๐ณ๐ฑ
Mangelot Hosting
2026-09-16 02:31:56
(3 days ago)
(php_susp_dir) srv101 PHP Suspicious Directory 8.228.76.160 (US/United States/160.76.228.8.bc.google ...
show more
(php_susp_dir) srv101 PHP Suspicious Directory 8.228.76.160 (US/United States/160.76.228.8.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
๐ฆ๐บ
artful
2026-09-16 02:12:00
(3 days ago)
Excessive errors ~1k in recent hours
Web App Attack
๐ต๐ฑ
Budyn
2026-09-15 20:25:48
(3 days ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: forum.sweetpuddingtrap.online | URI: /.git/config | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
๐ซ๐ท
spot
2026-09-15 17:04:34
(3 days ago)
8.228.76.160 - - [15/Sep/2026:18:04:33 +0100] "GET /.git/config HTTP/1.1" 404 543 "-" "Mozilla/5.0 ( ...
show more
8.228.76.160 - - [15/Sep/2026:18:04:33 +0100] "GET /.git/config HTTP/1.1" 404 543 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Web App Attack
Hacking
๐ต๐ฑ
Budyn
2026-09-15 16:24:03
(3 days ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: forum.definitelynotahoneypot.top | URI: /.git/config | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-15 08:41:30
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 8.228.76.160 (160.76.228.8.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 8.228.76.160 (160.76.228.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 04:41:25.325101 2026] [security2:error] [pid 11555:tid 11555] [client 8.228.76.160:35300] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "blackoakprop.com"] [uri "/.git/config"] [unique_id "aqkEtds2IZM0HrtQTR3UkwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-15 07:04:24
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 8.228.76.160 (160.76.228.8.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 8.228.76.160 (160.76.228.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 03:04:17.070496 2026] [security2:error] [pid 17399:tid 17399] [client 8.228.76.160:36444] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "blackmanfamily.com"] [uri "/.git/config"] [unique_id "aqjt8fwQe8ERMu83WeH-QAAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-15 05:50:39
(4 days ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
๐ธ๐ช
vaia.cloud
2026-09-15 05:00:03
(4 days ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
๐จ๐ฆ
polycoda
2026-09-15 04:48:06
(4 days ago)
AutoBlock: ๐ฏ Vulnerability Scanner (Non Decay-Based) - โ๏ธ Configuration File Access (Non Decay-Based ...
show more
AutoBlock: ๐ฏ Vulnerability Scanner (Non Decay-Based) - โ๏ธ Configuration File Access (Non Decay-Based) - โช๏ธ Excessive 30X Errors (Decay-Based)
show less
Hacking
Bad Web Bot
Web App Attack
๐ฉ๐ช
NewWavesApp
2026-09-15 01:59:21
(4 days ago)
(mod_security) mod_security triggered on hostname [redacted] 8.228.76.160 (US/United States/160.76.2 ...
show more
(mod_security) mod_security triggered on hostname [redacted] 8.228.76.160 (US/United States/160.76.228.8.bc.googleusercontent.com): (CF_ENABLE)
show less
SQL Injection