🇧🇷
ICS Labs
2026-11-04 14:35:19
UTC ·
(5 days ago)
ICS Labs threat intelligence (ICS Feeds): Exploited Host. Last observed 2026-11-04 UTC.
Exploited Host
🇳🇱
Site.eu
2026-11-03 19:57:01
UTC ·
(6 days ago)
Scanning for secret files (.env, .git, credentials, config backups)
Bad Web Bot
Web App Attack
Anonymous
2026-11-03 02:13:13
UTC ·
(1 week ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
Anonymous
2026-11-03 01:30:50
UTC ·
(1 week ago)
34.75.170.219 - - [03/Nov/2026:02:30:37 +0100] "GET /.git/config HTTP/1.1" 403 610 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.75.170.219 - - [03/Nov/2026:02:30:37 +01 ...
show more
34.75.170.219 - - [03/Nov/2026:02:30:37 +0100] "GET /.git/config HTTP/1.1" 403 610 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.75.170.219 - - [03/Nov/2026:02:30:37 +0100] "GET /.env HTTP/1.1" 403 610 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.75.170.219 - - [03/Nov/2026:02:30:38 +0100] "GET /.env.local HTTP/1.1" 403 610 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.75.170.219 - - [03/Nov/2026:02:30:38 +0100] "GET /.env.production HTTP/1.1" 403 610 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.75.170.219 - - [03/Nov/2026:02:30:38 +0100] "GET /.env.staging HTTP/1.1" 403 610 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko)
...
show less
DDoS Attack
🇫🇷
SpaceHost-Server
2026-11-02 23:19:40
UTC ·
(1 week ago)
Brute-Force
Web App Attack
🇺🇸
nyt
2026-11-02 21:36:46
UTC ·
(1 week ago)
Sensitive File Probe
Web App Attack
🇳🇱
SchorelWeb
2026-11-02 18:47:38
UTC ·
(1 week ago)
Cluster member (Omitted) (US/United States/-) said, TEMPDENY 34.75.170.219, Reason:[(Suspicious) Suspicious activity detected 34.75.170.219 (US/United States/219.170.75.34.bc.googleusercontent.com): 10 in the last 3600 secs]
Brute-Force
SSH
🇵🇱
Budyn
2026-11-02 17:45:00
UTC ·
(1 week ago)
[Budyn Honeypot Sinkhole] | Attack type: Enterprise & Framework Recon Scanner | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: dev.goblinpot.online | Path: /.git/config | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; ...
show more
[Budyn Honeypot Sinkhole] | Attack type: Enterprise & Framework Recon Scanner | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: dev.goblinpot.online | Path: /.git/config | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | Request: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-11-02 15:26:13
UTC ·
(1 week ago)
[Budyn Honeypot Sinkhole] | Attack type: Enterprise & Framework Recon Scanner | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: dev.definitelynotahoneypot.online | Path: /.git/config | User-Agent: Mozilla/5.0 (X11; Linux ...
show more
[Budyn Honeypot Sinkhole] | Attack type: Enterprise & Framework Recon Scanner | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: dev.definitelynotahoneypot.online | Path: /.git/config | User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | Request: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇩🇪
macrob
2026-11-02 13:52:48
UTC ·
(1 week ago)
2026/11/02 13:52:47 [error] 1725818#1725818: *24112014 access forbidden by rule, client: 34.75.170.219, server: dev.binixo-vn.com, request: "GET /.git/config HTTP/2.0", host: "dev.binixo-vn.com"
2026/11/02 13:52:47 [error] 1725818#1725818: *24112030 ...
show more
2026/11/02 13:52:47 [error] 1725818#1725818: *24112014 access forbidden by rule, client: 34.75.170.219, server: dev.binixo-vn.com, request: "GET /.git/config HTTP/2.0", host: "dev.binixo-vn.com"
2026/11/02 13:52:47 [error] 1725818#1725818: *24112030 access forbidden by rule, client: 34.75.170.219, server: dev.binixo-vn.com, request: "GET /.env HTTP/2.0", host: "dev.binixo-vn.com"
2026/11/02 13:52:47 [error] 1725818#1725818: *24112036 access forbidden by rule, client: 34.75.170.219, server: dev.binixo-vn.com, request: "GET /.env.local HTTP/2.0", host: "dev.binixo-vn.com"
...
show less
Web App Attack
Anonymous
2026-11-02 13:46:16
UTC ·
(1 week ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇮🇹
VHosting
2026-11-02 13:45:06
UTC ·
(1 week ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇫🇷
COMAITE
2026-11-02 13:24:10
UTC ·
(1 week ago)
Suspicious URL access.
Web App Attack
Anonymous
2026-11-02 13:14:50
UTC ·
(1 week ago)
IP matched detection query many 3xx errors.
Brute-Force
🇵🇱
Budyn
2026-11-02 13:13:36
UTC ·
(1 week ago)
[Budyn Honeypot Sinkhole] | Attack type: Enterprise & Framework Recon Scanner | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: dev.astropot.online | Path: /.git/config | User-Agent: Mozilla/5.0 (X11; Linux x86_64) Apple ...
show more
[Budyn Honeypot Sinkhole] | Attack type: Enterprise & Framework Recon Scanner | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: dev.astropot.online | Path: /.git/config | User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | Request: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack