🇵🇱
Budyn
2026-11-14 09:07:14
UTC ·
(3 hours ago)
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: metrics.astropot.store | Path: /.env | User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 14_ ...
show more
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: metrics.astropot.store | Path: /.env | User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 14_7_2) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Safari/605.1.15 | Request: [Empty / GET Request]
show less
Hacking
Web App Attack
🇸🇪
vaia.cloud
2026-11-14 06:25:02
UTC ·
(6 hours ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack
🇸🇪
vaia.cloud
2026-11-14 01:25:02
UTC ·
(11 hours ago)
crowdsecurity/http-probing
Brute-Force
Web App Attack
🇳🇱
homeshowdomain.nl
2026-11-13 23:02:19
UTC ·
(13 hours ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-11-12.
Web App Attack
SSH
Hacking
🇵🇱
Budyn
2026-11-13 19:49:11
UTC ·
(16 hours ago)
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: shop.astropot.tech | Path: /.env | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) Appl ...
show more
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: shop.astropot.tech | Path: /.env | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | Request: [Empty / GET Request]
show less
Hacking
Web App Attack
🇵🇱
Budyn
2026-11-13 17:22:14
UTC ·
(19 hours ago)
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: cache.teddypot.online | Path: /.env | User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 14_7 ...
show more
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: cache.teddypot.online | Path: /.env | User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 14_7_2) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Safari/605.1.15 | Request: [Empty / GET Request]
show less
Hacking
Web App Attack
🇧🇾
lns.bz
2026-11-13 14:34:36
UTC ·
(22 hours ago)
.env scanning [BY]
Web App Attack
🇳🇱
Site.eu
2026-11-13 07:52:45
UTC ·
(1 day ago)
Scanning for secret files (.env, .git, credentials, config backups)
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-11-13 06:00:58
UTC ·
(1 day ago)
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: mail.teddypot.website | Path: /.env | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) A ...
show more
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: mail.teddypot.website | Path: /.env | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 Edg/130.0.0.0 | Request: [Empty / GET Request]
show less
Hacking
Web App Attack
Anonymous
2026-11-13 03:55:37
UTC ·
(1 day ago)
Aggressive web scan
Web App Attack
🇵🇱
Budyn
2026-11-13 01:35:48
UTC ·
(1 day ago)
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: apm.dont-eat-the-pudding.xyz | Path: /.env | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; ...
show more
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: apm.dont-eat-the-pudding.xyz | Path: /.env | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 Edg/130.0.0.0 | Request: [Empty / GET Request]
show less
Hacking
Web App Attack
Anonymous
2026-11-13 00:38:17
UTC ·
(1 day ago)
WebApp attacks
Hacking
Web App Attack
🇵🇱
Budyn
2026-11-12 21:22:42
UTC ·
(1 day ago)
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: staging.astropot.space | Path: /.env | User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 18_1 li ...
show more
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: staging.astropot.space | Path: /.env | User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 18_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Mobile/15E148 Safari/604.1 | Request: [Empty / GET Request]
show less
Hacking
Web App Attack
🇵🇱
Budyn
2026-11-12 19:03:14
UTC ·
(1 day ago)
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: git.goblinpot.tech | Path: /.env | User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 18_1 like M ...
show more
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: git.goblinpot.tech | Path: /.env | User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 18_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Mobile/15E148 Safari/604.1 | Request: [Empty / GET Request]
show less
Hacking
Web App Attack
🇳🇱
Alt255
2026-11-12 17:26:48
UTC ·
(1 day ago)
[ti-10al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.56.148.48 - - [12/Nov/2026:18:26:33 +0100] "GET /.env HTTP/1.1" 404 6296 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KH ...
show more
[ti-10al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.56.148.48 - - [12/Nov/2026:18:26:33 +0100] "GET /.env HTTP/1.1" 404 6296 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack