🇵🇱
Budyn
2026-11-13 21:07:48
UTC ·
(15 hours ago)
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: registry.sweetpuddingtrap.xyz | Path: /.git/HEAD | User-Agent: Mozilla/5.0 (Linux; Android 12 ...
show more
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: registry.sweetpuddingtrap.xyz | Path: /.git/HEAD | User-Agent: Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36 | Request: [Empty / GET Request]
show less
Hacking
Web App Attack
🇨🇭
Ribeye375
2026-11-13 19:02:35
UTC ·
(17 hours ago)
HIPS web-scraper - Block tcp/0:65535
Bad Web Bot
Web App Attack
🇨🇦
SSH-Admin
2026-11-13 19:00:16
UTC ·
(17 hours ago)
Probing for Exploits on ns200
Exploited Host
Web App Attack
🇵🇱
Budyn
2026-11-13 17:12:31
UTC ·
(19 hours ago)
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: telemetry.goblinpot.store | Path: /.env | User-Agent: Mozilla/5.0 (Linux; Android 12; Pixel 6 ...
show more
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: telemetry.goblinpot.store | Path: /.env | User-Agent: Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36 | Request: [Empty / GET Request]
show less
Hacking
Web App Attack
🇮🇹
VHosting
2026-11-13 15:10:04
UTC ·
(21 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇨🇦
SSH-Admin
2026-11-13 14:44:02
UTC ·
(22 hours ago)
Probing for Exploits on ns230
Exploited Host
Web App Attack
🇵🇱
Budyn
2026-11-13 14:33:16
UTC ·
(22 hours ago)
[Budyn Honeypot Sinkhole] | Attack type: WP Path Scanning (Recon) | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: forum.astropot.website | Path: /wp-admin/ | User-Agent: Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWe ...
show more
[Budyn Honeypot Sinkhole] | Attack type: WP Path Scanning (Recon) | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: forum.astropot.website | Path: /wp-admin/ | User-Agent: Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36 | Request: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇩🇪
0x44
2026-11-13 14:19:57
UTC ·
(22 hours ago)
TCP SYN Discovery - Flooding
DDoS Attack
🇬🇷
setupgr
2026-11-13 13:27:02
UTC ·
(23 hours ago)
(mod_security) mod_security (id:11000011) triggered by 136.67.156.113 (US/United States/Oregon/The Dalles/-/[AS396982 Google LLC]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Fri Nov 13 15:26:57.22594 ...
show more
(mod_security) mod_security (id:11000011) triggered by 136.67.156.113 (US/United States/Oregon/The Dalles/-/[AS396982 Google LLC]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Fri Nov 13 15:26:57.225940 2026] [security2:error] [pid 2303280:tid 2303359] [client 136.67.156.113:49782] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "googleusercontent.com" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "140"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: 113.156.67.136.bc.googleusercontent.com"] [severity "CRITICAL"] [hostname "asteriassantorini.com"] [uri "/"] [unique_id "avcQIQoPD2HDNJSoaES1vAAAABE"]
show less
Port Scan
🇺🇸
HamSammich
2026-11-13 06:37:56
UTC ·
(1 day ago)
Automated sensor: 5 HTTPS connection/probe attempts over the last 24h (latest 2026-11-13T06:37Z).
Port Scan
Web App Attack
🇵🇱
Budyn
2026-11-13 04:21:04
UTC ·
(1 day ago)
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: docker.astropot.space | Path: /backup.sql | User-Agent: Mozilla/5.0 (Linux; Android 12; Pixel ...
show more
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: docker.astropot.space | Path: /backup.sql | User-Agent: Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36 | Request: [Empty / GET Request]
show less
Hacking
Web App Attack