๐ฌ๐ง
PeravixGroup
2026-05-09 09:34:47
(1 month ago)
Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severit ...
show more
Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severity: MEDIUM. Aaran.cloud
show less
Hacking
Exploited Host
๐ฎ๐น
LTM
2026-01-04 07:20:01
(5 months ago)
IP/Port Scan
Port Scan
Brute-Force
๐ฉ๐ช
Packets-Decreaser.NET
2025-12-29 14:01:23
(5 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
๐ณ๐ฑ
i-turnradio.nl
2025-12-28 07:28:37
(5 months ago)
2025-12-28 @ 08:28:37 (CET) ~ Blocked based on risk assessment and prior abuse reports
Web App Attack
๐ฎ๐น
VHosting
2025-12-24 00:10:49
(5 months ago)
Detected attack and reported by a human
DDoS Attack
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
SSH
๐บ๐ธ
TPI-Abuse
2025-12-07 14:18:16
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.224.228 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.224.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 09:18:12.457596 2025] [security2:error] [pid 10080:tid 10080] [client 216.26.224.228:48925] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nccb.org"] [uri "/.svn/wc.db"] [unique_id "aTWMpEHBK71m_UfMAsXscQAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-12-06 16:23:42
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.224.228 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.224.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 06 11:23:35.836283 2025] [security2:error] [pid 29076:tid 29076] [client 216.26.224.228:18199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pbhomesinc.net"] [uri "/.svn/wc.db"] [unique_id "aTRYh39n4XwtiKFXsBCdUQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-12-06 11:47:12
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.224.228 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.224.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 06 06:47:08.195384 2025] [security2:error] [pid 22408:tid 22408] [client 216.26.224.228:29711] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mlappa.net"] [uri "/.env"] [unique_id "aTQXvEQP4IJJH_Y-qjXfeAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-12-06 11:12:16
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.224.228 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.224.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 06 06:12:13.147717 2025] [security2:error] [pid 17753:tid 17753] [client 216.26.224.228:35921] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "zmgmt.net"] [uri "/.svn/wc.db"] [unique_id "aTQPjS1QVfjvZLV0n9ZMsQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-12-05 16:51:59
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.224.228 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.224.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 11:51:54.591513 2025] [security2:error] [pid 23664:tid 23664] [client 216.26.224.228:42025] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "suswastima.com"] [uri "/.git/HEAD"] [unique_id "aTMNqgkprhGpznY8qB6HDwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-12-05 10:38:05
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.224.228 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.224.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 05:37:58.839395 2025] [security2:error] [pid 29011:tid 29011] [client 216.26.224.228:50531] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "konahawaiirealty.com"] [uri "/.env"] [unique_id "aTK2BrTqALjlrg8Ro6FpKAAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-12-05 06:57:58
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.224.228 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.224.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 01:57:51.774907 2025] [security2:error] [pid 20542:tid 20542] [client 216.26.224.228:53831] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "michaeltenore.com"] [uri "/.env"] [unique_id "aTKCb3Zt20u2QhjUaOUryAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-11-25 04:36:14
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.224.228 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.224.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:36:08.442938 2025] [security2:error] [pid 7455:tid 7455] [client 216.26.224.228:45475] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.harrygant.com"] [uri "/.env"] [unique_id "aSUyOLtwwF-wOfQOnN_WwwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-11-25 04:10:08
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.224.228 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.224.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:10:00.931726 2025] [security2:error] [pid 27956:tid 27956] [client 216.26.224.228:16337] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.grampys.toys"] [uri "/.env"] [unique_id "aSUsGO_S2LoKUq3NpnrhLAAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-11-25 00:36:40
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.224.228 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.224.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 19:36:36.966938 2025] [security2:error] [pid 7326:tid 7521] [client 216.26.224.228:43071] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.luxury.management"] [uri "/.git/HEAD"] [unique_id "aST6FNNUaJ5dFUuoaTxj5wAAAMc"]
show less
Brute-Force
Bad Web Bot
Web App Attack