🇧🇪
boxed-it
2026-11-08 07:02:36
UTC ·
(18 hours ago)
GET /config/.env.php (Tarpitted for 1d15h8m27s, wasted 8.06MB)
Web App Attack
🇸🇪
vaia.cloud
2026-11-06 20:15:02
UTC ·
(2 days ago)
crowdsecurity/http-cve-2021-41773
Brute-Force
Web App Attack
🇫🇷
dynamix
2026-11-06 19:47:31
UTC ·
(2 days ago)
Multiple WAF Violations
Web App Attack
Anonymous
2026-11-06 19:10:13
UTC ·
(2 days ago)
| [Dangerous/Brazil] Aggressive IP 34.95.177.10 (~30 hits). Type: DoS Defender- Web server 400 error code
Web App Attack
Hacking
SQL Injection
🇵🇱
Budyn
2026-11-06 18:05:27
UTC ·
(2 days ago)
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: dev.budyn.ovh | Path: /.vite/manifest.json | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; ...
show more
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: dev.budyn.ovh | Path: /.vite/manifest.json | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 | Request: [Empty / GET Request]
show less
Hacking
Web App Attack
🇩🇰
HostingGroup
2026-11-06 17:21:54
UTC ·
(2 days ago)
Automated malicious activity (Honeypot Trap) detected and blocked at the CDN edge by NordicCDN Shield. Offenses: 11. First blocked: 2026-11-06.
Bad Web Bot
Web App Attack
Anonymous
2026-11-06 16:54:53
UTC ·
(2 days ago)
Aggressive web scan
Web App Attack
🇳🇱
Savvii
2026-11-06 16:19:30
UTC ·
(2 days ago)
20 attempts against mh_ha-misbehave-ban on mensa
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
as211431.net
2026-11-06 15:40:29
UTC ·
(2 days ago)
Triggered Cloudflare WAF (firewallCustom) from BR.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /.bashrc
UA: Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF ...
show more
Triggered Cloudflare WAF (firewallCustom) from BR.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /.bashrc
UA: Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
Anonymous
2026-11-06 15:02:45
UTC ·
(2 days ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇵🇱
Budyn
2026-11-06 14:57:33
UTC ·
(2 days ago)
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: registry.budyn.ovh | Path: /dist/.vite/manifest.json | User-Agent: Mozilla/5.0 (Windows NT 10 ...
show more
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: registry.budyn.ovh | Path: /dist/.vite/manifest.json | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 | Request: [Empty / GET Request]
show less
Hacking
Web App Attack
🇺🇸
hostmach
2026-11-06 14:20:04
UTC ·
(2 days ago)
(cpanel) Failed cPanel login from 34.95.177.10 (BR/Brazil/10.177.95.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CPANEL; Logs: [2026-11-06 09:19:59 -0500] info [webmaild] 34.95.177.10 - - "GET /sitema ...
show more
(cpanel) Failed cPanel login from 34.95.177.10 (BR/Brazil/10.177.95.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CPANEL; Logs: [2026-11-06 09:19:59 -0500] info [webmaild] 34.95.177.10 - - "GET /sitemap.xml HTTP/1.1" FAILED LOGIN webmaild: login attempt without username
[2026-11-06 09:20:00 -0500] info [webmaild] 34.95.177.10 - - "GET /mc18luecrmgofvg53l5x HTTP/1.1" FAILED LOGIN webmaild: login attempt without username
[2026-11-06 09:20:00 -0500] info [webmaild] 34.95.177.10 - - "GET /ngsw.json HTTP/1.1" FAILED LOGIN webmaild: login attempt without username
[2026-11-06 09:20:00 -0500] info [webmaild] 34.95.177.10 - - "GET /z9x8c7v6b5-debug-trigger-webmail.tdnx.net HTTP/1.1" FAILED LOGIN webmaild: login attempt without username
[2026-11-06 09:20:01 -0500] info [webmaild] 34.95.177.10 - - "GET /netlify.toml HTTP/1.1" FAILED LOGIN webmaild: login attempt without username
show less
Brute-Force
SSH
🇺🇸
TPI-Abuse
2026-11-06 14:17:48
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.95.177.10 (10.177.95.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 09:17:40.406975 2026] [security2:error] [pid 15206:tid 15 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.95.177.10 (10.177.95.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 09:17:40.406975 2026] [security2:error] [pid 15206:tid 15206] [client 34.95.177.10:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.nyemdr.org"] [uri "/config/.env.php"] [unique_id "au3hhPowob_v0wMBsBSW1wAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇬
simpeg-adm.bandung.go.id
2026-11-06 14:06:47
UTC ·
(2 days ago)
06/Nov/2026:14:06:42 +0000;34.95.177.10;"/robots.txt"
06/Nov/2026:14:06:44 +0000;34.95.177.10;"/sitemap.xml"
06/Nov/2026:14:06:46 +0000;34.95.177.10;"/sitemap_index.xml"
06/Nov/2026:14:06:47 +0000;34.95.177.10;"/21ogyygkfa6ae73mlfvn"
06/Nov/2026:14:0 ...
show more
06/Nov/2026:14:06:42 +0000;34.95.177.10;"/robots.txt"
06/Nov/2026:14:06:44 +0000;34.95.177.10;"/sitemap.xml"
06/Nov/2026:14:06:46 +0000;34.95.177.10;"/sitemap_index.xml"
06/Nov/2026:14:06:47 +0000;34.95.177.10;"/21ogyygkfa6ae73mlfvn"
06/Nov/2026:14:06:47 +0000;34.95.177.10;"/06ffuyb0mgwzdwvjq8jx"
06/Nov/2026:14:06:47 +0000;34.95.177.10;"/.vite/manifest.json"
06/Nov/2026:14:06:47 +0000;34.95.177.10;"/dist/.vite/manifest.json"
...
show less
Web Spam
Brute-Force
Web App Attack
🇩🇪
XICTRON
2026-11-06 13:45:04
UTC ·
(2 days ago)
ModSecurity rule violation detected by Fail2Ban
Web App Attack