🇮🇩
securejdprop
2026-09-28 19:37:43
(1 day ago)
This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET DROP Spamhaus D ...
show more
This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET DROP Spamhaus DROP Listed Traffic Inbound group 68).
show less
Hacking
Web App Attack
🇨🇿
lp
2026-09-22 18:21:50
(1 week ago)
Unauthorized VPN login attempts: 5 attempts were recorded from 216.26.242.233
2026-09-22T20:02:49+02 ...
show more
Unauthorized VPN login attempts: 5 attempts were recorded from 216.26.242.233
2026-09-22T20:02:49+02:00 vpn Access-Reject 'arct01' station: 216.26.242.233 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-09-22T20:04:35+02:00 vpn Access-Reject 'idea03' station: 216.26.242.233 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-09-22T20:06:20+02:00 vpn Access-Reject 'idea04' station: 216.26.242.233 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-09-22T20:08:06+02:00 vpn Access-Reject 'sofia' station: 216.26.242.233 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-09-22T20:09:51+02:00 vpn Access-Reject 'utest' station: 216.26.242.233 auth-type: - realm: vse.cz nas: <redac
show less
Brute-Force
Web App Attack
🇨🇿
Countryman
2026-09-05 00:10:02
(3 weeks ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇺🇸
drewf.ink
2026-09-04 09:46:38
(3 weeks ago)
[09:46] Attempted HTTPS access to the GlobalProtect prelogin endpoint on the web honeypot (VPN gatew ...
show more
[09:46] Attempted HTTPS access to the GlobalProtect prelogin endpoint on the web honeypot (VPN gateway fingerprinting/recon)
show less
Web App Attack
🇸🇪
OnTheEdge
2026-09-04 08:20:10
(3 weeks ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
🇮🇹
LTM
2026-05-21 06:20:02
(4 months ago)
DNS - Multiple recursive query request denied
DNS Poisoning
Hacking
🇩🇪
LRob
2026-01-04 18:49:50
(8 months ago)
Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail
Bad Web Bot
Web App Attack
🇳🇱
MM-bot
2025-12-30 13:23:42
(8 months ago)
URL-probe: HTTP/1.1 POST request on /xmlrpc.php (2025-12-30 14:23:42 UTC+1)
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2025-12-27 19:36:40
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.242.233 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.242.233 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 27 14:36:35.541945 2025] [security2:error] [pid 6194:tid 6194] [client 216.26.242.233:44095] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "terrybeachmusic.com"] [uri "/.env"] [unique_id "aVA1Q4865k16xhw34SDHnAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-27 19:00:57
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.242.233 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.242.233 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 27 14:00:50.328492 2025] [security2:error] [pid 23228:tid 23228] [client 216.26.242.233:42001] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "knoxvillelimos.com"] [uri "/.git/HEAD"] [unique_id "aVAs4hmpZOKpHO-ltU19owAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 08:58:51
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.242.233 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.242.233 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:58:40.614140 2025] [security2:error] [pid 27437:tid 27523] [client 216.26.242.233:52763] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.accsesame.com"] [uri "/.git/HEAD"] [unique_id "aSQeQNoYfOeNrXwwM6SKnAAAAFU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 06:13:17
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.242.233 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.242.233 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:13:09.175299 2025] [security2:error] [pid 6776:tid 6776] [client 216.26.242.233:53977] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.sarawatt.com"] [uri "/.git/HEAD"] [unique_id "aSP3deRtA3mLX9fzIPpygQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 05:20:44
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.242.233 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.242.233 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:20:39.836084 2025] [security2:error] [pid 18192:tid 18253] [client 216.26.242.233:36515] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.siriuspharmaceuticals.com"] [uri "/.git/HEAD"] [unique_id "aSPrJyagYJ-Jn6Tmn4s2zAAAAVc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 04:59:38
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.242.233 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.242.233 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:59:32.136957 2025] [security2:error] [pid 32238:tid 32238] [client 216.26.242.233:34259] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.orleansdartclub.com"] [uri "/.svn/wc.db"] [unique_id "aSPmNAy58Z71-ubvPzniFgAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 04:38:46
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.242.233 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.242.233 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:38:43.480968 2025] [security2:error] [pid 3463:tid 3463] [client 216.26.242.233:39205] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.biff0.com"] [uri "/.git/HEAD"] [unique_id "aSPhU1HIcHpsFc8QD38hugAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
