🇺🇸
mnsf
2026-02-13 03:06:53
(3 months ago)
Scanning/Probing (25)
Brute-Force
Web App Attack
🇮🇩
Burayot
2026-02-13 02:25:06
(3 months ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 216.26.235.20 (US/United States/-): ...
show more
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 216.26.235.20 (US/United States/-): 1 in the last 3600 secs
show less
Web App Attack
🇦🇺
MAGIC
2026-01-02 01:12:22
(5 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇺🇸
oncord
2025-12-14 03:18:27
(5 months ago)
Form spam
Web Spam
🇺🇸
nowyouknow
2025-12-07 15:58:31
(5 months ago)
Phishing
Web Spam
🇺🇸
TPI-Abuse
2025-11-26 08:48:41
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.235.20 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.235.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 03:48:36.359973 2025] [security2:error] [pid 15608:tid 15608] [client 216.26.235.20:16249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.cityplanapp.com"] [uri "/.git/HEAD"] [unique_id "aSa-5CEUS01c-BvxQQxd0AAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 05:57:38
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.235.20 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.235.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 00:57:31.726186 2025] [security2:error] [pid 17933:tid 17933] [client 216.26.235.20:40433] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sunshine-trust.com"] [uri "/.svn/wc.db"] [unique_id "aSaWy44u17kCRf_sesUx4AAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 03:04:51
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.235.20 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.235.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 22:04:44.512783 2025] [security2:error] [pid 2846:tid 2846] [client 216.26.235.20:58289] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emmpftp.tremulant.com"] [uri "/.svn/wc.db"] [unique_id "aSZuTCARRWs_SBGM_SsD0QAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-11-24 14:57:03
(6 months ago)
Honey Pot Hit / Attack Vector found!
Port Scan
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 08:32:09
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.235.20 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.235.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:31:52.255973 2025] [security2:error] [pid 1339:tid 1339] [client 216.26.235.20:20899] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.desertrosedoves.com"] [uri "/.git/HEAD"] [unique_id "aSQX-E7vB9F8INUyyb3TmgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 05:28:22
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.235.20 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.235.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:28:17.174103 2025] [security2:error] [pid 18325:tid 18327] [client 216.26.235.20:30385] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.soyjuantrece.com"] [uri "/.git/HEAD"] [unique_id "aSPs8bibCkDUtlE56PAxbAAAAEA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
NXTwoThou
2025-11-24 02:45:04
(6 months ago)
/.aws/credentials
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 00:48:27
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.235.20 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.235.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 19:46:54.980709 2025] [security2:error] [pid 21018:tid 21018] [client 216.26.235.20:29727] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.americaismyhome.com"] [uri "/.env"] [unique_id "aSOq_smHzjBXfeeUqWFmGgAAAHw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-11-13 21:24:59
(6 months ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack
🇭🇺
zolav8
2025-11-08 04:45:29
(6 months ago)
SQL injection / web attack attempt
Hacking
SQL Injection