🇩🇪
conseilgouz
2026-08-23 09:09:37
(2 days ago)
sle-6 : Trying access system files=>/wp-login.php(wp-login.php)
Hacking
🇲🇽
octageeks.com
2026-08-23 04:14:51
(2 days ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇫🇷
ELYAZ
2026-08-22 22:09:32
(3 days ago)
(wordpress) Failed wordpress login from 216.26.255.59 (FR/France/-): (CF_ENABLE)
Brute-Force
🇺🇸
lostswordfish.com
2026-08-09 11:54:04
(2 weeks ago)
Wordfence waf block on uvfousor WPIDD
Web App Attack
🇫🇷
Sklurk
2026-08-09 04:36:15
(2 weeks ago)
Web App Attack
Web App Attack
2026-07-29 07:00:00
(3 weeks ago)
Apache probe; attempts=17; exact paths: /xmlrpc.php
Web App Attack
🇫🇷
Sklurk
2026-07-09 00:53:00
(1 month ago)
Web App Attack
Web App Attack
🇫🇷
Sklurk
2026-07-08 00:28:51
(1 month ago)
Web App Attack
Web App Attack
🇺🇸
mnsf
2026-05-25 10:05:31
(3 months ago)
Scanning/Probing (24)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 16:54:30
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.255.59 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.255.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 11:54:24.029658 2025] [security2:error] [pid 31041:tid 31041] [client 216.26.255.59:14653] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.chateau-saleza-bruges.com"] [uri "/.env"] [unique_id "aScwwF5C_csW4HA_SY3r6AAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 05:57:00
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.255.59 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.255.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 00:56:55.173192 2025] [security2:error] [pid 9912:tid 9912] [client 216.26.255.59:54249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.math1on1.net"] [uri "/.env"] [unique_id "aSaWp_nAT1XnJLrrH5jYDgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 01:13:12
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.255.59 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.255.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 20:13:05.351213 2025] [security2:error] [pid 21507:tid 21507] [client 216.26.255.59:28299] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.sarahingber.com"] [uri "/.env"] [unique_id "aSZUIYXfC4IMV4mOYkGrqAAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 07:06:09
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.255.59 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.255.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 02:06:01.780727 2025] [security2:error] [pid 12114:tid 12114] [client 216.26.255.59:36401] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.kqdemo.com"] [uri "/.git/HEAD"] [unique_id "aSVVWZNN_oSUaVGxyDmgfAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 06:10:52
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.255.59 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.255.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:10:44.243766 2025] [security2:error] [pid 28302:tid 28302] [client 216.26.255.59:51825] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.mcclaincounseling.com"] [uri "/.git/HEAD"] [unique_id "aSVIZOIWJEAVzrqI80ycoQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 05:52:18
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.255.59 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.255.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 00:52:04.185485 2025] [security2:error] [pid 877157:tid 877157] [client 216.26.255.59:26713] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.aden.us"] [uri "/.env"] [unique_id "aSVEBEMddXCrHWiWe64atwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack