🇨🇭
4server
2026-05-21 06:33:27
(3 weeks ago)
[ThuMay2108:33:21.3484612026][security2:error][pid2458985:tid2459296][client216.26.251.155:0]ModSecu ...
show more
[ThuMay2108:33:21.3484612026][security2:error][pid2458985:tid2459296][client216.26.251.155:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:10\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"www.hosting-domain-swiss.com\"][uri\"/.aws/credentials\"][unique_id\"ag6nMQSY7SkBG1JcMjDi7wAAAMU\"]
show less
Hacking
Web App Attack
🇬🇧
poundawebsiteltd
2026-04-28 07:03:39
(1 month ago)
Web App Attack (ModSecurity Block). Evidence: [REDACTED_DOMAIN]:443 216.26.251.155 - - [28/Apr/2026: ...
show more
Web App Attack (ModSecurity Block). Evidence: [REDACTED_DOMAIN]:443 216.26.251.155 - - [28/Apr/2026:08:03:36 +0100] GET / HTTP/1.1 403 3108 - Mozilla/5.0 (iPad; CPU OS 8_4_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12H321 Safari/600.1.4
show less
Web App Attack
🇪🇸
Francisco Vallejo
2026-04-28 06:27:44
(1 month ago)
[Tue Apr 28 08:27:44.527715 2026] [core:info] [pid 1321548:tid 128280103466688] [client 216.26.251.1 ...
show more
[Tue Apr 28 08:27:44.527715 2026] [core:info] [pid 1321548:tid 128280103466688] [client 216.26.251.155:60161] AH00128: File does not exist: /var/www/franvallejo/js/breakpoints.min.js
[Tue Apr 28 08:27:44.530454 2026] [core:info] [pid 1321547:tid 128279491094208] [client 216.26.251.155:10725] AH00128: File does not exist: /var/www/franvallejo/js/main.js
[Tue Apr 28 08:27:44.533799 2026] [core:info] [pid 1321547:tid 128279499486912] [client 216.26.251.155:21409] AH00128: File does not exist: /var/www/franvallejo/js/jquery.scrollex.min.js
[Tue Apr 28 08:27:44.533940 2026] [core:info] [pid 1321548:tid 128280086681280] [client 216.26.251.155:16485] AH00128: File does not exist: /var/www/franvallejo/js/browser.min.js
[Tue Apr 28 08:27:44.541465 2026] [core:info] [pid 1321547:tid 128280229291712] [client 216.26.251.155:64635] AH00128: File does not exist: /var/www/franvallejo/js/jquery.min.js
...
show less
Brute-Force
SSH
🇺🇸
chronos
2026-04-28 03:38:09
(1 month ago)
[AUTORAVALT][[28/04/2026 - 00:38:09 -03:00 UTC]
Attack from [RIPE Network Coordination Centre]
[216. ...
show more
[AUTORAVALT][[28/04/2026 - 00:38:09 -03:00 UTC]
Attack from [RIPE Network Coordination Centre]
[216.26.251.155] Action: BLocKed
Hacking... Unauthorized attempts to access the server.
Web App Attack -> Attempts to probe for or exploit installed web applications such as a CMS like WordPress/Drupal, e-commerce solutions, forum software, phpMyAdmin and various oth]
...
show less
Hacking
Web App Attack
🇩🇪
kjaerulff
2026-03-17 15:54:02
(2 months ago)
Failed Wordpress login using xmlrpc.php
Web App Attack
🇨🇦
SSH-Admin
2026-02-07 17:12:28
(4 months ago)
Probing for Exploits
Exploited Host
Web App Attack
2026-01-12 07:32:25
(4 months ago)
wordpress-trap
Web App Attack
🇨🇦
SSH-Admin
2025-12-27 13:45:08
(5 months ago)
Probing for Exploits
Exploited Host
Web App Attack
🇺🇸
myagent.site
2025-12-02 16:43:08
(6 months ago)
Blocking for trying to access an exploit file: /.env
Hacking
🇺🇸
TPI-Abuse
2025-12-02 05:55:03
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.251.155 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.251.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 00:54:55.468553 2025] [security2:error] [pid 425:tid 425] [client 216.26.251.155:14457] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "amtnm.com"] [uri "/.git/HEAD"] [unique_id "aS5_L7fZIl4k98CSWUkQVQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 04:34:43
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.251.155 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.251.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 01 23:34:32.453754 2025] [security2:error] [pid 31032:tid 31032] [client 216.26.251.155:55719] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "goglobex.com"] [uri "/.git/HEAD"] [unique_id "aS5sWP3_hwH89eh0FYqQ5AAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 08:39:33
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.251.155 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.251.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 03:39:28.652286 2025] [security2:error] [pid 9607:tid 9687] [client 216.26.251.155:43745] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.wassell.org"] [uri "/.git/HEAD"] [unique_id "aSa8wPkDcg6wFbLmNJ0weQAAAg8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 06:36:30
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.251.155 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.251.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 01:36:25.248935 2025] [security2:error] [pid 10748:tid 10748] [client 216.26.251.155:21937] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dogdimension.batw.net"] [uri "/.svn/wc.db"] [unique_id "aSaf6Yc2Kgy38h3nmlguWwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 01:30:50
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.251.155 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.251.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 20:30:45.132567 2025] [security2:error] [pid 32139:tid 32139] [client 216.26.251.155:16447] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.penguinexpressmag.com"] [uri "/.git/HEAD"] [unique_id "aSZYRdHTfPQ6l2iY_SX6BgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 04:20:23
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.251.155 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.251.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:20:00.679237 2025] [security2:error] [pid 6720:tid 6720] [client 216.26.251.155:25797] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.sipco.cl"] [uri "/.git/HEAD"] [unique_id "aSUucDxq7iN2w2iabXoi6gAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack