🇩🇪
IVski.com
2026-10-31 17:09:51
(13 hours ago)
IVski WAF | Sensitive file probe detected - looking for .git
Hacking
Brute-Force
Web App Attack
🇵🇱
Budyn
2026-10-31 14:21:45
(16 hours ago)
[Budyn Honeypot Sinkhole] | Attack type: Enterprise & Framework Recon Scanner | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: auth.dont-eat-the-pudding.top | Path: /.git/config | User-Agent: ZeroClaw/2.0 | Request: [Em ...
show more
[Budyn Honeypot Sinkhole] | Attack type: Enterprise & Framework Recon Scanner | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: auth.dont-eat-the-pudding.top | Path: /.git/config | User-Agent: ZeroClaw/2.0 | Request: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇫🇮
Rauno Asp
2026-10-31 02:00:34
(1 day ago)
Automated .env credentials scanning attempt detected by honeypot on elbasanapartments.al
Web App Attack
🇵🇱
Budyn
2026-10-30 15:45:55
(1 day ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: docker.goblinpot.site | URI: /.env | UA: Mozilla/ ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: docker.goblinpot.site | URI: /.env | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 | BODY: [Empty / GET Request] | HEADERS: {"Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"US","Cf-Connecting-Ip":"104.28.201.80","Cdn-Loop":"cloudflare; loops=1","Sec-Fetch-Dest":"document","Sec-Ch-Ua-Platform":"\"Windows\"","Sec-Ch-Ua-Mobile":"?0","Sec-Ch-Ua":"\"Google Chrome\";v
show less
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-10-30 13:45:16
(1 day ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: auth.sweetpuddingtrap.top | URI: /.env | UA: Mozi ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: auth.sweetpuddingtrap.top | URI: /.env | UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot) | BODY: [Empty / GET Request] | HEADERS: {"Accept-Encoding":"gzip, br","Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"US","Cf-Connecting-Ip":"104.28.201.80","Cdn-Loop":"cloudflare; loops=1","Cf-Ray":"a52adc01a8d92522-SJC","Accept-Language":"en-US,en;q=0.9","Accept":"text\/html,appl
show less
Bad Web Bot
Web App Attack
🇦🇺
greenhost.com.au
2026-10-30 12:07:22
(1 day ago)
web application attack (15 malicious requests flagged/blocked by ModSecurity CRS) against 1 server(s) in the last hour. Detected by Wazuh SIEM (automatic report).
Web App Attack
🇵🇱
Budyn
2026-10-30 11:12:42
(1 day ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: nexus.goblinpot.website | URI: /.env | UA: Mozill ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: nexus.goblinpot.website | URI: /.env | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 | BODY: [Empty / GET Request] | HEADERS: {"Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"US","Cf-Connecting-Ip":"104.28.201.80","Cdn-Loop":"cloudflare; loops=1","Sec-Ch-Ua-Mobile":"?0","Sec-Ch-Ua":"\"Google Chrome\";v=\"135\", \"Chromium\";v=\"135\", \"Not.A\/Brand\";v=\"
show less
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-10-30 09:09:50
(1 day ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: docker.budyn.top | URI: /.env.local | UA: Mozilla ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: docker.budyn.top | URI: /.env.local | UA: Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.6422.113 Mobile Safari/537.36 | BODY: [Empty / GET Request] | HEADERS: {"Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"US","Cf-Connecting-Ip":"104.28.201.80","Cdn-Loop":"cloudflare; loops=1","Accept-Encoding":"gzip, br","Accept":"text\/html,application\/xhtml+xml,application\/xml;q=0.9,*\/*;q=0.8"
show less
Bad Web Bot
Web App Attack
🇪🇸
Serpes
2026-10-30 08:47:37
(1 day ago)
Suspicious activity detected
Web App Attack
DDoS Attack
Hacking
🇵🇱
Budyn
2026-10-30 05:54:07
(2 days ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: metrics.dont-eat-the-pudding.online | URI: /.env ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: metrics.dont-eat-the-pudding.online | URI: /.env | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15 | BODY: [Empty / GET Request] | HEADERS: {"Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"US","Cf-Connecting-Ip":"104.28.201.80","Cdn-Loop":"cloudflare; loops=1","Cf-Ray":"a52829d76b2597f0-SJC","Accept-Language":"en-US,en;q=0.9","Accept":"text\/html,application\/x
show less
Bad Web Bot
Web App Attack
🇩🇪
hidemail.app
2026-10-30 05:47:11
(2 days ago)
Automated scan for exposed config/secret files and known web exploits (e.g. /.env, RCE probes); auto-banned by fail2ban.
Web App Attack
Hacking
🇨🇭
jebla.ch
2026-10-30 02:30:31
(2 days ago)
Busted by the WatchPost edge sentinel: this host was probing web-app endpoints for a way in. Blocked at the edge, logged, and shared with the community. Last seen 2026-10-30 02:26 UTC.
Web App Attack
2026-10-30 02:09:35
(2 days ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇵🇱
Budyn
2026-10-30 01:50:54
(2 days ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: auth.teddypot.store | URI: /.git/HEAD | UA: Mozil ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: auth.teddypot.store | URI: /.git/HEAD | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 | BODY: [Empty / GET Request] | HEADERS: {"Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"US","Cf-Connecting-Ip":"104.28.201.80","Cdn-Loop":"cloudflare; loops=1","Sec-Ch-Ua":"\"Google Chrome\";v=\"135\", \"Chromium\";v=\"135\", \"Not.A\/Brand\";v=\"24\"","Accept-Encoding"
show less
Bad Web Bot
Web App Attack
🇺🇸
Glitched
2026-10-29 23:48:49
(2 days ago)
ECW observed repeated web application probing. Requests: 5. Paths: /.env, /.git/config, /.git/HEAD, /.env.old, /.env.save. GreyNoise: no cached enrichment
Web App Attack
