🇵🇱
Budyn
2026-10-26 11:28:59
(7 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: prometheus.budyn.ovh | URI: /wp-login.php | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) Gecko/20100101 Firefox/120.0.1 | BODY: [Empty / GET Request] | HEADERS: {"X-Forwarded-Proto":"https","Cf-Ipcountry":"SG","Sec-Fetch-Mode":"navigate","Sec-Fetch-Dest":"document","Device-Memory":"8","Dnt":"1","Cf-Visitor":"{\"scheme\":\"https\"}","Sec-Fetch-Site":"same-origin","Cf-Connecting-Ip":"134.209.96.76","Accept":"text\/html,application\/xhtml+xml,application\/xml;q=0.9,image\/avif,image\/webp,*\
show less
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-10-26 09:23:22
(10 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: jenkins.budyn.ovh | URI: /wp-login.php | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) Gecko/20100101 Firefox/120.0.1 | BODY: [Empty / GET Request] | HEADERS: {"X-Forwarded-Proto":"https","Cf-Ipcountry":"SG","Sec-Fetch-Mode":"navigate","Sec-Fetch-Dest":"document","Dnt":"1","Cf-Visitor":"{\"scheme\":\"https\"}","Sec-Fetch-Site":"none","Cf-Connecting-Ip":"134.209.96.76","Pragma":"no-cache","Referer":"https:\/\/twitter.com\/","Cache-Control":"max-age=0","Accept":"text\/html,application\/xhtml
show less
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-10-26 07:18:20
(12 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: vpn.definitelynotahoneypot.online | URI: /wp-login.php | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 12_6_2) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6.1 Safari/605.1.15 | BODY: [Empty / GET Request] | HEADERS: {"X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"SG","Cf-Connecting-Ip":"134.209.96.76","Cdn-Loop":"cloudflare; loops=1","Accept-Encoding":"gzip, br","Accept":"text\/html,application\/xhtml+xml,application\/xml;q=0.9,*\/*;q=0.8","Connectio
show less
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-10-26 05:13:06
(14 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: app.definitelynotahoneypot.online | URI: /wp-login.php | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.130 Safari/537.36 | BODY: [Empty / GET Request] | HEADERS: {"X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"SG","Cf-Connecting-Ip":"134.209.96.76","Cdn-Loop":"cloudflare; loops=1","Sec-Fetch-Site":"cross-site","Sec-Fetch-Mode":"navigate","Sec-Fetch-Dest":"document","Sec-Ch-Ua-Platform-Version":
show less
Bad Web Bot
Web App Attack
🇺🇸
masterguru
2026-10-26 03:16:27
(16 hours ago)
WordPress: User enumeration. Pattern match "(author\\\\= (88030-147)
Hacking
🇵🇱
Budyn
2026-10-26 02:48:53
(16 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: billing.definitelynotahoneypot.online | URI: /wp-login.php | UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.6045.159 Safari/537.36 | BODY: [Empty / GET Request] | HEADERS: {"X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"SG","Cf-Connecting-Ip":"134.209.96.76","Cdn-Loop":"cloudflare; loops=1","Sec-Fetch-User":"?1","Sec-Fetch-Site":"cross-site","Sec-Fetch-Mode":"navigate","Sec-Fetch-Dest":"document","Sec-Ch-Ua-Platfor
show less
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-10-25 20:06:39
(23 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: test.budyn.ovh | URI: //xmlrpc.php?rsd | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | BODY: [Empty / GET Request] | HEADERS: {"Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Ipcountry":"SG","Referer":"https:\/\/www.carmitart.com\/\/blog\/\/wp-login.php","Cookie":"__cf_bm=BbRcUqyfHzokx1BSq0Qf0IvbPoDMUgiEKXXp8C.JmGQ-1792958796.736388-1.0.1.1-_RUYTv6Kk6dSnHD4EJacp3L_3quv.W6Er6wm80s4zLzCAi0MRYeZk2XPcmOZq7p6_hK9l
show less
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-10-25 18:05:49
(1 day ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: registry.definitelynotahoneypot.online | URI: //xmlrpc.php?rsd | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | BODY: [Empty / GET Request] | HEADERS: {"Accept-Encoding":"gzip, br","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"SG","Cf-Connecting-Ip":"134.209.96.76","Cdn-Loop":"cloudflare; loops=1","Cookie":"__cf_bm=_WxDPvzVabsqxvz2tOtz1OPjMM8Su3Ll4ElkX7nvLtw-1792951545.898381-1.0.1.1-
show less
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-10-25 16:03:29
(1 day ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: test.definitelynotahoneypot.online | URI: //xmlrpc.php?rsd | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | BODY: [Empty / GET Request] | HEADERS: {"Accept-Encoding":"gzip, br","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"SG","Cf-Connecting-Ip":"134.209.96.76","Cdn-Loop":"cloudflare; loops=1","Cookie":"llar_login_flow=6gz4ooNK0EJanQw3O7Zt0tL02pPTtF8L; wordpress_test_cookie=WP%20Cooki
show less
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-10-25 15:30:57
(1 day ago)
Malicious web bot or vulnerability scanner caught probing infrastructure endpoints.
Bad Web Bot
Web App Attack
🇿🇦
2k11.co.za
2026-10-25 14:46:56
(1 day ago)
2026-10-24 19:26:31,231 fail2ban.actions [743]: NOTICE [nginx-wordpress-login] Ban 134.209.9 ...
show more
2026-10-24 19:26:31,231 fail2ban.actions [743]: NOTICE [nginx-wordpress-login] Ban 134.209.96.76
2026-10-25 16:46:56,347 fail2ban.actions [743]: NOTICE [nginx-wordpress-login] Ban 134.209.96.76
...
show less
Brute-Force
🇵🇱
Budyn
2026-10-25 13:59:59
(1 day ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: billing.definitelynotahoneypot.online | URI: //xmlrpc.php?rsd | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | BODY: [Empty / GET Request] | HEADERS: {"Accept-Encoding":"gzip, br","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"SG","Cf-Connecting-Ip":"134.209.96.76","Cdn-Loop":"cloudflare; loops=1","Connection":"Keep-Alive","Cf-Ray":"a501beb5cc48f31b-MRS","Cookie":"nevercache-b39818=Y;
show less
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-10-24 17:01:01
(2 days ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: billing.definitelynotahoneypot.online | URI: //xmlrpc.php?rsd | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | BODY: [Empty / GET Request] | HEADERS: {"Accept-Encoding":"gzip, br","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"SG","Cf-Connecting-Ip":"134.209.96.76","Cdn-Loop":"cloudflare; loops=1","Cookie":"__cf_bm=SJviwmItjM9BS7qP4JPEKNC2TUO4r.blgjmXOzv7X5c-1792861244.1913328-1.0.1.1-
show less
Bad Web Bot
Web App Attack
🇮🇱
Dolphi
2026-10-23 16:42:15
(3 days ago)
POST //xmlrpc.php
Brute-Force
Web App Attack
🇳🇱
ConsulHosting
2026-10-23 16:40:11
(3 days ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
