🇱🇻
garmtech.com
2026-05-08 05:57:07
(1 month ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 08-57.216.26.240.237.web-spamm ...
show more
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 08-57.216.26.240.237.web-spammers.v2.rbl.imunify.com._v4 succeeded.
show less
Web App Attack
🇱🇻
garmtech.com
2026-05-07 14:43:22
(1 month ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 17-43.216.26.240.237.web-spamm ...
show more
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 17-43.216.26.240.237.web-spammers.v2.rbl.imunify.com._v4 succeeded.
show less
Web App Attack
🇱🇻
garmtech.com
2026-05-05 07:46:43
(1 month ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 10-46.216.26.240.237.web-spamm ...
show more
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 10-46.216.26.240.237.web-spammers.v2.rbl.imunify.com._v4 succeeded.
show less
Web App Attack
🇦🇺
MAGIC
2025-12-20 02:02:37
(5 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2025-11-26 11:10:33
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.240.237 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.240.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 06:10:29.791529 2025] [security2:error] [pid 22016:tid 22016] [client 216.26.240.237:55235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.wildcomaui.com"] [uri "/.env"] [unique_id "aSbgJX93ozKy-0jLRSG_0wAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 10:02:09
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.240.237 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.240.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 05:02:05.914765 2025] [security2:error] [pid 10052:tid 10052] [client 216.26.240.237:39679] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.cormanleigh.com"] [uri "/.git/HEAD"] [unique_id "aSbQHRKnc4S-vNhXNqFA-QAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
iNetWorker
2025-11-26 08:45:07
(6 months ago)
trolling for resource vulnerabilities
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 08:39:27
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.240.237 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.240.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 03:39:19.652049 2025] [security2:error] [pid 20523:tid 20523] [client 216.26.240.237:28573] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.barreda.org"] [uri "/.env"] [unique_id "aSa8tywxrfIVT0F22Gp_vwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 05:25:28
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.240.237 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.240.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 00:25:19.877844 2025] [security2:error] [pid 22995:tid 22995] [client 216.26.240.237:33633] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.dianedanielsmanning.com"] [uri "/.env"] [unique_id "aSaPP_4cwfQfac9g-jlYgAAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 02:08:35
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.240.237 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.240.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 21:08:29.533794 2025] [security2:error] [pid 17544:tid 17557] [client 216.26.240.237:48871] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.killyourattitude.com"] [uri "/.git/HEAD"] [unique_id "aSZhHbdIsiK1k1jqHcTx7wAAAIs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 00:39:30
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.240.237 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.240.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 19:39:18.665024 2025] [security2:error] [pid 32456:tid 32456] [client 216.26.240.237:49529] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.aschmidtconsulting.com"] [uri "/.svn/wc.db"] [unique_id "aSZMNldNn4ZH1GxaxBnw-gAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 05:48:13
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.240.237 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.240.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:48:07.381877 2025] [security2:error] [pid 21360:tid 21360] [client 216.26.240.237:13343] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "annropp.perkjazz.com"] [uri "/.git/HEAD"] [unique_id "aSPxlyXJcrIYFFZuCuhV7AAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2025-10-12 21:23:49
(8 months ago)
4.892 requests with url.path */xmlrpc.php
Brute-Force
Bad Web Bot
2025-10-01 04:11:18
(8 months ago)
2025-10-01T06:11:14.991527 localhost.localdomain sshd[230052]: pam_unix(sshd:auth): authentication f ...
show more
2025-10-01T06:11:14.991527 localhost.localdomain sshd[230052]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=216.26.240.237
2025-10-01T06:11:16.951273 localhost.localdomain sshd[230052]: Failed password for invalid user [email protected] from 216.26.240.237 port 56291 ssh2
...
show less
Brute-Force
SSH