🇲🇹
Malta
2026-06-29 12:19:59
(1 day ago)
216.26.227.96 - - [29/Jun/2026:14:19:59 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows N ...
show more
216.26.227.96 - - [29/Jun/2026:14:19:59 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0"
show less
Hacking
Web App Attack
🇦🇺
oncord
2026-06-13 14:58:21
(2 weeks ago)
Form spam
Web Spam
🇺🇸
oncord
2026-05-29 12:31:40
(1 month ago)
Form spam
Web Spam
🇲🇾
Rizzy
2026-04-17 08:07:07
(2 months ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇨🇭
backslash
2026-01-31 04:00:04
(4 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇲🇹
Malta
2026-01-30 03:43:01
(5 months ago)
216.26.227.96 - - [30/Jan/2026:04:43:01 +0100] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows N ...
show more
216.26.227.96 - - [30/Jan/2026:04:43:01 +0100] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.207 Safari/537.36"
show less
Hacking
Web App Attack
2026-01-27 16:46:30
(5 months ago)
2026-01-27T18:46:29.865746+02:00 zanati wp(www.sahpa.co.za)[785902]: Blocked authentication attempt ...
show more
2026-01-27T18:46:29.865746+02:00 zanati wp(www.sahpa.co.za)[785902]: Blocked authentication attempt for [email protected] from 216.26.227.96
...
show less
Web App Attack
🇦🇺
MAGIC
2026-01-19 02:08:50
(5 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇦🇺
MAGIC
2025-12-24 05:06:37
(6 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇲🇾
syokadmin
2025-12-19 14:18:00
(6 months ago)
(cpanel) Failed cPanel login from 216.26.227.96 (US/United States/-): 1 in the last 3600 secs
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-12-10 15:56:16
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.227.96 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.227.96 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 10 10:56:11.308598 2025] [security2:error] [pid 28409:tid 28409] [client 216.26.227.96:10045] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rosawallas.com"] [uri "/.env"] [unique_id "aTmYG7sf0T4KG6uTbKpS_QAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-09 22:42:19
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.227.96 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.227.96 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 09 17:42:14.535796 2025] [security2:error] [pid 18557:tid 18609] [client 216.26.227.96:10579] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "themarketplacelb.com"] [uri "/.git/HEAD"] [unique_id "aTilxvREwz-KboP06jjgUAAAARQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-07 13:11:35
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.227.96 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.227.96 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 08:11:30.036497 2025] [security2:error] [pid 26362:tid 26384] [client 216.26.227.96:15677] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "financialanalyst.org"] [uri "/.svn/wc.db"] [unique_id "aTV9As6T0xqNPOCnMKajQwAAAJI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 10:26:44
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.227.96 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.227.96 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 05:26:37.706669 2025] [security2:error] [pid 20216:tid 20216] [client 216.26.227.96:29241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jrussell.com"] [uri "/.env"] [unique_id "aTKzXSys3I6blXHAeKJUvgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 10:09:47
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.227.96 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.227.96 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 05:09:40.472370 2025] [security2:error] [pid 5516:tid 5516] [client 216.26.227.96:23891] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tekrav.com"] [uri "/.svn/wc.db"] [unique_id "aTKvZIM-pEmkQGBFRY8ySQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack