๐จ๐ฆ
Vianpyro
2026-09-29 10:47:56
(2 weeks ago)
Honeypot: 263 request(s) in 0 min. Paths: /, /.env, /.env.backup, /.env.backup1, /.env.backup2. Meth ...
show more
Honeypot: 263 request(s) in 0 min. Paths: /, /.env, /.env.backup, /.env.backup1, /.env.backup2. Method(s): GET, POST. UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/13. ASN: 396982 (Google LLC).
show less
Hacking
Brute-Force
Bad Web Bot
Web App Attack
๐ธ๐ช
vaia.cloud
2026-09-29 06:50:03
(2 weeks ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
๐ต๐ฑ
Budyn
2026-09-29 05:04:32
(2 weeks ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: dev.teddypot.cloud | URI: /.git/config | UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-29 00:59:48
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.39.117.244 (244.117.39.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.39.117.244 (244.117.39.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 20:59:41.558742 2026] [security2:error] [pid 22048:tid 22048] [client 34.39.117.244:54532] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.bazzoli.com"] [uri "/.git/config"] [unique_id "arsNfc-adnpthZIpNkxlVAAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-28 20:44:44
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.39.117.244 (244.117.39.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.39.117.244 (244.117.39.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 16:44:40.637758 2026] [security2:error] [pid 12117:tid 12117] [client 34.39.117.244:49176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jeanboomergrenier.com"] [uri "/.git/config"] [unique_id "arrRuL3SLZTh3htBzP9tewAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
LRob
2026-09-28 16:25:39
(2 weeks ago)
Secret file probe | method: GET | path: /.git/config, /.env, /.env.local (+17 more) | ua: Mozilla/5. ...
show more
Secret file probe | method: GET | path: /.git/config, /.env, /.env.local (+17 more) | ua: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
show less
Hacking
Web App Attack
๐ฉ๐ช
FD-IX
2026-09-28 13:44:47
(2 weeks ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
๐ฉ๐ช
pltcldvlpr
2026-09-28 04:29:29
(2 weeks ago)
CMS/framework probe: 34.39.117.244 - - [28/Sep/2026:06:29:28 +0200] "GET /wp-json/gravitysmtp/v1/tes ...
show more
CMS/framework probe: 34.39.117.244 - - [28/Sep/2026:06:29:28 +0200] "GET /wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0 Safari/537.36" asn=396982 org="Google LLC" country=GB
...
show less
Web App Attack
๐ณ๐ฑ
Alt255
2026-09-28 02:33:23
(2 weeks ago)
[ti-17al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-17al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.39.117.244 - - [28/Sep/2026:04:33:11 +0200] "GET /.git/config HTTP/1.1" 404 765 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
Anonymous
2026-09-27 16:00:40
(2 weeks ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
๐บ๐ฆ
Olexiy Backend
2026-09-27 14:51:42
(2 weeks ago)
34.39.117.244
...
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-26 19:30:46
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.39.117.244 (244.117.39.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.39.117.244 (244.117.39.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 15:30:42.209342 2026] [security2:error] [pid 14358:tid 14379] [client 34.39.117.244:34120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ceol.com"] [uri "/.git/config"] [unique_id "argdYrNK5yD0qkHE3RCfTwAAAJM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
e.fierstra
2026-09-26 06:17:38
(2 weeks ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
๐ฉ๐ช
akasolutions.de
2026-09-24 14:37:52
(2 weeks ago)
(mod_security) mod_security triggered on hostname [redacted] 34.39.117.244 (GB/United Kingdom/244.11 ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.39.117.244 (GB/United Kingdom/244.117.39.34.bc.googleusercontent.com)
show less
SQL Injection
๐ฌ๐ง
consul.to
2026-09-22 08:51:02
(3 weeks ago)
Web attack/malicious scanning detected
Web App Attack