🇵🇱
Budyn
2026-10-28 04:22:13
(8 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: apm.sweetpuddingtrap.xyz | URI: /backup.sql | UA: Mozilla/5.0 (compatible; T2Bot/1.0; +https://t2ind.com/bot) | BODY: [Empty / GET Request] | HEADERS: {"Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"US","Cf-Connecting-Ip":"198.251.100.79","Cdn-Loop":"cloudflare; loops=1","Accept":"text\/html,application\/xhtml+xml;q=0.9,*\/*;q=0.1","Cf-Ray":"a517287c7f166a03-DFW","From":"[email protected] ","Accept-Language":"en;q=0.8,*;q=0.5","Accept
show less
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-10-28 01:59:38
(11 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: registry.goblinpot.site | URI: /backup.sql | UA: Mozilla/5.0 (compatible; T2Bot/1.0; +https://t2ind.com/bot) | BODY: [Empty / GET Request] | HEADERS: {"Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"US","Cf-Connecting-Ip":"198.251.100.79","Cdn-Loop":"cloudflare; loops=1","Accept":"text\/html,application\/xhtml+xml;q=0.9,*\/*;q=0.1","Cf-Ray":"a516579e2d967535-DFW","From":"[email protected] ","Accept-Language":"en;q=0.8,*;q=0.5","Accept-
show less
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-10-27 23:19:05
(13 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: billing.goblinpot.tech | URI: /backup.sql | UA: Mozilla/5.0 (compatible; T2Bot/1.0; +https://t2ind.com/bot) | BODY: [Empty / GET Request] | HEADERS: {"Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"US","Cf-Connecting-Ip":"198.251.100.79","Cdn-Loop":"cloudflare; loops=1","Accept":"text\/html,application\/xhtml+xml;q=0.9,*\/*;q=0.1","Cf-Ray":"a5156c6eebe8b16f-DFW","From":"[email protected] ","Accept-Language":"en;q=0.8,*;q=0.5","Accept-E
show less
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-10-27 20:35:38
(16 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: idp.budyn.top | URI: /backup.sql | UA: Mozilla/5.0 (compatible; T2Bot/1.0; +https://t2ind.com/bot) | BODY: [Empty / GET Request] | HEADERS: {"Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"US","Cf-Connecting-Ip":"198.251.100.79","Cdn-Loop":"cloudflare; loops=1","Accept":"text\/html,application\/xhtml+xml;q=0.9,*\/*;q=0.1","Cf-Ray":"a5147d00a9c072fe-DFW","From":"[email protected] ","Accept-Language":"en;q=0.8,*;q=0.5","Accept-Encoding":
show less
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-10-27 18:22:27
(18 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2
Exploited Host
Web App Attack
🇵🇱
Budyn
2026-10-27 15:53:59
(21 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: api.teddypot.space | URI: /backup.sql | UA: Mozilla/5.0 (compatible; T2Bot/1.0; +https://t2ind.com/bot) | BODY: [Empty / GET Request] | HEADERS: {"Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"US","Cf-Connecting-Ip":"198.251.100.79","Cdn-Loop":"cloudflare; loops=1","Accept":"text\/html,application\/xhtml+xml;q=0.9,*\/*;q=0.1","Cf-Ray":"a512e06d1a279a2f-DFW","From":"[email protected] ","Accept-Language":"en;q=0.8,*;q=0.5","Accept-Encod
show less
Bad Web Bot
Web App Attack
🇦🇺
aranguren.org
2026-10-27 13:54:54
(23 hours ago)
198.251.100.79 - - [27/Oct/2026:11:40:34 +1100] "GET /robots.txt HTTP/1.1" 404 991 "-" "Mozilla/5.0 ...
show more
198.251.100.79 - - [27/Oct/2026:11:40:34 +1100] "GET /robots.txt HTTP/1.1" 404 991 "-" "Mozilla/5.0 (compatible; T2Bot/1.0; +https://t2ind.com/bot)" TLSv1.3 TLS_AES_256_GCM_SHA384
198.251.100.79 - - [28/Oct/2026:00:13:47 +1100] "GET /robots.txt HTTP/1.1" 404 991 "-" "Mozilla/5.0 (compatible; T2Bot/1.0; +https://t2ind.com/bot)" TLSv1.3 TLS_AES_256_GCM_SHA384
198.251.100.79 - - [28/Oct/2026:00:54:54 +1100] "GET /robots.txt HTTP/1.1" 404 991 "-" "Mozilla/5.0 (compatible; T2Bot/1.0; +https://t2ind.com/bot)" TLSv1.3 TLS_AES_256_GCM_SHA384
...
