🇵🇱
Budyn
2026-11-14 14:40:33
UTC ·
(35 minutes ago)
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: apm.goblinpot.site | Path: /.env | User-Agent: Mozilla/5.0 (Linux; Android 12; Pixel 6) Apple ...
show more
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: apm.goblinpot.site | Path: /.env | User-Agent: Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36 | Request: [Empty / GET Request]
show less
Hacking
Web App Attack
🇬🇧
consul.to
2026-11-14 14:08:45
UTC ·
(1 hour ago)
Web attack/malicious scanning detected
Web App Attack
🇵🇱
Budyn
2026-11-14 12:08:45
UTC ·
(3 hours ago)
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: cloud.budyn.ovh | Path: /backup.sql | User-Agent: Mozilla/5.0 (Linux; Android 12; Pixel 6) Ap ...
show more
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: cloud.budyn.ovh | Path: /backup.sql | User-Agent: Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36 | Request: [Empty / GET Request]
show less
Hacking
Web App Attack
🇩🇪
Vegascosmetics
2026-11-14 12:02:06
UTC ·
(3 hours ago)
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after first-seen suspicion / AbuseIPDB reputation policy (no URL signature). Evidence: Suspicion-Ban (Score 70>=65, Abuse 70, NonEU, first-seen)
Hacking
Exploited Host
Web App Attack
🇵🇱
Budyn
2026-11-14 08:55:15
UTC ·
(6 hours ago)
[Budyn Honeypot Sinkhole] | Attack type: WP Path Scanning (Recon) | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: pma.teddypot.tech | Path: /wp-admin/ | User-Agent: Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/ ...
show more
[Budyn Honeypot Sinkhole] | Attack type: WP Path Scanning (Recon) | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: pma.teddypot.tech | Path: /wp-admin/ | User-Agent: Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36 | Request: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇳🇱
Cloud86 B.V.
2026-11-14 07:48:01
UTC ·
(7 hours ago)
categories: DDoS Attack
DDoS Attack
🇵🇱
Budyn
2026-11-14 06:30:00
UTC ·
(8 hours ago)
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: billing.teddypot.store | Path: /backup.sql | User-Agent: Mozilla/5.0 (Linux; Android 12; Pixe ...
show more
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: billing.teddypot.store | Path: /backup.sql | User-Agent: Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36 | Request: [Empty / GET Request]
show less
Hacking
Web App Attack
🇩🇪
FeG Deutschland
2026-11-14 04:10:43
UTC ·
(11 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1368
Exploited Host
Web App Attack
🇵🇱
Budyn
2026-11-14 00:06:17
UTC ·
(15 hours ago)
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: auth.teddypot.tech | Path: /backup.sql | User-Agent: Mozilla/5.0 (Linux; Android 12; Pixel 6) ...
show more
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: auth.teddypot.tech | Path: /backup.sql | User-Agent: Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36 | Request: [Empty / GET Request]
show less
Hacking
Web App Attack
🇳🇱
COMPLEX
2026-11-13 21:53:50
UTC ·
(17 hours ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
ASN: undefined (undefined)
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
ASN: undefined (undefined)
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36
show less
Bad Web Bot
🇺🇸
mnsf
2026-11-13 21:05:12
UTC ·
(18 hours ago)
Request Overload (110)
Brute-Force
Web App Attack
🇵🇱
Budyn
2026-11-13 21:02:34
UTC ·
(18 hours ago)
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: auth.definitelynotahoneypot.top | Path: /backup.sql | User-Agent: Mozilla/5.0 (Linux; Android ...
show more
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: auth.definitelynotahoneypot.top | Path: /backup.sql | User-Agent: Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36 | Request: [Empty / GET Request]
show less
Hacking
Web App Attack
🇩🇪
throny
2026-11-13 20:52:28
UTC ·
(18 hours ago)
Bad web bot on a honeypot: ignored robots.txt (Disallow: /) and kept crawling without browser behaviour.
Requests within an hour: 32 on 16 host(s)
User agent: Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114. ...
show more
Bad web bot on a honeypot: ignored robots.txt (Disallow: /) and kept crawling without browser behaviour.
Requests within an hour: 32 on 16 host(s)
User agent: Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mob
Requested, e.g.:
- admin.[REDACTED]/67b18837-663c-4051-87af-1d9e2080ec9d
- apps.[REDACTED]/7250dbda-4754-4115-923a-b422ccee1e8b
- backups.[REDACTED]/1558d8ec-6097-445f-9f38-b532820f1cef
- billing.[REDACTED]/2aee4124-d900-498b-83cd-1bf12c7abd47
- blog.[REDACTED]/523b0a47-903d-42cb-aca9-81f3e9452bb8
- cms.[REDACTED]/d41a856b-b597-49d2-9b78-0d20375c67be
- ... and 10 more
show less
Bad Web Bot
🇫🇮
stinpriza
2026-11-13 19:48:45
UTC ·
(19 hours ago)
Web App Attack
Web App Attack
🇵🇱
Budyn
2026-11-13 17:10:25
UTC ·
(22 hours ago)
[Budyn Honeypot Sinkhole] | Attack type: WP Path Scanning (Recon) | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: cloud.definitelynotahoneypot.online | Path: /xmlrpc.php?rsd | User-Agent: Mozilla/5.0 (Linux; Android 12 ...
show more
[Budyn Honeypot Sinkhole] | Attack type: WP Path Scanning (Recon) | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: cloud.definitelynotahoneypot.online | Path: /xmlrpc.php?rsd | User-Agent: Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36 | Request: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack