🇵🇱
Budyn
2026-09-01 07:39:43
(50 minutes ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: gitlab.teddypot.site | URI: /wp-admin/ | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇩🇪
mygcode.de
2026-09-01 06:36:14
(1 hour ago)
Ignoring robots.txt
Bad Web Bot
🇩🇪
eposs-it.de
2026-09-01 04:50:38
(3 hours ago)
Blocked by os-abuseipdb; 30 hits, proto=tcp, ports=443
Port Scan
Hacking
🇵🇱
Budyn
2026-09-01 03:11:03
(5 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: cpanel.dont-eat-the-pudding.xyz | URI: /.env | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇺🇸
kbeezie
2026-09-01 02:58:45
(5 hours ago)
158.69.55.148 - - [31/Aug/2026:22:58:45 -0400] "GET /page/3 HTTP/1.1" 429 564 "-" "Mozilla/5.0 (Wind ...
show more
158.69.55.148 - - [31/Aug/2026:22:58:45 -0400] "GET /page/3 HTTP/1.1" 429 564 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
158.69.55.148 - - [31/Aug/2026:22:58:45 -0400] "GET /page/4 HTTP/1.1" 429 564 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
158.69.55.148 - - [31/Aug/2026:22:58:45 -0400] "GET /page/3 HTTP/1.1" 429 564 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
158.69.55.148 - - [31/Aug/2026:22:58:45 -0400] "GET /page/2 HTTP/1.1" 429 564 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
158.69.55.148 - - [31/Aug/2026:22:58:45 -0400] "GET /page/4 HTTP/1.1" 429 564 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
show less
Bad Web Bot
Web App Attack
🇳🇱
Webhoster
2026-08-31 23:04:56
(9 hours ago)
{"ClientAddr":"172.71.120.59:12566","ClientHost":"158.69.55.148","ClientPort":"12566","ClientUsernam ...
show more
{"ClientAddr":"172.71.120.59:12566","ClientHost":"158.69.55.148","ClientPort":"12566","ClientUsername":"-","DownstreamContentSize":0,"DownstreamStatus":404,"Duration":12835020,"OriginContentSize":0,"OriginDuration":10473706,"OriginStatus":0,"Overhead":2361314,"RequestAddr":"honey.timvdberg.dev","RequestContentSize":0,"RequestCount":270180,"RequestHost":"honey.timvdberg.dev","RequestMethod":"GET","RequestPath":"/O0DFRLH7ML","RequestPort":"-","RequestProtocol":"HTTP/2.0","RequestScheme":"https","RetryAttempts":0,"RouterName":"https-0-pkfmee5oimsxv400fa90gmwk-coraza-honey@docker","ServiceAddr":"172.16.128.3:8085","ServiceName":"honey@docker","ServiceURL":"http://172.16.128.3:8085","StartLocal":"2026-08-31T23:04:56.236988828Z","StartUTC":"2026-08-31T23:04:56.236988828Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"https","level":"info","msg":"","request_Cf-Connecting-Ip":"158.69.55.148","request_X-Forwarded-For":"158.69.55.148","request_X-Real-Ip":"172.71.120.5
...
show less
Port Scan
Hacking
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-08-31 22:01:39
(10 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: cpanel.definitelynotahoneypot.top | URI: /.git/HEAD | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇦🇺
bius.dev
2026-08-31 21:54:34
(10 hours ago)
Too many comments via the contact form at https://bius.dev/contact. Tuesday 1st of September 2026 07 ...
show more
Too many comments via the contact form at https://bius.dev/contact. Tuesday 1st of September 2026 07:54:34 AM - 158.69.55.148
show less
Web Spam
2026-08-31 19:08:02
(13 hours ago)
Observed scanned 1 known-sensitive endpoint(s), e.g.: /
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-08-31 17:51:12
(14 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: keycloak.sweetpuddingtrap.online | URI: /wp-admin/ | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇦🇺
Klaverstyn
2026-08-31 15:45:30
(16 hours ago)
Excessive HTTP request rate
Web App Attack
🇵🇱
Budyn
2026-08-31 10:41:04
(21 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: k8s.astropot.space | URI: /.env | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇩🇪
jbcrn
2026-08-31 10:22:22
(22 hours ago)
Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Disguised bots, ruleset: faked-browser. ...
show more
Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Disguised bots, ruleset: faked-browser. Requested honeypot path: /. User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36
show less
Bad Web Bot
Web App Attack
🇺🇸
Charlesiv
2026-08-31 08:02:20
(1 day ago)
Triggered Cloudflare WAF (firewallCustom) from CA.
Action taken: BLOCK
ASN: 16276 (OVH SAS)
Protocol ...
show more
Triggered Cloudflare WAF (firewallCustom) from CA.
Action taken: BLOCK
ASN: 16276 (OVH SAS)
Protocol: HTTP/1.1 (GET method)
Endpoint: /
Timestamp: 2026-08-31T08:00:37Z
Ray ID: a33a80a96c46e3ce
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36
show less
Bad Web Bot
🇵🇱
Budyn
2026-08-31 06:13:59
(1 day ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: admin.astropot.website | URI: /backup.sql | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack