🇫🇷
dynamix
2026-06-18 19:03:29
(2 days ago)
WordPress wp-login.php Brute Force Attack
Brute-Force
Web App Attack
2026-06-15 08:24:40
(6 days ago)
Attac
Brute-Force
🇩🇪
FeG Deutschland
2026-06-15 06:35:04
(6 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257
Exploited Host
Web App Attack
🇩🇪
LRob.fr
2026-06-10 21:30:08
(1 week ago)
WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail
Brute-Force
Web App Attack
🇺🇸
lostswordfish.com
2026-06-10 11:56:05
(1 week ago)
Wordfence waf block on 1105merrystreet
Web App Attack
🇺🇸
dtorrer
2026-05-06 11:27:13
(1 month ago)
Brute-force general attack.
Brute-Force
🇺🇸
factor1
2026-05-06 02:06:13
(1 month ago)
Fail2ban at churndash Reports Abuse.
Brute-Force
Web App Attack
🇺🇸
octageeks.com
2026-03-11 04:14:11
(3 months ago)
Wordpress malicious attack:[octawp]
Web App Attack
🇫🇮
gnom4ik
2026-02-21 22:20:58
(3 months ago)
ban-reviewer auto report; ip=216.73.161.110; scenario=http:scan; verdict=valid_ban; confidence=0.90; ...
show more
ban-reviewer auto report; ip=216.73.161.110; scenario=http:scan; verdict=valid_ban; confidence=0.90; categories=14,15,22; active_decisions=1; lookback_decisions=1; nginx_requests=0; appsec_matches=0; auth_events=0; kernel_events=0; signals=IP flagged for HTTP scanning activity (scenario: http:scan); AbuseIPDB category 14 (Port Scan) is applicable; AbuseIPDB category 15 (Hacking) is applicable; AbuseIPDB category 22 (SSH) is applicable
show less
Port Scan
Hacking
SSH
🇨🇦
Mediashaker
2026-01-26 17:53:19
(4 months ago)
(apache-scanners) Failed apache-scanners trigger with match [redacted] from 216.73.161.110 (US/Unite ...
show more
(apache-scanners) Failed apache-scanners trigger with match [redacted] from 216.73.161.110 (US/United States/-)
show less
Port Scan
🇺🇸
TPI-Abuse
2026-01-20 00:54:38
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 216.73.161.110 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.73.161.110 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 19 19:54:33.804494 2026] [security2:error] [pid 28034:tid 28034] [client 216.73.161.110:34489] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "servecon.co"] [uri "/config/.env"] [unique_id "aW7SSfTRTsPK7lbsa3aQXwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-19 21:07:02
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 216.73.161.110 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.73.161.110 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 19 16:06:58.338577 2026] [security2:error] [pid 4135:tid 4135] [client 216.73.161.110:43319] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ssion.com"] [uri "/.env"] [unique_id "aW6c8mafLJQPNRsvkj7Z8wAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-19 16:31:06
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 216.73.161.110 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.73.161.110 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 19 11:31:00.799927 2026] [security2:error] [pid 5138:tid 5138] [client 216.73.161.110:55079] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.agingworkforcenews.com"] [uri "/.env.backup"] [unique_id "aW5cRLfhRtblYQCUKQmJNAAAACY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-19 10:36:50
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 216.73.161.110 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.73.161.110 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 19 05:36:43.126056 2026] [security2:error] [pid 20405:tid 20405] [client 216.73.161.110:31241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "proprocessor.com"] [uri "/.env.local"] [unique_id "aW4JO7e27_WrWkmoShcoQgAAAAk"], referer: http://britishirons.com.venisonsausageprocessing.com.venisonsausageprocessing.com/.env.local
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-01-19 07:31:38
(5 months ago)
Multiple WAF Violations
Web App Attack