🇵🇱
Budyn
2026-11-13 02:00:30
UTC ·
(1 day ago)
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: pma.dont-eat-the-pudding.top | Path: /backup.sql | User-Agent: Mozilla/5.0 (X11; Linux x86_64 ...
show more
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: pma.dont-eat-the-pudding.top | Path: /backup.sql | User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 | Request: [Empty / GET Request]
show less
Hacking
Web App Attack
🇺🇸
IndigoRidge
2026-11-12 23:41:42
UTC ·
(2 days ago)
2026-11-12T18:41:42-0500 DRANNA QUERY GUARD vhost=drannagarrett.com client=175.138.132.177 reason=recursive-vd request="GET /gut-health-and-perimenopause?_vd=8g0vDzjO7ipZmu9T%2C5LPEXg3rpN%3F_vd%3D8g0vDzjO7ipZmu9T%2C5LPEXg3rpN%3Ftracking1%3DSMS%2Fpage ...
show more
2026-11-12T18:41:42-0500 DRANNA QUERY GUARD vhost=drannagarrett.com client=175.138.132.177 reason=recursive-vd request="GET /gut-health-and-perimenopause?_vd=8g0vDzjO7ipZmu9T%2C5LPEXg3rpN%3F_vd%3D8g0vDzjO7ipZmu9T%2C5LPEXg3rpN%3Ftracking1%3DSMS%2Fpage%2F2page%2F3page%2F8page%2F2page%2F8page%2F3page%2F3page%2F2page%2F2page%2F2page%2F8page%2F8page%2F3page%2F8page%2F3page%2F3page%2F3page%2F3page%2F3page%2F3page%2F8page%2F8page%2F3page%2F2page%2F8page%2F3page%2F2page%2F3page%2F2page%2F8page%2F2page%2F8page%2F2page%2F3page%2F2page%2F3page%2F3page%2F3page%2F3page%2F8page%2F3page%2F3page%2F8page%2F3page%2F3page%2F8page%2F3page%2F8page%2F2page%2F2page%2F3page%2F2page%2F2page%2F3page%2F8page%2F8page%2F2page%2F8page/8 HTTP/1.1" referer="-" ua="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36"
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 13:02:36
UTC ·
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 175.138.132.177 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 08:02:30.623350 2026] [security2:error] [pid 16338:tid 16338] [client 175.138.132.177:7635 ...
show more
(mod_security) mod_security (id:210730) triggered by 175.138.132.177 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 08:02:30.623350 2026] [security2:error] [pid 16338:tid 16338] [client 175.138.132.177:7635] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||soviaenterprises.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "soviaenterprises.com"] [uri "/rosecityexpress.com"] [unique_id "avW45gBrb4IiFRrwS4cO4wAAAB4"], referer: https://soviaenterprises.com
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-11-11 05:44:27
UTC ·
(3 days ago)
Web application attack detected.
Web App Attack
🇺🇸
justbible
2026-11-08 09:28:10
UTC ·
(6 days ago)
HTTPS (TCP 443) scraping bot, part of a distributed and coordinated scrape: 23 requests from 2026-11-08T09:28:10+00:00 to 2026-11-11T03:20:32+00:00, e.g. 'GET /en/original,kjv/prov/20/22 HTTP/2.0' with User-Agent 'Mozilla/5.0 (Windows NT 10.0; Win64; ...
show more
HTTPS (TCP 443) scraping bot, part of a distributed and coordinated scrape: 23 requests from 2026-11-08T09:28:10+00:00 to 2026-11-11T03:20:32+00:00, e.g. 'GET /en/original,kjv/prov/20/22 HTTP/2.0' with User-Agent 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0'. Forged browser headers; spoofed user agent (did not identify itself as a bot); robots.txt ignored (a disallowed URL requested).
show less
Bad Web Bot
🇨🇭
backslash
2026-11-02 05:42:05
UTC ·
(1 week ago)
block ruleset DA4A07AEE48B136A3922182BE8AA8BFBC1840803
Bad Web Bot
🇫🇷
Tilellit.PRO
2026-10-28 01:23:47
UTC ·
(2 weeks ago)
WooCommerce YITH AJAX Filder product_cat filter flood attempt with taxonomies
DDoS Attack
Bad Web Bot
2026-09-28 01:12:48
UTC ·
(1 month ago)
denied traffic to a honeypot network. destination port 22.
Port Scan
Hacking
🇫🇷
mailox
2026-09-27 19:26:15
UTC ·
(1 month ago)
Unauthorized SSH connection on tarpit
...
SSH
🇺🇸
鬼影233
2026-08-31 02:12:38
UTC ·
(2 months ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
Bad Web Bot
🇳🇱
maxxsense
2026-04-03 22:12:27
UTC ·
(7 months ago)
175.138.132.177 (MY/Malaysia/-), 12 distributed imapd attacks on account [redacted]
Brute-Force
🇷🇴
gtheo99
2026-03-30 09:27:21
UTC ·
(7 months ago)
(smtpauth) Failed SMTP AUTH login from 175.138.132.177 (MY/Malaysia/-): 2 in the last 900 secs
Brute-Force
Email Spam
