🇫🇷
dynamix
2026-11-14 17:55:48
UTC ·
(45 minutes ago)
Multiple WAF Violations
Web App Attack
🇵🇱
Budyn
2026-11-14 14:14:10
UTC ·
(4 hours ago)
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: cpanel.teddypot.space | Path: /.env | User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 14_7 ...
show more
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: cpanel.teddypot.space | Path: /.env | User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 14_7_2) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Safari/605.1.15 | Request: [Empty / GET Request]
show less
Hacking
Web App Attack
🇵🇱
Budyn
2026-11-14 04:37:11
UTC ·
(14 hours ago)
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: idp.definitelynotahoneypot.online | Path: /.env | User-Agent: Mozilla/5.0 (Macintosh; Intel M ...
show more
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: idp.definitelynotahoneypot.online | Path: /.env | User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 14_7_2) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Safari/605.1.15 | Request: [Empty / GET Request]
show less
Hacking
Web App Attack
🇵🇱
Budyn
2026-11-14 01:19:06
UTC ·
(17 hours ago)
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: nexus.astropot.tech | Path: /.env | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) App ...
show more
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: nexus.astropot.tech | Path: /.env | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 Edg/130.0.0.0 | Request: [Empty / GET Request]
show less
Hacking
Web App Attack
🇳🇱
Site.eu
2026-11-13 19:36:02
UTC ·
(23 hours ago)
Scanning for secret files (.env, .git, credentials, config backups)
Bad Web Bot
Web App Attack
Anonymous
2026-11-13 18:05:39
UTC ·
(1 day ago)
Flagged as abuse by IisGuard automated detection (tier L5, score 90/100). Reasons: Reputation=1, BadPath=23,5, Diversity=10, CanaryOverride=90.
Web App Attack
Bad Web Bot
🇵🇱
Budyn
2026-11-13 14:34:14
UTC ·
(1 day ago)
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: k8s.teddypot.pro | Path: /.env | User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/ ...
show more
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: k8s.teddypot.pro | Path: /.env | User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0 | Request: [Empty / GET Request]
show less
Hacking
Web App Attack
🇵🇱
Budyn
2026-11-13 10:41:43
UTC ·
(1 day ago)
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: k8s.astropot.store | Path: /.env | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) Appl ...
show more
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: k8s.astropot.store | Path: /.env | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 Edg/130.0.0.0 | Request: [Empty / GET Request]
show less
Hacking
Web App Attack
Anonymous
2026-11-13 08:43:38
UTC ·
(1 day ago)
Attempted access to sensitive endpoint (/.env) detected. Automated scan or unauthorized probing.
Web App Attack
🇵🇱
Budyn
2026-11-13 05:46:19
UTC ·
(1 day ago)
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: ldap.astropot.space | Path: /.env | User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 18_1 like ...
show more
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: ldap.astropot.space | Path: /.env | User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 18_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Mobile/15E148 Safari/604.1 | Request: [Empty / GET Request]
show less
Hacking
Web App Attack
🇩🇪
Gwyneth Llewelyn
2026-11-13 04:44:59
UTC ·
(1 day ago)
2026/11/13 04:44:56 [error] 3020#3020: *489660 access forbidden by rule, client: 34.57.82.154, server: superiorinnercore.game-host.org, request: "GET /.env HTTP/1.1", host: "superiorinnercore.game-host.org"
34.57.82.154 - - [13/Nov/2026:04:44:56 +000 ...
show more
2026/11/13 04:44:56 [error] 3020#3020: *489660 access forbidden by rule, client: 34.57.82.154, server: superiorinnercore.game-host.org, request: "GET /.env HTTP/1.1", host: "superiorinnercore.game-host.org"
34.57.82.154 - - [13/Nov/2026:04:44:56 +0000] "GET /.env HTTP/1.1" 403 2599 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Mobile/15E148 Safari/604.1"
34.57.82.154 - - [13/Nov/2026:04:44:56 +0000] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0"
show less
Brute-Force
Web App Attack
Anonymous
2026-11-13 02:54:16
UTC ·
(1 day ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇳🇱
Alt255
2026-11-13 02:13:24
UTC ·
(1 day ago)
[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.57.82.154 - - [13/Nov/2026:03:13:18 +0100] "GET /.env HTTP/2.0" 404 1920 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox ...
show more
[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.57.82.154 - - [13/Nov/2026:03:13:18 +0100] "GET /.env HTTP/2.0" 404 1920 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0"
...
show less
Bad Web Bot
Web App Attack
Anonymous
2026-11-13 01:39:05
UTC ·
(1 day ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇵🇱
Budyn
2026-11-13 01:31:47
UTC ·
(1 day ago)
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: cpanel.goblinpot.site | Path: /.env | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) A ...
show more
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: cpanel.goblinpot.site | Path: /.env | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 Edg/130.0.0.0 | Request: [Empty / GET Request]
show less
Hacking
Web App Attack