🇵🇱
Budyn
2026-10-10 12:11:34
(4 days ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: backup.sweetpuddingtrap.top | URI: /.env.dev | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇫🇷
Sklurk
2026-08-01 00:59:25
(2 months ago)
Web App Attack
Web App Attack
🇩🇪
Bedios GmbH
2026-07-11 21:12:22
(3 months ago)
Wordpress hacking attempt
Web App Attack
🇨🇦
SSH-Admin
2026-05-08 18:54:10
(5 months ago)
Probing for Exploits on ns200
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-01-08 11:03:56
(9 months ago)
(mod_security) mod_security (id:210730) triggered by 45.3.55.79 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210730) triggered by 45.3.55.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 08 06:03:49.933827 2026] [security2:error] [pid 8090:tid 8100] [client 45.3.55.79:25631] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.seips.org|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.seips.org"] [uri "/db.sql"] [unique_id "aV-PFZueYZfudRI_YHFPUAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
nowyouknow
2025-12-26 12:12:10
(9 months ago)
(From [email protected] ) Hey,
Instead of
hiring locally at high rates, you can outsource you ...
show more
(From [email protected] ) Hey,
Instead of
hiring locally at high rates, you can outsource your digital marketing workload to a dedicated
assistant for $250/month. They handle SEO, ads, emails, social media, and admin tasks—full
time.
Your first month is 100% free.
Fill out the form to proceed.
Direct Google link:
https://docs.google.com/forms/d/e/1FAIpQLSc0j7_PYJOBpCDJqJEYWDUYRLFuf0fN596h51an
A8k8Me0efA/viewform?usp=header
GLE Link to Google Forms: https://forms.gle/4uj4nBHTiJVQooFA8
Short link: https://shorturl.at/o4IYf
show less
Phishing
Web Spam
🇺🇸
TPI-Abuse
2025-12-02 21:29:44
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.55.79 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.55.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 16:29:39.215659 2025] [security2:error] [pid 16592:tid 16592] [client 45.3.55.79:48665] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "postermodelsworldwideinc.com"] [uri "/.git/HEAD"] [unique_id "aS9aQ4WpdzbiiusYwYqtpQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
OceanTreasure
2025-12-02 19:25:11
(10 months ago)
tcp/443; AWS credentials file access attempt: "GET /.aws/credentials" @ 2025-12-02T19:20:37Z [proxy]
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 05:59:11
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.55.79 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.55.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 00:59:04.931820 2025] [security2:error] [pid 29430:tid 29430] [client 45.3.55.79:39269] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hatefmusic.com"] [uri "/.svn/wc.db"] [unique_id "aS6AKMWgZSjPTWiIKzFPmQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 04:09:46
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.55.79 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.55.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 01 23:09:41.733947 2025] [security2:error] [pid 10831:tid 10831] [client 45.3.55.79:27733] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "personalizedfavorboxes.com"] [uri "/.env"] [unique_id "aS5mhWaT6h4TG7rdpASbowAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 01:16:51
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.55.79 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.55.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 01 20:16:46.808088 2025] [security2:error] [pid 16397:tid 16397] [client 45.3.55.79:58921] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edlee.biz"] [uri "/.env"] [unique_id "aS49_mo96e0XmJxW9AwnUAAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 06:06:30
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.55.79 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.55.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:06:25.868350 2025] [security2:error] [pid 27164:tid 27164] [client 45.3.55.79:48077] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "engelhardtkraatz.com"] [uri "/.git/HEAD"] [unique_id "aSVHYfKG9eHWh7z-6vza0AAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-03-27 10:20:05
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 45.3.55.79 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 45.3.55.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 27 06:19:58.589881 2025] [security2:error] [pid 1863:tid 1863] [client 45.3.55.79:56325] [client 45.3.55.79] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||aandsmetal.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "aandsmetal.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z-UmTl9620xToP_aN1kKXQAAAAQ"], referer: https://aandsmetal.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2024-12-03 02:30:05
(1 year ago)
block ruleset Badbot using very old user-agents 5CF3CDB778C7D82564405B86B9242E612F378C68
Bad Web Bot
