๐ต๐ฑ
Budyn
2026-10-26 06:37:08
(1 day ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: metrics.teddypot.website | URI: /.git/config | UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | BODY: [Empty / GET Request] | HEADERS: {"X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"CL","Cf-Connecting-Ip":"34.176.237.25","Cdn-Loop":"cloudflare; loops=1","Connection":"Keep-Alive","Cf-Ray":"a507735d1a4fa160-GRU","Accept-Encoding":"gzip, br","Accept":"*\/*","Next-Action":"x","X-Nextjs-Request-Id":"d
show less
Hacking
Web App Attack
๐บ๐ฆ
URAN Publishing Service
2026-10-26 05:32:39
(1 day ago)
[26/Oct/2026:07:32:39 +0200] -- 34.176.237.25 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.git ...
show more
[26/Oct/2026:07:32:39 +0200] -- 34.176.237.25 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.git/config HTTP/1.1
show less
Bad Web Bot
Web App Attack
๐ง๐ท
Peregrine
2026-10-26 03:18:17
(1 day ago)
Fail2Ban Jail:IU tomcat-honeypot | Evidence: 34.176.237.25 104.22.10.214 - - [24/Oct/2026:03:03:14 - ...
show more
Fail2Ban Jail:IU tomcat-honeypot | Evidence: 34.176.237.25 104.22.10.214 - - [24/Oct/2026:03:03:14 -0300] "GET /.git/config HTTP/1.1" 404 -
show less
Bad Web Bot
๐ฉ๐ช
Hazzard
2026-10-25 22:44:21
(1 day ago)
(mod_security) mod_security triggered on hostname [redacted]): (CF_ENABLE)
SQL Injection
๐ต๐ฑ
Budyn
2026-10-25 11:30:42
(2 days ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: grafana.astropot.online | URI: /.git/config | UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | BODY: [Empty / GET Request] | HEADERS: {"X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"CL","Cf-Connecting-Ip":"34.176.237.25","Cdn-Loop":"cloudflare; loops=1","Connection":"Keep-Alive","Cf-Ray":"a500e405b8d1abfb-GRU","Accept-Encoding":"gzip, br","Accept":"*\/*","Next-Action":"x","X-Nextjs-Request-Id":"18
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
alecj.com
2026-10-25 11:28:26
(2 days ago)
This IP was detected by CrowdSec triggering crowdsecurity/appsec-vpatch
Web App Attack
๐ช๐ธ
librebit
2026-10-25 06:57:16
(2 days ago)
Brute force
Brute-Force
๐ท๐ด
clauss
2026-10-24 17:18:33
(2 days ago)
34.176.237.25 - - [24/Oct/2026:20:18:32 +0300] "GET /phpinfo.php HTTP/2.0" 404 20 "-" "Mozilla/5.0 ( ...
show more
34.176.237.25 - - [24/Oct/2026:20:18:32 +0300] "GET /phpinfo.php HTTP/2.0" 404 20 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.176.237.25 - - [24/Oct/2026:20:18:33 +0300] "GET /info.php HTTP/2.0" 404 20 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-24 17:07:34
(3 days ago)
[cb-05al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[cb-05al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.176.237.25 - - [24/Oct/2026:19:07:12 +0200] "GET /.git/config HTTP/1.1" 404 2125 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
francelink.fr
2026-10-24 11:00:24
(3 days ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-24T02:54:25.000Z.
Web App Attack
๐ฉ๐ช
netclix.gr
2026-10-24 07:59:17
(3 days ago)
(mod_security) mod_security triggered on hostname [redacted] 34.176.237.25 (CL/Chile/25.237.176.34.b ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.176.237.25 (CL/Chile/25.237.176.34.bc.googleusercontent.com)
show less
SQL Injection
Anonymous
2026-10-24 07:18:36
(3 days ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
๐ณ๐ฑ
Site.eu
2026-10-24 06:59:12
(3 days ago)
Excessive multi-domain requests
Brute-Force
๐ณ๐ฑ
middelkoopcc
2026-10-24 06:32:01
(3 days ago)
2026-10-24 08:30:06 GET /.git/config [301] && 2026-10-24 08:30:07 GET /.env [301] && 2026-10-24 08:3 ...
show more
2026-10-24 08:30:06 GET /.git/config [301] && 2026-10-24 08:30:07 GET /.env [301] && 2026-10-24 08:30:09 GET /.env.bak [301] && 143 more within 20 minutes
show less
Web App Attack
๐ณ๐ฑ
e.fierstra
2026-10-24 06:19:22
(3 days ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack