🇬🇧
jackalek
2026-10-30 20:33:00
(13 minutes ago)
104.28.222.43 - - [30/Oct/2026:20:32:58 +0000] "GET /.env.production HTTP/1.1" 404 549 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.6422.113 Mobile Safari/537.36"
104.28.222.43 - - [30/Oct/2026:20: ...
show more
104.28.222.43 - - [30/Oct/2026:20:32:58 +0000] "GET /.env.production HTTP/1.1" 404 549 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.6422.113 Mobile Safari/537.36"
104.28.222.43 - - [30/Oct/2026:20:32:59 +0000] "GET /.env.local HTTP/1.1" 404 5604 "https://www.google.com/search?q=klej.net" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15"
104.28.222.43 - - [30/Oct/2026:20:32:59 +0000] "GET /.env HTTP/1.1" 404 5604 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
104.28.222.43 - - [30/Oct/2026:20:32:59 +0000] "GET /.env.backup HTTP/1.1" 404 5605 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
104.28.222.43 - - [30/Oct/2026:20:32:59 +0000] "GET /.git/HEAD HTTP/1.1" 404 5604 "https://www.google.com/search?q=klej.net" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537
...
show less
Brute-Force
Web App Attack
🇵🇱
Budyn
2026-10-30 19:48:17
(57 minutes ago)
[Budyn Honeypot Sinkhole] | Attack type: Enterprise & Framework Recon Scanner | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: grafana.astropot.website | Path: /.env.local | User-Agent: Mozilla/5.0 AppleWebKit/537.36 (K ...
show more
[Budyn Honeypot Sinkhole] | Attack type: Enterprise & Framework Recon Scanner | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: grafana.astropot.website | Path: /.env.local | User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot) | Request: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-10-30 15:50:56
(4 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: jira.goblinpot.store | URI: /config/database.php. ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: jira.goblinpot.store | URI: /config/database.php.bak | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15 | BODY: [Empty / GET Request] | HEADERS: {"Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"SG","Cf-Connecting-Ip":"104.28.222.43","Cdn-Loop":"cloudflare; loops=1","Cf-Ray":"a52b941b4caef875-SIN","Accept-Language":"en-US,en;q=0.9","Accept":"text\/html,applicatio
show less
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-10-30 13:50:32
(6 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: git.astropot.website | URI: /.env | UA: Mozilla/5 ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: git.astropot.website | URI: /.env | UA: Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.6422.113 Mobile Safari/537.36 | BODY: [Empty / GET Request] | HEADERS: {"Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"SG","Cf-Connecting-Ip":"104.28.222.43","Cdn-Loop":"cloudflare; loops=1","Accept-Encoding":"gzip, br","Accept":"text\/html,application\/xhtml+xml,application\/xml;q=0.9,*\/*;q=0.8","
show less
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-10-30 11:47:47
(8 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: db.goblinpot.space | URI: /.env | UA: Mozilla/5.0 ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: db.goblinpot.space | URI: /.env | UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot) | BODY: [Empty / GET Request] | HEADERS: {"Accept-Encoding":"gzip, br","Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"SG","Cf-Connecting-Ip":"104.28.222.43","Cdn-Loop":"cloudflare; loops=1","Cf-Ray":"a52a2fe5be638829-SIN","Accept-Language":"en-US,en;q=0.9","Accept":"text\/html,application
show less
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-10-30 09:47:41
(10 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: nexus.astropot.website | URI: /.env | UA: Mozilla ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: nexus.astropot.website | URI: /.env | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15 | BODY: [Empty / GET Request] | HEADERS: {"Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"SG","Cf-Connecting-Ip":"104.28.222.43","Cdn-Loop":"cloudflare; loops=1","Cf-Ray":"a5297ffa0b033fc3-SIN","Accept-Language":"en-US,en;q=0.9","Accept":"text\/html,application\/xhtml+xml,appl
show less
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-10-30 07:41:43
(13 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: nexus.astropot.website | URI: /.env.local | UA: M ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: nexus.astropot.website | URI: /.env.local | UA: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) | BODY: [Empty / GET Request] | HEADERS: {"Accept-Encoding":"gzip, br","Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"SG","Cf-Connecting-Ip":"104.28.222.43","Cdn-Loop":"cloudflare; loops=1","Cf-Ray":"a528c77858f7122b-SIN","Accept-Language":"en-US,en;q=0.9","Accept":"text\/html,application\/xhtml+xml,application
show less
Bad Web Bot
Web App Attack
2026-10-30 03:56:55
(16 hours ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇬🇧
Aetherweb Ark
2026-10-30 03:18:08
(17 hours ago)
(mod_security) mod_security (id:949110) triggered by 104.28.222.43 (SG/Singapore/-): N in the last X secs
Web App Attack
🇳🇦
jacqueskruger
2026-10-29 15:41:49
(1 day ago)
Locally observed malicious HTTP activity on our reverse proxy in the last 24 hours. 1 confirmed alerts / 2 triggering events. Detections: high-confidence-scanner. Latest evidence UTC: 2026-10-29T15:38:27Z. Evidence: repeated distinct requests matchin ...
show more
Locally observed malicious HTTP activity on our reverse proxy in the last 24 hours. 1 confirmed alerts / 2 triggering events. Detections: high-confidence-scanner. Latest evidence UTC: 2026-10-29T15:38:27Z. Evidence: repeated distinct requests matching our high-confidence scanner rules.
show less
Bad Web Bot
🇵🇱
Budyn
2026-10-29 11:26:27
(1 day ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: forum.definitelynotahoneypot.top | URI: /.env.loc ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: forum.definitelynotahoneypot.top | URI: /.env.local | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15 | BODY: [Empty / GET Request] | HEADERS: {"Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"SG","Cf-Connecting-Ip":"104.28.222.43","Cdn-Loop":"cloudflare; loops=1","Cf-Ray":"a521d34e7ce76490-SIN","Accept-Language":"en-US,en;q=0.9","Accept":"text\/html,application
show less
Bad Web Bot
Web App Attack
🇩🇪
maxpower
2026-10-29 06:24:08
(1 day ago)
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 104.28.222.43 (SG/Singapore/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 104.28.222.43 - - [29/Oct/2026:07:24:02 +0100] "GET /secrets.json HTTP/1 ...
show more
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 104.28.222.43 (SG/Singapore/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 104.28.222.43 - - [29/Oct/2026:07:24:02 +0100] "GET /secrets.json HTTP/1.1" 301 294 "https://www.google.com/search?q=www.staging.villapardi.it" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" "104.28.222.43" host=www.staging.villapardi.it
show less
Port Scan
2026-10-29 01:59:42
(1 day ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇵🇱
Budyn
2026-10-29 00:57:09
(1 day ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: status.definitelynotahoneypot.online | URI: /.env ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: status.definitelynotahoneypot.online | URI: /.env | UA: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) | BODY: [Empty / GET Request] | HEADERS: {"Accept-Encoding":"gzip, br","Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"SG","Cf-Connecting-Ip":"104.28.222.43","Cdn-Loop":"cloudflare; loops=1","Cf-Ray":"a51e3974ca7f6bb2-SIN","Accept-Language":"en-US,en;q=0.9","Accept":"text\/html,application\/xhtml+xml,app
show less
Bad Web Bot
Web App Attack
🇫🇷
SpaceHost-Server
2026-10-28 23:14:28
(1 day ago)
Brute-Force
Web App Attack
