 2 s across 3 domains (301). Paths: /.git/config, /.env, /.env.development (+4 more). Sample: 2026-11-10T03:21:51Z "GET /.git/config" 301
Hacking
Web App Attack
🇵🇹
NunoAJAniceto
2026-11-10 01:00:51
UTC ·
(5 hours ago)
Guardman 24h daily audit high-confidence exploit conviction (score=85)
Brute-Force
Web App Attack
🇳🇱
Alt255
2026-11-09 12:09:37
UTC ·
(17 hours ago)
[cb-01vi] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.176.173.135 - - [09/Nov/2026:13:09:16 +0100] "GET /.git/config HTTP/1.1" 404 339 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWeb ...
show more
[cb-01vi] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.176.173.135 - - [09/Nov/2026:13:09:16 +0100] "GET /.git/config HTTP/1.1" 404 339 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇦🇺
Klaverstyn
2026-11-08 23:08:49
UTC ·
(1 day ago)
Persistent attacker, repeat offender
Hacking
🇦🇺
screwlooseit.com.au
2026-11-08 17:15:09
UTC ·
(1 day ago)
Blocked by CSF 13 firewall - Rule: config-dotfile
US/United States/135.173.176.34.bc.googleusercontent.com
Web App Attack
🇩🇪
FD-IX
2026-11-08 04:42:13
UTC ·
(2 days ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-11-07 23:25:02
UTC ·
(2 days ago)
[ti-11al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.176.173.135 - - [08/Nov/2026:00:24:50 +0100] "GET /.git/config HTTP/1.1" 301 514 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTM ...
show more
[ti-11al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.176.173.135 - - [08/Nov/2026:00:24:50 +0100] "GET /.git/config HTTP/1.1" 301 514 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇩🇪
gadix
2026-11-07 22:12:16
UTC ·
(2 days ago)
[07/Nov/2026:23:12:12.435834 +0100] au-iPBLCzd3esIrQ4z1krAAAAFY 34.176.173.135 56178 127.0.0.1 7081
[07/Nov/2026:23:12:13.440201 +0100] au-iPRLCzd3esIrQ4z1krQAAAE8 34.176.173.135 56186 127.0.0.1 7081
[07/Nov/2026:23:12:13.709582 +0100] au-iPXdyF2Pii5 ...
show more
[07/Nov/2026:23:12:12.435834 +0100] au-iPBLCzd3esIrQ4z1krAAAAFY 34.176.173.135 56178 127.0.0.1 7081
[07/Nov/2026:23:12:13.440201 +0100] au-iPRLCzd3esIrQ4z1krQAAAE8 34.176.173.135 56186 127.0.0.1 7081
[07/Nov/2026:23:12:13.709582 +0100] au-iPXdyF2Pii5tKQZn3fgAAAAA 34.176.173.135 50704 127.0.0.1 7081
...
show less
Web App Attack
🇳🇱
ConsulHosting
2026-11-07 21:53:51
UTC ·
(2 days ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
🇩🇪
FeG Deutschland
2026-11-07 21:00:25
UTC ·
(2 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2
Exploited Host
Web App Attack
🇭🇺
miszterx.hu
2026-11-07 15:29:03
UTC ·
(2 days ago)
XORP (haproxy): 275x HTTP 404/403/500 or handshake failure in 24h. Automated report from log_check_iptables_generator.sh (xorp.hu)
Web App Attack
🇷🇺
OK
2026-11-07 15:05:07
UTC ·
(2 days ago)
HTTP/HTTPS
Hacking
Web App Attack
🇧🇬
Ilcheff
2026-11-07 15:00:51
UTC ·
(2 days ago)
Web scan (probing for sensitive files, CrowdSec http-sensitive-files): requests from 135.173.176.34.bc.googleusercontent.com [CL, AS396982 Google LLC] to a web server.
Web App Attack
🇺🇸
helios.live
2026-11-07 14:08:39
UTC ·
(2 days ago)
2026/11/07 14:08:38 [error] 152326#152326: *84644 access forbidden by rule, client: 34.176.173.135, server: kocervpn.com, request: "GET /.git/config HTTP/1.1", host: "kocervpn.com"
2026/11/07 14:08:38 [error] 152326#152326: *84642 access forbidden by ...
show more
2026/11/07 14:08:38 [error] 152326#152326: *84644 access forbidden by rule, client: 34.176.173.135, server: kocervpn.com, request: "GET /.git/config HTTP/1.1", host: "kocervpn.com"
2026/11/07 14:08:38 [error] 152326#152326: *84642 access forbidden by rule, client: 34.176.173.135, server: kocervpn.com, request: "GET /.env HTTP/1.1", host: "kocervpn.com"
2026/11/07 14:08:39 [error] 152326#152326: *84644 access forbidden by rule, client: 34.176.173.135, server: kocervpn.com, request: "GET /.env.local HTTP/1.1", host: "kocervpn.com"
2026/11/07 14:08:39 [error] 152326#152326: *84644 access forbidden by rule, client: 34.176.173.135, server: kocervpn.com, request: "GET /.env.production HTTP/1.1", host: "kocervpn.com"
2026/11/07 14:08:39 [error] 152326#152326: *84644 access forbidden by rule, client: 34.176.173.135, server: kocervpn.com, request: "GET /.env.staging HTTP/1.1", host: "kocervpn.com"
...
show less
Web App Attack