🇨🇦
KIsmay
2026-09-13 11:38:57
(2 days ago)
2026-09-13T07:29:38.243581-04:00 www4 WPAudit[3954769]: 216.26.231.31 www.valhallasafety.com "Goosee ...
show more
2026-09-13T07:29:38.243581-04:00 www4 WPAudit[3954769]: 216.26.231.31 www.valhallasafety.com "Goosee-Audit/1.0 (+internal-security-audit)" sbd-admin:Valhallasafety! FAIL
2026-09-13T07:30:33.353882-04:00 www4 WPAudit[3960619]: 216.26.231.31 valhallasafety.com "Goosee-Audit/1.0 (+internal-security-audit)" sbd-admin:casinovalhallasafety FAIL
2026-09-13T07:32:39.297301-04:00 www4 WPAudit[3960619]: 216.26.231.31 www.valhallasafety.com "Goosee-Audit/1.0 (+internal-security-audit)" sbd-admin:112233 FAIL
2026-09-13T07:33:32.671570-04:00 www4 WPAudit[3960619]: 216.26.231.31 valhallasafety.com "Goosee-Audit/1.0 (+internal-security-audit)" sbd-admin:12344321 FAIL
2026-09-13T07:38:56.634384-04:00 www4 WPAudit[3960108]: 216.26.231.31 arcrightplumbingandheating.com "Goosee-Audit/1.0 (+internal-security-audit)" sbd-admin:content FAIL
...
show less
Brute-Force
Web App Attack
🇸🇪
OnTheEdge
2026-09-04 01:27:04
(1 week ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
🇫🇷
Sklurk
2026-08-14 07:44:53
(1 month ago)
Web App Attack
Web App Attack
🇫🇷
Sklurk
2026-07-29 00:58:02
(1 month ago)
Web App Attack
Web App Attack
🇫🇷
Sklurk
2026-07-17 12:06:41
(1 month ago)
Web App Attack
Web App Attack
🇺🇸
webgobe
2026-07-11 19:53:36
(2 months ago)
wew-Joomla User : try to access forms...
Hacking
🇫🇷
Sklurk
2026-06-23 03:55:34
(2 months ago)
Web App Attack
Web App Attack
🇦🇺
RedBear IT
2026-03-26 10:00:37
(5 months ago)
"DDoS against public endpoint"
DDoS Attack
🇺🇸
agenciahypelab.com.br
2026-01-20 07:07:39
(7 months ago)
WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_TRIGGER
Brute-Force
SSH
🇺🇸
raymarron.com
2025-12-10 20:58:31
(9 months ago)
/.aws/credentials
Web App Attack
🇲🇾
syokadmin
2025-12-09 08:52:39
(9 months ago)
(cpanel) Failed cPanel login from 216.26.231.31 (US/United States/-): 1 in the last 3600 secs
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 12:36:51
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.231.31 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.231.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 07:36:45.372826 2025] [security2:error] [pid 6446:tid 6446] [client 216.26.231.31:46025] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jangamble.com"] [uri "/.env"] [unique_id "aS7dXSW4eWMf2rBgN2m2bQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 07:32:34
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.231.31 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.231.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 02:32:30.686065 2025] [security2:error] [pid 12042:tid 12042] [client 216.26.231.31:27379] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rotorservice.com"] [uri "/.env"] [unique_id "aS6WDtyOTxlDIwRvPrmgXQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 07:11:30
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.231.31 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.231.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 02:11:23.158111 2025] [security2:error] [pid 19484:tid 19484] [client 216.26.231.31:49077] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fnavarro.com"] [uri "/.svn/wc.db"] [unique_id "aS6RG9J15r-k7t-afNESBwAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 06:04:02
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.231.31 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.231.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 01:03:57.296580 2025] [security2:error] [pid 14956:tid 15017] [client 216.26.231.31:42815] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pref-realestate.com"] [uri "/.git/HEAD"] [unique_id "aS6BTVbve-zJwfI7DO8NPwAAAFI"]
show less
Brute-Force
Bad Web Bot
Web App Attack