🇩🇪
4server
2026-11-07 00:52:38
UTC ·
(4 hours ago)
[SatNov0701:52:32.8000092026][security2:error][pid2051134:tid2051181][client34.79.37.246:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htacce ...
show more
[SatNov0701:52:32.8000092026][security2:error][pid2051134:tid2051181][client34.79.37.246:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"www.allegraravizza.it\"][uri\"/wp-config.php.bak\"][unique_id\"au52UCHWklmA4_nNzn5WMAAAAEs\"]
show less
Port Scan
Brute-Force
Web App Attack
🇳🇱
homeshowdomain.nl
2026-11-06 23:01:53
UTC ·
(6 hours ago)
Auto-ban: >3000 req/min op 2026-11-06
Web App Attack
SSH
Hacking
🇳🇱
Alt255
2026-11-06 19:59:50
UTC ·
(9 hours ago)
[cb-16al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.79.37.246 - - [06/Nov/2026:20:59:46 +0100] "GET /.env HTTP/1.1" 404 1350 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KH ...
show more
[cb-16al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.79.37.246 - - [06/Nov/2026:20:59:46 +0100] "GET /.env HTTP/1.1" 404 1350 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-11-06 19:52:35
UTC ·
(9 hours ago)
[Budyn Honeypot Sinkhole] | Attack type: Enterprise & Framework Recon Scanner | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: mail.goblinpot.website | Path: /.git/HEAD | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; ...
show more
[Budyn Honeypot Sinkhole] | Attack type: Enterprise & Framework Recon Scanner | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: mail.goblinpot.website | Path: /.git/HEAD | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | Request: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-11-06 19:32:46
UTC ·
(9 hours ago)
Secret file probe | method: GET | path: /.env | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Hacking
Web App Attack
🇵🇱
Budyn
2026-11-06 15:01:35
UTC ·
(14 hours ago)
[Budyn Honeypot Sinkhole] | Attack type: Enterprise & Framework Recon Scanner | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: app.teddypot.cloud | Path: /.env | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) App ...
show more
[Budyn Honeypot Sinkhole] | Attack type: Enterprise & Framework Recon Scanner | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: app.teddypot.cloud | Path: /.env | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | Request: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇩🇪
big-cloud.nl
2026-11-06 13:54:52
UTC ·
(15 hours ago)
Try to access /.env
Web App Attack
🇵🇱
Budyn
2026-11-06 12:16:18
UTC ·
(16 hours ago)
[Budyn Honeypot Sinkhole] | Attack type: Web Spam (Form Abuse) | Summary: Unsolicited form submission captured. | Evidence: | Host: cpanel.definitelynotahoneypot.xyz | Path: /contact.php | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWe ...
show more
[Budyn Honeypot Sinkhole] | Attack type: Web Spam (Form Abuse) | Summary: Unsolicited form submission captured. | Evidence: | Host: cpanel.definitelynotahoneypot.xyz | Path: /contact.php | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | Request: [Empty / GET Request]
show less
Web Spam
Web App Attack
🇿🇦
conure.sh
2026-11-06 12:14:12
UTC ·
(16 hours ago)
csagent: score 15.1: 404 noise floor x21, secrets grab x1; 1 domain(s) in 6s
Web App Attack
🇳🇱
e.fierstra
2026-11-06 10:39:31
UTC ·
(18 hours ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-11-06 10:20:26
UTC ·
(18 hours ago)
Scanning for secret files (.env, .git, credentials, config backups)
Bad Web Bot
Web App Attack
🇲🇾
Rizzy
2026-11-06 09:39:17
UTC ·
(19 hours ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇧🇪
cmbplf
2026-11-06 09:27:07
UTC ·
(19 hours ago)
541 requests with url.path *.git/*
413 requests with url.path *config.json
203 requests with url.path *.svn/*
202 requests with url.path *.hg/*
165 requests with url.path *.aws/*
132 requests with url.path *.gitmodules
Brute-Force
Bad Web Bot
🇩🇰
swrlly
2026-11-06 09:20:21
UTC ·
(19 hours ago)
1 unauthorized webserver connection
Web App Attack
🇮🇹
CoreTech srl
2026-11-06 08:48:56
UTC ·
(20 hours ago)
cloudlinux2 fail2ban: 2026-11-06 09:45:45,677 fail2ban.filter [1651]: INFO [plesk-modsecurity] Found 34.79.37.246 - 2026-11-06 09:45:45cloudlinux2 fail2ban: 2026-11-06 09:45:56,003 fail2ban.filter [1651]: INFO [plesk-modsecurity ...
show more
cloudlinux2 fail2ban: 2026-11-06 09:45:45,677 fail2ban.filter [1651]: INFO [plesk-modsecurity] Found 34.79.37.246 - 2026-11-06 09:45:45cloudlinux2 fail2ban: 2026-11-06 09:45:56,003 fail2ban.filter [1651]: INFO [plesk-modsecurity] Found 34.79.37.246 - 2026-11-06 09:45:55cloudlinux2 fail2ban: 2026-11-06 09:45:56,010 fail2ban.filter [1651]: INFO [plesk-modsecurity] Found 34.79.37.246 - 2026-11-06 09:45:55cloudlinux2 fail2ban: 2026-11-06 09:45:56,019 fail2ban.filter [1651]: INFO [plesk-modsecurity] Found 34.79.37.246 - 2026-11-06 09:45:55cloudlinux2 fail2ban: 2026-11-06 09:45:56,470 fail2ban.actions [1651]: NOTICE [plesk-modsecurity] Ban 34.79.37.246cloudlinux2 fail2ban: 2026-11-06 09:45:56,027 fail2ban.filter [1651]: INFO [plesk-modsecurity] Found 34.79.37.246 - 2026-11-06 09:45:55cloudlinux2 fail2ban: 2026-11-06 09:45:56,035 fail2ban.filter [1651]: INFO [plesk-modsecurity] Found 34.79.37.246 - 2026-11-06 09:45:55cloudlinux2 fail2ban: 2026
show less
Brute-Force