Anonymous
2026-10-19 04:48:50
(19 hours ago)
MikroTik Enterprise Honeypot
Port Scan
๐ฉ๐ช
DyhnenTv
2026-10-13 01:15:39
(6 days ago)
CrowdSec webserver: crowdsecurity/http-probing
Web App Attack
Bad Web Bot
๐ฉ๐ช
webanyone
2026-10-13 00:53:15
(6 days ago)
Wordlist path sweep | method: GET, POST | path: /ksqzbmynj7uux91587qe, /webpack-stats.json, /lib/ter ...
show more
Wordlist path sweep | method: GET, POST | path: /ksqzbmynj7uux91587qe, /webpack-stats.json, /lib/terminal-xhr.php (+3 more) | ua: Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/), Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36, Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user) (+1 more)
show less
Port Scan
Web App Attack
๐ซ๐ท
security.rdmc.fr
2026-10-12 23:24:19
(1 week ago)
Web scan: multiple 4xx responses
Web App Attack
Bad Web Bot
๐ซ๐ท
j-tap
2026-10-12 23:11:46
(1 week ago)
WordPress honeypot: automated scanner (xmlrpc / installer / .env / direct login POST)
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-12 18:56:57
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.179.174.165 (165.174.179.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.179.174.165 (165.174.179.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 14:56:52.626765 2026] [security2:error] [pid 9152:tid 9152] [client 34.179.174.165:33972] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.asiabeef.network"] [uri "/static//.env"] [unique_id "as0tdHvDYP1Zib1xUOY4rwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-12 16:05:18
(1 week ago)
Web Probe / Attack
Web App Attack
Anonymous
2026-10-12 14:30:04
(1 week ago)
| Multiple common web attacks from same source ip. (multiple servers)
Web App Attack
Hacking
SQL Injection
๐ช๐ธ
robotstxt
2026-10-12 14:08:50
(1 week ago)
34.179.174.165 - - [12/Oct/2026:14:07:47 +0000] "GET /robots.txt HTTP/2.0" 403 189 "https://wp-confi ...
show more
34.179.174.165 - - [12/Oct/2026:14:07:47 +0000] "GET /robots.txt HTTP/2.0" 403 189 "https://wp-config.pro/robots.txt" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" "-" edge="34.179.174.165"
34.179.174.165 - - [12/Oct/2026:14:07:47 +0000] "GET /forgot-password HTTP/2.0" 403 165 "https://wp-config.pro/forgot-password" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" "-" edge="34.179.174.165"
34.179.174.165 - - [12/Oct/2026:14:07:47 +0000] "GET /v7j3dhwtahdnh9l70t0b HTTP/2.0" 403 189 "https://wp-config.pro/v7j3dhwtahdnh9l70t0b" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)" "-" edge="34.179.174.165"
34.179.174.165 - - [12/Oct/2026:14:07:47 +0000] "GET /auth/login HTTP/2.0" 403 165 "https://wp-config.pro/auth/login" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" "-" edge="34.179.174.165"
34.179.174.165 - - [12/Oct/2026:14:
...
show less
Web App Attack
๐ซ๐ท
Quarks Solutions
2026-10-12 13:02:15
(1 week ago)
crowdsecurity/appsec-vpatch
Web App Attack
๐บ๐ธ
Mundo Bueno
2026-10-12 12:51:45
(1 week ago)
[ISILIA Protection v2.3] Tentative d'accรจs: /.env.staging.local [RATE LIMITED - 1800s quarantine] | ...
show more
[ISILIA Protection v2.3] Tentative d'accรจs: /.env.staging.local [RATE LIMITED - 1800s quarantine] | Pays: DE | UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptb
show less
Hacking
Web App Attack
๐ซ๐ท
UnixPrime
2026-10-12 12:50:43
(1 week ago)
34.179.174.165 - - [12/Oct/2026:14:50:42 +0200] "GET /docker-compose.yml HTTP/1.1" 404 4133 "-" "Moz ...
show more
34.179.174.165 - - [12/Oct/2026:14:50:42 +0200] "GET /docker-compose.yml HTTP/1.1" 404 4133 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )"
34.179.174.165 - - [12/Oct/2026:14:50:42 +0200] "GET /Dockerfile HTTP/1.1" 404 4137 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"
...
show less
Bad Web Bot
Web App Attack
Anonymous
2026-10-12 12:49:07
(1 week ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
๐ซ๐ท
regishoussin
2026-10-12 12:41:35
(1 week ago)
Automated web scanning detected by Wazuh (rule 100180): repeated 400/404 errors from mass probing of ...
show more
Automated web scanning detected by Wazuh (rule 100180): repeated 400/404 errors from mass probing of admin/backdoor paths (e.g. wp-login.php, known CMS shell filenames) on an Apache web server, on 2026-10-12 12:41 UTC.
show less
Bad Web Bot
Web App Attack
๐ณ๐ฑ
tr1n
2026-10-12 12:26:23
(1 week ago)
Triggered Cloudflare WAF (firewallManaged) from DE.
Action: BLOCK | ASN: 396982 (Google LLC) | Proto ...
show more
Triggered Cloudflare WAF (firewallManaged) from DE.
Action: BLOCK | ASN: 396982 (Google LLC) | Protocol: HTTP/2 (GET) | Endpoint: /assets../.env | Timestamp: 2026-10-12T12:26:23Z | UA: Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)
show less
Bad Web Bot