🇨🇿
lp
2026-09-22 19:50:06
(1 day ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 216.26.241.38
2026-09-22T21:23:11+02: ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 216.26.241.38
2026-09-22T21:23:11+02:00 vpn Access-Reject 'utente1' station: 216.26.241.38 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
lp
2026-09-19 19:49:52
(4 days ago)
Unauthorized VPN login attempts: 2 attempts were recorded from 216.26.241.38
2026-09-19T21:29:07+02: ...
show more
Unauthorized VPN login attempts: 2 attempts were recorded from 216.26.241.38
2026-09-19T21:29:07+02:00 vpn Access-Reject 'ahmed' station: 216.26.241.38 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-09-19T21:31:31+02:00 vpn Access-Reject 'hossam' station: 216.26.241.38 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇺🇸
drewf.ink
2026-09-04 12:37:21
(2 weeks ago)
[12:37] Attempted HTTPS access to the GlobalProtect prelogin endpoint on the web honeypot (VPN gatew ...
show more
[12:37] Attempted HTTPS access to the GlobalProtect prelogin endpoint on the web honeypot (VPN gateway fingerprinting/recon)
show less
Web App Attack
🇸🇪
OnTheEdge
2026-09-03 09:34:07
(3 weeks ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
🇸🇪
OnTheEdge
2026-09-02 16:15:59
(3 weeks ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 05:27:42
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.241.38 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.241.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 00:27:34.866781 2025] [security2:error] [pid 28822:tid 28822] [client 216.26.241.38:33557] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.nancybcatering.com"] [uri "/.git/HEAD"] [unique_id "aSU-RkpU3E8LWLpMTuyFEwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 05:10:29
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.241.38 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.241.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 00:10:20.079369 2025] [security2:error] [pid 4794:tid 4794] [client 216.26.241.38:32395] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.talleyrealtyofdothan.taltonfamily.com"] [uri "/.svn/wc.db"] [unique_id "aSU6PM0Y-NoSpOwJr2yHigAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 04:11:47
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.241.38 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.241.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:11:41.205449 2025] [security2:error] [pid 10362:tid 10362] [client 216.26.241.38:15027] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.thekingtones.com"] [uri "/.svn/wc.db"] [unique_id "aSUsfQdFtqimsPMHZXBJngAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 03:03:26
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.241.38 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.241.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:03:19.398068 2025] [security2:error] [pid 9479:tid 9479] [client 216.26.241.38:32957] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.digitalracemedia.com"] [uri "/.svn/wc.db"] [unique_id "aSUcd7uoS31Qq4ILsBDiRQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 02:13:09
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.241.38 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.241.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:12:55.919435 2025] [security2:error] [pid 32481:tid 32507] [client 216.26.241.38:21413] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.woadwellness.com"] [uri "/.svn/wc.db"] [unique_id "aSUQp5qY1V4Bz6061ijpOAAAAJg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
MPL
2025-11-24 23:37:33
(9 months ago)
tcp/80 (18 or more attempts)
Port Scan
🇺🇸
MPL
2025-11-24 23:37:33
(9 months ago)
tcp/80 (9 or more attempts)
Port Scan
2025-11-02 23:43:00
(10 months ago)
Unauthorized connection attempt
Brute-Force
🇨🇦
polycoda
2025-10-15 11:40:29
(11 months ago)
📡 Port scan
Hacking
Web App Attack