🇫🇷
Sklurk
2026-06-23 03:55:12
(4 days ago)
Web App Attack
Web App Attack
🇩🇪
LRob.fr
2026-06-22 19:18:05
(4 days ago)
Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail
Bad Web Bot
Web App Attack
🇳🇱
ParaBug
2026-06-06 21:21:24
(2 weeks ago)
216.26.224.229 - - [06/Jun/2026:23:21:18 +0200] "GET http://51-15-23-24.rev.poneytelecom.eu/.git/HEA ...
show more
216.26.224.229 - - [06/Jun/2026:23:21:18 +0200] "GET http://51-15-23-24.rev.poneytelecom.eu/.git/HEAD HTTP/1.1" 403 440 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15"
...
show less
Phishing
Brute-Force
Web App Attack
🇫🇮
inlink.ltd
2026-05-15 06:29:20
(1 month ago)
Known malicious PHP file or CMS probe
Web App Attack
🇦🇺
RedBear IT
2026-03-26 10:00:37
(3 months ago)
"DDoS against public endpoint"
DDoS Attack
🇨🇭
backslash
2026-01-19 16:20:06
(5 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇺🇸
TPI-Abuse
2026-01-17 05:19:25
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 216.26.224.229 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 216.26.224.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 17 00:19:18.439284 2026] [security2:error] [pid 14850:tid 14850] [client 216.26.224.229:43689] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||televisonic.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "televisonic.com"] [uri "/wp/wp-json/wp/v2/users"] [unique_id "aWsb1hkWldv0eJDBMdwUxgAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Packets-Decreaser.NET
2025-12-29 14:01:57
(5 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
2025-12-11 14:30:46
(6 months ago)
botnet
DDoS Attack
🇺🇸
TPI-Abuse
2025-11-24 09:41:22
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.224.229 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.224.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:41:18.136415 2025] [security2:error] [pid 28765:tid 28765] [client 216.26.224.229:38965] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.shofarmusic.com"] [uri "/.git/HEAD"] [unique_id "aSQoPu5KBoOrFuE2imOGRAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 08:18:50
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.224.229 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.224.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:18:09.875998 2025] [security2:error] [pid 14848:tid 14848] [client 216.26.224.229:21761] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "baliaccommodationpadangpadang.com"] [uri "/.env"] [unique_id "aSQUwXG9rDlZFKZHlWs2-QAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 07:44:39
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.224.229 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.224.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:44:33.226717 2025] [security2:error] [pid 4702:tid 4702] [client 216.26.224.229:16583] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.tunabay.com"] [uri "/.env"] [unique_id "aSQM4Vj9sBJ1cWRQyGbgNQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 07:01:22
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.224.229 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.224.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:01:17.118599 2025] [security2:error] [pid 12006:tid 12062] [client 216.26.224.229:22115] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bacchus.productions"] [uri "/.env"] [unique_id "aSQCvUDKyspBjqfQ2lVB2AAAAEQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 05:43:28
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.224.229 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.224.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:43:13.835536 2025] [security2:error] [pid 30223:tid 30223] [client 216.26.224.229:48011] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.politicallycorrectbook.com"] [uri "/.git/HEAD"] [unique_id "aSPwcfQXGMrgW8bPpfkRBAAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 05:25:41
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.224.229 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.224.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:25:34.423301 2025] [security2:error] [pid 8968:tid 8968] [client 216.26.224.229:49905] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.pbeyer.org"] [uri "/.env"] [unique_id "aSPsTro36wDPUHummafZZwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack