๐ต๐ฑ
Budyn
2026-09-16 20:03:40
(9 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: gitlab.budyn.ovh | URI: /backup.sql | UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
Anonymous
2026-09-16 18:46:26
(10 hours ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
๐ซ๐ท
Zundapper
2026-09-16 13:54:05
(15 hours ago)
52.167.144.165 - - [16/Sep/2026:15:45:15 +0200] "GET /it/15-moduli-laser-per-classe?q=Dimensione+pun ...
show more
52.167.144.165 - - [16/Sep/2026:15:45:15 +0200] "GET /it/15-moduli-laser-per-classe?q=Dimensione+punto+laser-3.4mm%405m-3mm%40100mm-4mm%405m-4mm%4010m-5.7mm%4010m-5mm%4010m-5mm%4020m-22mm%4010m-min+10mm.+tipo+11.5mm+max+13mm%402m-Minore+di+1.2mm%402m-Minore+di+5mm%4010m-Minore+di+8mm%406m-Minore+di+12mm%4010m-2m%4010m HTTP/2.0" 404 167 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36"
52.167.144.165 - - [16/Sep/2026:15:45:15 +0200] "GET /it/15-moduli-laser-per-classe?q=Tensione+nominale-2.4V+~+3.3VV+~+Nominale+3V+DC-3V+~+5.5VV+~+Nominale+5V+DC-3V+~+6VV+~+Nominale+5V+DC-4.05V+~+4.95VV+~+Nominale+4.5V+DC-4.5V+~+6.6VV+~+Nominale+6V+DC-10.8V+~+13.2VV+~+Nominale+12V+DC-12V+DC HTTP/2.0" 404 167 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36"
52.167.144.165 - - [16/Sep/2026:15:45:15 +0200] "G
...
show less
Web App Attack
Port Scan
๐ฆ๐บ
oncord
2026-09-16 01:27:10
(1 day ago)
Form spam
Web Spam
๐ฎ๐ฉ
sockominfo
2026-09-15 16:01:02
(1 day ago)
Active Response: IP 52.167.144.165 Blocked via Firewall Drop. Threat Score: 3.8/10 (LOW). Confidence ...
show more
Active Response: IP 52.167.144.165 Blocked via Firewall Drop. Threat Score: 3.8/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT
show less
Hacking
Web App Attack
๐ฎ๐ฉ
sockominfo
2026-09-15 15:00:14
(1 day ago)
Active Response: IP 52.167.144.165 Blocked via Firewall Drop. Threat Score: 0/10 (INFORMATIONAL). Re ...
show more
Active Response: IP 52.167.144.165 Blocked via Firewall Drop. Threat Score: 0/10 (INFORMATIONAL). Reported by TangerangKota-CSIRT
show less
Hacking
Web App Attack
๐ฉ๐ช
Skyrider
2026-09-14 23:48:26
(2 days ago)
Nginx: HTTP 4xx probe/scan attempts. Automated fail2ban report.
Bad Web Bot
Web App Attack
๐ฆ๐บ
oncord
2026-09-14 22:46:24
(2 days ago)
Form spam
Web Spam
Anonymous
2026-09-14 14:00:00
(2 days ago)
"automated vulnerability scanning/exploitation of a known WordPress plugin bug"
Port Scan
๐จ๐ฟ
antihack.anarchista.xyz
2026-09-14 08:04:29
(2 days ago)
404 burst: 30 hits in 10 min, URI /podle-pruzkumu-kryptoburzy-bitget-maji-evropane-navzdory-soucasny ...
show more
404 burst: 30 hits in 10 min, URI /podle-pruzkumu-kryptoburzy-bitget-maji-evropane-navzdory-soucasnym-prekazkam-obrovsky-zajem-o-placeni-kryptomenami-na-dovolene/, Ref , UA Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36
show less
Brute-Force
Web App Attack
Bad Web Bot
๐ฉ๐ช
bescared
2026-09-13 22:35:00
(3 days ago)
WAF (2) - Malicious activity detected: URL probing.
Bad Web Bot
Web App Attack
Hacking
๐ฌ๐ง
myintarweb
2026-09-13 22:31:23
(3 days ago)
52.167.144.165 - - [13/Sep/2026:23:31:22 +0100] 443 "GET /sitemap.xml.gz HTTP/2.0" 301 1265 "-" "Moz ...
show more
52.167.144.165 - - [13/Sep/2026:23:31:22 +0100] 443 "GET /sitemap.xml.gz HTTP/2.0" 301 1265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36"
...
show less
Hacking
Bad Web Bot
Web App Attack
๐ฆ๐บ
oncord
2026-09-13 15:47:14
(3 days ago)
Form spam
Web Spam
๐ซ๐ท
Zundapper
2026-09-13 13:20:53
(3 days ago)
52.167.144.165 - - [13/Sep/2026:15:12:12 +0200] "GET /2201-cart_default/alimentatore-laser-lfnt-5.jp ...
show more
52.167.144.165 - - [13/Sep/2026:15:12:12 +0200] "GET /2201-cart_default/alimentatore-laser-lfnt-5.jpg HTTP/2.0" 404 167 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36"
52.167.144.165 - - [13/Sep/2026:15:14:58 +0200] "GET /it/15-moduli-laser-per-classe?q=Tensione+nominale-2.4V+~+3.3VV+~+Nominale+3V+DC-2.8V+~+3.3V+~+Nominale+3V+DC-2.85V+~+3VV+~+Nominale+3V+DC-3V+~+5.5VV+~+Nominale+5V+DC-5V+~+7VV+~+Nominale+6V+DC-10.8V+~+13.2VV+~+Nominale+12V+DC-12V+DC-21.6V+~+26.4VV+~+Nominale+24V+DC-22.6V+~+26.4VV+~+Nominale+24V+DC HTTP/2.0" 404 167 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36"
52.167.144.165 - - [13/Sep/2026:15:17:35 +0200] "GET /10871-cart_default/laser-fibra-f532-50-5-42x105x62.jpg HTTP/2.0" 404 167 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0;
...
show less
Web App Attack
Port Scan
Anonymous
2026-09-13 10:07:00
(3 days ago)
Multiple Violations by Botnets
Port Scan
Web App Attack