🇺🇸
LSPCCU
2026-07-30 07:49:19
(17 hours ago)
TSEC Honeypot Network report. Threat score: 70/100. Categories: Hacking. Honeypot: ssh-telnet, cowri ...
show more
TSEC Honeypot Network report. Threat score: 70/100. Categories: Hacking. Honeypot: ssh-telnet, cowrie. Context: 216.
show less
Hacking
🇫🇷
Sklurk
2026-07-29 01:15:50
(1 day ago)
Web App Attack
Web App Attack
2026-07-12 13:07:29
(2 weeks ago)
Unauthorized connection attempt
Port Scan
Hacking
Exploited Host
🇧🇪
cmbplf
2026-06-28 03:29:23
(1 month ago)
2.199 requests with url.path *.git/*
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2025-11-26 08:44:26
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.239.141 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.239.141 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 03:44:20.406720 2025] [security2:error] [pid 28717:tid 28717] [client 216.26.239.141:38481] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.newlife12steprecovery.org"] [uri "/.git/HEAD"] [unique_id "aSa95HH-_oPBFp0iSVJc4AAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 00:46:28
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.239.141 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.239.141 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 19:46:25.531165 2025] [security2:error] [pid 29770:tid 29770] [client 216.26.239.141:23731] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.inspiringindividualindustry.com"] [uri "/.git/HEAD"] [unique_id "aSZN4W5rJf1SbAVGTaqXxgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 06:02:02
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.239.141 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.239.141 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:01:53.767505 2025] [security2:error] [pid 3384953:tid 3384953] [client 216.26.239.141:11203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.circle-h-growers.hemihauling.com"] [uri "/.git/HEAD"] [unique_id "aSP00fNcQx0mJpEAad0uYAAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-12 11:39:36
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.239.141 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.239.141 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 12 06:39:31.392553 2025] [security2:error] [pid 3965:tid 3965] [client 216.26.239.141:17921] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.koreagreenrecycling.mapleleaf-marketing.com"] [uri "/config.php%7C/.env%7Csettings.py"] [unique_id "aRRx8yNdJ9sXygcqFl-RhgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-11-01 23:39:00
(8 months ago)
Unauthorized connection attempt
Brute-Force
🇩🇪
london2038.com
2025-10-24 16:58:56
(9 months ago)
Connection atttempts against closed TCP ports
Oct 24 18:58:53 BLOCK SRC=216.26.239.141 LEN=60 TOS=0x ...
show more
Connection atttempts against closed TCP ports
Oct 24 18:58:53 BLOCK SRC=216.26.239.141 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=6765 DF PROTO=TCP SPT=15271 DPT=22 WINDOW=64240 RES=0x00 SYN
Oct 24 18:58:54 BLOCK SRC=216.26.239.141 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=6766 DF PROTO=TCP SPT=15271 DPT=22 WINDOW=64240 RES=0x00 SYN
Oct 24 18:58:55 BLOCK SRC=216.26.239.141 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=6767 DF PROTO=TCP SPT=15271 DPT=22 WINDOW=64240 RES=0x00 SYN
show less
Port Scan