🇳🇱
e.fierstra
2026-10-30 04:51:12
(1 hour ago)
excessive HTTP 404 errors
Bad Web Bot
🇩🇪
Mr-Money
2026-10-30 03:16:28
(2 hours ago)
scenario: crowdsecurity/http-probing - events: 11
Web App Attack
Hacking
🇵🇱
Budyn
2026-10-29 10:56:11
(19 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: sweetpuddingtrap.xyz | URI: /.well-known/agent ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: sweetpuddingtrap.xyz | URI: /.well-known/agent.json | UA: agentcensus-crawler/1.0 (+https://agentcensus.dev/crawler) | BODY: [Empty / GET Request] | HEADERS: {"Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"US","Cf-Connecting-Ip":"100.24.96.96","Cdn-Loop":"cloudflare; loops=1","Cf-Ray":"a521a6f5cab7c340-EWR","Accept":"application\/json, application\/ld+json;q=0.9, *\/*;q=0.1","Accept-Encoding":"gzip, br","X-Forwarded-For":"100.24.
show less
Hacking
Web App Attack
🇵🇱
Budyn
2026-10-29 04:50:37
(1 day ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: teddypot.pro | URI: /.well-known/agentcensus-c ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: teddypot.pro | URI: /.well-known/agentcensus-control-probe-should-404.json | UA: agentcensus-crawler/1.0 (+https://agentcensus.dev/crawler) | BODY: [Empty / GET Request] | HEADERS: {"Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"US","Cf-Connecting-Ip":"100.24.96.96","Cdn-Loop":"cloudflare; loops=1","Cf-Ray":"a51f8f73c9cdacd7-EWR","Accept":"application\/json, application\/ld+json;q=0.9, *\/*;q=0.1","Accept-Encoding":"gzip, br","X-
show less
Hacking
Web App Attack
🇵🇱
Budyn
2026-10-28 04:32:53
(2 days ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: goblinpot.online | URI: /.well-known/did.json ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: goblinpot.online | URI: /.well-known/did.json | UA: agentcensus-crawler/1.0 (+https://agentcensus.dev/crawler) | BODY: [Empty / GET Request] | HEADERS: {"Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"US","Cf-Connecting-Ip":"100.24.96.96","Cdn-Loop":"cloudflare; loops=1","Cf-Ray":"a517381afd4aa9c4-IAD","Accept":"application\/json, application\/ld+json;q=0.9, *\/*;q=0.1","Accept-Encoding":"gzip, br","X-Forwarded-For":"100.24.96.96"
show less
Hacking
Web App Attack
🇵🇱
Budyn
2026-10-27 18:34:43
(2 days ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: dont-eat-the-pudding.top | URI: /.well-known/a ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: dont-eat-the-pudding.top | URI: /.well-known/agent-card.json | UA: agentcensus-crawler/1.0 (+https://agentcensus.dev/crawler) | BODY: [Empty / GET Request] | HEADERS: {"Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"US","Cf-Connecting-Ip":"100.24.96.96","Cdn-Loop":"cloudflare; loops=1","Cf-Ray":"a513cbe16e09840c-EWR","Accept":"application\/json, application\/ld+json;q=0.9, *\/*;q=0.1","Accept-Encoding":"gzip, br","X-Forwarded-For"
show less
Hacking
Web App Attack
🇵🇱
Budyn
2026-10-26 15:19:35
(3 days ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: teddypot.space | URI: /.well-known/mcp-server ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: teddypot.space | URI: /.well-known/mcp-server | UA: agentcensus-crawler/1.0 (+https://agentcensus.dev/crawler) | BODY: [Empty / GET Request] | HEADERS: {"Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"US","Cf-Connecting-Ip":"100.24.96.96","Cdn-Loop":"cloudflare; loops=1","Cf-Ray":"a50a70ae09e6adf8-EWR","Accept":"application\/json, application\/ld+json;q=0.9, *\/*;q=0.1","Accept-Encoding":"gzip, br","X-Forwarded-For":"100.24.96.96"
show less
Hacking
Web App Attack
🇵🇱
Budyn
2026-10-26 12:15:38
(3 days ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: goblinpot.tech | URI: /.well-known/agentcensus ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: goblinpot.tech | URI: /.well-known/agentcensus-control-probe-should-404.json | UA: agentcensus-crawler/1.0 (+https://agentcensus.dev/crawler) | BODY: [Empty / GET Request] | HEADERS: {"Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"US","Cf-Connecting-Ip":"100.24.96.96","Cdn-Loop":"cloudflare; loops=1","Cf-Ray":"a5096338985ed6af-IAD","Accept":"application\/json, application\/ld+json;q=0.9, *\/*;q=0.1","Accept-Encoding":"gzip, br","
show less
Hacking
Web App Attack
🇵🇱
Budyn
2026-10-26 06:09:15
(4 days ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: astropot.website | URI: /.well-known/did.json ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: astropot.website | URI: /.well-known/did.json | UA: agentcensus-crawler/1.0 (+https://agentcensus.dev/crawler) | BODY: [Empty / GET Request] | HEADERS: {"Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"US","Cf-Connecting-Ip":"100.24.96.96","Cdn-Loop":"cloudflare; loops=1","Cf-Ray":"a5074a83a841c4c2-IAD","Accept":"application\/json, application\/ld+json;q=0.9, *\/*;q=0.1","Accept-Encoding":"gzip, br","X-Forwarded-For":"100.24.96.96"
show less
Hacking
Web App Attack
2026-10-26 04:39:00
(4 days ago)
Automated abuse report (probe_api). Observed GET /openapi.json hits=1 at 2026-10-26T04:36:57Z UTC.
Web App Attack
🇵🇱
Budyn
2026-10-26 03:46:22
(4 days ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: dont-eat-the-pudding.online | URI: /.well-know ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: dont-eat-the-pudding.online | URI: /.well-known/agents.json | UA: agentcensus-crawler/1.0 (+https://agentcensus.dev/crawler) | BODY: [Empty / GET Request] | HEADERS: {"Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"US","Cf-Connecting-Ip":"100.24.96.96","Cdn-Loop":"cloudflare; loops=1","Cf-Ray":"a50679386df69312-IAD","Accept":"application\/json, application\/ld+json;q=0.9, *\/*;q=0.1","Accept-Encoding":"gzip, br","X-Forwarded-For":
show less
Hacking
Web App Attack
🇵🇱
Budyn
2026-10-26 00:18:09
(4 days ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: budyn.xyz | URI: /.well-known/oauth-protected- ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: budyn.xyz | URI: /.well-known/oauth-protected-resource | UA: agentcensus-crawler/1.0 (+https://agentcensus.dev/crawler) | BODY: [Empty / GET Request] | HEADERS: {"Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"US","Cf-Connecting-Ip":"100.24.96.96","Cdn-Loop":"cloudflare; loops=1","Cf-Ray":"a5054833bbb64d20-IAD","Accept":"application\/json, application\/ld+json;q=0.9, *\/*;q=0.1","Accept-Encoding":"gzip, br","X-Forwarded-For":"100.
show less
Hacking
Web App Attack
🇵🇱
Budyn
2026-10-25 03:42:26
(5 days ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: astropot.tech | URI: /.well-known/agentcensus- ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: astropot.tech | URI: /.well-known/agentcensus-control-probe-should-404.json | UA: agentcensus-crawler/1.0 (+https://agentcensus.dev/crawler) | BODY: [Empty / GET Request] | HEADERS: {"Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"US","Cf-Connecting-Ip":"100.24.96.96","Cdn-Loop":"cloudflare; loops=1","Cf-Ray":"a4fe36166daa05c3-IAD","Accept":"application\/json, application\/ld+json;q=0.9, *\/*;q=0.1","Accept-Encoding":"gzip, br","X
show less
Hacking
Web App Attack
🇩🇪
IVski.com
2026-10-25 00:47:47
(5 days ago)
IVski WAF | Suspicious activity detected - generic bot or scanner pattern
Hacking
Brute-Force
Web App Attack
🇦🇺
Klaverstyn
2026-10-24 19:45:09
(5 days ago)
Excessive HTTP request rate
Web App Attack
