๐ซ๐ท
Catalin Negru
2026-09-16 10:36:21
(1 hour ago)
2026-09-16 13:36:20,717 fail2ban.actions [736]: NOTICE [apache-scan] Ban 40.116.110.67
2026- ...
show more
2026-09-16 13:36:20,717 fail2ban.actions [736]: NOTICE [apache-scan] Ban 40.116.110.67
2026-09-16 13:36:20,791 fail2ban.actions [736]: NOTICE [apache-dirscan] Ban 40.116.110.67
2026-09-16 13:36:20,815 fail2ban.actions [736]: NOTICE [apache-404] Ban 40.116.110.67
2026-09-16 13:36:20,837 fail2ban.actions [736]: NOTICE [laravel-env] Ban 40.116.110.67
2026-09-16 13:36:20,856 fail2ban.actions [736]: NOTICE [apache-security] Ban 40.116.110.67
...
show less
Brute-Force
Web App Attack
๐บ๐ธ
antlac1
2026-09-16 07:16:11
(4 hours ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack
๐ณ๐ฑ
Alt255
2026-09-16 03:56:51
(7 hours ago)
[mx02al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Examp ...
show more
[mx02al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 40.116.110.67 - - [16/Sep/2026:05:56:43 +0200] "GET /.env.zip HTTP/1.0" 404 3589 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36"
...
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
Roper123
2026-09-16 02:28:54
(9 hours ago)
Web exploits
Web App Attack
๐ซ๐ท
Security_Whaller
2026-09-16 02:25:57
(9 hours ago)
Malicious activity detected on Honeypot.
Brute-Force
Hacking
Web App Attack
๐ซ๐ฎ
diego021
2026-09-16 02:08:12
(9 hours ago)
40.116.110.67 135.181.251.148 - [15/Sep/2026:21:08:09 -0500] "GET /.env HTTP/1.1" 404 158 "-" "Mozil ...
show more
40.116.110.67 135.181.251.148 - [15/Sep/2026:21:08:09 -0500] "GET /.env HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36"
40.116.110.67 135.181.251.148 - [15/Sep/2026:21:08:09 -0500] "GET /.env.local HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36"
40.116.110.67 135.181.251.148 - [15/Sep/2026:21:08:10 -0500] "GET /.env.development HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36"
40.116.110.67 135.181.251.148 - [15/Sep/2026:21:08:10 -0500] "GET /.env.production HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36"
...
show less
Web App Attack
Anonymous
2026-09-16 01:45:38
(10 hours ago)
fail2ban jail apache-secrets-probe: 40.116.110.67 - - [15/Sep/2026:18:45:36 -0700] "GET /.env HTTP/1 ...
show more
fail2ban jail apache-secrets-probe: 40.116.110.67 - - [15/Sep/2026:18:45:36 -0700] "GET /.env HTTP/1.1" 403 460 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36"
show less
Web App Attack
๐บ๐ธ
ratcarcher-labs
2026-09-16 00:33:33
(11 hours ago)
[Ratcarcher Labs/MutantShield honeypot CTI] actor=human vector=scanner_probe risk=70 attacks=51 dept ...
show more
[Ratcarcher Labs/MutantShield honeypot CTI] actor=human vector=scanner_probe risk=70 attacks=51 depth=4 node=node-us-east canary=no human_score=50 agentic=40 cc=US asn=Microsoft Corporation | Data provided by Ratcarcher Labs ยท https://ratcarcher-labs.com ยท docs https://api.ratcarcher-labs.com/api/v1/public/docs
show less
Port Scan
Bad Web Bot
๐ฎ๐ช
AutosOnShow
2026-09-15 22:35:07
(13 hours ago)
blocked for webapp attack | path requested: /.env | seen at 2026-09-15 22:34:43.401 |
Web App Attack
๐ฉ๐ช
iNetWorker
2026-09-15 21:27:49
(14 hours ago)
trolling for resource vulnerabilities
Web App Attack
๐ฉ๐ช
edena
2026-09-15 21:26:22
(14 hours ago)
40.116.110.67 - - [15/Sep/2026:23:26:21 +0200] "GET /.env HTTP/1.1" 403 322 "-" "Mozilla/5.0 (Macint ...
show more
40.116.110.67 - - [15/Sep/2026:23:26:21 +0200] "GET /.env HTTP/1.1" 403 322 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36"
40.116.110.67 - - [15/Sep/2026:23:26:21 +0200] "GET /.env.local HTTP/1.1" 403 322 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36"
40.116.110.67 - - [15/Sep/2026:23:26:21 +0200] "GET /.env.development HTTP/1.1" 403 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
Web App Attack
Bad Web Bot
๐ซ๐ท
ingroscart.it
2026-09-15 20:47:27
(15 hours ago)
(mod_security) mod_security triggered on hostname [redacted])
SQL Injection
๐ฉ๐ช
gadix
2026-09-15 20:39:00
(15 hours ago)
[15/Sep/2026:22:38:58.402257 +0200] aqms4ofVviRusc_pyKprbwAAAAM 40.116.110.67 57818 127.0.0.1 7081
[ ...
show more
[15/Sep/2026:22:38:58.402257 +0200] aqms4ofVviRusc_pyKprbwAAAAM 40.116.110.67 57818 127.0.0.1 7081
[15/Sep/2026:22:38:59.102964 +0200] aqms4_KATHHXUPtnA79BIQAAAAk 40.116.110.67 57820 127.0.0.1 7081
[15/Sep/2026:22:38:59.798802 +0200] aqms41Zvft4GtLl1eVoe6QAAAAQ 40.116.110.67 57826 127.0.0.1 7081
...
show less
Web App Attack
๐ฏ๐ต
ZEROVOX
2026-09-15 19:30:09
(16 hours ago)
CrowdSec: crowdsecurity/http-sensitive-files detected
Web App Attack
๐ณ๐ฑ
r4fo.com
2026-09-15 19:28:43
(16 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking