🇦🇺
paulshipley.com.au
2026-09-24 19:36:13
(4 hours ago)
[Fri Sep 25 05:36:13.623998 2026] [security2:error] [pid 551034] [client 216.26.228.47:27307] [clien ...
show more
[Fri Sep 25 05:36:13.623998 2026] [security2:error] [pid 551034] [client 216.26.228.47:27307] [client 216.26.228.47] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "paulshipley.com.au"] [uri "/"] [unique_id "arV7rdmwo9S7_tdEjyojTAAAAAY"]
...
show less
Web App Attack
🇨🇿
Countryman
2026-09-04 00:10:01
(2 weeks ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇩🇪
Lino Project
2026-05-05 15:16:55
(4 months ago)
216.26.228.47 - - [05/May/2026:17:16:54 +0200] "GET /xmlrpc.php HTTP/1.1" 403 3972 "https://www.prim ...
show more
216.26.228.47 - - [05/May/2026:17:16:54 +0200] "GET /xmlrpc.php HTTP/1.1" 403 3972 "https://www.primobio.it/mio-account/?action=register" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
🇱🇻
garmtech.com
2026-04-01 01:26:21
(5 months ago)
IM360 WAF: Old style account creation and modification in Joomla! MV:registration
Web App Attack
🇦🇺
MAGIC
2026-03-11 00:54:19
(6 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇳🇱
i-turnradio.nl
2026-02-24 13:21:36
(7 months ago)
2026-02-24 14:21:35 (CET) ~ Blocked by abusescan risk assessment
Web App Attack
🇪🇸
10dencehispahard SL
2026-02-10 02:01:36
(7 months ago)
Unauthorized login attempts [ accesslogs]
Brute-Force
🇩🇪
Carsten
2026-02-10 01:34:42
(7 months ago)
GET [backup/.git/config]
Port Scan
🇳🇱
GabrielJST
2026-01-08 08:10:50
(8 months ago)
(wordpress) Failed wordpress login from 216.26.228.47 (US/United States/-)
Brute-Force
2025-12-30 20:39:37
(8 months ago)
"GET /.env HTTP/1.1"
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2025-12-30 18:53:09
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.228.47 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.228.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 30 13:52:59.951079 2025] [security2:error] [pid 5414:tid 5414] [client 216.26.228.47:45531] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.allcostaricarentals.com"] [uri "/.svn/wc.db"] [unique_id "aVQfi5KJooPvXC25CAzMwQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-29 08:24:43
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.228.47 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.228.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 03:24:39.776005 2025] [security2:error] [pid 21304:tid 21304] [client 216.26.228.47:20767] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "luxandunion.com"] [uri "/.env"] [unique_id "aVI6x2SKV49UaeBlBzubXwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-29 06:46:43
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.228.47 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.228.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 01:46:37.964060 2025] [security2:error] [pid 2980:tid 2986] [client 216.26.228.47:53197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "spectresails.com"] [uri "/.env"] [unique_id "aVIjzRVtsv2QY781bBrlZgAAAMQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-29 06:15:30
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.228.47 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.228.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 01:15:26.016821 2025] [security2:error] [pid 7403:tid 7403] [client 216.26.228.47:30089] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "asduk.com"] [uri "/.env"] [unique_id "aVIcfrVu7f2nWxcsF3T9aQAAAD0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-29 05:00:59
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.228.47 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.228.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 00:00:52.098031 2025] [security2:error] [pid 29433:tid 29433] [client 216.26.228.47:51353] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "encuentraunbuenabogado.com"] [uri "/.git/HEAD"] [unique_id "aVILBBhwj5xMx7kYBEMsMwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
