🇫🇷
ELYAZ
2026-08-23 10:04:49
(5 days ago)
(wordpress) Failed wordpress login from 216.26.251.12 (CA/Canada/-): (CF_ENABLE)
Brute-Force
2026-08-22 21:04:32
(5 days ago)
216.26.251.12 - - [23/Aug/2026:05:04:31 +0800] "POST /xmlrpc.php HTTP/1.1" 200 401 "https://www.bing ...
show more
216.26.251.12 - - [23/Aug/2026:05:04:31 +0800] "POST /xmlrpc.php HTTP/1.1" 200 401 "https://www.bing.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇫🇷
Sklurk
2026-08-04 01:31:20
(3 weeks ago)
Web App Attack
Web App Attack
🇧🇪
cmbplf
2026-06-28 00:03:43
(2 months ago)
5.941 post requests in 1 hour (1yr10mos3w)
Brute-Force
Bad Web Bot
🇪🇸
librebit
2026-06-24 03:28:49
(2 months ago)
Brute force
Brute-Force
🇧🇪
cmbplf
2026-05-29 05:00:14
(2 months ago)
6.043 post requests in 1 hour (2w2d12h)
Brute-Force
Bad Web Bot
🇩🇪
Hary74656
2026-05-28 06:02:45
(3 months ago)
[Thu May 28 08:02:35.678466 2026] [core:info] [pid 50667:tid 50739] [client 216.26.251.12:20359] AH0 ...
show more
[Thu May 28 08:02:35.678466 2026] [core:info] [pid 50667:tid 50739] [client 216.26.251.12:20359] AH00128: File does not exist: /home/harald/www/default_host/blog/wp-includes/wlwmanifest.xml
...
show less
Bad Web Bot
2026-05-02 14:40:32
(3 months ago)
(wordpress) Failed wordpress login from 216.26.251.12 (CA/Canada/Ontario/Toronto/-/[redacted])
Brute-Force
🇩🇪
LRob
2026-04-15 16:15:03
(4 months ago)
WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail
Brute-Force
Web App Attack
🇱🇻
garmtech.com
2026-03-24 09:20:11
(5 months ago)
IM360 WAF: WordPress plugin/theme auto install block
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 08:27:13
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.251.12 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.251.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:27:06.171908 2025] [security2:error] [pid 8329:tid 8329] [client 216.26.251.12:24441] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.rokket.com"] [uri "/.git/HEAD"] [unique_id "aSQW2qktoGMAxUcO1BdS1QAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 07:52:38
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.251.12 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.251.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:51:54.710073 2025] [security2:error] [pid 24180:tid 24180] [client 216.26.251.12:54833] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.qwe.banis-associates.com"] [uri "/.env"] [unique_id "aSQOmoYVw4pAUDHa0bv8zgAAAC0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇱🇻
garmtech.com
2025-11-24 07:12:13
(9 months ago)
Attempted access to sensitive endpoint (/.env) detected. Automated scan or unauthorized probing.
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 05:15:41
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.251.12 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.251.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:15:34.564626 2025] [security2:error] [pid 18325:tid 18340] [client 216.26.251.12:44483] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.metastrata.plumeraproductions.com"] [uri "/.svn/wc.db"] [unique_id "aSPp9ribCkDUtlE56PAufgAAAE0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 04:31:21
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.251.12 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.251.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:31:15.379866 2025] [security2:error] [pid 13555:tid 13555] [client 216.26.251.12:29953] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.asfmglobal.com"] [uri "/.env"] [unique_id "aSPfk0BQZVfJFEeqJ27hiQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack