🇳🇿
billyborsht
2026-08-24 04:44:50
(1 day ago)
2026-08-24T16:44:49.559194+12:00 southern wordpress(nzangels.com)[990515]: Authentication attempt fo ...
show more
2026-08-24T16:44:49.559194+12:00 southern wordpress(nzangels.com)[990515]: Authentication attempt for unknown user arudikadis from 216.26.241.122
...
show less
Hacking
Web App Attack
🇫🇷
ELYAZ
2026-08-23 07:12:17
(2 days ago)
(wordpress) Failed wordpress login from 216.26.241.122 (BR/Brazil/-): (CF_ENABLE)
Brute-Force
🇲🇽
octageeks.com
2026-08-23 04:08:21
(2 days ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇫🇷
Sklurk
2026-08-18 07:39:57
(1 week ago)
Web App Attack
Web App Attack
2026-07-29 07:00:00
(3 weeks ago)
Apache probe; attempts=18; exact paths: /xmlrpc.php
Web App Attack
🇺🇸
webgobe
2026-07-09 23:07:49
(1 month ago)
wew-Joomla User : try to access forms...
Hacking
🇫🇷
Sklurk
2026-06-11 11:36:25
(2 months ago)
Web App Attack
Web App Attack
🇺🇸
mnsf
2026-02-13 06:05:15
(6 months ago)
Too many Status 40X (12)
Scanning/Probing (12)
Brute-Force
Web App Attack
🇨🇭
Origon
2026-02-10 01:15:24
(6 months ago)
http-sensitive-files - IP: 216.26.241.122 - time="2026-02-10T02:15:24+01:00" level=info msg="(555f6 ...
show more
http-sensitive-files - IP: 216.26.241.122 - time="2026-02-10T02:15:24+01:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-sensitive-files by ip 216.26.241.122 (BR/200373) : 4h ban on Ip 216.26.241.122" module=db
show less
Web App Attack
🇺🇸
TPI-Abuse
2025-12-09 22:05:45
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.241.122 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.241.122 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 09 17:05:41.629274 2025] [security2:error] [pid 21303:tid 21303] [client 216.26.241.122:26597] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dancingmountainsbrewing.com"] [uri "/.svn/wc.db"] [unique_id "aTidNXQhpuv9LW94SoJ2PgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-07 14:38:54
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.241.122 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.241.122 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 09:38:47.241856 2025] [security2:error] [pid 30272:tid 30272] [client 216.26.241.122:37941] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pondplain.org"] [uri "/.svn/wc.db"] [unique_id "aTWRdwbGNnD_QOxjHqsA1wAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
jjnxpct
2025-12-07 04:54:14
(8 months ago)
Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ...
show more
Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /.env (Rule ID: 930130) - Restricted File Access Attempt [Suspicious: .env found within REQUEST_FILENAME: /.env]
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2025-12-06 16:19:10
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.241.122 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.241.122 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 06 11:19:03.004522 2025] [security2:error] [pid 2468:tid 2468] [client 216.26.241.122:32433] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lynetteharris.net"] [uri "/.git/HEAD"] [unique_id "aTRXd-uxdnr27fq_RpjBQwAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 10:37:56
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.241.122 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.241.122 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 05:37:51.916698 2025] [security2:error] [pid 12046:tid 12046] [client 216.26.241.122:18791] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "watonga.com"] [uri "/.git/HEAD"] [unique_id "aTK1_4GhdGRoxOfwMp153gAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 09:35:28
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.241.122 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.241.122 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 04:35:24.405615 2025] [security2:error] [pid 485:tid 485] [client 216.26.241.122:41967] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vaghyst.com"] [uri "/.svn/wc.db"] [unique_id "aTKnXMNmhoa7_hkZ_OoEFAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack