2026-10-29 12:27:28
(2 hours ago)
2026-10-29T12:27:28.632957+00:00 instance-20260804-1025 wordpress(acbp.org.co)[506796]: Blocked user enumeration attempt from 85.204.70.100
...
Web App Attack
🇦🇹
penguin-solutions.at
2026-10-29 12:10:27
(2 hours ago)
Excessive 403/404 errors
...
Brute-Force
Web App Attack
🇵🇱
Budyn
2026-10-29 08:47:35
(5 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: ssh.goblinpot.space | URI: /wp-admin/ | UA: Unknown User-Agen ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: ssh.goblinpot.space | URI: /wp-admin/ | UA: Unknown User-Agent | BODY: [Empty / GET Request] | HEADERS: {"Accept-Encoding":"gzip, br","Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"FR","Cf-Connecting-Ip":"85.204.70.100","Cdn-Loop":"cloudflare; loops=1","Cf-Ray":"a520ea952e2dbb8a-CDG","X-Forwarded-For":"85.204.70.100"}
show less
Bad Web Bot
Web App Attack
🇩🇪
usc-IPDB
2026-10-29 07:01:19
(7 hours ago)
85.204.70.100 - - [29/Oct/2026:08:01:18 +0100] "GET /wp-content/uploads/ HTTP/1.1" 403 146 "-" "-"
85.204.70.100 - - [29/Oct/2026:08:01:18 +0100] "GET /wp-includes/ HTTP/1.1" 403 146 "-" "-"
85.204.70.100 - - [29/Oct/2026:08:01:18 +0100] "GET /wp-inc ...
show more
85.204.70.100 - - [29/Oct/2026:08:01:18 +0100] "GET /wp-content/uploads/ HTTP/1.1" 403 146 "-" "-"
85.204.70.100 - - [29/Oct/2026:08:01:18 +0100] "GET /wp-includes/ HTTP/1.1" 403 146 "-" "-"
85.204.70.100 - - [29/Oct/2026:08:01:18 +0100] "GET /wp-includes/css/ HTTP/1.1" 403 146 "-" "-"
...
show less
Port Scan
🇵🇱
Budyn
2026-10-29 06:08:53
(8 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: panel.definitelynotahoneypot.online | URI: /vendo ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: panel.definitelynotahoneypot.online | URI: /vendor/phpunit/phpunit/src/Util/PHP/ | UA: Unknown User-Agent | BODY: [Empty / GET Request] | HEADERS: {"Accept-Encoding":"gzip, br","Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"FR","Cf-Connecting-Ip":"85.204.70.100","Cdn-Loop":"cloudflare; loops=1","Cf-Ray":"a520021bda90700c-CDG","X-Forwarded-For":"85.204.70.100"}
show less
Bad Web Bot
Web App Attack
🇺🇸
han35
2026-10-29 06:00:03
(8 hours ago)
ProtocolSecure - WP honeypot: /wp-content/uploads/ (kez: 5)
Hacking
Bad Web Bot
Web App Attack
🇮🇹
ciccio diddo
2026-10-29 05:52:21
(8 hours ago)
High Burst multiple 40X port:Tcp/80,443
Brute-Force
Web App Attack
🇵🇱
Budyn
2026-10-29 03:43:28
(10 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: prometheus.definitelynotahoneypot.xyz | URI: /wp-admin/css/co ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: prometheus.definitelynotahoneypot.xyz | URI: /wp-admin/css/colors/ | UA: Unknown User-Agent | BODY: [Empty / GET Request] | HEADERS: {"Accept-Encoding":"gzip, br","Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"FR","Cf-Connecting-Ip":"85.204.70.100","Cdn-Loop":"cloudflare; loops=1","Cf-Ray":"a51f2d184a89d5ac-CDG","X-Forwarded-For":"85.204.70.100"}
show less
Bad Web Bot
Web App Attack
🇩🇪
svr
2026-10-29 01:48:31
(12 hours ago)
Abusive Automated Web Scanner
Web App Attack
🇵🇱
Budyn
2026-10-29 00:54:39
(13 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: mail.goblinpot.space | URI: /vendor/phpunit/phpun ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: mail.goblinpot.space | URI: /vendor/phpunit/phpunit/src/Util/PHP/ | UA: Unknown User-Agent | BODY: [Empty / GET Request] | HEADERS: {"Accept-Encoding":"gzip, br","Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"FR","Cf-Connecting-Ip":"85.204.70.100","Cdn-Loop":"cloudflare; loops=1","Cf-Ray":"a51e35d048898e9c-CDG","X-Forwarded-For":"85.204.70.100"}
show less
Bad Web Bot
Web App Attack
🇬🇧
obsidianwaf
2026-10-29 00:37:14
(13 hours ago)
Reported by ObsidianWAF: source repeatedly flagged by a web application firewall fleet for abusive/malicious HTTP activity.
Web App Attack
Hacking
🇦🇺
nzhost.co.nz
2026-10-28 23:47:15
(14 hours ago)
$f2bV_matches
Hacking
Brute-Force
🇦🇺
Klaverstyn
2026-10-28 23:46:43
(14 hours ago)
Persistent attacker, repeat offender
Hacking
🇮🇹
VHosting
2026-10-28 23:20:03
(15 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇩🇪
macrob
2026-10-28 23:14:16
(15 hours ago)
2026/10/28 23:14:15 [error] 3346444#3346444: *7063039 access forbidden by rule, client: 85.204.70.100, server: bin.partners, request: "GET //wp-includes/wlwmanifest.xml HTTP/2.0", host: "bin.partners"
2026/10/28 23:14:15 [error] 3346444#3346444: *706 ...
show more
2026/10/28 23:14:15 [error] 3346444#3346444: *7063039 access forbidden by rule, client: 85.204.70.100, server: bin.partners, request: "GET //wp-includes/wlwmanifest.xml HTTP/2.0", host: "bin.partners"
2026/10/28 23:14:15 [error] 3346444#3346444: *7063042 access forbidden by rule, client: 85.204.70.100, server: bin.partners, request: "GET //xmlrpc.php?rsd HTTP/2.0", host: "bin.partners"
2026/10/28 23:14:15 [error] 3346444#3346444: *7063045 access forbidden by rule, client: 85.204.70.100, server: bin.partners, request: "GET //blog/wp-includes/wlwmanifest.xml HTTP/2.0", host: "bin.partners"
...
show less
Web App Attack
