🇫🇷
Sklurk
2026-06-23 04:58:01
(5 hours ago)
Web App Attack
Web App Attack
🇵🇱
sefinek.net
2026-06-03 10:50:31
(2 weeks ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action: MANAGED_CHALLENGE | Protocol: HTTP/1.1 (G ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action: MANAGED_CHALLENGE | Protocol: HTTP/1.1 (GET) | Endpoint: / | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.6 Safari/605.1.15 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇫🇮
Erpelstolz
2026-01-08 15:48:38
(5 months ago)
external host: 209.50.174.38 - - [08/Jan/2026:16:48:37 +0100] "GET /.git/HEAD HTTP/1.1" 301 554 "-" ...
show more
external host: 209.50.174.38 - - [08/Jan/2026:16:48:37 +0100] "GET /.git/HEAD HTTP/1.1" 301 554 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0"
show less
Web App Attack
🇮🇹
LTM
2025-12-30 07:20:01
(5 months ago)
WebServer - Attempts to exploit
Hacking
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-12-29 05:10:14
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.174.38 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.174.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 00:10:05.922513 2025] [security2:error] [pid 24535:tid 24535] [client 209.50.174.38:27853] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "multiplepartforms.com"] [uri "/.env"] [unique_id "aVINLcXAz94bUK5x7F4xgAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-29 04:54:15
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.174.38 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.174.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 23:54:08.288710 2025] [security2:error] [pid 2290:tid 2290] [client 209.50.174.38:30039] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "alaskadreamspublishing.com"] [uri "/.git/HEAD"] [unique_id "aVIJcMZ0pdthKDEPp3m8gQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-29 04:15:51
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.174.38 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.174.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 23:15:43.714926 2025] [security2:error] [pid 28979:tid 28979] [client 209.50.174.38:24815] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "greatnorthernstrategies.com"] [uri "/.svn/wc.db"] [unique_id "aVIAb8vGUhFmK0RH9HMhZgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-10 15:59:57
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.174.38 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.174.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 10 10:59:52.611301 2025] [security2:error] [pid 30771:tid 30771] [client 209.50.174.38:36287] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mysealife96.com"] [uri "/.env"] [unique_id "aTmY-A9YajqaCFeH7r9E1wAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-09 15:43:30
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.174.38 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.174.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 09 10:43:25.633068 2025] [security2:error] [pid 21543:tid 21565] [client 209.50.174.38:53213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "anointedtour.com"] [uri "/.svn/wc.db"] [unique_id "aThDnetGiDRRKuc8WV3mswAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-08 18:39:46
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.174.38 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.174.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 08 13:39:37.837361 2025] [security2:error] [pid 32517:tid 32517] [client 209.50.174.38:58017] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cemesur-vision21.com"] [uri "/.svn/wc.db"] [unique_id "aTcbaTmK6If5ow9-3TFEMAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
technojoe99
2025-12-06 03:14:46
(6 months ago)
Exploit scan from 209.50.174.38. GET /.aws/credentials HTTP/1.1.
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 09:14:17
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.174.38 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.174.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 04:14:12.474947 2025] [security2:error] [pid 7561:tid 7575] [client 209.50.174.38:42481] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "koliosfoods.com"] [uri "/.git/HEAD"] [unique_id "aTKiZGx7ekUgr6ImiKGVgwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 05:27:06
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.174.38 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.174.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 00:27:03.090022 2025] [security2:error] [pid 7723:tid 7723] [client 209.50.174.38:44537] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paulpasquali.com"] [uri "/.svn/wc.db"] [unique_id "aTJtJx6cQ8V2pv-tWbBqPgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 05:01:38
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.174.38 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.174.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 00:01:35.838209 2025] [security2:error] [pid 19176:tid 19176] [client 209.50.174.38:15409] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "npeme.com"] [uri "/.git/HEAD"] [unique_id "aTJnL12qAwyEk2SG3iCZFAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 00:15:17
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.174.38 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.174.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 19:14:50.993906 2025] [security2:error] [pid 14127:tid 14127] [client 209.50.174.38:14985] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "buanamegah.com"] [uri "/.env"] [unique_id "aTIj-qaz6AgK6nTeEDUtcgAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack