🇺🇸
cyfordtechnologies.com
2026-03-28 05:32:49
(2 months ago)
High-abuse ASN prefix: 209.50. : Reported by Cyford API
Web App Attack
🇬🇧
relianoid.com
2026-03-23 15:06:53
(2 months ago)
POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com
Web Spam
2026-03-23 04:57:43
(2 months ago)
Forum/form spam
Web Spam
🇧🇪
taivas.nl
2026-01-30 06:02:10
(4 months ago)
Wordpress_xmlrpc_attack
Bad Web Bot
2026-01-17 01:55:57
(4 months ago)
Forum/form spam
Web Spam
2025-12-13 06:58:25
(5 months ago)
botnet
DDoS Attack
🇺🇸
TPI-Abuse
2025-11-25 04:57:13
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.171.161 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.171.161 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:57:06.517414 2025] [security2:error] [pid 16454:tid 16454] [client 209.50.171.161:45421] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.chriscollinsplumbing.com"] [uri "/.git/HEAD"] [unique_id "aSU3IsEXVkfMnlVYPQxExgAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 04:24:03
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.171.161 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.171.161 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:23:56.349339 2025] [security2:error] [pid 21163:tid 21163] [client 209.50.171.161:48543] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.passy.us"] [uri "/.git/HEAD"] [unique_id "aSUvXKBqqwDQgdvXLl85kwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 04:08:37
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.171.161 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.171.161 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:08:30.024753 2025] [security2:error] [pid 7517:tid 7517] [client 209.50.171.161:17691] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sprek.net"] [uri "/.git/HEAD"] [unique_id "aSUrvpB0AEJ9AffEfI7vXwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 02:48:48
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.171.161 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.171.161 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:48:42.103214 2025] [security2:error] [pid 4977:tid 4977] [client 209.50.171.161:51315] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.manty.com"] [uri "/.svn/wc.db"] [unique_id "aSUZCk8pj9Wz25ovvFqynAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 02:24:25
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.171.161 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.171.161 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:24:18.092017 2025] [security2:error] [pid 28826:tid 28860] [client 209.50.171.161:60757] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.zoomtexas.com"] [uri "/.env"] [unique_id "aSUTUsWWe4FWNi79sDU4swAAAEE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-11-14 07:04:23
(6 months ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack
🇮🇳
Shaik Sai Meera
2025-10-26 15:58:16
(7 months ago)
SensorIncident name=Login failed on the cpanel service
Brute-Force
🇨🇦
wil.com
2025-10-16 16:54:01
(7 months ago)
GlobalProtect login attempts with user fryerd.
VPN IP
Brute-Force
2025-10-13 19:32:12
(7 months ago)
Dictionary attack on Palo Alto GlobalProtect VPN portal (port 443) detected via repeated login failu ...
show more
Dictionary attack on Palo Alto GlobalProtect VPN portal (port 443) detected via repeated login failures with varying usernames.
show less
Brute-Force