2026-04-14 00:00:55
(1 month ago)
Attempt to scan vulnerabilities
Hacking
2026-04-12 06:19:36
(1 month ago)
Attempt to scan vulnerabilities
Hacking
🇺🇸
findlab
2026-01-09 09:20:04
(5 months ago)
Backdrop CMS module - malicious activity detected
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-07 17:51:35
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.160.112 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.160.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jan 07 12:51:29.016268 2026] [security2:error] [pid 7816:tid 7816] [client 209.50.160.112:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "upskirtcrazy.com"] [uri "/.git/HEAD"] [unique_id "aV6dITkDWKtWO4MBjQaacwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
oncord
2025-12-30 21:23:56
(5 months ago)
Form spam
Web Spam
🇺🇸
TPI-Abuse
2025-12-30 10:22:05
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.160.112 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.160.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 30 05:21:38.509106 2025] [security2:error] [pid 23168:tid 23168] [client 209.50.160.112:57727] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whm.trafficstopper.com"] [uri "/.env"] [unique_id "aVOnsgDtF2L6DiALUhb5nQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2025-12-23 14:20:32
(5 months ago)
Detected attack and reported by a human
DDoS Attack
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
SSH
2025-12-12 00:26:13
(6 months ago)
botnet
DDoS Attack
🇺🇸
nowyouknow
2025-12-08 19:04:49
(6 months ago)
Phishing
Web Spam
🇺🇸
nowyouknow
2025-11-29 08:47:17
(6 months ago)
Phishing
Web Spam
🇺🇸
TPI-Abuse
2025-11-25 07:01:31
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.160.112 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.160.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 02:01:28.538978 2025] [security2:error] [pid 28997:tid 28997] [client 209.50.160.112:38741] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.johnbentley.info"] [uri "/.env"] [unique_id "aSVUSIR2BmerXCT7rk-O0QAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 06:47:53
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.160.112 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.160.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:47:45.574476 2025] [security2:error] [pid 18394:tid 18394] [client 209.50.160.112:23081] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.imbrasacademic.com"] [uri "/.env"] [unique_id "aSP_kRqEPy4PYXdkslhS3AAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 02:55:45
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.160.112 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.160.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 21:55:36.614666 2025] [security2:error] [pid 2893:tid 2897] [client 209.50.160.112:57275] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.spiritualchristian.com"] [uri "/.env"] [unique_id "aSPJKCZWVzJkk5khHgNSgQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-16 02:52:51
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.160.112 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.160.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 15 21:52:45.808885 2025] [security2:error] [pid 17690:tid 17690] [client 209.50.160.112:48579] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.demodextreatments.com"] [uri "/.env"] [unique_id "aRk8fbFy9bFY0S5-hSyQQwAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
spamverify.com
2025-11-03 00:43:38
(7 months ago)
Honeypot Hit: Contact Form
Web Spam
Blog Spam
Bad Web Bot
Web App Attack