🇺🇸
webgobe
2026-07-13 10:12:13
(4 days ago)
wew-Joomla User : try to access forms...
Hacking
🇫🇷
Sklurk
2026-07-08 23:59:02
(1 week ago)
Web App Attack
Web App Attack
🇧🇷
Halux
2026-07-06 00:58:44
(1 week ago)
216.26.245.204 Web Application Firewall multiple violations
Hacking
Web App Attack
🇫🇷
Sklurk
2026-06-20 03:01:50
(3 weeks ago)
Web App Attack
Web App Attack
🇬🇧
PeravixGroup
2026-05-07 06:25:56
(2 months ago)
Honeypot detection: Docker daemon unauthorized access / container escape attempt on port 2375. Sever ...
show more
Honeypot detection: Docker daemon unauthorized access / container escape attempt on port 2375. Severity: MEDIUM. Aaran.cloud
show less
Hacking
Exploited Host
🇦🇺
RedBear IT
2026-03-26 10:00:37
(3 months ago)
"DDoS against public endpoint"
DDoS Attack
2025-12-07 07:33:32
(7 months ago)
Forum/form spam
Web Spam
🇺🇸
TPI-Abuse
2025-11-26 08:39:53
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.245.204 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.245.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 03:39:45.335663 2025] [security2:error] [pid 13781:tid 13781] [client 216.26.245.204:50939] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.heckenbach.org"] [uri "/.svn/wc.db"] [unique_id "aSa80RnkvBza2mVqBSY0wAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 06:57:58
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.245.204 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.245.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:57:55.388673 2025] [security2:error] [pid 25961:tid 25961] [client 216.26.245.204:19459] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.generationedm.com"] [uri "/.svn/wc.db"] [unique_id "aSVTczMYQHDqHYoci4ehQwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 04:21:54
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.245.204 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.245.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:21:44.746434 2025] [security2:error] [pid 783576:tid 783576] [client 216.26.245.204:11321] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.hills-tax.com"] [uri "/.env"] [unique_id "aSUu2KuDceaAltSdl34a1gAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 03:46:22
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.245.204 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.245.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:46:15.512195 2025] [security2:error] [pid 14827:tid 14827] [client 216.26.245.204:41971] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.sponsorzilla.com"] [uri "/.svn/wc.db"] [unique_id "aSUmhwUJ4LIo8Jua255xbwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 01:40:50
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.245.204 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.245.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 20:40:45.608786 2025] [security2:error] [pid 2606:tid 2606] [client 216.26.245.204:23903] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.chateau-saleza-bruges.com"] [uri "/.git/HEAD"] [unique_id "aSUJHQB2krbaUBpMpt4C2wAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 01:10:06
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.245.204 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.245.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 20:09:28.197498 2025] [security2:error] [pid 7326:tid 7524] [client 216.26.245.204:52747] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.progenicyte.org"] [uri "/.svn/wc.db"] [unique_id "aSUByNNUaJ5dFUuoaTxtfQAAAMo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 08:41:54
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.245.204 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.245.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:41:43.823719 2025] [security2:error] [pid 132008:tid 132031] [client 216.26.245.204:28063] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.supradig.com"] [uri "/.git/HEAD"] [unique_id "aSQaRwH-XN5lTt6cMbeRmwAAAFI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 06:04:13
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.245.204 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.245.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:04:09.041970 2025] [security2:error] [pid 32619:tid 32619] [client 216.26.245.204:40185] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.mhebert.com"] [uri "/.svn/wc.db"] [unique_id "aSP1WQxwuS9esVI4a0It2QAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack