🇧🇪
brechtr
2026-07-07 00:10:38
(22 hours ago)
[Press84-BanHammer] bad username — Sourced from: brechtryckaert.com — Request: POST /xmlrpc.php
Brute-Force
🇫🇷
pm33
2026-06-30 07:32:53
(1 week ago)
Wordpress login attempts
Brute-Force
🇲🇹
Malta
2026-06-29 21:08:14
(1 week ago)
216.26.248.94 - - [29/Jun/2026:23:08:14 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows N ...
show more
216.26.248.94 - - [29/Jun/2026:23:08:14 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 11.0; Win64; x64; rv:118.0) Gecko/20100101 Firefox/118.0"
Brute-force password attempt
show less
Hacking
Web App Attack
Brute-Force
🇫🇷
ELYAZ
2026-06-29 09:43:40
(1 week ago)
(y4) Failed scan -byebye- from 216.26.248.94 (TH/Thailand/-): (CF_ENABLE)
Hacking
🇫🇷
✨
2026-06-29 00:58:22
(1 week ago)
Domain : trevalgascottages.co.uk
Rule : wp-login
2026-06-29 00:35:47 ***hidden-privacy*** POST /wp-l ...
show more
Domain : trevalgascottages.co.uk
Rule : wp-login
2026-06-29 00:35:47 ***hidden-privacy*** POST /wp-login.php - 443 - 216.26.248.94 HTTP/1.1 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 https://trevalgascottages.co.uk/wp-login.php trevalgascottages.co.uk 404 0 0 28646 871 131 - -
show less
Web App Attack
🇫🇷
tecnicorioja
2026-06-28 22:01:13
(1 week ago)
wp-login attack [28/Jun/2026:07:33:48
Brute-Force
Web App Attack
🇫🇷
pm33
2026-06-27 21:54:08
(1 week ago)
Wordpress login attempts
Brute-Force
🇩🇪
Packets-Decreaser.NET
2025-12-29 14:01:43
(6 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
2025-11-25 05:19:39
(7 months ago)
Fuzzing/Looking for credentials files.
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 04:57:02
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.248.94 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.248.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:56:56.944053 2025] [security2:error] [pid 27883:tid 27883] [client 216.26.248.94:15897] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.qovintheloop.org"] [uri "/.svn/wc.db"] [unique_id "aSU3GPdzRCFBW7UIEATzoAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 04:24:48
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.248.94 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.248.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:24:38.492718 2025] [security2:error] [pid 22166:tid 22166] [client 216.26.248.94:57095] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.mldlnn.com"] [uri "/.svn/wc.db"] [unique_id "aSUvhqy5JZBe-_coth2lYAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 03:47:40
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.248.94 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.248.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:47:17.587654 2025] [security2:error] [pid 14666:tid 14666] [client 216.26.248.94:19917] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.insect-politics.com"] [uri "/.git/HEAD"] [unique_id "aSUmxQXhVl0xO0AQfopOqgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 02:47:41
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.248.94 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.248.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:47:28.760397 2025] [security2:error] [pid 693638:tid 693638] [client 216.26.248.94:17879] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.copiersgreensboro.com"] [uri "/.svn/wc.db"] [unique_id "aSUYwPl_3SlzqboXmmFQCgAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 02:11:01
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.248.94 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.248.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:10:54.885611 2025] [security2:error] [pid 32734:tid 32759] [client 216.26.248.94:32947] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.pamper.com"] [uri "/.svn/wc.db"] [unique_id "aSUQLirPMGOurG3RzwY91wAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 00:53:12
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.248.94 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.248.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 19:53:07.302570 2025] [security2:error] [pid 912:tid 912] [client 216.26.248.94:10585] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.peazy.net"] [uri "/.svn/wc.db"] [unique_id "aST98wjJmYeDERFEk8gVBAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack