🇫🇷
Sklurk
2026-07-31 00:05:23
(4 weeks ago)
Web App Attack
Web App Attack
🇺🇸
Rip
2026-04-30 07:48:54
(3 months ago)
Automated recon attempt targeting restricted and sensitive paths.
Web App Attack
🇨🇭
TheCoon
2026-04-21 14:15:02
(4 months ago)
Automated: Gzip bomb download attempt
Web App Attack
Hacking
🇩🇪
4server
2026-04-21 02:44:41
(4 months ago)
[TueApr2104:44:35.1549952026][security2:error][pid2446757:tid2446776][client216.26.245.10:0]ModSecur ...
show more
[TueApr2104:44:35.1549952026][security2:error][pid2446757:tid2446776][client216.26.245.10:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"eselectronic.ch\"][uri\"/backup.sql\"][unique_id\"aebkkyM_zKWpNOzXIlv_FAAAAFA\"]
show less
Port Scan
Brute-Force
Web App Attack
2026-01-05 20:26:39
(7 months ago)
Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.05 is noted in report tim ...
show more
Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.05 is noted in report timestamp
show less
Hacking
Brute-Force
🇺🇸
TPI-Abuse
2025-12-09 04:45:40
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.245.10 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.245.10 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 08 23:45:32.951659 2025] [security2:error] [pid 4947:tid 4947] [client 216.26.245.10:19009] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brasscadillac.com"] [uri "/.env"] [unique_id "aTepbK4bJ_a_TSSjPbdjXwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-08 02:33:26
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.245.10 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.245.10 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 21:33:18.928594 2025] [security2:error] [pid 15003:tid 15003] [client 216.26.245.10:16007] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jasbemarketing.com"] [uri "/.git/HEAD"] [unique_id "aTY47p9Vg5lb0FH6WTmgvQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-07 18:16:32
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.245.10 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.245.10 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 13:16:28.495204 2025] [security2:error] [pid 3797:tid 3797] [client 216.26.245.10:30501] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "deltasouls.com"] [uri "/.svn/wc.db"] [unique_id "aTXEfKPQdgkSRPwai8aZWQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-07 15:10:47
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.245.10 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.245.10 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 10:10:41.678861 2025] [security2:error] [pid 14327:tid 14327] [client 216.26.245.10:45337] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stalbansparish.org"] [uri "/.git/HEAD"] [unique_id "aTWY8ULKEvPkMd9TwN8oCgAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-07 12:59:09
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.245.10 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.245.10 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 07:59:05.786005 2025] [security2:error] [pid 25821:tid 25842] [client 216.26.245.10:60893] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "eafm.org"] [uri "/.git/HEAD"] [unique_id "aTV6GWFzg3cGrUb-LHwylAAAANA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-06 16:19:19
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.245.10 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.245.10 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 06 11:19:14.423664 2025] [security2:error] [pid 32725:tid 32725] [client 216.26.245.10:54065] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pourier.net"] [uri "/.svn/wc.db"] [unique_id "aTRXgnxUzU4NGTTTZZnTbgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-06 11:26:31
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.245.10 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.245.10 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 06 06:26:26.985039 2025] [security2:error] [pid 32312:tid 32312] [client 216.26.245.10:50319] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "grayhost.net"] [uri "/.env"] [unique_id "aTQS4pXXsAWFfBAsxUyynAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-06 04:42:40
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.245.10 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.245.10 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 23:42:34.188566 2025] [security2:error] [pid 10470:tid 10470] [client 216.26.245.10:44105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "megastorebuilders.info"] [uri "/.git/HEAD"] [unique_id "aTO0Or8wS4DtKroNwsfSdgAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 05:55:24
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.245.10 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.245.10 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 00:55:21.054133 2025] [security2:error] [pid 13480:tid 13480] [client 216.26.245.10:21825] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "safetyfastclub.com"] [uri "/.svn/wc.db"] [unique_id "aTJzyc_7S4LsCwtNIoBvEQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 03:02:06
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.245.10 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.245.10 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 22:02:03.097871 2025] [security2:error] [pid 17100:tid 17100] [client 216.26.245.10:24573] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dandpcreamery.com"] [uri "/.svn/wc.db"] [unique_id "aTJLK2TqJM4T_QYpyJmD-wAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
