🇫🇷
Sklurk
2026-07-07 16:10:12
(1 day ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-01-08 21:54:47
(5 months ago)
(mod_security) mod_security (id:210730) triggered by 216.26.239.228 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 216.26.239.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 08 16:54:41.494406 2026] [security2:error] [pid 1719:tid 1719] [client 216.26.239.228:12521] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||www.neff.family.name|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.neff.family.name"] [uri "/backup.sql"] [unique_id "aWAnofrFNXk2AYBfEZC6ogAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-11 03:32:09
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.239.228 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.239.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 10 22:32:05.138540 2025] [security2:error] [pid 25500:tid 25500] [client 216.26.239.228:35323] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pjbruner.com"] [uri "/.git/HEAD"] [unique_id "aTo7NXjYyDVhEcV645fS_wAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-09 05:34:10
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.239.228 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.239.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 09 00:34:03.325270 2025] [security2:error] [pid 3539:tid 3539] [client 216.26.239.228:20461] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jatglobalsolution.com"] [uri "/.svn/wc.db"] [unique_id "aTe0yzk3b67RtVWQ0RZxQgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2025-12-08 01:05:05
(7 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇳🇱
MM-bot
2025-12-08 00:58:29
(7 months ago)
URL-probe: HTTP/1.1 GET request on /.git/HEAD (2025-12-08 01:58:29 UTC+1)
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2025-12-07 23:39:45
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.239.228 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.239.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 18:39:42.632781 2025] [security2:error] [pid 30666:tid 30666] [client 216.26.239.228:60365] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "constructiondomex.com"] [uri "/.svn/wc.db"] [unique_id "aTYQPsv1KBskzkoMKXrb6QAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-07 19:39:06
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.239.228 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.239.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 14:38:59.911956 2025] [security2:error] [pid 391:tid 391] [client 216.26.239.228:9603] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "t9teamsportinggoods.com"] [uri "/.env"] [unique_id "aTXX0yk0efUUzwug1EbpZQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2025-12-06 23:02:02
(7 months ago)
Auto-ban: >3000 req/min op 2025-12-06
Hacking
Web App Attack
SSH
🇺🇸
TPI-Abuse
2025-12-05 08:27:52
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.239.228 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.239.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 03:27:46.467698 2025] [security2:error] [pid 28856:tid 28856] [client 216.26.239.228:40661] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "guitarsouth.com"] [uri "/.git/HEAD"] [unique_id "aTKXgthtBM9qr37Sq2oo0gAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 07:59:53
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.239.228 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.239.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 02:59:48.083518 2025] [security2:error] [pid 28953:tid 28953] [client 216.26.239.228:34715] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "undergroundh2o.com"] [uri "/.env"] [unique_id "aTKQ9MoFBsCvFBALCU77zgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 06:18:28
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.239.228 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.239.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 01:18:24.360274 2025] [security2:error] [pid 17983:tid 17983] [client 216.26.239.228:13629] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bioemperor.com"] [uri "/.git/HEAD"] [unique_id "aTJ5MAesS1WxgrpuGNA7wAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 10:44:01
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.239.228 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.239.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 05:43:58.141316 2025] [security2:error] [pid 3634:tid 3634] [client 216.26.239.228:37569] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.alessiosilvestrin.com"] [uri "/.env"] [unique_id "aSbZ7i8sYLV0-NAZ4LZY2QAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 08:37:15
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.239.228 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.239.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 03:37:08.122378 2025] [security2:error] [pid 20999:tid 20999] [client 216.26.239.228:45169] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.coast-consult.com"] [uri "/.svn/wc.db"] [unique_id "aSa8NAKGMDNtklfkKroQjgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 03:10:39
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.239.228 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.239.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 22:10:33.612383 2025] [security2:error] [pid 14317:tid 14317] [client 216.26.239.228:34265] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.mccachren.org"] [uri "/.env"] [unique_id "aSZvqdxC_jBxI1d4poUULQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack