🇵🇱
Budyn
2026-10-13 10:54:47
(2 days ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: cache.budyn.ovh | URI: /wp-admin/ | UA: Mozilla/5.0 (iPad; CPU OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) CriOS/45.0.2454.68 Mobile/12B410 Safari/600.1.4 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
2026-10-13 09:24:36
(2 days ago)
Web probing of unpublished host names on a private server (no legitimate client reaches them): GET / ...
show more
Web probing of unpublished host names on a private server (no legitimate client reaches them): GET / ; GET /login. Last seen 2026-10-13 06:49:41 UTC. Automated detection (Caddy + CrowdSec).
show less
Bad Web Bot
2026-10-13 06:39:16
(3 days ago)
Honeypot: http-public probing for vulnerable paths /
Web App Attack
🇺🇸
TPI-Abuse
2026-10-12 23:32:35
(3 days ago)
(mod_security) mod_security (id:210730) triggered by 2602:fa5d::8b (Unknown): 1 in the last 300 secs ...
show more
(mod_security) mod_security (id:210730) triggered by 2602:fa5d::8b (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 19:32:25.651150 2026] [security2:error] [pid 31979:tid 31979] [client 2602:fa5d::8b:48904] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||clowaterart.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "clowaterart.com"] [uri "/mailto:[email protected] "] [unique_id "as1uCZZ7QhzXn7e8mZTFzgAAAAA"], referer: https://clowaterart.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-10-12 21:50:05
(3 days ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: vpn.goblinpot.store | URI: /wp-admin/ | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-10-12 15:13:52
(3 days ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: sql.dont-eat-the-pudding.online | URI: /wp-admin/ | UA: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E) | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-10-12 08:36:34
(3 days ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: ssh.astropot.website | URI: /wp-admin/ | UA: Mozilla/5.0 (X11; CrOS x86_64 6946.70.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.132 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-10-11 20:42:05
(4 days ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Web Spam (Form Abuse). Unsolicite ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Web Spam (Form Abuse). Unsolicited bulk message (Form Spam) captured. Evidence:
HOST: backup.definitelynotahoneypot.top | URI: /contact.php | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0 Safari/600.1.25 | BODY: name=hxnwoikhvs&company_website=sovudsmrnq&email=ndwxyrzv%40formtests.info&message=ivdmgtpimvtdivmfyhqhqtxgkoqsnd
--- SPAM DATA ---
(From: [email protected] )
[CSS TRAP TRIGGERED: Filled hidden field: sovudsmrnq]
ivdmgtpimvtdivmfyhqhqtxgkoqsnd
show less
Web Spam
Web App Attack
🇺🇸
TPI-Abuse
2026-10-11 04:14:45
(5 days ago)
(mod_security) mod_security (id:210730) triggered by 2602:fa5d::8b (Unknown): 1 in the last 300 secs ...
show more
(mod_security) mod_security (id:210730) triggered by 2602:fa5d::8b (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 00:14:37.941256 2026] [security2:error] [pid 11545:tid 11545] [client 2602:fa5d::8b:55176] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||www.dismain.com|F|2"] [data ".aigclassic.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.dismain.com"] [uri "/tienda/https:/www.aigclassic.com"] [unique_id "assNLaNCthKlma6hWMI5FwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-10 22:58:25
(5 days ago)
(mod_security) mod_security (id:210730) triggered by 2602:fa5d::8b (Unknown): 1 in the last 300 secs ...
show more
(mod_security) mod_security (id:210730) triggered by 2602:fa5d::8b (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 18:58:10.270806 2026] [security2:error] [pid 29489:tid 29489] [client 2602:fa5d::8b:50442] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.69strains.badgerkelley.com|F|2"] [data ".cannapages.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.69strains.badgerkelley.com"] [uri "/www.cannapages.com"] [unique_id "asrDAsXVqH7HmRd7z7eG4wAAACY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Nicolmn
2026-10-09 11:13:07
(6 days ago)
Web form spam ( id k.l )
Web Spam
🇵🇱
Budyn
2026-10-09 05:26:05
(1 week ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: vault.teddypot.space | URI: /wp-admin/ | UA: Mozilla/5.0 (Android; Tablet; rv:34.0) Gecko/34.0 Firefox/34.0 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-10-08 14:43:20
(1 week ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: prometheus.sweetpuddingtrap.online | URI: /wp-admin/ | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:37.0) Gecko/20100101 Firefox/37.0 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-10-08 03:34:04
(1 week ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: www.goblinpot.tech | URI: /wp-admin/ | UA: Mozilla/5.0 (iPhone; CPU iPhone OS 7_0_4 like Mac OS X) AppleWebKit/537.51.1 (KHTML, like Gecko) Version/7.0 Mobile/11B554a Safari/9537.53 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-10-07 18:29:22
(1 week ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Web Spam (Form Abuse). Unsolicite ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Web Spam (Form Abuse). Unsolicited bulk message (Form Spam) captured. Evidence:
HOST: grafana.budyn.xyz | URI: /contact.php | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.85 Safari/537.36 | BODY: name=pqjmyzztlk&company_website=gwojtwhies&email=fvwmwhew%40formtests.info&message=gvyozvqousptxljzzsxnipfjuuuqdw
--- SPAM DATA ---
(From: [email protected] )
[CSS TRAP TRIGGERED: Filled hidden field: gwojtwhies]
gvyozvqousptxljzzsxnipfjuuuqdw
show less
Web Spam
Web App Attack
