🇩🇪
ghostwarriors
2026-11-11 11:50:06
UTC ·
(5 hours ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
🇩🇪
throny
2026-11-11 11:32:53
UTC ·
(6 hours ago)
Bad web bot on a honeypot: ignored robots.txt (Disallow: /) and kept crawling without browser behaviour.
Requests within an hour: 4 on 1 host(s)
User agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome ...
show more
Bad web bot on a honeypot: ignored robots.txt (Disallow: /) and kept crawling without browser behaviour.
Requests within an hour: 4 on 1 host(s)
User agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.
Requested, e.g.:
- ldap.[REDACTED]/
show less
Bad Web Bot
🇫🇷
Murazaki
2026-11-11 11:30:54
UTC ·
(6 hours ago)
ldap.balamb.fr 34.32.70.180 - - [11/Nov/2026:12:30:52 +0100] "GET /mailer/.env HTTP/1.1" 403 13527 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "172.22.0.24:9000"
ldap.balamb.fr 34.32.70. ...
show more
ldap.balamb.fr 34.32.70.180 - - [11/Nov/2026:12:30:52 +0100] "GET /mailer/.env HTTP/1.1" 403 13527 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "172.22.0.24:9000"
ldap.balamb.fr 34.32.70.180 - - [11/Nov/2026:12:30:52 +0100] "GET /mail/.env HTTP/1.1" 403 13518 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "[fc00:db8:2::17]:9000"
ldap.balamb.fr 34.32.70.180 - - [11/Nov/2026:12:30:52 +0100] "GET /mailing/.env HTTP/1.1" 403 13528 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "172.22.0.24:9000"
ldap.balamb.fr 34.32.70.180 - - [11/Nov/2026:12:30:54 +0100] "GET /mailgun/.env HTTP/1.1" 403 13521 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "172.22.0.24:9000"
ldap.balamb.fr 34.32.70.180 - - [11/Nov/2026:12:30:54 +0100] "GET /mailjet/.env HTTP/1.1" 4
...
show less
Bad Web Bot
🇵🇱
Budyn
2026-11-11 11:30:15
UTC ·
(6 hours ago)
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: ldap.astropot.space | Path: /.env.backup | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x ...
show more
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: ldap.astropot.space | Path: /.env.backup | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | Request: [Empty / GET Request]
show less
Hacking
Web App Attack
🇨🇦
Sakusen
2026-11-11 11:29:17
UTC ·
(6 hours ago)
Automated web attack: 277 reqs, 267 paths probed, 232 returned 404; probed: 206 .env, 44 .php, 9 .json, 4 secret, 2 other, 1 .git, 1 cloud-cred
Hacking
Bad Web Bot
Web App Attack
🇭🇺
miszterx.hu
2026-11-11 08:12:58
UTC ·
(9 hours ago)
XORP (haproxy): 250x HTTP 404/403/500 or handshake failure in 24h. Automated report from log_check_iptables_generator.sh (xorp.hu)
Web App Attack
🇫🇷
j-tap
2026-11-11 03:41:29
UTC ·
(14 hours ago)
WordPress honeypot: automated scanner (xmlrpc / installer / .env / direct login POST)
Web App Attack
🇦🇺
artful
2026-11-11 03:14:00
UTC ·
(14 hours ago)
Excessive errors ~1k in recent hours
Web App Attack
🇩🇪
marten_o
2026-11-11 02:14:35
UTC ·
(15 hours ago)
34.32.70.180 - - [11/Nov/2026:03:14:35 +0100] "GET /tmp/phpinfo.php HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 334 458
...
Web App Attack
🇺🇸
MatCat
2026-11-10 16:05:11
UTC ·
(1 day ago)
Banned by fail2ban: apache-noscript, apache-webprobe
Port Scan
Hacking
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-11-10 14:16:50
UTC ·
(1 day ago)
20 attempts against mh-misbehave-ban on ozone
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-11-10 14:03:56
UTC ·
(1 day ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-197)
Hacking
Web App Attack
🇺🇸
entangled_mongoose
2026-11-10 12:00:40
UTC ·
(1 day ago)
Probed /info.php.
Web App Attack
🇫🇷
Murazaki
2026-11-10 11:51:19
UTC ·
(1 day ago)
mastodon.balamb.fr 34.32.70.180 - - [10/Nov/2026:12:51:16 +0100] "GET /mailer/.env HTTP/1.1" 404 1796 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "172.22.0.15:80"
mastodon.balamb.fr 34.3 ...
show more
mastodon.balamb.fr 34.32.70.180 - - [10/Nov/2026:12:51:16 +0100] "GET /mailer/.env HTTP/1.1" 404 1796 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "172.22.0.15:80"
mastodon.balamb.fr 34.32.70.180 - - [10/Nov/2026:12:51:16 +0100] "GET /mail/.env HTTP/1.1" 404 1796 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "172.22.0.15:80"
mastodon.balamb.fr 34.32.70.180 - - [10/Nov/2026:12:51:17 +0100] "GET /mailing/.env HTTP/1.1" 404 1796 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "172.22.0.15:80"
mastodon.balamb.fr 34.32.70.180 - - [10/Nov/2026:12:51:18 +0100] "GET /mailgun/.env HTTP/1.1" 404 1796 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "172.22.0.15:80"
mastodon.balamb.fr 34.32.70.180 - - [10/Nov/2026:12:51:18 +0100] "GET /mailjet/.env HTTP/1.1
...
show less
Bad Web Bot
🇬🇧
consul.to
2026-11-10 10:18:09
UTC ·
(1 day ago)
Web attack/malicious scanning detected
Web App Attack