🇵🇱
Budyn
2026-10-29 00:28:12
(1 hour ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: admin.teddypot.tech | URI: /wp-admin/ | UA: Mozilla/5.0 (Linu ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: admin.teddypot.tech | URI: /wp-admin/ | UA: Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36 | BODY: [Empty / GET Request] | HEADERS: {"Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"US","Cf-Connecting-Ip":"34.187.244.239","Cdn-Loop":"cloudflare; loops=1","Sec-Fetch-User":"?1","Sec-Fetch-Site":"none","Sec-Fetch-Mode":"navigate","Sec-Fetch-Dest":"document","Sec-Ch
show less
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-10-28 20:16:37
(5 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: prometheus.definitelynotahoneypot.xyz | URI: /.gi ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: prometheus.definitelynotahoneypot.xyz | URI: /.git/HEAD | UA: Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36 | BODY: [Empty / GET Request] | HEADERS: {"Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"US","Cf-Connecting-Ip":"34.187.244.239","Cdn-Loop":"cloudflare; loops=1","Sec-Fetch-User":"?1","Sec-Fetch-Site":"none","Sec-Fetch-Mode":"navigate","Sec-Fetch-Dest":
show less
Bad Web Bot
Web App Attack
🇸🇪
Per-Erik Runebert
2026-10-27 09:39:24
(1 day ago)
Excessive unauthorized requests
Hacking
🇵🇱
Budyn
2026-10-26 19:07:20
(2 days ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: keycloak.teddypot.cloud | URI: /.env | UA: Mozill ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: keycloak.teddypot.cloud | URI: /.env | UA: Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36 | BODY: [Empty / GET Request] | HEADERS: {"Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"US","Cf-Connecting-Ip":"34.187.244.239","Cdn-Loop":"cloudflare; loops=1","Sec-Fetch-User":"?1","Sec-Fetch-Site":"none","Sec-Fetch-Mode":"navigate","Sec-Fetch-Dest":"document","Sec-Ch-
show less
Bad Web Bot
Web App Attack
2026-10-26 15:17:25
(2 days ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇦🇺
Klaverstyn
2026-10-26 09:20:11
(2 days ago)
Excessive HTTP request rate
Web App Attack
2026-10-26 08:08:09
(2 days ago)
Abuse detected: rate-limit and/or cross-site thresholds exceeded.
Bad Web Bot
🇳🇱
Cloud86 B.V.
2026-10-26 07:09:01
(2 days ago)
categories: DDoS Attack
DDoS Attack
🇵🇱
Budyn
2026-10-26 01:07:48
(3 days ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: docker.astropot.website | URI: /.env | UA: Mozill ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: docker.astropot.website | URI: /.env | UA: Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36 | BODY: [Empty / GET Request] | HEADERS: {"Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"US","Cf-Connecting-Ip":"34.187.244.239","Cdn-Loop":"cloudflare; loops=1","Sec-Fetch-User":"?1","Sec-Fetch-Site":"none","Sec-Fetch-Mode":"navigate","Sec-Fetch-Dest":"document","Sec-Ch-
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-26 00:08:45
(3 days ago)
(mod_security) mod_security (id:210730) triggered by 34.187.244.239 (239.244.187.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 20:08:41.128468 2026] [security2:error] [pid 10290:ti ...
show more
(mod_security) mod_security (id:210730) triggered by 34.187.244.239 (239.244.187.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 20:08:41.128468 2026] [security2:error] [pid 10290:tid 10404] [client 34.187.244.239:52782] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||healingwithtouch.com|F|2"] [data ".dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "healingwithtouch.com"] [uri "/~site/Scripts_ExternalRedirect/ExternalRedirect.dll"] [unique_id "at6aCeXsR7P-dsoXS5hvnAAAAgM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-10-25 04:30:03
(3 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
