🇸🇪
shab
2026-09-04 03:53:47
(10 hours ago)
Suspicious VPN activity
Brute-Force
🇺🇸
entangled_mongoose
2026-09-02 07:46:24
(2 days ago)
Probed /wp-login.php.
Web App Attack
🇺🇸
lostswordfish.com
2026-08-28 13:58:05
(1 week ago)
Wordfence waf block on illinoisvoices
Web App Attack
🇲🇽
octageeks.com
2026-06-18 04:23:17
(2 months ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 08:35:31
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.248.246 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.248.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:35:26.728127 2025] [security2:error] [pid 18634:tid 18634] [client 216.26.248.246:28113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.aprilparks.com"] [uri "/.git/HEAD"] [unique_id "aSQYzpjRLUekan_NC8MMcwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 08:03:24
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.248.246 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.248.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:03:13.157872 2025] [security2:error] [pid 4018:tid 4018] [client 216.26.248.246:37933] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.moonfamilies.com"] [uri "/.svn/wc.db"] [unique_id "aSQRQUU8i-Hr1Q0iaDxO7wAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 07:48:13
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.248.246 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.248.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:48:09.020819 2025] [security2:error] [pid 11070:tid 11070] [client 216.26.248.246:12691] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "abq4you.com.peterlundman.com"] [uri "/.svn/wc.db"] [unique_id "aSQNueT4skEUDMdZ73rLQQAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 06:59:29
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.248.246 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.248.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:59:22.336275 2025] [security2:error] [pid 18975:tid 18975] [client 216.26.248.246:18583] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.jamesmorris.net"] [uri "/.env"] [unique_id "aSQCSrPOUm51ERCt9GJs8wAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 06:31:57
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.248.246 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.248.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:31:51.305733 2025] [security2:error] [pid 13767:tid 13767] [client 216.26.248.246:46935] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.pawlewicz.org"] [uri "/.env"] [unique_id "aSP71zJrE5qCTY6MYvyPBQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-11-02 22:05:49
(10 months ago)
This IP was involved in an brute force and password spray attack on 2025/11/02 07:29:29
Port Scan
Brute-Force
Exploited Host
Web App Attack
🇦🇺
AWW-Admin
2025-10-16 16:03:39
(10 months ago)
(wordpress) Failed wordpress login from 216.26.248.246 (TH/Thailand/-)
Brute-Force
2025-10-02 16:18:51
(11 months ago)
wordpress-trap
Web App Attack
