🇵🇱
Budyn
2026-11-07 05:59:46
UTC ·
(15 hours ago)
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: metrics.teddypot.website | Path: /.git/config | User-Agent: Mozilla/5.0 (X11; Linux x86_64) A ...
show more
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: metrics.teddypot.website | Path: /.git/config | User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | Request: [Empty / GET Request]
show less
Hacking
Web App Attack
🇵🇱
Budyn
2026-11-07 03:34:36
UTC ·
(17 hours ago)
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: metrics.teddypot.website | Path: /.git/config | User-Agent: Mozilla/5.0 (Macintosh; Intel Mac ...
show more
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: metrics.teddypot.website | Path: /.git/config | User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | Request: [Empty / GET Request]
show less
Hacking
Web App Attack
🇫🇷
Murazaki
2026-11-06 16:31:10
UTC ·
(1 day ago)
muc.chat.balamb.fr 34.186.208.160 - - [06/Nov/2026:17:31:07 +0100] "GET /mailer/.env HTTP/1.1" 503 592 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
muc.chat.balamb.fr ...
show more
muc.chat.balamb.fr 34.186.208.160 - - [06/Nov/2026:17:31:07 +0100] "GET /mailer/.env HTTP/1.1" 503 592 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
muc.chat.balamb.fr 34.186.208.160 - - [06/Nov/2026:17:31:07 +0100] "GET /mail/.env HTTP/1.1" 503 592 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
muc.chat.balamb.fr 34.186.208.160 - - [06/Nov/2026:17:31:08 +0100] "GET /mailing/.env HTTP/1.1" 503 592 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
muc.chat.balamb.fr 34.186.208.160 - - [06/Nov/2026:17:31:10 +0100] "GET /mailgun/.env HTTP/1.1" 503 592 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
muc.chat.balamb.fr 34.186.208.160 - - [06/Nov/2026:17:31:10 +0100] "GET /mai
...
show less
Bad Web Bot
🇫🇷
Catalin Negru
2026-11-06 14:43:26
UTC ·
(1 day ago)
Recidive ban by fail2ban on server.blackbit.ro
Brute-Force
🇯🇵
ma2yeah
2026-11-06 14:36:15
UTC ·
(1 day ago)
34.186.208.160 - - [06/Nov/2026:23:36:14 +0900] "GET /.env HTTP/1.1" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" GeoIP: CA
...
Bad Web Bot
Web App Attack
🇳🇱
e.fierstra
2026-11-06 12:49:12
UTC ·
(1 day ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇩🇪
snhosting
2026-11-06 11:41:48
UTC ·
(1 day ago)
34.186.208.160 - - [06/Nov/2026:12:41:34 +0100] "POST / HTTP/1.1" 404 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.186.208.160 - - [06/Nov/2026:12:41:34 +0100] "POST / HTTP/1.1" 404 ...
show more
34.186.208.160 - - [06/Nov/2026:12:41:34 +0100] "POST / HTTP/1.1" 404 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.186.208.160 - - [06/Nov/2026:12:41:34 +0100] "POST / HTTP/1.1" 404 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.186.208.160 - - [06/Nov/2026:12:41:34 +0100] "POST / HTTP/1.1" 404 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.186.208.160 - - [06/Nov/2026:12:41:34 +0100] "GET /.git/config HTTP/1.1" 200 1610 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.186.208.160 - - [06/Nov/2026:12:41:34 +0100] "POST / HTTP/1.1" 404 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
🇺🇦
URAN Publishing Service
2026-11-06 10:04:57
UTC ·
(1 day ago)
[06/Nov/2026:12:04:57 +0200] -- 34.186.208.160 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.git/config HTTP/1.1
Bad Web Bot
Web App Attack
🇺🇸
francelink.fr
2026-11-06 00:26:21
UTC ·
(1 day ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-05T10:06:15.000Z.
Web App Attack
🇮🇹
VHosting
2026-11-05 21:20:04
UTC ·
(2 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇩🇪
Roper123
2026-11-05 17:47:39
UTC ·
(2 days ago)
Web exploits
Web App Attack
Anonymous
2026-11-05 17:38:54
UTC ·
(2 days ago)
34.186.208.160 mail.rolistore.com - [05/Nov/2026:11:38:53 -0600] "GET / HTTP/1.1" 403 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"\n34.186.208.160 mail.rolistore.com - ...
show more
34.186.208.160 mail.rolistore.com - [05/Nov/2026:11:38:53 -0600] "GET / HTTP/1.1" 403 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"\n34.186.208.160 mail.rolistore.com - [05/Nov/2026:11:38:53 -0600] "POST / HTTP/1.1" 403 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"\n34.186.208.160 mail.rolistore.com - [05/Nov/2026:11:38:53 -0600] "POST / HTTP/1.1" 403 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"\n34.186.208.160 mail.rolistore.com - [05/Nov/2026:11:38:53 -0600] "POST / HTTP/1.1" 403 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"\n34.186.208.160 mail.rolistore.com - [05/Nov/2026:11:38:53 -0600] "GET /.git/config HTTP/1.1" 403 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac O
show less
DDoS Attack
Web App Attack
🇳🇱
Alt255
2026-11-05 17:38:40
UTC ·
(2 days ago)
[ti-07al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.186.208.160 - - [05/Nov/2026:18:38:23 +0100] "GET /.git/config HTTP/1.1" 404 2125 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWe ...
show more
[ti-07al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.186.208.160 - - [05/Nov/2026:18:38:23 +0100] "GET /.git/config HTTP/1.1" 404 2125 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
francelink.fr
2026-11-05 10:07:31
UTC ·
(2 days ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-05T10:06:10.000Z.
Web App Attack
🇦🇺
Klaverstyn
2026-11-05 10:01:02
UTC ·
(2 days ago)
Cross-vhost secrets/RCE probing campaign
Web App Attack
Hacking