🇩🇪
ger-stg-sifi1
2026-11-14 19:52:50
UTC ·
(1 hour ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
🇵🇱
Budyn
2026-11-14 17:07:25
UTC ·
(4 hours ago)
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: beta.teddypot.site | Path: /.env.template | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; ...
show more
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: beta.teddypot.site | Path: /.env.template | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:128.0) Gecko/20100101 Firefox/128.0 | Request: [Empty / GET Request]
show less
Hacking
Web App Attack
🇵🇱
Budyn
2026-11-14 14:16:40
UTC ·
(7 hours ago)
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: app.teddypot.space | Path: /.env | User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Geck ...
show more
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: app.teddypot.space | Path: /.env | User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0 | Request: [Empty / GET Request]
show less
Hacking
Web App Attack
🇬🇧
Comberton
2026-11-14 13:37:33
UTC ·
(7 hours ago)
Ban via F2B wordfence probe
Brute-Force
Web App Attack
🇵🇱
Budyn
2026-11-14 11:52:30
UTC ·
(9 hours ago)
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: dev.budyn.xyz | Path: /.claude/settings.local.json | User-Agent: Mozilla/5.0 (Windows NT 10.0 ...
show more
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: dev.budyn.xyz | Path: /.claude/settings.local.json | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | Request: [Empty / GET Request]
show less
Hacking
Web App Attack
🇳🇱
Alt255
2026-11-14 04:30:36
UTC ·
(16 hours ago)
[cb-01al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.224.210.170 - - [14/Nov/2026:05:30:20 +0100] "GET /.env HTTP/2.0" 404 1338 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 ( ...
show more
[cb-01al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.224.210.170 - - [14/Nov/2026:05:30:20 +0100] "GET /.env HTTP/2.0" 404 1338 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-11-14 02:00:55
UTC ·
(19 hours ago)
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: staging.dont-eat-the-pudding.xyz | Path: /.env.example | User-Agent: Mozilla/5.0 (Windows NT ...
show more
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: staging.dont-eat-the-pudding.xyz | Path: /.env.example | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | Request: [Empty / GET Request]
show less
Hacking
Web App Attack
🇺🇸
lcpacs
2026-11-14 01:02:56
UTC ·
(20 hours ago)
Honeypot: blocked after 25 hits against decoy endpoints
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-11-13 23:14:43
UTC ·
(22 hours ago)
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: dev.astropot.space | Path: /.env.production | User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv: ...
show more
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: dev.astropot.space | Path: /.env.production | User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0 | Request: [Empty / GET Request]
show less
Hacking
Web App Attack
🇳🇱
homeshowdomain.nl
2026-11-13 22:59:05
UTC ·
(22 hours ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-11-12.
Web App Attack
SSH
Hacking
🇫🇷
Stara
2026-11-13 14:56:39
UTC ·
(1 day ago)
Automated block - Joomla/WordPress/OpenCart vulnerability scanner exploitation detected (Mala Kineskinja)
Hacking
Brute-Force
Web App Attack
🇫🇷
Stara
2026-11-13 14:23:46
UTC ·
(1 day ago)
Massive 403 errors - scanning for .env, configuration files, or directory traversal
Brute-Force
Hacking
Web App Attack
🇨🇦
CentiDevOps
2026-11-13 13:32:05
UTC ·
(1 day ago)
Web app scan: 26 requests in 10 min across 2 domains (301/404). Paths: /.env, /fr/.env, /.docker/config.json (+2 more). Sample: 2026-11-13T13:32:05Z "GET /.env" 301
Hacking
Web App Attack
🇸🇪
vaia.cloud
2026-11-13 13:30:01
UTC ·
(1 day ago)
crowdsecurity/http-probing
Brute-Force
Web App Attack
🇬🇧
gigatech
2026-11-13 10:30:04
UTC ·
(1 day ago)
Webserver Probing
Web App Attack