🇱🇻
garmtech.com
2026-03-25 23:22:19
(2 months ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 01-22.209.50.167.39.web-spamme ...
show more
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 01-22.209.50.167.39.web-spammers.v2.rbl.imunify.com._v4 succeeded.
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-02-20 16:34:45
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 209.50.167.39 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 209.50.167.39 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 20 11:34:38.526956 2026] [security2:error] [pid 24573:tid 24573] [client 209.50.167.39:48583] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||morefrogs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "morefrogs.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aZiNHnM-CSYlMgFe6MMj2gAAAAA"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
oncord
2026-01-09 18:13:13
(4 months ago)
Form spam
Web Spam
🇦🇺
oncord
2025-12-31 18:31:33
(5 months ago)
Form spam
Web Spam
🇮🇹
VHosting
2025-12-24 03:20:35
(5 months ago)
Detected attack and reported by a human
DDoS Attack
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
SSH
🇺🇸
nowyouknow
2025-12-17 07:43:06
(5 months ago)
Phishing
Web Spam
🇺🇸
nowyouknow
2025-12-11 04:40:59
(5 months ago)
Phishing
Web Spam
🇺🇸
oncord
2025-12-01 13:05:59
(6 months ago)
Form spam
Web Spam
🇺🇸
TPI-Abuse
2025-11-26 11:13:06
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.167.39 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.167.39 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 06:12:58.802396 2025] [security2:error] [pid 17838:tid 17838] [client 209.50.167.39:42637] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.alanrmariotti.com"] [uri "/.git/HEAD"] [unique_id "aSbgug6dRorTTItgKHZXMgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 08:42:00
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.167.39 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.167.39 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 03:41:55.986068 2025] [security2:error] [pid 23177:tid 23177] [client 209.50.167.39:14767] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.deanfountain.com"] [uri "/.env"] [unique_id "aSa9U6zXr8xoaJUQ_2vIOgAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 06:21:52
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.167.39 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.167.39 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 01:21:47.240585 2025] [security2:error] [pid 6208:tid 6208] [client 209.50.167.39:37813] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.proplanarchitects.com"] [uri "/.svn/wc.db"] [unique_id "aSace0yuFQfF7USDJce7iAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 02:15:07
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.167.39 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.167.39 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 21:15:00.918737 2025] [security2:error] [pid 3365545:tid 3365676] [client 209.50.167.39:39135] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ajbruner.uoexpanse.com"] [uri "/.svn/wc.db"] [unique_id "aSZipCa0-q0nx5VbsSClcAAAAkA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 00:32:15
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.167.39 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.167.39 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 19:32:09.334653 2025] [security2:error] [pid 6649:tid 6697] [client 209.50.167.39:55713] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.exedesalesteam.com"] [uri "/.git/HEAD"] [unique_id "aSZKifCQPT6s-IHquRxbfgAAAU0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 00:07:11
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.167.39 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.167.39 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 19:07:06.086809 2025] [security2:error] [pid 8871:tid 8871] [client 209.50.167.39:38807] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.astariafilms.com"] [uri "/.svn/wc.db"] [unique_id "aSZEqlARlTIxiWiIFNVDSAAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 09:12:02
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.167.39 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.167.39 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:11:54.424105 2025] [security2:error] [pid 19005:tid 19005] [client 209.50.167.39:23355] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.ardath.net"] [uri "/.svn/wc.db"] [unique_id "aSQhWpjpW-ppMSCu7HXdagAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack