2026-10-24 15:41:02
(1 day ago)
IP matched detection query many 3xx errors.
Brute-Force
🇵🇱
Budyn
2026-10-24 02:43:34
(2 days ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: vault.definitelynotahoneypot.top | URI: /backup.sql | UA: Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36 | BODY: [Empty / GET Request] | HEADERS: {"Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"US","Cf-Connecting-Ip":"35.252.160.21","Cdn-Loop":"cloudflare; loops=1","Sec-Fetch-User":"?1","Sec-Fetch-Site":"none","Sec-Fetch-Mode":"navigate","Sec-Fetch-Dest":"docu
show less
Bad Web Bot
Web App Attack
2026-10-24 01:08:15
(2 days ago)
No-JS Bot: 16 requests / Exceeded reCAPTCHA attempts
Bad Web Bot
🇵🇱
Budyn
2026-10-23 20:15:25
(2 days ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: vpn.sweetpuddingtrap.xyz | URI: /.git/HEAD | UA: Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36 | BODY: [Empty / GET Request] | HEADERS: {"Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"US","Cf-Connecting-Ip":"35.252.160.21","Cdn-Loop":"cloudflare; loops=1","Sec-Fetch-User":"?1","Sec-Fetch-Site":"none","Sec-Fetch-Mode":"navigate","Sec-Fetch-Dest":"document","Se
show less
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-10-23 14:18:22
(2 days ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: kibana.sweetpuddingtrap.xyz | URI: /.env | UA: Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36 | BODY: [Empty / GET Request] | HEADERS: {"Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"US","Cf-Connecting-Ip":"35.252.160.21","Cdn-Loop":"cloudflare; loops=1","Sec-Fetch-User":"?1","Sec-Fetch-Site":"none","Sec-Fetch-Mode":"navigate","Sec-Fetch-Dest":"document","Sec-
show less
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-10-23 05:45:05
(3 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-23 05:42:31
(3 days ago)
(mod_security) mod_security (id:210730) triggered by 35.252.160.21 (21.160.252.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 35.252.160.21 (21.160.252.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 01:42:24.872104 2026] [security2:error] [pid 4724:tid 4770] [client 35.252.160.21:42166] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||jean-paullederer.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "jean-paullederer.com"] [uri "/[email protected] "] [unique_id "atrzwEDGokTfAsFEuSb6bwAAAYA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
