🇸🇪
vaia.cloud
2026-11-09 12:50:02
UTC ·
(3 hours ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
🇺🇸
Lee Daniel
2026-11-08 18:22:39
UTC ·
(22 hours ago)
34.80.160.93 - - [08/Nov/2026:13:22:39 -0500] "GET /.env HTTP/1.1" 403 344 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
DDoS Attack
Web Spam
Email Spam
Port Scan
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
arnisolutions
2026-11-08 18:12:02
UTC ·
(22 hours ago)
Vulnerability scanning (requests for admin panels, shells, backup files etc.) against a production server. Observed on 1 day(s) between 2026-11-08 and 2026-11-08 (UTC). Sample request: GET /.env.local HTTP/1.1
Web App Attack
Hacking
🇳🇴
tmiland
2026-11-08 17:43:44
UTC ·
(22 hours ago)
(nginx_404) Dot directory Honeypot Trap 34.80.160.93 (TW/Taiwan/93.160.80.34.bc.googleusercontent.com): 2 in the last 3600 secs; IP: 34.80.160.93; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.80.160.93 - - [08/Nov/2026:18:43:37 +01 ...
show more
(nginx_404) Dot directory Honeypot Trap 34.80.160.93 (TW/Taiwan/93.160.80.34.bc.googleusercontent.com): 2 in the last 3600 secs; IP: 34.80.160.93; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.80.160.93 - - [08/Nov/2026:18:43:37 +0100] "GET /.git/config HTTP/1.1" 404 4763 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.80.160.93 - - [08/Nov/2026:18:43:38 +0100] "GET /.env HTTP/1.1" 404 4763 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
show less
Brute-Force
🇩🇪
Hary74656
2026-11-08 17:17:43
UTC ·
(23 hours ago)
Fail2Ban on schani.hostmi.at: jail=apache-instablock, failures=1.
[client 34.80.160.93] [realclient 34.80.160.93] [08/Nov/2026:18:17:42 +0100] [vhost searx.aschi.at] 403 "GET /.git/config HTTP/1.1"
Web App Attack
Anonymous
2026-11-07 21:09:41
UTC ·
(1 day ago)
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: TW, Attack patterns: WordPress scanning, Backup file probing, Cloud secrets probing
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-11-07 12:27:48
UTC ·
(2 days ago)
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: shop.sweetpuddingtrap.top | Path: /.git/config | User-Agent: Mozilla/5.0 (Windows NT 10.0; Wi ...
show more
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: shop.sweetpuddingtrap.top | Path: /.git/config | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | Request: [Empty / GET Request]
show less
Hacking
Web App Attack
🇵🇱
Budyn
2026-11-07 10:09:58
UTC ·
(2 days ago)
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: shop.sweetpuddingtrap.top | Path: /.git/config | User-Agent: Mozilla/5.0 (Macintosh; Intel Ma ...
show more
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: shop.sweetpuddingtrap.top | Path: /.git/config | User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | Request: [Empty / GET Request]
show less
Hacking
Web App Attack
🇵🇱
Budyn
2026-11-07 04:46:50
UTC ·
(2 days ago)
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: shop.sweetpuddingtrap.top | Path: /.git/config | User-Agent: Mozilla/5.0 (X11; Linux x86_64) ...
show more
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: shop.sweetpuddingtrap.top | Path: /.git/config | User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | Request: [Empty / GET Request]
show less
Hacking
Web App Attack
🇩🇪
raph
2026-11-07 03:56:35
UTC ·
(2 days ago)
[DOT FILES] crawler *.env*, .git*, .config*, etc.
Bad Web Bot
Web App Attack
🇩🇪
Hazzard
2026-11-07 03:53:11
UTC ·
(2 days ago)
(mod_security) mod_security triggered on hostname [redacted]): (CF_ENABLE)
SQL Injection
🇮🇹
ciccio diddo
2026-11-06 20:16:10
UTC ·
(2 days ago)
URL Scanner multiple 30X port:Tcp/80,443
Brute-Force
Web App Attack
Anonymous
2026-11-06 20:09:55
UTC ·
(2 days ago)
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: TW, Attack patterns: WordPress scanning, Backup file probing, Cloud secrets probing
Bad Web Bot
Web App Attack
🇳🇱
tmiland
2026-11-06 19:30:35
UTC ·
(2 days ago)
(nginx_404) Dot directory Honeypot Trap 34.80.160.93 (TW/Taiwan/93.160.80.34.bc.googleusercontent.com): 2 in the last 3600 secs; IP: 34.80.160.93; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.80.160.93 - - [06/Nov/2026:20:30:28 +01 ...
show more
(nginx_404) Dot directory Honeypot Trap 34.80.160.93 (TW/Taiwan/93.160.80.34.bc.googleusercontent.com): 2 in the last 3600 secs; IP: 34.80.160.93; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.80.160.93 - - [06/Nov/2026:20:30:28 +0100] "GET /.git/config HTTP/1.1" 404 12058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.80.160.93 - - [06/Nov/2026:20:30:30 +0100] "GET /.env HTTP/1.1" 404 12056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
show less
Brute-Force
🇳🇱
Alt255
2026-11-06 12:59:07
UTC ·
(3 days ago)
[ti-03tr] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.80.160.93 - - [06/Nov/2026:13:58:47 +0100] "GET /.git/config HTTP/1.1" 404 3237 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebK ...
show more
[ti-03tr] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.80.160.93 - - [06/Nov/2026:13:58:47 +0100] "GET /.git/config HTTP/1.1" 404 3237 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack