🇵🇱
Budyn
2026-11-12 16:54:48
UTC ·
(10 hours ago)
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: cdn.teddypot.space | Path: /backup.sql | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64 ...
show more
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: cdn.teddypot.space | Path: /backup.sql | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-webindexer/1.1 (+https://developers.facebook.co... | Request: [Empty / GET Request]
show less
Hacking
Web App Attack
🇵🇱
Budyn
2026-11-12 04:56:16
UTC ·
(22 hours ago)
[Budyn Honeypot Sinkhole] | Attack type: WP Path Scanning (Recon) | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: portal.dont-eat-the-pudding.online | Path: /wp-admin/ | User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS ...
show more
[Budyn Honeypot Sinkhole] | Attack type: WP Path Scanning (Recon) | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: portal.dont-eat-the-pudding.online | Path: /wp-admin/ | User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-webindexer/1.1 (+https://developers.faceb... | Request: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇺🇸
Charlesiv
2026-11-10 05:00:57
UTC ·
(2 days ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
ASN: 32934 (Facebook, Inc.)
Protocol: HTTP/2 (GET method)
Endpoint: /charlesiv.rss
Timestamp: 2026-11-10T04:35:25Z
Ray ID: a58259b3bbf098a2
UA: Mozilla/5.0 (Macintosh; ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
ASN: 32934 (Facebook, Inc.)
Protocol: HTTP/2 (GET method)
Endpoint: /charlesiv.rss
Timestamp: 2026-11-10T04:35:25Z
Ray ID: a58259b3bbf098a2
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))
show less
Bad Web Bot
🇵🇱
Budyn
2026-11-10 01:41:38
UTC ·
(3 days ago)
[Budyn Honeypot Sinkhole] | Attack type: WP Path Scanning (Recon) | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: keycloak.teddypot.cloud | Path: /wp-admin/ | User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) ...
show more
[Budyn Honeypot Sinkhole] | Attack type: WP Path Scanning (Recon) | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: keycloak.teddypot.cloud | Path: /wp-admin/ | User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-webindexer/1.1 (+https://developers.faceb... | Request: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-11-08 03:50:28
UTC ·
(5 days ago)
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: telemetry.dont-eat-the-pudding.online | Path: /.env | User-Agent: Mozilla/5.0 (Macintosh; Int ...
show more
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: telemetry.dont-eat-the-pudding.online | Path: /.env | User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-webindexer/1.1 (+https://developers.faceb... | Request: [Empty / GET Request]
show less
Hacking
Web App Attack
🇫🇷
abuseipdb.amaze321
2026-11-08 03:38:02
UTC ·
(5 days ago)
Automated reconnaissance: repeated requests for sensitive/non-existent paths.
Web App Attack
Bad Web Bot
🇵🇱
Budyn
2026-11-07 20:42:30
UTC ·
(5 days ago)
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: elastic.teddypot.online | Path: /.git/HEAD | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; ...
show more
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: elastic.teddypot.online | Path: /.git/HEAD | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-webindexer/1.1 (+https://developers.facebook.co... | Request: [Empty / GET Request]
show less
Hacking
Web App Attack
🇵🇱
Budyn
2026-11-06 12:14:45
UTC ·
(6 days ago)
[Budyn Honeypot Sinkhole] | Attack type: Enterprise & Framework Recon Scanner | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: vpn.dont-eat-the-pudding.top | Path: /.env | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64 ...
show more
[Budyn Honeypot Sinkhole] | Attack type: Enterprise & Framework Recon Scanner | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: vpn.dont-eat-the-pudding.top | Path: /.env | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-webindexer/1.1 (+https://developers.facebook.co... | Request: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
Anonymous
2026-11-04 11:59:26
UTC ·
(1 week ago)
Honeypot: http-public probing for vulnerable paths
Web App Attack
🇵🇱
Budyn
2026-11-03 04:30:24
UTC ·
(1 week ago)
[Budyn Honeypot Sinkhole] | Attack type: WP Path Scanning (Recon) | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: backup.goblinpot.website | Path: /xmlrpc.php?rsd | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) ...
show more
[Budyn Honeypot Sinkhole] | Attack type: WP Path Scanning (Recon) | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: backup.goblinpot.website | Path: /xmlrpc.php?rsd | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-webindexer/1.1 (+https://developers.facebook.co... | Request: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇫🇷
abuseipdb.amaze321
2026-10-25 03:35:59
UTC ·
(2 weeks ago)
Automated reconnaissance: repeated requests for sensitive/non-existent paths.
Web App Attack
Bad Web Bot
🇵🇱
Budyn
2026-10-23 19:22:59
UTC ·
(2 weeks ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: db.budyn.ovh | URI: /backup.sql | UA: Mozilla/5.0 ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: db.budyn.ovh | URI: /backup.sql | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)) | BODY: [Empty / GET Request] | HEADERS: {"Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"US","Cf-Connecting-Ip":"2a03:2880:f80e:2a::","Cdn-Loop":"cloudflare; loops=1","Cf-Ray":"a4
show less
Bad Web Bot
Web App Attack
🇧🇷
alcacerlab
2026-10-16 03:56:14
UTC ·
(3 weeks ago)
2a03:2880:f80e:2a:: - - [16/Oct/2026:00:56:13 -0300] "GET / HTTP/2" 200 54079 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)"
...
Bad Web Bot
Web App Attack
🇵🇱
mscode.pl
2026-10-11 03:35:54
UTC ·
(1 month ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
ASN: 32934 (Facebook, Inc.)
Protocol: HTTP/2 (GET method)
Zone: r2.selify.io
Endpoint: /
UA: facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)
Bad Web Bot
🇫🇷
abuseipdb.amaze321
2026-10-11 00:36:08
UTC ·
(1 month ago)
Automated reconnaissance: repeated requests for sensitive/non-existent paths.
Web App Attack
Bad Web Bot