🇫🇷
fineservice
2026-09-25 07:43:31
(1 day ago)
PrestaShop Security Module: SQL injection probe detected
Web App Attack
🇺🇦
URAN Publishing Service
2026-09-24 17:16:51
(2 days ago)
[24/Sep/2026:20:16:51 +0300] -- 216.26.237.124 Ban reason: Scanner [CMS_GENERIC] | Request: GET ///p ...
show more
[24/Sep/2026:20:16:51 +0300] -- 216.26.237.124 Ban reason: Scanner [CMS_GENERIC] | Request: GET ///phpmyadmin2/// HTTP/1.1
show less
Bad Web Bot
Web App Attack
🇺🇸
drewf.ink
2026-09-24 10:15:54
(2 days ago)
[10:15] Attempted HTTPS GlobalProtect login with credentials backupadm:ba*****dm
Web App Attack
🇫🇷
fineservice
2026-09-24 06:45:52
(2 days ago)
PrestaShop Security Module: SQL injection probe detected
Web App Attack
🇫🇷
COMAITE
2026-09-22 15:20:28
(4 days ago)
SQL injection attempt from 216.26.237.124.
Web App Attack
🇩🇪
mxbl
2026-09-20 23:10:02
(6 days ago)
Scanning for CMS vulnerabilities on a non-CMS system: /wp-json/
Web App Attack
🇺🇦
URAN Publishing Service
2026-03-15 15:27:16
(6 months ago)
216.26.237.124 - - [15/Mar/2026:17:27:14 +0200] "GET /.env HTTP/1.1" 404 2914 "-" "Mozilla/5.0 (Maci ...
show more
216.26.237.124 - - [15/Mar/2026:17:27:14 +0200] "GET /.env HTTP/1.1" 404 2914 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36"
216.26.237.124 - - [15/Mar/2026:17:27:16 +0200] "GET /credentials.env HTTP/1.1" 404 273 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36"
...
show less
Web App Attack
🇬🇧
consul.to
2026-02-15 12:50:02
(7 months ago)
Web attack/malicious scanning detected
Web App Attack
🇩🇪
filstal.org
2026-02-15 12:07:25
(7 months ago)
WAF repeated trigger detected by Fail2Ban
Web App Attack
🇺🇸
myagent.site
2026-02-15 03:50:11
(7 months ago)
Blocking for trying to access an exploit file: /site/.git/config
Hacking
🇺🇸
inspectorgdgt
2025-12-24 22:00:00
(9 months ago)
VPN brute-force login attempts observed (bulk report).
Brute-Force
🇺🇸
TPI-Abuse
2025-11-24 09:43:35
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.237.124 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.237.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:43:28.505214 2025] [security2:error] [pid 15747:tid 15747] [client 216.26.237.124:18391] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.sarahingber.com"] [uri "/.env"] [unique_id "aSQowHGk5W7o1j3FpAnYVQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 09:05:36
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.237.124 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.237.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:05:30.834360 2025] [security2:error] [pid 31269:tid 31269] [client 216.26.237.124:36149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.harveyyachtsales.com"] [uri "/.svn/wc.db"] [unique_id "aSQf2rt9r_CaaFidYVZsUAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 05:15:17
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.237.124 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.237.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:15:12.362191 2025] [security2:error] [pid 9915:tid 9915] [client 216.26.237.124:44245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.rogerg.com"] [uri "/.git/HEAD"] [unique_id "aSPp4JmRROCzAnMZMGChEAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-23 21:59:13
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.237.124 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.237.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 16:59:05.137888 2025] [security2:error] [pid 2953004:tid 2953004] [client 216.26.237.124:59419] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.paulburns.com"] [uri "/.svn/wc.db"] [unique_id "aSODqd-fC6z6FRhYIU7i-AAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
