|
🇫🇷
Sklurk
|
|
Web App Attack
|
Web App Attack
|
|
🇧🇪
Fanjoe
|
|
Oct 12 14:38:23 raspberrypi wordpress\(fanjoe.be\)\[12374\]: XML-RPC authentication attempt for unknown user wpadminns from 216.26.241.233\
|
Brute-Force
Web App Attack
|
|
🇫🇷
j-tap
|
|
WordPress honeypot: automated scanner (xmlrpc / installer / .env / direct login POST)
|
Web App Attack
|
|
🇲🇽
octageeks.com
|
|
Wordpress malicious attack:[octawpauthor]
|
Web App Attack
|
|
🇫🇷
SpaceHost-Server
|
|
|
Brute-Force
Web App Attack
|
|
🇫🇷
SpaceHost-Server
|
|
|
Brute-Force
Web App Attack
|
|
🇫🇷
ELYAZ
|
|
(wordpress) Failed wordpress login from 216.26.241.233 (BR/Brazil/-): (CF_ENABLE)
|
Brute-Force
|
|
🇺🇦
URAN Publishing Service
|
|
[15/Sep/2026:00:12:02 +0300] -- 216.26.241.233 Ban reason: Scanner [CMS_GENERIC] | Request: GET /wp-login.php HTTP/1.1
|
Bad Web Bot
Web App Attack
|
|
🇲🇽
octageeks.com
|
|
Wordpress malicious attack:[octaflood]
|
Web App Attack
|
|
Anonymous
|
|
IM360 WAF: Attempt to upload malware
|
Hacking
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 216.26.241.233 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 05:13:57.194744 2025] [security2:error] [pid 16683:tid 16683] [client 216.26.241.233:18001] ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.241.233 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 05:13:57.194744 2025] [security2:error] [pid 16683:tid 16683] [client 216.26.241.233:18001] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mcfdemos.kmelson.com"] [uri "/.svn/wc.db"] [unique_id "aSbS5WrGcuAsEw-UP6CkTwAAAAM"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 216.26.241.233 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 22:08:29.402142 2025] [security2:error] [pid 22655:tid 22655] [client 216.26.241.233:12033] ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.241.233 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 22:08:29.402142 2025] [security2:error] [pid 22655:tid 22655] [client 216.26.241.233:12033] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.sirreelpictures.com"] [uri "/.git/HEAD"] [unique_id "aSZvLeQHJrD1NSl8DwwG3AAAAAs"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 216.26.241.233 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 20:27:27.782257 2025] [security2:error] [pid 4805:tid 4805] [client 216.26.241.233:13305] M ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.241.233 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 20:27:27.782257 2025] [security2:error] [pid 4805:tid 4805] [client 216.26.241.233:13305] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.jfordclanrecipes.com"] [uri "/.svn/wc.db"] [unique_id "aSZXf_sJugf7IEclo_VxRgAAAAE"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 216.26.241.233 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:28:50.342308 2025] [security2:error] [pid 17767:tid 17767] [client 216.26.241.233:59385] ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.241.233 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:28:50.342308 2025] [security2:error] [pid 17767:tid 17767] [client 216.26.241.233:59385] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.andysharp.com"] [uri "/.svn/wc.db"] [unique_id "aSVMova_VohaBm50kbXU0gAAAAc"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 216.26.241.233 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:14:02.890263 2025] [security2:error] [pid 30820:tid 30820] [client 216.26.241.233:47093] ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.241.233 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:14:02.890263 2025] [security2:error] [pid 30820:tid 30820] [client 216.26.241.233:47093] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.litefibers.com"] [uri "/.env"] [unique_id "aSUe-re3Ys980kDirKRCSQAAABw"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
