2026-04-19 11:11:36
(2 months ago)
Forum/form spam
Web Spam
🇬🇧
Oakley
2026-04-17 12:14:53
(2 months ago)
(antiscrape_rule) Web application abuse detected 209.50.175.213 (US/United States/-): 5 in the last ...
show more
(antiscrape_rule) Web application abuse detected 209.50.175.213 (US/United States/-): 5 in the last 900 secs
show less
Hacking
🇺🇸
mnsf
2026-02-16 01:05:09
(4 months ago)
Too many Status 40X (12)
Scanning/Probing (12)
Brute-Force
Web App Attack
🇺🇸
myagent.site
2026-02-15 12:14:14
(4 months ago)
Blocking for trying to access an exploit file: /test/.git/config
Hacking
🇺🇸
mnsf
2026-02-15 00:05:32
(4 months ago)
Too many Status 40X (11)
Scanning/Probing (12)
Brute-Force
Web App Attack
2025-12-11 23:59:56
(6 months ago)
botnet
DDoS Attack
🇺🇸
myagent.site
2025-11-26 06:59:45
(6 months ago)
Blocking for trying to access an exploit file: /.env
Hacking
🇺🇸
TPI-Abuse
2025-11-26 06:12:26
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.175.213 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.175.213 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 01:12:23.384290 2025] [security2:error] [pid 2650:tid 2663] [client 209.50.175.213:34059] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.hylakaplan.com"] [uri "/.env"] [unique_id "aSaaR6cpXMNW-93ob63P1gAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 01:00:35
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.175.213 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.175.213 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 20:00:26.331592 2025] [security2:error] [pid 3365543:tid 3365653] [client 209.50.175.213:19589] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.collegeofdivinescience.aafm.us"] [uri "/.svn/wc.db"] [unique_id "aSZRKmzJ-U6IElkF6xMtCwAAAcQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 00:41:38
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.175.213 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.175.213 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 19:41:30.422741 2025] [security2:error] [pid 5361:tid 5373] [client 209.50.175.213:25091] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.the-prestons.com"] [uri "/.env"] [unique_id "aSZMug6mFNQyT6yLV4LtrgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 04:18:52
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.175.213 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.175.213 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:18:48.088639 2025] [security2:error] [pid 9426:tid 9426] [client 209.50.175.213:58549] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.affourtit-bowmaker.com"] [uri "/.git/HEAD"] [unique_id "aSPcqJW8a3eWp-GXuJ0x7wAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
10dencehispahard SL
2025-11-19 07:35:45
(7 months ago)
WP probing for vulnerabilities
Hacking
Exploited Host
2025-11-14 00:38:48
(7 months ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack
🇧🇪
voormedia
2025-11-11 07:43:42
(7 months ago)
Accessed trap at '/.aws/credentials'
Web App Attack
🇦🇺
weblite
2025-11-03 17:25:59
(7 months ago)
WP_LOGIN_FAIL WP_XMLRPC_ABUSE
Brute-Force
Web App Attack