|
🇿🇦
conure.sh
|
|
csagent: score 20.4: secrets grab x2, 404 noise floor x2; 1 domain(s) in 7s
|
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 35.237.130.39 (39.130.237.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 13:25:23.820303 2026] [security2:error] [pid 10437:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 35.237.130.39 (39.130.237.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 13:25:23.820303 2026] [security2:error] [pid 10437:tid 10437] [client 35.237.130.39:36222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "leadek.com"] [uri "/.git/config"] [unique_id "auonE-s9RlO8eJajkDzNVwAAAAw"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇧🇪
taivas.nl
|
|
Many_bad_calls
|
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 35.237.130.39 (39.130.237.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 22:55:37.553140 2026] [security2:error] [pid 2429234:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 35.237.130.39 (39.130.237.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 22:55:37.553140 2026] [security2:error] [pid 2429234:tid 2429247] [client 35.237.130.39:49868] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "skillscredentials.com"] [uri "/.git/config"] [unique_id "aulbOZZoBIUv4nL0uM6AIQAAAEs"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 35.237.130.39 (39.130.237.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 18:38:05.165551 2026] [security2:error] [pid 20745:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 35.237.130.39 (39.130.237.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 18:38:05.165551 2026] [security2:error] [pid 20745:tid 20745] [client 35.237.130.39:41408] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "swurgentvet.com"] [uri "/.git/config"] [unique_id "auke3SAlt9CTSr-OXnjrjAAAAAE"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
Anonymous
|
|
IP matched detection query bad paths many.
|
Brute-Force
Web App Attack
|
|
🇺🇸
mnsf
|
|
Scanning/Probing (20)
|
Brute-Force
Web App Attack
|
|
🇺🇸
Manna
|
|
Autonomous security gateway block (OTX integrated). Target path: /.env.development
|
Port Scan
Web App Attack
|
|
🇵🇱
Budyn
|
|
[Budyn Honeypot Sinkhole] | Attack type: Enterprise & Framework Recon Scanner | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: gitlab.dont-eat-the-pudding.top | Path: /.git/config | User-Agent: Mozilla/5.0 (Macintosh; I ...
show more
[Budyn Honeypot Sinkhole] | Attack type: Enterprise & Framework Recon Scanner | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: gitlab.dont-eat-the-pudding.top | Path: /.git/config | User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | Request: [Empty / GET Request]
show less
|
Bad Web Bot
Web App Attack
|
|
🇮🇹
VHosting
|
|
Detected WordPress attack from different servers
|
Brute-Force
Web App Attack
|
|
🇵🇱
Budyn
|
|
[Budyn Honeypot Sinkhole] | Attack type: Enterprise & Framework Recon Scanner | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: gitlab.definitelynotahoneypot.online | Path: /.git/config | User-Agent: Mozilla/5.0 (X11; Li ...
show more
[Budyn Honeypot Sinkhole] | Attack type: Enterprise & Framework Recon Scanner | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: gitlab.definitelynotahoneypot.online | Path: /.git/config | User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | Request: [Empty / GET Request]
show less
|
Bad Web Bot
Web App Attack
|
|
🇧🇪
taivas.nl
|
|
Bad_requests
|
Bad Web Bot
|
|
🇵🇱
Budyn
|
|
[Budyn Honeypot Sinkhole] | Attack type: Enterprise & Framework Recon Scanner | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: gitlab.astropot.store | Path: /.git/config | User-Agent: Mozilla/5.0 (X11; Linux x86_64) App ...
show more
[Budyn Honeypot Sinkhole] | Attack type: Enterprise & Framework Recon Scanner | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: gitlab.astropot.store | Path: /.git/config | User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | Request: [Empty / GET Request]
show less
|
Bad Web Bot
Web App Attack
|
|
🇵🇱
Budyn
|
|
[Budyn Honeypot Sinkhole] | Attack type: Enterprise & Framework Recon Scanner | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: gitlab.astropot.site | Path: /.git/config | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; ...
show more
[Budyn Honeypot Sinkhole] | Attack type: Enterprise & Framework Recon Scanner | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: gitlab.astropot.site | Path: /.git/config | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | Request: [Empty / GET Request]
show less
|
Bad Web Bot
Web App Attack
|