🇮🇩
Burayot
2026-05-11 22:18:20
(3 weeks ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 216.26.235.158 (US/United States/-) ...
show more
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 216.26.235.158 (US/United States/-): 2 in the last 3600 secs
show less
Web App Attack
🇫🇷
vtchost.com
2026-05-01 12:44:22
(1 month ago)
minux.cc:443 216.26.235.158 - - [01/May/2026:14:44:21 +0200] "GET /.aws/credentials HTTP/1.1" 302 30 ...
show more
minux.cc:443 216.26.235.158 - - [01/May/2026:14:44:21 +0200] "GET /.aws/credentials HTTP/1.1" 302 3035 "-" "Opera/9.80 (Android; Opera Mini/7.5.33361/31.1543; U; en) Presto/2.8.119 Version/11.1010"
...
show less
Bad Web Bot
🇺🇸
LotPhantom
2026-04-17 20:54:32
(1 month ago)
2026/04/17 20:54:31 [error] 510848#510848: *64828 connect() failed (111: Connection refused) while c ...
show more
2026/04/17 20:54:31 [error] 510848#510848: *64828 connect() failed (111: Connection refused) while connecting to upstream, client: 216.26.235.158, server: wynnesmiles.com, request: "GET / HTTP/1.1", upstream: "http://127.0.0.1:4001/", host: "wynnesmiles.com"
...
show less
Web App Attack
🇮🇩
BPS-StatisticsIndonesia
2026-01-10 19:23:34
(4 months ago)
WP Login Scan Activities
Web App Attack
2025-12-22 14:16:48
(5 months ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-12-09 03:07:34
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.235.158 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.235.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 08 22:07:27.169988 2025] [security2:error] [pid 25311:tid 25311] [client 216.26.235.158:39659] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "protection4allsecurity.com"] [uri "/.git/HEAD"] [unique_id "aTeSb9g6cur20ju_wXOp1QAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-08 01:56:09
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.235.158 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.235.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 20:56:03.338604 2025] [security2:error] [pid 28014:tid 28014] [client 216.26.235.158:22927] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "crypto-stamps.com"] [uri "/.svn/wc.db"] [unique_id "aTYwM_ssoQ0WTIi_8fP17gAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-07 17:56:04
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.235.158 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.235.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 12:55:59.649143 2025] [security2:error] [pid 16975:tid 16975] [client 216.26.235.158:45789] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "williams-rodriguez.org"] [uri "/.git/HEAD"] [unique_id "aTW_r86wKlNGKZSM6T9YrgAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-07 13:33:19
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.235.158 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.235.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 08:33:11.530259 2025] [security2:error] [pid 26334:tid 26334] [client 216.26.235.158:56763] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hope4elsalvador.org"] [uri "/.svn/wc.db"] [unique_id "aTWCF6uHlCtDRREr1DES0QAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
kjaerulff
2025-12-07 00:50:04
(5 months ago)
Failed Wordpress login using wp-login.php
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 21:56:04
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.235.158 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.235.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 16:55:56.106477 2025] [security2:error] [pid 27860:tid 27860] [client 216.26.235.158:31631] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ampstudio.eu"] [uri "/.svn/wc.db"] [unique_id "aTNU7J1XJadpyzT6r1ufiAAAAEY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 10:38:55
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.235.158 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.235.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 05:38:48.595493 2025] [security2:error] [pid 27379:tid 27379] [client 216.26.235.158:45745] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pelicancovecondo.com"] [uri "/.svn/wc.db"] [unique_id "aTK2OK4QeVnkoZvPC9wLEwAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 10:00:01
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.235.158 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.235.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 04:59:51.773806 2025] [security2:error] [pid 20845:tid 20845] [client 216.26.235.158:60131] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "enriquejezik.com"] [uri "/.env"] [unique_id "aTKtF0jqD7HP8y7o7d9ZPgAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 09:34:38
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.235.158 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.235.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 04:34:30.674283 2025] [security2:error] [pid 22831:tid 22831] [client 216.26.235.158:42709] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "microkerneltechnologies.com"] [uri "/.env"] [unique_id "aTKnJgaVZ6FZk8gw3oxOLAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 07:22:55
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.235.158 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.235.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 02:22:47.824200 2025] [security2:error] [pid 16455:tid 16455] [client 216.26.235.158:24313] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "casino-badenbaden.com"] [uri "/.env"] [unique_id "aTKIRzSvSkzFo94_98B4FQAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack