2026-08-24 09:24:42
(2 hours ago)
2026-08-24T09:24:42.429470+00:00 instance-20260804-1025 wordpress(jumarpab.co)[441236]: Blocked user ...
show more
2026-08-24T09:24:42.429470+00:00 instance-20260804-1025 wordpress(jumarpab.co)[441236]: Blocked user enumeration attempt from 216.26.239.56
...
show less
Web App Attack
🇲🇹
Malta
2026-08-24 07:12:37
(4 hours ago)
216.26.239.56 - - [24/Aug/2026:09:12:37 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Ubun ...
show more
216.26.239.56 - - [24/Aug/2026:09:12:37 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
show less
Hacking
Web App Attack
🇫🇷
Sklurk
2026-08-05 00:08:19
(2 weeks ago)
Web App Attack
Web App Attack
🇱🇻
garmtech.com
2026-03-12 21:28:43
(5 months ago)
IM360 WAF: Attempt to upload malware
Hacking
🇫🇷
geot
2026-01-03 18:22:21
(7 months ago)
GET /php-cgi.exe?%ADd+cgi.force_redirect%3D0+%ADd+cgi.redirect_status_env%3D0+%ADd+fastcgi.impersona ...
show more
GET /php-cgi.exe?%ADd+cgi.force_redirect%3D0+%ADd+cgi.redirect_status_env%3D0+%ADd+fastcgi.impersonate%3D1+%ADd+open_basedir%3D+%ADd+disable_functions%3D+%ADd+auto_prepend_file%3Dphp://input+%ADd+allow_url_include%3D1+%ADd+allow_url_fopen%3D1 HTTP/1.1
show less
Hacking
Web App Attack
🇫🇮
Shaik Sai Meera
2025-12-11 01:10:09
(8 months ago)
IM360 WAF: Hidden file access
Brute-Force
🇺🇸
TPI-Abuse
2025-12-07 23:21:17
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.239.56 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.239.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 18:21:10.016912 2025] [security2:error] [pid 987:tid 987] [client 216.26.239.56:32799] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pinebrookdesign.com"] [uri "/.git/HEAD"] [unique_id "aTYL5u5kIQy7uvUIwFb-0QAAACQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-06 11:40:34
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.239.56 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.239.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 06 06:40:28.377344 2025] [security2:error] [pid 14989:tid 14989] [client 216.26.239.56:24337] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "alphazeta.net"] [uri "/.svn/wc.db"] [unique_id "aTQWLOgn9TjY_5RgYsUrigAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-06 11:03:03
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.239.56 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.239.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 06 06:02:55.886663 2025] [security2:error] [pid 5654:tid 5672] [client 216.26.239.56:50033] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vanessa.santos.name"] [uri "/.svn/wc.db"] [unique_id "aTQNX-X6ffQiRn5rQTaOZQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-06 03:03:17
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.239.56 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.239.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 22:03:11.398527 2025] [security2:error] [pid 1900:tid 1900] [client 216.26.239.56:56955] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "freerein.info"] [uri "/.git/HEAD"] [unique_id "aTOc7zy-ZhOe5QDTHHm9DAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 10:17:54
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.239.56 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.239.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 05:17:50.398592 2025] [security2:error] [pid 28710:tid 28710] [client 216.26.239.56:51003] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "luxurymicrobikini.com"] [uri "/.svn/wc.db"] [unique_id "aTKxThOlnk9XchdKBtQltQAAACc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇰🇪
Oste
2025-11-28 17:20:24
(8 months ago)
Unauthorized activity detected from reported IP, including scanning and intrusion attempts.
Hacking
SQL Injection
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 09:09:07
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.239.56 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.239.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 04:09:02.157448 2025] [security2:error] [pid 8979:tid 8979] [client 216.26.239.56:56761] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.toytractorrepair.com"] [uri "/.env"] [unique_id "aSbDrs1LSgOYea8ZZgpqzgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 05:46:53
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.239.56 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.239.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 00:46:48.191311 2025] [security2:error] [pid 17789:tid 17789] [client 216.26.239.56:25999] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.valuerec.jmarkcapital.com"] [uri "/.svn/wc.db"] [unique_id "aSaUSEjRqOoZnkytrZTYRQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 03:00:24
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.239.56 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.239.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 22:00:18.238104 2025] [security2:error] [pid 20603:tid 20603] [client 216.26.239.56:31263] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.directcap.com"] [uri "/.git/HEAD"] [unique_id "aSZtQvBBqL2k5dmLKRunEAAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack