🇳🇱
Alt255
2026-10-15 05:26:28
(3 days ago)
[ti-17al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-17al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 209.50.164.93 - - [15/Oct/2026:07:24:55 +0200] "GET /wp-config.php.bak.swp HTTP/1.1" 301 6301 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-10-03 15:02:47
(2 weeks ago)
[cb-05al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[cb-05al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 209.50.164.93 - - [03/Oct/2026:17:01:44 +0200] "GET /website/server/phpinfo.php HTTP/1.1" 404 12532 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
Bad Web Bot
Web App Attack
🇨🇿
lp
2026-09-20 04:49:40
(4 weeks ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 209.50.164.93
2026-09-20T06:41:15+02: ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 209.50.164.93
2026-09-20T06:41:15+02:00 vpn Access-Reject 'lokesh' station: 209.50.164.93 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇫🇷
Sklurk
2026-08-05 03:21:52
(2 months ago)
Web App Attack
Web App Attack
🇫🇷
Sklurk
2026-08-04 02:18:32
(2 months ago)
Web App Attack
Web App Attack
🇫🇷
Sklurk
2026-07-16 14:54:53
(3 months ago)
Web App Attack
Web App Attack
🇫🇷
Sklurk
2026-06-20 00:13:49
(3 months ago)
Web App Attack
Web App Attack
🇺🇸
cyfordtechnologies.com
2026-05-04 00:53:37
(5 months ago)
High-abuse ASN prefix: 209.50. : Reported by Cyford API
Web App Attack
🇺🇸
cyfordtechnologies.com
2026-03-24 22:38:11
(6 months ago)
High-abuse ASN prefix: 209.50. : Reported by Cyford API
Web App Attack
🇺🇸
TPI-Abuse
2026-02-20 09:37:21
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 209.50.164.93 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 209.50.164.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 20 04:37:14.360441 2026] [security2:error] [pid 32696:tid 32696] [client 209.50.164.93:23961] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cobbwebb.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cobbwebb.net"] [uri "/wp-json/wp/v2/users"] [unique_id "aZgrSgDvD-fzLQEgQYtKsgAAACQ"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-20 08:54:07
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 209.50.164.93 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 209.50.164.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 20 03:54:03.386725 2026] [security2:error] [pid 4082:tid 4082] [client 209.50.164.93:61551] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||lozzy.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "lozzy.net"] [uri "/wp-json/wp/v2/users"] [unique_id "aZghK8HZ7WM6f32rHAP2PAAAAAA"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-02-13 04:05:15
(8 months ago)
Too many Status 40X (12)
Scanning/Probing (12)
Brute-Force
Web App Attack
🇩🇪
Packets-Decreaser.NET
2025-12-29 14:01:44
(9 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
2025-12-10 18:38:20
(10 months ago)
botnet
DDoS Attack
🇺🇸
TPI-Abuse
2025-11-24 08:59:18
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.164.93 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.164.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:59:10.645182 2025] [security2:error] [pid 30783:tid 30783] [client 209.50.164.93:48929] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.tek-front.com"] [uri "/.env"] [unique_id "aSQeXhufGf5WU8r2RLYSoQAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
