🇪🇸
librebit
2026-05-17 04:25:20
(3 weeks ago)
Brute force
Brute-Force
🇺🇸
dtorrer
2026-04-09 09:08:31
(1 month ago)
Client attempted to submit spam on a website post.
Blog Spam
🇺🇸
mnsf
2026-03-27 03:06:47
(2 months ago)
Too many Status 40X (12)
Scanning/Probing (12)
Brute-Force
Web App Attack
🇺🇸
oncord
2026-01-03 09:45:48
(5 months ago)
Form spam
Web Spam
🇦🇺
oncord
2025-12-28 10:02:15
(5 months ago)
Form spam
Web Spam
🇺🇸
TPI-Abuse
2025-12-24 23:09:02
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 216.26.237.114 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 216.26.237.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 24 18:08:57.976572 2025] [security2:error] [pid 18234:tid 18234] [client 216.26.237.114:28159] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||reyadecostarica.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "reyadecostarica.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aUxyiV_b9Aa4Dy_Y9rP6AgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 17:23:18
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.237.114 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.237.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 12:23:12.591614 2025] [security2:error] [pid 5369:tid 5369] [client 216.26.237.114:23017] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sunsettrailsardmore.com"] [uri "/.env"] [unique_id "aS8ggJ34dQaXznxJWrYElAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 15:39:47
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.237.114 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.237.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 10:39:43.112418 2025] [security2:error] [pid 16540:tid 16540] [client 216.26.237.114:45997] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "billthompsons.com"] [uri "/.env"] [unique_id "aS8IP3s09INDb9EcqWdPIAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 14:44:44
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.237.114 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.237.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 09:44:36.588355 2025] [security2:error] [pid 13674:tid 13674] [client 216.26.237.114:46399] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hiscreativedesign.com"] [uri "/.svn/wc.db"] [unique_id "aS77VH2xO57CIZq-9GA_FQAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 13:18:06
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.237.114 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.237.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 08:17:59.601115 2025] [security2:error] [pid 1283:tid 1401] [client 216.26.237.114:36457] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "benningtonlawoffice.com"] [uri "/.svn/wc.db"] [unique_id "aS7nBwJcrirdPLKKutsD8gAAARg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
Shaik Sai Meera
2025-12-02 10:05:10
(6 months ago)
IM360 WAF: Hidden file access
Brute-Force
🇺🇸
TPI-Abuse
2025-12-02 04:52:23
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.237.114 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.237.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 01 23:52:15.985459 2025] [security2:error] [pid 7080:tid 7080] [client 216.26.237.114:32473] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "streamlinenz.com"] [uri "/.svn/wc.db"] [unique_id "aS5wfzr2juDVHlVjL_4HeAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 11:58:19
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.237.114 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.237.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 06:58:12.405863 2025] [security2:error] [pid 7801:tid 7801] [client 216.26.237.114:35465] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.terrysavastano.com"] [uri "/.env"] [unique_id "aSbrVFw5wI461IdxT7NT6gAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 06:41:44
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.237.114 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.237.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 01:41:40.391772 2025] [security2:error] [pid 24837:tid 24837] [client 216.26.237.114:59441] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.phantomkennels.com"] [uri "/.env"] [unique_id "aSahJIDAZ9nFLMniV_8n8gAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 01:06:01
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.237.114 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.237.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 20:05:53.834574 2025] [security2:error] [pid 1746:tid 1746] [client 216.26.237.114:28065] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.lyounglaw.com"] [uri "/.git/HEAD"] [unique_id "aSZSceF7SgT4ASxggnXRfgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack