🇪🇸
el-brujo
2026-09-01 20:40:21
(3 hours ago)
01/Sep/2026:22:40:21.212382 +0200Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client ...
show more
01/Sep/2026:22:40:21.212382 +0200Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 43.157.175.122] ModSecurity: Warning. Pattern match "\\\\\\\\b(?:keep-alive|close),\\\\\\\\s?(?:keep-alive|close)\\\\\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "339"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "alpine.elhacker.net"] [uri "/"] [unique_id "apc4NUUat58qZVCYHPaQBgAAHnk"]
...
show less
Hacking
Web App Attack
2026-09-01 14:17:56
(9 hours ago)
43.157.175.122 detected and blocked by apache-modsecurity after 1 try
Brute-Force
🇵🇱
Budyn
2026-09-01 09:25:33
(14 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: staging.dont-eat-the-pudding.online | URI: /.git/HEAD | UA: Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇪🇸
librebit
2026-09-01 06:18:22
(17 hours ago)
Brute force
Brute-Force
🇺🇸
Alvino
2026-09-01 00:20:36
(23 hours ago)
Blocked due to using a VPN or data center IP with abuse: 100
Web Spam
VPN IP
🇺🇸
SX Communications
2026-09-01 00:01:26
(1 day ago)
Blocked abusive HTTP application-layer DoS / botnet traffic from 43.157.175.122: traffic from this a ...
show more
Blocked abusive HTTP application-layer DoS / botnet traffic from 43.157.175.122: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host.
show less
DDoS Attack
Bad Web Bot
Exploited Host
🇵🇱
Budyn
2026-08-31 19:35:50
(1 day ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: teddypot.site | URI: /.git/HEAD | UA: Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1 | BODY: [Empty / GET Request]
show less
Hacking
Web App Attack
2026-08-31 09:33:53
(1 day ago)
FortiWeb WAF: 42 attacks detected. Threat Score: 10800. Types: Client Management(21), Block IP List( ...
show more
FortiWeb WAF: 42 attacks detected. Threat Score: 10800. Types: Client Management(21), Block IP List(21). Origin: Brazil.
show less
Web App Attack
🇪🇸
librebit
2026-08-31 05:31:38
(1 day ago)
Brute force
Brute-Force
🇩🇪
big-cloud.nl
2026-08-31 05:16:12
(1 day ago)
Try to access /xmlrpc.php
Web App Attack
🇫🇷
Sklurk
2026-08-31 04:17:02
(1 day ago)
Web App Attack
Web App Attack
🇵🇱
Budyn
2026-08-31 00:55:39
(1 day ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: metrics.budyn.ovh | URI: /.env | UA: Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇫🇷
✨
2026-08-30 23:04:06
(2 days ago)
Rule : Security
Rule: Security
Event: Security
4 System %592 43.157.175.122 36214 ***hidden-priva ...
show more
Rule : Security
Rule: Security
Event: Security
4 System %592 43.157.175.122 36214 ***hidden-privacy*** 80 6 26380112 %610 44
show less
Port Scan
Hacking
Brute-Force
🇵🇱
mscode.pl
2026-08-30 22:51:35
(2 days ago)
Triggered Cloudflare WAF (firewallCustom) from BR.
Action taken: CHALLENGE
ASN: 132203 (Tencent Buil ...
show more
Triggered Cloudflare WAF (firewallCustom) from BR.
Action taken: CHALLENGE
ASN: 132203 (Tencent Building, Kejizhongyi Avenue)
Protocol: HTTP/1.1 (GET method)
Zone: r2.selify.io
Endpoint: /
UA: Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1
show less
Bad Web Bot
🇦🇹
Pingger Shikkoken
2026-08-30 19:15:41
(2 days ago)
2026-08-30T19:15:41+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC ...
show more
2026-08-30T19:15:41+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=43.157.175.122 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x00 TTL=43 ID=59723 DF PROTO=TCP SPT=39770 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 2026-08-30T19:15:42+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=43.157.175.122 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x00 TTL=43 ID=59724 DF PROTO=TCP SPT=39770 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 2026-08-30T19:15:44+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=43.157.175.122 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x00 TTL=43 ID=59725 DF PROTO=TCP SPT=39770 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 ...
show less
Hacking
Bad Web Bot