2026-05-29 16:49:55
(2 weeks ago)
Sensitive file access attempt
Hacking
🇺🇸
cyfordtechnologies.com
2026-03-27 21:40:01
(2 months ago)
High-abuse ASN prefix: 216.26. : Reported by Cyford API
Web App Attack
2026-03-17 22:32:20
(3 months ago)
Forum/form spam
Web Spam
🇺🇸
cyfordtechnologies.com
2026-02-18 20:49:43
(4 months ago)
High-abuse ASN prefix: 216.26. : Reported by Cyford API
Web App Attack
2026-02-11 14:40:48
(4 months ago)
Forum/form spam
Web Spam
🇪🇸
10dencehispahard SL
2026-01-26 10:14:54
(4 months ago)
Wordpress probing for vulnerabilities
Hacking
Exploited Host
2026-01-18 21:15:20
(5 months ago)
Forum/form spam
Web Spam
2025-12-14 11:01:09
(6 months ago)
botnet
DDoS Attack
🇺🇸
TPI-Abuse
2025-12-09 03:53:17
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.226.154 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.226.154 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 08 22:53:09.858889 2025] [security2:error] [pid 1087:tid 1087] [client 216.26.226.154:37151] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cadimpressions.com"] [uri "/.env"] [unique_id "aTedJWNrzLCasf5YosuhygAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-09 01:15:44
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.226.154 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.226.154 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 08 20:15:41.243590 2025] [security2:error] [pid 18540:tid 18540] [client 216.26.226.154:27309] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "anatolyaleksin.com"] [uri "/.svn/wc.db"] [unique_id "aTd4PRmJ7O03eK6FwbKaPgAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-08 04:53:39
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.226.154 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.226.154 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 23:53:35.228878 2025] [security2:error] [pid 25987:tid 26001] [client 216.26.226.154:30473] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "strengthsmatter.com"] [uri "/.git/HEAD"] [unique_id "aTZZz4QmJhAYiaONxWzo3QAAAMw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2025-12-06 23:02:58
(6 months ago)
Auto-ban: >3000 req/min op 2025-12-06
Hacking
Web App Attack
SSH
🇺🇸
TPI-Abuse
2025-12-06 17:41:32
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.226.154 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.226.154 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 06 12:41:26.712512 2025] [security2:error] [pid 5164:tid 5164] [client 216.26.226.154:27347] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "zabyte.net"] [uri "/.git/HEAD"] [unique_id "aTRqxrUbYSEBU06gB8SkhgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 07:19:08
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.226.154 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.226.154 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:19:00.045486 2025] [security2:error] [pid 3461621:tid 3461621] [client 216.26.226.154:56005] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aromatherapyricebags.com"] [uri "/.git/HEAD"] [unique_id "aSQG5KBCW5W9kDCeA3E3QAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 06:53:34
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.226.154 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.226.154 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:53:30.452061 2025] [security2:error] [pid 27484:tid 27484] [client 216.26.226.154:24961] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.busengakko.org"] [uri "/.env"] [unique_id "aSQA6gL84SQG068286tg8QAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack