🇨🇭
sternwart
2026-09-16 08:03:25
(2 days ago)
Automatisch erkannt: Zugriff auf /.env (3d.alpasana.ch)
Web App Attack
Bad Web Bot
🇫🇷
Sklurk
2026-07-30 01:26:25
(1 month ago)
Web App Attack
Web App Attack
🇫🇷
Sklurk
2026-07-29 01:25:08
(1 month ago)
Web App Attack
Web App Attack
🇫🇷
Sklurk
2026-06-17 00:31:11
(3 months ago)
Web App Attack
Web App Attack
🇲🇹
Malta
2026-05-16 22:19:19
(4 months ago)
216.26.243.255 - - [17/May/2026:00:19:18 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows ...
show more
216.26.243.255 - - [17/May/2026:00:19:18 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0"
show less
Hacking
Web App Attack
2025-12-29 00:52:56
(8 months ago)
2025-12-29T02:52:55.186054+02:00 zanati wp(www.sahpa.co.za)[398165]: Blocked authentication attempt ...
show more
2025-12-29T02:52:55.186054+02:00 zanati wp(www.sahpa.co.za)[398165]: Blocked authentication attempt for [email protected] from 216.26.243.255
...
show less
Web App Attack
2025-12-16 03:40:08
(9 months ago)
2025-12-16T05:40:08.439281+02:00 zanati wp(www.sahpa.co.za)[978186]: Blocked authentication attempt ...
show more
2025-12-16T05:40:08.439281+02:00 zanati wp(www.sahpa.co.za)[978186]: Blocked authentication attempt for [email protected] from 216.26.243.255
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 21:15:33
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.243.255 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.243.255 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 16:15:28.934928 2025] [security2:error] [pid 4080:tid 4080] [client 216.26.243.255:57805] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "book-arts-press.com"] [uri "/.env"] [unique_id "aS9W8Ki8Mq-KOyMdOqSb4QAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 07:45:40
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.243.255 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.243.255 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 02:45:35.065243 2025] [security2:error] [pid 19966:tid 19966] [client 216.26.243.255:13993] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "the-it-man.com"] [uri "/.svn/wc.db"] [unique_id "aS6ZH8LM905Y-A1kuag8wAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 05:30:13
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.243.255 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.243.255 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 00:30:03.949591 2025] [security2:error] [pid 13200:tid 13200] [client 216.26.243.255:52789] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "xyncom.com"] [uri "/.env"] [unique_id "aS55W7KIw-ujOCrc6iSIbwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 05:13:29
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.243.255 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.243.255 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 00:13:23.858884 2025] [security2:error] [pid 11908:tid 11922] [client 216.26.243.255:57817] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "draginich.com"] [uri "/.env"] [unique_id "aS51c8liGRBvMFEAm_whmQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 04:45:02
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.243.255 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.243.255 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 01 23:44:57.175936 2025] [security2:error] [pid 9206:tid 9214] [client 216.26.243.255:45883] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gryphix.com"] [uri "/.svn/wc.db"] [unique_id "aS5uyVw5jEjeVLQBRCG4PQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 11:13:05
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.243.255 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.243.255 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 06:13:01.454983 2025] [security2:error] [pid 18725:tid 18725] [client 216.26.243.255:25479] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.alanrmariotti.com"] [uri "/.env"] [unique_id "aSbgvZArVHHRnuzWyXBfPgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 09:12:28
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.243.255 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.243.255 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 04:12:21.621877 2025] [security2:error] [pid 3738190:tid 3738266] [client 216.26.243.255:54355] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.trejbal.com"] [uri "/.svn/wc.db"] [unique_id "aSbEddynXzP7IZS7N5-2gwAAANg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 07:13:19
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.243.255 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.243.255 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 02:13:12.518165 2025] [security2:error] [pid 9414:tid 9414] [client 216.26.243.255:31931] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mydarklady.com"] [uri "/.git/HEAD"] [unique_id "aSaoiGfC6V8_ssES6inFyQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack