๐บ๐ธ
LSPCCU
2026-06-15 15:37:45
(3 hours ago)
TSEC Honeypot Network report. Threat score: 100/100. Categories: Port Scan, Hacking, Brute-Force, We ...
show more
TSEC Honeypot Network report. Threat score: 100/100. Categories: Port Scan, Hacking, Brute-Force, Web App Attack, SSH. Honeypot: ssh-telnet, cowrie. Context: 23.
show less
Port Scan
Hacking
Brute-Force
Web App Attack
SSH
๐บ๐ธ
antlac1
2026-06-15 15:17:09
(3 hours ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack
๐ฌ๐ง
SafBH
2026-06-15 14:40:31
(4 hours ago)
CrowdSec Decision: HTTP Probing (6 events). Paths:
Hacking
Brute-Force
๐ซ๐ท
Allolatr
2026-06-15 13:48:24
(5 hours ago)
Jun 15 15:48:23 [redacted] j443: ::ffff:23.161.169.55 openpgpkey.[redacted].com "GET / HTTP/1.1" 400 ...
show more
Jun 15 15:48:23 [redacted] j443: ::ffff:23.161.169.55 openpgpkey.[redacted].com "GET / HTTP/1.1" 400 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" Jun 15 15:48:23 [redacted] j443: ::ffff:23.161.169.55 openpgpkey.[redacted].com "GET /.git/config HTTP/1.1" 400 146 "-" "Mozilla/5.0 (compatible; xAI-SearchBot/1.0; +https://x.ai)" Jun 15 15:48:24 [redacted] j443: ::ffff:23.161.169.55 openpgpkey.[redacted].com "GET /.git/HEAD HTTP/1.1" 400 0 "-" "Mozilla/5.0 (compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)"...
show less
Web App Attack
๐ฆ๐บ
aranguren.org
2026-06-15 13:37:34
(5 hours ago)
23.161.169.55 - - [15/Jun/2026:23:37:32 +1000] "GET /.git/config HTTP/1.1" 404 996 "-" "Mozilla/5.0 ...
show more
23.161.169.55 - - [15/Jun/2026:23:37:32 +1000] "GET /.git/config HTTP/1.1" 404 996 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)"
23.161.169.55 - - [15/Jun/2026:23:37:33 +1000] "GET /.git/HEAD HTTP/1.1" 404 996 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
23.161.169.55 - - [15/Jun/2026:23:37:33 +1000] "GET /.env HTTP/1.1" 404 996 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
23.161.169.55 - - [15/Jun/2026:23:37:33 +1000] "GET /.env.local HTTP/1.1" 404 996 "-" "Mozilla/5.0 (compatible; Google-CloudVertexBot; +https://cloud.google.com/vertex-ai-bot)"
23.161.169.55 - - [15/Jun/2026:23:37:33 +1000] "GET /.env.production HTTP/1.1" 404 996 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)"
23.161.169.55 - - [15/Jun/2026:23:37:34 +1000] "GET /.env.development HTTP/1.1" 404 996 "-" "Mozilla/5.0 (compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)"
...
show less
Bad Web Bot
๐บ๐ธ
aks4226
2026-06-15 04:53:40
(14 hours ago)
Attacking common web applications. (n01)
Web App Attack
๐บ๐ธ
omc
2026-06-15 04:52:34
(14 hours ago)
Unauthorized file [PP]
Bad Web Bot
๐ฌ๐ง
WebNiraj
2026-06-15 04:02:42
(15 hours ago)
(mod_security) mod_security (id:949110) triggered by 23.161.169.55 (GB/United Kingdom/-): 5 in the l ...
show more
(mod_security) mod_security (id:949110) triggered by 23.161.169.55 (GB/United Kingdom/-): 5 in the last 3600 secs [SIGMA]
show less
Brute-Force
๐ซ๐ท
bellovacorp
2026-06-15 02:23:22
(16 hours ago)
[CrowdSec/Noliae] crowdsecurity/http-probing
Web App Attack
๐ช๐ธ
alferez
2026-06-15 01:32:26
(17 hours ago)
Searching .(env|sql|zip|tar|rar) files
Hacking
Exploited Host
Web App Attack
๐ฆ๐บ
2000cn.com.au
2026-06-15 00:51:34
(18 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
๐บ๐ธ
TPI-Abuse
2026-06-14 22:10:22
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 23.161.169.55 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 23.161.169.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 18:10:02.489600 2026] [security2:error] [pid 2145:tid 2145] [client 23.161.169.55:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.ndanetworks.com"] [uri "/.git/HEAD"] [unique_id "ai8mujojHBuTUFOLsVjzLwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ฎ
Christopher Hughes
2026-06-14 21:05:49
(22 hours ago)
23.161.169.55 - - [14/Jun/2026:22:05:48 +0100] "GET /.env HTTP/1.1" 404 363 "-" "Mozilla/5.0 (compat ...
show more
23.161.169.55 - - [14/Jun/2026:22:05:48 +0100] "GET /.env HTTP/1.1" 404 363 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
show less
Web App Attack
๐ณ๐ฑ
e.fierstra
2026-06-14 20:26:20
(22 hours ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
๐ฌ๐ง
Aetherweb Ark
2026-06-14 16:43:25
(1 day ago)
(mod_security) mod_security (id:949110) triggered by 23.161.169.55 (GB/United Kingdom/-): N in the l ...
show more
(mod_security) mod_security (id:949110) triggered by 23.161.169.55 (GB/United Kingdom/-): N in the last X secs
show less
Web App Attack