2026-04-01 23:26:37
(2 months ago)
Forum/form spam
Web Spam
🇦🇺
RedBear IT
2026-03-26 10:00:37
(2 months ago)
"DDoS against public endpoint"
DDoS Attack
🇱🇻
garmtech.com
2026-03-09 01:23:57
(3 months ago)
IM360 WAF: Attempt to upload malware
Hacking
🇧🇪
voormedia
2026-03-05 16:09:07
(3 months ago)
Accessed trap at '/.aws/credentials'
Web App Attack
🇺🇸
windowsforum
2026-02-23 12:34:33
(3 months ago)
Spam bot registration: triggers=timing, js_challenge, inv_honeypot, pow_fail, username=JackNorrie
Web Spam
Bad Web Bot
2026-02-19 14:54:04
(4 months ago)
Forum/form spam
Web Spam
2026-01-12 05:43:16
(5 months ago)
Forum/form spam
Web Spam
🇨🇭
backslash
2025-12-08 10:30:04
(6 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇩🇪
Packets-Decreaser.NET
2025-11-30 13:09:55
(6 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
🇺🇸
TPI-Abuse
2025-11-24 05:15:43
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.225.88 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.225.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:15:37.588085 2025] [security2:error] [pid 26072:tid 26072] [client 216.26.225.88:10689] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.marklex.com"] [uri "/.svn/wc.db"] [unique_id "aSPp-ZeOvad-J-oX1JJ9JwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 04:59:33
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.225.88 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.225.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:58:56.109519 2025] [security2:error] [pid 3318004:tid 3318004] [client 216.26.225.88:58489] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.pluralmatrix.net"] [uri "/.env"] [unique_id "aSPmEHsMb0xu9bozjWuPtAAAACQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇱🇻
garmtech.com
2025-11-24 04:14:16
(6 months ago)
Attempted access to sensitive endpoint (/.git/HEAD) detected. Automated scan or unauthorized probing ...
show more
Attempted access to sensitive endpoint (/.git/HEAD) detected. Automated scan or unauthorized probing.
show less
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 04:05:10
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.225.88 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.225.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:05:04.370774 2025] [security2:error] [pid 20657:tid 20657] [client 216.26.225.88:33427] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.bccoa.net"] [uri "/.env"] [unique_id "aSPZcFSdfTxs0-u3YqsAXQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 02:58:57
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.225.88 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.225.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 21:58:51.480802 2025] [security2:error] [pid 29494:tid 29494] [client 216.26.225.88:36109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.crescentcitycafe.com"] [uri "/.git/HEAD"] [unique_id "aSPJ62VlTDk_QHVN6sfVNgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-11-14 08:12:33
(7 months ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack