🇫🇮
Rauno Asp
2026-10-31 02:00:34
(5 hours ago)
Automated .env credentials scanning attempt detected by honeypot on elbasanapartments.al
Web App Attack
🇵🇱
Budyn
2026-10-30 15:45:55
(15 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: docker.goblinpot.site | URI: /.env | UA: Mozilla/ ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: docker.goblinpot.site | URI: /.env | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 | BODY: [Empty / GET Request] | HEADERS: {"Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"US","Cf-Connecting-Ip":"104.28.201.80","Cdn-Loop":"cloudflare; loops=1","Sec-Fetch-Dest":"document","Sec-Ch-Ua-Platform":"\"Windows\"","Sec-Ch-Ua-Mobile":"?0","Sec-Ch-Ua":"\"Google Chrome\";v
show less
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-10-30 13:45:16
(17 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: auth.sweetpuddingtrap.top | URI: /.env | UA: Mozi ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: auth.sweetpuddingtrap.top | URI: /.env | UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot) | BODY: [Empty / GET Request] | HEADERS: {"Accept-Encoding":"gzip, br","Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"US","Cf-Connecting-Ip":"104.28.201.80","Cdn-Loop":"cloudflare; loops=1","Cf-Ray":"a52adc01a8d92522-SJC","Accept-Language":"en-US,en;q=0.9","Accept":"text\/html,appl
show less
Bad Web Bot
Web App Attack
🇦🇺
greenhost.com.au
2026-10-30 12:07:22
(19 hours ago)
web application attack (15 malicious requests flagged/blocked by ModSecurity CRS) against 1 server(s) in the last hour. Detected by Wazuh SIEM (automatic report).
Web App Attack
🇵🇱
Budyn
2026-10-30 11:12:42
(20 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: nexus.goblinpot.website | URI: /.env | UA: Mozill ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: nexus.goblinpot.website | URI: /.env | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 | BODY: [Empty / GET Request] | HEADERS: {"Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"US","Cf-Connecting-Ip":"104.28.201.80","Cdn-Loop":"cloudflare; loops=1","Sec-Ch-Ua-Mobile":"?0","Sec-Ch-Ua":"\"Google Chrome\";v=\"135\", \"Chromium\";v=\"135\", \"Not.A\/Brand\";v=\"
show less
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-10-30 09:09:50
(22 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: docker.budyn.top | URI: /.env.local | UA: Mozilla ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: docker.budyn.top | URI: /.env.local | UA: Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.6422.113 Mobile Safari/537.36 | BODY: [Empty / GET Request] | HEADERS: {"Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"US","Cf-Connecting-Ip":"104.28.201.80","Cdn-Loop":"cloudflare; loops=1","Accept-Encoding":"gzip, br","Accept":"text\/html,application\/xhtml+xml,application\/xml;q=0.9,*\/*;q=0.8"
show less
Bad Web Bot
Web App Attack
🇪🇸
Serpes
2026-10-30 08:47:37
(22 hours ago)
Suspicious activity detected
Web App Attack
DDoS Attack
Hacking
🇵🇱
Budyn
2026-10-30 05:54:07
(1 day ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: metrics.dont-eat-the-pudding.online | URI: /.env ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: metrics.dont-eat-the-pudding.online | URI: /.env | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15 | BODY: [Empty / GET Request] | HEADERS: {"Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"US","Cf-Connecting-Ip":"104.28.201.80","Cdn-Loop":"cloudflare; loops=1","Cf-Ray":"a52829d76b2597f0-SJC","Accept-Language":"en-US,en;q=0.9","Accept":"text\/html,application\/x
show less
Bad Web Bot
Web App Attack
🇩🇪
hidemail.app
2026-10-30 05:47:11
(1 day ago)
Automated scan for exposed config/secret files and known web exploits (e.g. /.env, RCE probes); auto-banned by fail2ban.
Web App Attack
Hacking
🇨🇭
jebla.ch
2026-10-30 02:30:31
(1 day ago)
Busted by the WatchPost edge sentinel: this host was probing web-app endpoints for a way in. Blocked at the edge, logged, and shared with the community. Last seen 2026-10-30 02:26 UTC.
Web App Attack
2026-10-30 02:09:35
(1 day ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇵🇱
Budyn
2026-10-30 01:50:54
(1 day ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: auth.teddypot.store | URI: /.git/HEAD | UA: Mozil ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: auth.teddypot.store | URI: /.git/HEAD | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 | BODY: [Empty / GET Request] | HEADERS: {"Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"US","Cf-Connecting-Ip":"104.28.201.80","Cdn-Loop":"cloudflare; loops=1","Sec-Ch-Ua":"\"Google Chrome\";v=\"135\", \"Chromium\";v=\"135\", \"Not.A\/Brand\";v=\"24\"","Accept-Encoding"
show less
Bad Web Bot
Web App Attack
🇺🇸
Glitched
2026-10-29 23:48:49
(1 day ago)
ECW observed repeated web application probing. Requests: 5. Paths: /.env, /.git/config, /.git/HEAD, /.env.old, /.env.save. GreyNoise: no cached enrichment
Web App Attack
🇨🇦
john doe
2026-10-29 23:03:02
(1 day ago)
SentinelBot: Secret-path hunting (5 distinct paths): Env File Hunting (score: 68)
Bad Web Bot
🇺🇸
ambor
2026-10-29 22:57:41
(1 day ago)
Attack type: honeypot_lure | Target: /.env | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) Apple | Country: US
Hacking
