🇫🇷
Sklurk
2026-07-09 01:14:08
(1 day ago)
Web App Attack
Web App Attack
🇫🇷
Sklurk
2026-07-08 00:35:09
(3 days ago)
Web App Attack
Web App Attack
🇫🇷
ELYAZ
2026-07-04 11:50:44
(6 days ago)
(y4) Failed scan -byebye- from 216.26.242.48 (BR/Brazil/-): (CF_ENABLE)
Hacking
🇫🇷
ELYAZ
2026-06-30 13:11:37
(1 week ago)
(y4) Failed scan -byebye- from 216.26.242.48 (BR/Brazil/-): (CF_ENABLE)
Hacking
🇫🇷
dynamix
2026-06-28 10:11:51
(1 week ago)
WordPress wp-login.php Brute Force Attack
Brute-Force
Web App Attack
🇱🇻
garmtech.com
2026-05-24 16:37:32
(1 month ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 19-37.216.26.242.48.web-spamme ...
show more
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 19-37.216.26.242.48.web-spammers.v2.rbl.imunify.com._v4 succeeded.
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-01-12 23:04:15
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.242.48 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.242.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 12 18:04:10.183287 2026] [security2:error] [pid 19580:tid 19580] [client 216.26.242.48:51829] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arrowhead30.com"] [uri "/.env"] [unique_id "aWV96ol2o1I07clQJtTurAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
MAGIC
2025-12-09 00:06:14
(7 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2025-12-02 20:35:08
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.242.48 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.242.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 15:35:01.203467 2025] [security2:error] [pid 31079:tid 31079] [client 216.26.242.48:37901] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rocketcityhotwheelers.com"] [uri "/.git/HEAD"] [unique_id "aS9Ndf-e20qXK7h5gY64qgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 19:28:11
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.242.48 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.242.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 14:28:05.044219 2025] [security2:error] [pid 31393:tid 31393] [client 216.26.242.48:17401] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ouzcorp.com"] [uri "/.git/HEAD"] [unique_id "aS89xZ_EugIVcF4gIZIXvQAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 15:25:46
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.242.48 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.242.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 10:25:40.697176 2025] [security2:error] [pid 26331:tid 26331] [client 216.26.242.48:10657] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rockylranch.com"] [uri "/.env"] [unique_id "aS8E9Avwsr-TZewksgkz6gAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 07:14:04
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.242.48 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.242.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 02:13:55.656811 2025] [security2:error] [pid 15646:tid 15646] [client 216.26.242.48:33569] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jean-louisdarville.com"] [uri "/.env"] [unique_id "aS6RsybsKJBnSDkgsRsqgAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 05:13:38
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.242.48 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.242.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 00:13:33.604976 2025] [security2:error] [pid 30540:tid 30540] [client 216.26.242.48:9259] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "normsrotorservice.com"] [uri "/.svn/wc.db"] [unique_id "aS51fegPZuTLl1ty8v4LDwAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-11-02 13:52:47
(8 months ago)
This IP was involved in an brute force and password spray attack on 2025/11/02 06:48:16
Port Scan
Brute-Force
Exploited Host
Web App Attack
🇺🇸
oncord
2025-10-09 23:34:32
(9 months ago)
Form spam
Web Spam