🇲🇾
Rizzy
2026-11-15 02:14:35
UTC ·
(6 hours ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇧🇷
guguabx
2026-11-14 14:26:00
UTC ·
(18 hours ago)
Taboka Proteção: caiu na armadilha: /.git/config
Web App Attack
Bad Web Bot
🇳🇱
Alt255
2026-11-14 14:20:17
UTC ·
(18 hours ago)
[live3bd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 43.155.18.110 - - [14/Nov/2026:15:19:57 +0100] "GET /.git/config HTTP/1.1" 404 2105 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTM ...
show more
[live3bd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 43.155.18.110 - - [14/Nov/2026:15:19:57 +0100] "GET /.git/config HTTP/1.1" 404 2105 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-11-14 14:02:16
UTC ·
(18 hours ago)
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: api.goblinpot.online | Path: /.git/config | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; ...
show more
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: api.goblinpot.online | Path: /.git/config | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | Request: [Empty / GET Request]
show less
Hacking
Web App Attack
🇵🇱
Budyn
2026-11-14 10:01:26
UTC ·
(22 hours ago)
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: api.dont-eat-the-pudding.top | Path: /.git/config | User-Agent: Mozilla/5.0 (Windows NT 10.0; ...
show more
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: api.dont-eat-the-pudding.top | Path: /.git/config | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | Request: [Empty / GET Request]
show less
Hacking
Web App Attack
🇵🇱
Budyn
2026-11-14 07:31:57
UTC ·
(1 day ago)
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: api.definitelynotahoneypot.online | Path: /.git/config | User-Agent: Mozilla/5.0 (X11; Linux ...
show more
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: api.definitelynotahoneypot.online | Path: /.git/config | User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | Request: [Empty / GET Request]
show less
Hacking
Web App Attack
🇰🇷
fanbinit
2026-11-14 04:31:55
UTC ·
(1 day ago)
Repeated requests for sensitive configuration or repository paths.
Web App Attack
🇵🇱
Budyn
2026-11-14 04:14:52
UTC ·
(1 day ago)
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: api.budyn.ovh | Path: /.git/config | User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/ ...
show more
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: api.budyn.ovh | Path: /.git/config | User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | Request: [Empty / GET Request]
show less
Hacking
Web App Attack
🇩🇪
Gwyneth Llewelyn
2026-11-14 03:16:31
UTC ·
(1 day ago)
2026/11/14 03:16:23 [error] 2766422#2766422: *880984 access forbidden by rule, client: 43.155.18.110, server: api.betatechnologies.info, request: "GET /.env HTTP/2.0", host: "api.betatechnologies.info"
43.155.18.110 - - [14/Nov/2026:03:16:23 +0000] " ...
show more
2026/11/14 03:16:23 [error] 2766422#2766422: *880984 access forbidden by rule, client: 43.155.18.110, server: api.betatechnologies.info, request: "GET /.env HTTP/2.0", host: "api.betatechnologies.info"
43.155.18.110 - - [14/Nov/2026:03:16:23 +0000] "GET /.env HTTP/2.0" 403 138 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
2026/11/14 03:16:30 [error] 2766422#2766422: *880984 access forbidden by rule, client: 43.155.18.110, server: api.betatechnologies.info, request: "GET /app/.env HTTP/2.0", host: "api.betatechnologies.info"
show less
Brute-Force
Web App Attack
🇺🇸
groupadvisors-security
2026-11-14 02:24:50
UTC ·
(1 day ago)
Automated scanning of application endpoints blocked.
Web App Attack
🇵🇱
Budyn
2026-11-14 01:56:45
UTC ·
(1 day ago)
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: api.astropot.online | Path: /.git/config | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x ...
show more
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: api.astropot.online | Path: /.git/config | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | Request: [Empty / GET Request]
show less
Hacking
Web App Attack
🇬🇧
consul.to
2026-11-13 02:02:07
UTC ·
(2 days ago)
Web attack/malicious scanning detected
Web App Attack
🇳🇱
sembeek
2026-11-13 00:07:41
UTC ·
(2 days ago)
probing for exposed files and admin pages and remote code execution attempts: 151 attempts within 1 minute, seen by web server log and CrowdSec (reported by RemotePower)
Web App Attack
Hacking
🇩🇪
Mr-Money
2026-11-12 23:23:34
UTC ·
(2 days ago)
scenario: crowdsecurity/http-sensitive-files - events: 5
Web App Attack
Hacking
Anonymous
2026-11-12 22:07:03
UTC ·
(2 days ago)
Automated web scanner. Requested suspicious paths: /.git/config. UTC: 2026-11-12 22:02:56.
Web App Attack