🇩🇪
Axel
2026-05-24 04:02:34
(2 weeks ago)
[2026-05-24 04:02:34 UTC] Honeypot WebLogic connection attempt | AXFRA HONEYPOT
Web App Attack
🇬🇧
PeravixGroup
2026-05-18 18:43:05
(3 weeks ago)
Honeypot detection: Docker daemon unauthorized access / container escape attempt on port 2375. Sever ...
show more
Honeypot detection: Docker daemon unauthorized access / container escape attempt on port 2375. Severity: MEDIUM. Aaran.cloud
show less
Hacking
Exploited Host
🇦🇱
cheatmaster.store
2026-02-27 02:04:52
(3 months ago)
Automated report: This IP address has been identified as an active public open proxy.
Classification ...
show more
Automated report: This IP address has been identified as an active public open proxy.
Classification: Open Proxy | Spoofing | VPN/Anonymizer | Bad Web Bot.
Country: Canada
Threat level: High. This host is listed across multiple public proxy databases and poses a risk of abuse, credential stuffing, scraping, and spoofed traffic.
Reported by automated threat intelligence pipeline. Do not whitelist without manual verification.
show less
Web Spam
Port Scan
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 09:47:38
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.250.230 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.250.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 04:47:33.886501 2025] [security2:error] [pid 2663128:tid 2663128] [client 216.26.250.230:29355] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.salsberggroup.com"] [uri "/.git/HEAD"] [unique_id "aSbMtdfeR2hdav1AdhY_9gAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 06:59:18
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.250.230 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.250.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 01:59:14.514757 2025] [security2:error] [pid 15005:tid 15005] [client 216.26.250.230:48561] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.utahproaudio.com"] [uri "/.git/HEAD"] [unique_id "aSalQiMq8uR19LssW0AWFQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 00:11:17
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.250.230 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.250.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 19:11:09.870975 2025] [security2:error] [pid 5921:tid 5921] [client 216.26.250.230:16007] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.acworthga.us"] [uri "/.svn/wc.db"] [unique_id "aSZFnfaAsNXH1CuCoQLw5wAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 04:24:48
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.250.230 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.250.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:24:42.736884 2025] [security2:error] [pid 4495:tid 4495] [client 216.26.250.230:59247] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.hoofnwoofusa.com"] [uri "/.env"] [unique_id "aSUvir8v84pxLy20JNSOBgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 01:00:37
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.250.230 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.250.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 20:00:04.156226 2025] [security2:error] [pid 11165:tid 11165] [client 216.26.250.230:15593] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.speedgo.mx"] [uri "/.svn/wc.db"] [unique_id "aST_lIvVlfTWI-4C1tAqVQAAAII"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-11-13 19:34:15
(6 months ago)
This IP was involved in an brute force and password spray attack on 2025/11/13 13:32:00
Port Scan
Brute-Force
Exploited Host
Web App Attack
2025-11-07 20:05:53
(7 months ago)
Bad Web Bot
Web App Attack
🇩🇪
DEV-DNS
2025-11-04 05:50:53
(7 months ago)
(wordpress) Failed wordpress login from 216.26.250.230 (CA/Canada/Ontario/Toronto/-/[redacted])
Brute-Force
2025-11-02 19:41:00
(7 months ago)
This IP was involved in an brute force and password spray attack on 2025/11/02 06:57:59
Port Scan
Brute-Force
Exploited Host
Web App Attack
🇫🇷
applemooz
2025-11-01 12:31:51
(7 months ago)
WordPress XMLRPC Brute Force Attacks
...
Brute-Force
Web App Attack
2025-10-30 14:34:38
(7 months ago)
WordPress Brute Force
Brute-Force