🇵🇱
Budyn
2026-11-13 16:28:45
UTC ·
(57 minutes ago)
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: forum.sweetpuddingtrap.online | Path: /.git/config | User-Agent: Mozilla/5.0 (Macintosh; Inte ...
show more
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: forum.sweetpuddingtrap.online | Path: /.git/config | User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | Request: [Empty / GET Request]
show less
Hacking
Web App Attack
🇮🇹
VHosting
2026-11-13 16:20:04
UTC ·
(1 hour ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇺🇸
dot.mg
2026-11-13 16:14:08
UTC ·
(1 hour ago)
Scan of vulnerable files
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 15:54:07
UTC ·
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 34.179.151.39 (39.151.179.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 10:53:59.565952 2026] [security2:error] [pid 14535:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.179.151.39 (39.151.179.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 10:53:59.565952 2026] [security2:error] [pid 14535:tid 14598] [client 34.179.151.39:51138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "forum.reviewweaver.app"] [uri "/.git/config"] [unique_id "avcyl8rTOtyTVyjnEuztlAAAAVg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
melroy89
2026-11-13 15:02:13
UTC ·
(2 hours ago)
34.179.151.39 - - [13/Nov/2026:16:01:18 +0100] "GET / HTTP/1.1" 403 9 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "forum.moneytips.nl" 0.000
34.179.151.39 - - [13/Nov/2026:16: ...
show more
34.179.151.39 - - [13/Nov/2026:16:01:18 +0100] "GET / HTTP/1.1" 403 9 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "forum.moneytips.nl" 0.000
34.179.151.39 - - [13/Nov/2026:16:01:18 +0100] "POST / HTTP/1.1" 403 9 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "forum.moneytips.nl" 0.005
34.179.151.39 - - [13/Nov/2026:16:01:18 +0100] "POST / HTTP/1.1" 403 9 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "forum.moneytips.nl" 0.010
34.179.151.39 - - [13/Nov/2026:16:01:18 +0100] "POST / HTTP/1.1" 403 9 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "forum.moneytips.nl" 0.054
34.179.151.39 - - [13/Nov/2026:16:01:18 +0100] "POST / HTTP/1.1" 403 9 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/53
...
show less
Web App Attack
🇩🇪
LRob
2026-11-13 14:35:35
UTC ·
(2 hours ago)
Secret file probe | method: GET | path: /.git/config, /.env, /.env.local (+16 more) | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Hacking
Web App Attack
🇫🇮
toolbit.online
2026-11-13 14:10:07
UTC ·
(3 hours ago)
Automated web scanning activity observed - 11 suspicious requests targeting administrative, sensitive, or commonly exposed endpoints within 4 seconds. Auto-banned by CrowdSec.
Bad Web Bot
Web App Attack
🇫🇷
Stara
2026-11-13 13:54:39
UTC ·
(3 hours ago)
ModSecurity detected web attack - .env/config probing or SQLi/Code injection (Rule 949110)
Brute-Force
Hacking
Web App Attack
🇩🇪
fleckenbase
2026-11-13 13:45:30
UTC ·
(3 hours ago)
apache-noscript
...
Brute-Force
Web App Attack
🇳🇱
Site.eu
2026-11-13 13:22:03
UTC ·
(4 hours ago)
Scanning for secret files (.env, .git, credentials, config backups)
Bad Web Bot
Web App Attack
🇩🇪
loebas
2026-11-13 12:53:06
UTC ·
(4 hours ago)
[4xx]Probing for non existant files, or client not authorized
Hacking
Bad Web Bot
Web App Attack
🇩🇪
konseptit
2026-11-13 12:51:25
UTC ·
(4 hours ago)
(mod_security) mod_security triggered on hostname [redacted] 34.179.151.39 (DE/Germany/39.151.179.34.bc.googleusercontent.com)
SQL Injection
🇵🇱
Budyn
2026-11-13 12:36:09
UTC ·
(4 hours ago)
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: forum.astropot.online | Path: /.git/config | User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS ...
show more
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: forum.astropot.online | Path: /.git/config | User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | Request: [Empty / GET Request]
show less
Hacking
Web App Attack
🇵🇱
stareradia.pl
2026-11-13 11:55:32
UTC ·
(5 hours ago)
[Fri Nov 13 12:55:31.849443 2026] [php:error] [pid 1550469:tid 1550469] [client 34.179.151.39:0] script '/var/www/html/phpinfo.php' not found or unable to stat
[Fri Nov 13 12:55:31.887204 2026] [php:error] [pid 1553581:tid 1553581] [client 34.179.151 ...
show more
[Fri Nov 13 12:55:31.849443 2026] [php:error] [pid 1550469:tid 1550469] [client 34.179.151.39:0] script '/var/www/html/phpinfo.php' not found or unable to stat
[Fri Nov 13 12:55:31.887204 2026] [php:error] [pid 1553581:tid 1553581] [client 34.179.151.39:0] script '/var/www/html/info.php' not found or unable to stat
[Fri Nov 13 12:55:31.928102 2026] [php:error] [pid 1546121:tid 1546121] [client 34.179.151.39:0] script '/var/www/html/php.php' not found or unable to stat
[Fri Nov 13 12:55:31.985555 2026] [php:error] [pid 1553442:tid 1553442] [client 34.179.151.39:0] script '/var/www/html/i.php' not found or unable to stat
...
show less
Web App Attack
🇩🇪
Callum
2026-11-13 11:53:46
UTC ·
(5 hours ago)
probing for exposed files and admin pages: 476 attempts within 4 minutes, seen by web server log
Web App Attack