🇵🇱
Budyn
2026-10-24 06:47:02
(2 days ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: docker.teddypot.website | URI: /wp-admin/ | UA: Mozilla/5.0 (iPad; CPU OS 6_1 like Mac OS X) AppleWebKit/536.26 (KHTML, like Gecko) Version/6.0 Mobile/10B141 Safari/8536.25 | BODY: [Empty / GET Request] | HEADERS: {"Accept-Encoding":"gzip, br","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"TR","Cf-Connecting-Ip":"2602:fa5d::e5","Cdn-Loop":"cloudflare; loops=1","Cf-Ray":"a4f70721cb4c197e-SOF","Connection":"Keep-Alive","Accept-Language":"en-US,en;q=0.5","Ac
show less
Bad Web Bot
Web App Attack
🇨🇭
toltek
2026-10-23 21:13:52
(2 days ago)
Honeypot form spam submission
Web Spam
🇺🇸
oralunal
2026-10-23 02:47:30
(3 days ago)
IP banned by Fail2Ban in jail its-suss access.log mvfnds
...
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-10-22 01:23:15
(4 days ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: cluster.goblinpot.space | URI: /wp-admin/ | UA: Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.111 Safari/537.36 | BODY: [Empty / GET Request] | HEADERS: {"Accept-Encoding":"gzip, br","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"TR","Cf-Connecting-Ip":"2602:fa5d::e5","Cdn-Loop":"cloudflare; loops=1","Cf-Ray":"a4e4b2153e1cd0eb-SOF","Connection":"Keep-Alive","Accept-Language":"en-US,en;q=0.5","Accept":"*\/*","X
show less
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-10-18 12:45:33
(1 week ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Web Spam (Form Abuse). Unsolicite ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Web Spam (Form Abuse). Unsolicited bulk message (Form Spam) captured. Evidence:
HOST: status.goblinpot.site | URI: /contact.php | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_2) AppleWebKit/537.74.9 (KHTML, like Gecko) Version/7.0.2 Safari/537.74.9 | BODY: name=itwxgvvqvp&company_website=yromvputui&email=itxennlo%40formtests.info&message=kwxlvriuxdgzhgnrgwmtuikhqftesg
--- SPAM DATA ---
(From: [email protected] )
[CSS TRAP TRIGGERED: Filled hidden field: yromvputui]
kwxlvriuxdgzhgnrgwmtuikhqftesg
show less
Web Spam
Web App Attack
🇵🇱
Budyn
2026-10-15 01:17:00
(1 week ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Web Spam (Form Abuse). Unsolicite ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Web Spam (Form Abuse). Unsolicited bulk message (Form Spam) captured. Evidence:
HOST: elastic.teddypot.website | URI: /contact.php | UA: Mozilla/5.0 (iPad; CPU OS 8_4_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Mobile/12H321 OverDrive Media Console/3.3.1 | BODY: name=sssyjzklgv&company_website=mlegmxgshn&email=klwgkyrt%40formtests.info&message=esmfnsxrhgmlvxvhjwwyrjezvforqh
--- SPAM DATA ---
(From: [email protected] )
[CSS TRAP TRIGGERED: Filled hidden field: mlegmxgshn]
esmfnsxrhgmlvxvhjwwyrjezvforqh
show less
Web Spam
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 22:39:50
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 2602:fa5d::e5 (Unknown): 1 in the last 300 secs ...
show more
(mod_security) mod_security (id:210730) triggered by 2602:fa5d::e5 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 18:39:40.141780 2026] [security2:error] [pid 28272:tid 28272] [client 2602:fa5d::e5:36084] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.bright-ideas.jannetta.com|F|2"] [data ".php.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.bright-ideas.jannetta.com"] [uri "/LocalSettings.php.backup"] [unique_id "as6zLO7meZtIcnwVrztwDQAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
dtorrer
2026-10-13 11:46:32
(1 week ago)
Client attempted to submit spam on a website post.
Blog Spam
🇨🇭
toltek
2026-10-13 06:57:07
(1 week ago)
Honeypot form spam submission
Web Spam
🇵🇱
Budyn
2026-10-12 07:22:26
(2 weeks ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: cache.definitelynotahoneypot.online | URI: /wp-admin/ | UA: Mozilla/5.0 (iPhone; CPU iPhone OS 8_4 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12H143 Safari/600.1.4 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇧🇪
toltek
2026-10-11 02:06:00
(2 weeks ago)
Web Spam
🇵🇱
Budyn
2026-10-10 06:26:02
(2 weeks ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Web Spam (Form Abuse). Unsolicite ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Web Spam (Form Abuse). Unsolicited bulk message (Form Spam) captured. Evidence:
HOST: backup.sweetpuddingtrap.online | URI: /contact.php | UA: Mozilla/5.0 (iPad; CPU OS 8_4_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) GSA/6.0.51363 Mobile/12H321 Safari/600.1.4 | BODY: name=zwyveiuekz&company_website=lwkypmlqko&email=xnenrlhf%40formtests.info&message=jnlfufeozrhpnfyllgwxvwimelwuvd
--- SPAM DATA ---
(From: [email protected] )
[CSS TRAP TRIGGERED: Filled hidden field: lwkypmlqko]
jnlfufeozrhpnfyllgwxvwimelwuvd
show less
Web Spam
Web App Attack
🇫🇷
Nicolmn
2026-10-09 11:14:55
(2 weeks ago)
Web form spam ( id k.l )
Web Spam
🇵🇱
Budyn
2026-10-08 17:00:49
(2 weeks ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: portal.teddypot.cloud | URI: /wp-admin/ | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.155 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇫🇮
as211431.net
2026-09-22 13:59:00
(1 month ago)
Triggered Cloudflare WAF (linkMaze) from TR.
Action taken: LINK_MAZE_VISITED
Protocol: HTTP/1.1 (GET ...
show more
Triggered Cloudflare WAF (linkMaze) from TR.
Action taken: LINK_MAZE_VISITED
Protocol: HTTP/1.1 (GET method)
Endpoint: /cdn-cgi/content
UA: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:39.0) Gecko/20100101 Firefox/39.0
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