show less
Bad Web Bot
🇵🇱
Budyn
2026-10-27 10:36:14
(1 day ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: billing.goblinpot.site | URI: /backup.sql | UA: Mozilla/5.0 (compatible; T2Bot/1.0; +https://t2ind.com/bot) | BODY: [Empty / GET Request] | HEADERS: {"Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"US","Cf-Connecting-Ip":"198.251.100.79","Cdn-Loop":"cloudflare; loops=1","Accept":"text\/html,application\/xhtml+xml;q=0.9,*\/*;q=0.1","Cf-Ray":"a5110eface8bf0ae-DFW","From":"[email protected] ","Accept-Language":"en;q=0.8,*;q=0.5","Accept-E
show less
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-10-27 07:41:50
(1 day ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: metrics.astropot.tech | URI: /backup.sql | UA: Mozilla/5.0 (compatible; T2Bot/1.0; +https://t2ind.com/bot) | BODY: [Empty / GET Request] | HEADERS: {"Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"US","Cf-Connecting-Ip":"198.251.100.79","Cdn-Loop":"cloudflare; loops=1","Accept":"text\/html,application\/xhtml+xml;q=0.9,*\/*;q=0.1","Cf-Ray":"a5100f816ded5212-DFW","From":"[email protected] ","Accept-Language":"en;q=0.8,*;q=0.5","Accept-En
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-27 04:58:36
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 198.251.100.79 (crawl-10.t2ind.com): 1 in the l ...
show more
(mod_security) mod_security (id:210730) triggered by 198.251.100.79 (crawl-10.t2ind.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 00:58:32.551411 2026] [security2:error] [pid 28033:tid 28143] [client 198.251.100.79:12395] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||aafm.org|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "aafm.org"] [uri "/http/charteredfinancialmanager.com"] [unique_id "auAveMCntkMfgbuEsab9AgAAAQw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
service Informatique
2026-10-27 04:00:37
(1 day ago)
GET /robots.txt
Web App Attack
🇵🇱
Budyn
2026-10-27 01:42:22
(1 day ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: ssh.sweetpuddingtrap.xyz | URI: /backup.sql | UA: Mozilla/5.0 (compatible; T2Bot/1.0; +https://t2ind.com/bot) | BODY: [Empty / GET Request] | HEADERS: {"Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"US","Cf-Connecting-Ip":"198.251.100.79","Cdn-Loop":"cloudflare; loops=1","Accept":"text\/html,application\/xhtml+xml;q=0.9,*\/*;q=0.1","Cf-Ray":"a50e00f3de773476-DFW","From":"[email protected] ","Accept-Language":"en;q=0.8,*;q=0.5","Accept
show less
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-10-26 22:05:32
(1 day ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: gitlab.definitelynotahoneypot.online | URI: /backup.sql | UA: Mozilla/5.0 (compatible; T2Bot/1.0; +https://t2ind.com/bot) | BODY: [Empty / GET Request] | HEADERS: {"Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"US","Cf-Connecting-Ip":"198.251.100.79","Cdn-Loop":"cloudflare; loops=1","Accept":"text\/html,application\/xhtml+xml;q=0.9,*\/*;q=0.1","Cf-Ray":"a50cc35519ac3ea2-DFW","From":"[email protected] ","Accept-Language":"en;q=0.8,*;q=
show less
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-10-26 18:07:23
(1 day ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: cluster.goblinpot.tech | URI: /backup.sql | UA: Mozilla/5.0 (compatible; T2Bot/1.0; +https://t2ind.com/bot) | BODY: [Empty / GET Request] | HEADERS: {"Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"US","Cf-Connecting-Ip":"198.251.100.79","Cdn-Loop":"cloudflare; loops=1","Accept":"text\/html,application\/xhtml+xml;q=0.9,*\/*;q=0.1","Cf-Ray":"a50b6678f968f09c-DFW","From":"[email protected] ","Accept-Language":"en;q=0.8,*;q=0.5","Accept-E
show less
Bad Web Bot
Web App Attack
🇺🇸
Starburst SysOp Team
2026-10-26 17:18:35
(1 day ago)
Malware host (X-Forwarded-For) detected by rbl.malware.expert. RBL lookup of 79.100.251.198.rbl.malw ...
show more
Malware host (X-Forwarded-For) detected by rbl.malware.expert. RBL lookup of 79.100.251.198.rbl.malware.expert succeeded at REQUEST_HEADERS:x-forwarded-for. (1001000-mnz6-3)
show less
Hacking
