🇵🇱
strefapi_com
2026-09-19 20:26:57
(1 week ago)
Brute-force, web
...
Hacking
Brute-Force
Web App Attack
🇩🇪
maxpower
2026-09-19 20:20:22
(1 week ago)
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 34.42.125.189 (US/United States/189.125. ...
show more
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 34.42.125.189 (US/United States/189.125.42.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.42.125.189 - - [19/Sep/2026:22:20:20 +0200] "GET /wp-config.php.bak HTTP/2.0" 403 146 "-" "Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)" "-" host=mail.demomql.ovh
show less
Port Scan
🇵🇱
Budyn
2026-09-19 19:44:53
(1 week ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: login.budyn.ovh | URI: /dashboard/.env | UA: Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/) | BODY: [Empty / GET Request]
show less
Hacking
Web App Attack
🇫🇮
000rosiu
2026-09-19 18:19:03
(1 week ago)
Triggered Cloudflare WAF (firewallManaged) from US.
Action: BLOCK | Protocol: HTTP/2 (POST) | Endpoi ...
show more
Triggered Cloudflare WAF (firewallManaged) from US.
Action: BLOCK | Protocol: HTTP/2 (POST) | Endpoint: /lib/terminal-xhr.php | UA: Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler) • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇵🇱
Budyn
2026-09-19 15:18:38
(1 week ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: jenkins.budyn.ovh | URI: /wp-admin/ | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-09-19 08:22:52
(1 week ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: git.budyn.ovh | URI: /.aws/credentials | UA: Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/) | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-09-19 03:14:47
(1 week ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: elastic.budyn.ovh | URI: /dist/.vite/manifest.json | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Hacking
Web App Attack
🇫🇷
regishoussin
2026-09-18 23:30:13
(1 week ago)
Automated web scanning detected by Wazuh (rule 100241): repeated 400/404 errors from mass probing of ...
show more
Automated web scanning detected by Wazuh (rule 100241): repeated 400/404 errors from mass probing of admin/backdoor paths (e.g. wp-login.php, known CMS shell filenames) on an Apache web server, on 2026-09-18 23:30 UTC.
show less
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-09-18 22:00:50
(1 week ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: db.budyn.ovh | URI: /workspace/.env | UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot) | BODY: [Empty / GET Request]
show less
Hacking
Web App Attack
🇩🇪
www.Examensfragen.de
2026-09-18 17:05:23
(1 week ago)
Web Spam
Bad Web Bot
🇵🇱
Budyn
2026-09-18 16:02:25
(1 week ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: cloud.budyn.ovh | URI: /.aws/config | UA: Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/) | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-09-18 11:58:50
(1 week ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: backup.budyn.ovh | URI: /wp-admin/ | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇫🇷
Nop Nop
2026-09-18 08:35:26
(1 week ago)
CrowdSec ban: crowdsecurity/http-sensitive-files
Port Scan
🇫🇷
regishoussin
2026-09-18 08:13:06
(1 week ago)
Automated web scanning detected by Wazuh (rule 100241): repeated 400/404 errors from mass probing of ...
show more
Automated web scanning detected by Wazuh (rule 100241): repeated 400/404 errors from mass probing of admin/backdoor paths (e.g. wp-login.php, known CMS shell filenames) on an Apache web server, on 2026-09-18 08:13 UTC.
show less
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-09-18 07:49:45
(1 week ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: admin.budyn.ovh | URI: /deploy/.env | UA: Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html) | BODY: [Empty / GET Request]
show less
Hacking
Web App Attack
