🇫🇷
Sklurk
2026-07-09 01:22:12
(6 days ago)
Web App Attack
Web App Attack
🇫🇷
Sklurk
2026-07-08 00:35:32
(1 week ago)
Web App Attack
Web App Attack
🇦🇺
paulshipley.com.au
2026-06-22 23:05:22
(3 weeks ago)
[Tue Jun 23 09:05:21.457768 2026] [security2:error] [pid 175526] [client 216.26.227.5:34253] [client ...
show more
[Tue Jun 23 09:05:21.457768 2026] [security2:error] [pid 175526] [client 216.26.227.5:34253] [client 216.26.227.5] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/xmlrpc.php"] [unique_id "ajm_seipaboeZfghIZR-eAAAAAU"]
...
show less
Web App Attack
2026-04-10 03:28:10
(3 months ago)
Forum/form spam
Web Spam
🇦🇺
RedBear IT
2026-03-26 10:00:37
(3 months ago)
"DDoS against public endpoint"
DDoS Attack
🇺🇸
cyfordtechnologies.com
2026-03-14 03:36:23
(4 months ago)
High-abuse ASN prefix: 216.26. : Reported by Cyford API
Web App Attack
🇺🇸
nowyouknow
2026-01-01 17:43:09
(6 months ago)
(From [email protected] ) Hello there,
Are you currently looking for a reliable Digital Market ...
show more
(From [email protected] ) Hello there,
Are you currently looking for a reliable Digital Marketing Assistant to support your business with
tasks like SEO, Google & Meta Ads, Email Marketing, Social Media Management, Order
Management, and more?
We provide trained, dedicated personnel who work a minimum of 8 hours per day for only
$250/month + and your first month is completely free.
If you’re interested to afford a full time VA at $250/month after the free month, kindly fill out the
form below to get started:
Direct Google link: https://docs.google.com/forms/d/e/1FAIpQLSdfVsEbHZ8ONCILtiWxC8Nz4dMDX4XytsWbDm9ZehvJq0dshA/viewform
GLE Link to Google Forms: https://forms.gle/hUcK6pGk3DeYNonL7
Short link: https://shorturl.at/sIc0l
show less
Phishing
Web Spam
🇮🇹
VHosting
2025-12-24 03:20:37
(6 months ago)
Detected attack and reported by a human
DDoS Attack
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
SSH
2025-12-11 10:46:13
(7 months ago)
botnet
DDoS Attack
🇺🇸
TPI-Abuse
2025-12-02 22:10:15
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.227.5 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.227.5 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 17:10:09.811636 2025] [security2:error] [pid 6798:tid 6798] [client 216.26.227.5:47545] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tunabay.com"] [uri "/.env"] [unique_id "aS9jwQINPbNIUGuS71OYdwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 19:28:31
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.227.5 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.227.5 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 14:28:24.102805 2025] [security2:error] [pid 16578:tid 16578] [client 216.26.227.5:35133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dougscomputers.com"] [uri "/.svn/wc.db"] [unique_id "aS892EqjQOFzSNVwmMe-5AAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 14:36:43
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.227.5 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.227.5 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 09:36:40.127239 2025] [security2:error] [pid 15340:tid 15372] [client 216.26.227.5:57051] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "re52s.com"] [uri "/.svn/wc.db"] [unique_id "aS75eGfVV3te9jwc25ssTAAAANI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 08:23:41
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.227.5 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.227.5 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 03:23:35.823504 2025] [security2:error] [pid 20157:tid 20157] [client 216.26.227.5:32149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "marijuanajoint.com"] [uri "/.git/HEAD"] [unique_id "aS6iB_jelF0R2D4DxwW6XwAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 07:14:26
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.227.5 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.227.5 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 02:14:19.082297 2025] [security2:error] [pid 18366:tid 18366] [client 216.26.227.5:58737] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "abbysue.com"] [uri "/.svn/wc.db"] [unique_id "aS6RywJXIaJ6OgMf_RuGZQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 05:08:05
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.227.5 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.227.5 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 00:08:01.197014 2025] [security2:error] [pid 15508:tid 15508] [client 216.26.227.5:9171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sixsensehealing.com"] [uri "/.git/HEAD"] [unique_id "aS50MYxtDwP0Ulfe5vEpMAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack