🇫🇷
pm33
2026-07-09 06:53:42
(10 hours ago)
Wordpress login attempts
Brute-Force
🇺🇸
cwytech
2026-07-09 06:24:57
(10 hours ago)
Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/wordpress-login-lockdown-high.
Bad Web Bot
Web App Attack
🇲🇽
octageeks.com
2026-07-08 04:17:38
(1 day ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇺🇸
factor1
2026-07-05 23:35:23
(3 days ago)
Fail2ban at saturn Reports Abuse.
Brute-Force
Web App Attack
🇳🇿
billyborsht
2026-07-04 00:51:52
(5 days ago)
2026-07-04T12:51:51.067841+12:00 southern wordpress(abrahamic.nz)[2026848]: Authentication attempt f ...
show more
2026-07-04T12:51:51.067841+12:00 southern wordpress(abrahamic.nz)[2026848]: Authentication attempt for unknown user administrator from 216.26.244.82
...
show less
Hacking
Web App Attack
🇩🇪
iNetWorker
2026-07-01 11:05:12
(1 week ago)
trolling for resource vulnerabilities
Web App Attack
🇮🇹
LTM
2026-04-27 06:20:01
(2 months ago)
WebServer - Attempts to exploit
Hacking
Brute-Force
Web App Attack
🇺🇸
oncord
2026-04-02 07:26:18
(3 months ago)
Form spam
Web Spam
🇦🇺
RedBear IT
2026-03-26 10:00:37
(3 months ago)
"DDoS against public endpoint"
DDoS Attack
🇱🇻
garmtech.com
2025-12-18 02:27:35
(6 months ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 04-27.216.26.244.82.web-spamme ...
show more
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 04-27.216.26.244.82.web-spammers.v2.rbl.imunify.com._v4 succeeded.
show less
Web App Attack
🇺🇸
TPI-Abuse
2025-12-03 03:53:00
(7 months ago)
(mod_security) mod_security (id:210740) triggered by 216.26.244.82 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210740) triggered by 216.26.244.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 22:52:51.460954 2025] [security2:error] [pid 4241:tid 4252] [client 216.26.244.82:49735] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||freeziyadyaghi.info|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "freeziyadyaghi.info"] [uri "/contact.htm/default.asp"] [unique_id "aS-0E4KHfjwZPJaDdPNjNwAAAMk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-27 22:43:49
(7 months ago)
(mod_security) mod_security (id:210740) triggered by 216.26.244.82 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210740) triggered by 216.26.244.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 27 17:43:30.922190 2025] [security2:error] [pid 12982:tid 12982] [client 216.26.244.82:53411] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||www.powerastronomy.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "www.powerastronomy.com"] [uri "/scarbook.php"] [unique_id "aSjUEkSjqToLiXK2WO8XHAAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-11-01 20:03:44
(8 months ago)
[redacted] 216.26.244.82 - - [01/Nov/2025:21:03:25 +0100] "POST /xmlrpc.php HTTP/2.0" 200 401 "-" "M ...
show more
[redacted] 216.26.244.82 - - [01/Nov/2025:21:03:25 +0100] "POST /xmlrpc.php HTTP/2.0" 200 401 "-" "Mozilla/5.0 (iPad; CPU OS 9_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13C75 Safari/601.1"
[redacted] 216.26.244.82 - - [01/Nov/2025:21:03:26 +0100] "POST /xmlrpc.php HTTP/2.0" 200 401 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36"
[redacted] 216.26.244.82 - - [01/Nov/2025:21:03:27 +0100] "POST /xmlrpc.php HTTP/2.0" 200 401 "-" "Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en) AppleWebKit/418 (KHTML, like Gecko) Safari/417.9.2"
[redacted] 216.26.244.82 - - [01/Nov/2025:21:03:37 +0100] "POST /xmlrpc.php HTTP/2.0" 200 401 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_0_2 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12A405 Safari/600.1.4"
[redacted] 216.26.244.82 - - [01/Nov
...
show less
Hacking
Web App Attack
🇫🇷
applemooz
2025-11-01 11:51:59
(8 months ago)
WordPress XMLRPC Brute Force Attacks
...
Brute-Force
Web App Attack
2025-10-05 22:01:09
(9 months ago)
wordpress-trap
Web App Attack