🇫🇷
Sklurk
2026-09-01 06:24:16
(1 day ago)
Web App Attack
Web App Attack
🇺🇸
drewf.ink
2026-08-30 00:19:28
(3 days ago)
[00:19] Attempted HTTPS access to the GlobalProtect prelogin endpoint on the web honeypot (VPN gatew ...
show more
[00:19] Attempted HTTPS access to the GlobalProtect prelogin endpoint on the web honeypot (VPN gateway fingerprinting/recon)
show less
Web App Attack
2026-08-10 06:48:36
(3 weeks ago)
Banned by SPAMHAUS DROP list
DDoS Attack
Hacking
Bad Web Bot
Web App Attack
🇫🇷
Sklurk
2026-08-04 01:19:13
(4 weeks ago)
Web App Attack
Web App Attack
2026-07-29 07:00:00
(1 month ago)
Apache probe; attempts=18; exact paths: /xmlrpc.php
Web App Attack
🇫🇷
SpaceHost-Server
2026-06-02 22:32:01
(2 months ago)
Brute-Force
Web App Attack
🇩🇪
macrob
2026-06-01 22:38:21
(3 months ago)
2026/06/01 22:38:19 [error] 562096#562096: *273786991 access forbidden by rule, client: 216.26.228.6 ...
show more
2026/06/01 22:38:19 [error] 562096#562096: *273786991 access forbidden by rule, client: 216.26.228.60, server: binixo.com, request: "GET //wp-includes/wlwmanifest.xml HTTP/2.0", host: "binixo.com"
2026/06/01 22:38:19 [error] 562096#562096: *273786998 access forbidden by rule, client: 216.26.228.60, server: binixo.com, request: "GET //xmlrpc.php?rsd HTTP/2.0", host: "binixo.com"
2026/06/01 22:38:20 [error] 562094#562094: *273786957 access forbidden by rule, client: 216.26.228.60, server: binixo.com, request: "GET //blog/wp-includes/wlwmanifest.xml HTTP/2.0", host: "binixo.com"
...
show less
Web App Attack
🇳🇱
i-turnradio.nl
2026-02-15 12:35:43
(6 months ago)
2026-02-15 13:35:43 (CET) ~ Blocked by abusescan risk assessment
Web App Attack
🇩🇪
Packets-Decreaser.NET
2025-12-31 00:59:12
(8 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
2025-12-11 05:07:43
(8 months ago)
botnet
DDoS Attack
2025-12-03 23:42:14
(8 months ago)
botnet
DDoS Attack
🇺🇸
TPI-Abuse
2025-11-25 07:12:00
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.228.60 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.228.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 02:11:54.628092 2025] [security2:error] [pid 10617:tid 10671] [client 216.26.228.60:11181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.metropaint.net"] [uri "/.svn/wc.db"] [unique_id "aSVWus6TJsC6P66-MR5Y2QAAAE8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 03:05:33
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.228.60 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.228.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:05:26.695510 2025] [security2:error] [pid 4764:tid 4764] [client 216.26.228.60:49561] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "deannlottmusic.com"] [uri "/.env"] [unique_id "aSUc9rXzW9kDy42Fo8MMTAAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 05:42:50
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.228.60 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.228.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:42:40.465471 2025] [security2:error] [pid 29834:tid 29834] [client 216.26.228.60:33921] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "athenaanderson.andrsn.com"] [uri "/.env"] [unique_id "aSPwUCDR4D_wlDszi0k1qwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 04:33:02
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.228.60 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.228.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:32:50.561729 2025] [security2:error] [pid 26722:tid 26722] [client 216.26.228.60:16005] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.darrinlauritzen.com"] [uri "/.env"] [unique_id "aSPf8plTowAo2gYDQGP0VAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack