2026-01-26 16:07:59
(4 months ago)
Forum/form spam
Web Spam
2025-12-27 13:08:02
(5 months ago)
2025-12-27T15:08:02.011528+02:00 zanati wp(www.sahpa.co.za)[193659]: Blocked authentication attempt ...
show more
2025-12-27T15:08:02.011528+02:00 zanati wp(www.sahpa.co.za)[193659]: Blocked authentication attempt for [email protected] from 216.26.238.223
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2025-12-09 10:39:53
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.238.223 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.238.223 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 09 05:39:45.042517 2025] [security2:error] [pid 23882:tid 23882] [client 216.26.238.223:60793] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dunnretired.com"] [uri "/.svn/wc.db"] [unique_id "aTf8cVCCuN5r2PxCiI8OYQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-08 23:11:50
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.238.223 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.238.223 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 08 18:11:43.237814 2025] [security2:error] [pid 12022:tid 12022] [client 216.26.238.223:10807] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "almudenastrust.com"] [uri "/.svn/wc.db"] [unique_id "aTdbL-6Fm-k8560YG5r7qwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-06 11:42:58
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.238.223 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.238.223 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 06 06:42:54.381285 2025] [security2:error] [pid 12303:tid 12303] [client 216.26.238.223:33529] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "realclean.net"] [uri "/.env"] [unique_id "aTQWvhD3TiN84nEjzYeEFgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 07:10:23
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.238.223 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.238.223 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 02:10:17.766099 2025] [security2:error] [pid 32319:tid 32319] [client 216.26.238.223:60625] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bigholegolf.com"] [uri "/.git/HEAD"] [unique_id "aTKFWS46D3jJyG7v2N8V3QAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 04:48:57
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.238.223 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.238.223 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 23:48:52.610670 2025] [security2:error] [pid 19769:tid 19781] [client 216.26.238.223:58671] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "michaelrandon.com"] [uri "/.git/HEAD"] [unique_id "aTJkNDmxUD_lY2Rd6IQ2AwAAAIg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 02:45:10
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.238.223 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.238.223 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 21:45:02.456841 2025] [security2:error] [pid 1517:tid 1517] [client 216.26.238.223:29755] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "konar-steenberg.com"] [uri "/.env"] [unique_id "aTJHLoCM6UADGMzn7oLg6wAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 01:00:32
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.238.223 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.238.223 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 20:00:28.453612 2025] [security2:error] [pid 18485:tid 18485] [client 216.26.238.223:55675] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nielectricalsales.com"] [uri "/.svn/wc.db"] [unique_id "aTIurA_Rrkn9D7S7nt41dQAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-12-04 03:20:26
(6 months ago)
2025-12-04T05:20:26.124011+02:00 zanati wp(www.sahpa.co.za)[383233]: Blocked authentication attempt ...
show more
2025-12-04T05:20:26.124011+02:00 zanati wp(www.sahpa.co.za)[383233]: Blocked authentication attempt for [email protected] from 216.26.238.223
...
show less
Web App Attack
2025-11-13 21:07:01
(7 months ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack
🇨🇦
wil.com
2025-10-29 08:31:45
(7 months ago)
GlobalProtect login attempts with user breanalane.
VPN IP
Brute-Force
🇭🇺
zolav8
2025-10-24 02:00:17
(8 months ago)
SQL injection / web attack attempt
Hacking
SQL Injection
🇺🇸
masterguru
2025-10-20 08:29:32
(8 months ago)
PHP Injection Attack: Variable Function Call Found. Pattern match "(?:(?:\\\\(|\\\\ (933210-124)
Hacking
🇪🇸
el-brujo
2025-10-17 05:53:27
(8 months ago)
Cloudflare WAF: Request Path: /php/solucionado-problema-css-y-php/10/ Request Query: ?PHPSESSID=cqni ...
show more
Cloudflare WAF: Request Path: /php/solucionado-problema-css-y-php/10/ Request Query: ?PHPSESSID=cqnivu6nsb94kdo1d7spmdgauh%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x5478394f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x385a6d38%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538 Host: forum.elhacker.net userAgent: Mozilla/5.0 (Linux; Android 10; BLA-L29) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36 Action: log Source: firewallManaged ASN Description: DREI-K-TECH-GMBH Country: CA Method: GET Timestamp: 2025-10-17T05:53:27Z ruleId: 3b0c61407d0b4f7d87e516472116d2fe. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB).
show less
Hacking
SQL Injection
Web App Attack