🇲🇽
octageeks.com
2026-06-18 04:23:09
(6 hours ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇮🇩
BPS-StatisticsIndonesia
2025-12-14 12:41:27
(6 months ago)
WP Login Scan Activities
Web App Attack
🇺🇸
TPI-Abuse
2025-12-11 00:27:26
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.176.4 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.176.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 10 19:27:20.404333 2025] [security2:error] [pid 2597:tid 2597] [client 209.50.176.4:19933] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "carbtestingidaho.com"] [uri "/.env"] [unique_id "aToP6CRyM3ZUGEdoQbfltgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-08 01:56:10
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.176.4 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.176.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 20:56:03.085633 2025] [security2:error] [pid 532:tid 532] [client 209.50.176.4:26761] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "crypto-stamps.com"] [uri "/.env"] [unique_id "aTYwM9jjX9XtUpTDpmJe8QAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-06 11:40:37
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.176.4 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.176.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 06 06:40:31.489985 2025] [security2:error] [pid 27028:tid 27028] [client 209.50.176.4:21805] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "haisten.net"] [uri "/.svn/wc.db"] [unique_id "aTQWL975YeiR5BzNFGva-gAAACU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-06 05:02:13
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.176.4 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.176.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 06 00:02:09.332417 2025] [security2:error] [pid 17956:tid 17956] [client 209.50.176.4:42229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "zmnmail.info"] [uri "/.svn/wc.db"] [unique_id "aTO40ZcTyl8pxRwt0XfJQwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 17:30:19
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.176.4 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.176.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 12:30:12.699685 2025] [security2:error] [pid 10632:tid 10632] [client 209.50.176.4:46243] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "doubleandup.com"] [uri "/.env"] [unique_id "aTMWpLLgq0mzABLj8mC6wwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 15:18:29
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.176.4 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.176.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 10:18:22.556108 2025] [security2:error] [pid 11360:tid 11360] [client 209.50.176.4:19631] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fortwaynepartybuses.com"] [uri "/.git/HEAD"] [unique_id "aTL3vveo-HXreicxt37z2gAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 10:41:40
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.176.4 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.176.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 05:41:34.653639 2025] [security2:error] [pid 1001:tid 1001] [client 209.50.176.4:45669] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rokket.com"] [uri "/.env"] [unique_id "aTK23oXtMCUPcHD3McSijAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 05:51:47
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.176.4 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.176.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 00:51:40.337647 2025] [security2:error] [pid 9076:tid 9099] [client 209.50.176.4:33419] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rockabyecotons.com"] [uri "/.svn/wc.db"] [unique_id "aTJy7EzVOMrK75wNPMF58QAAARU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 03:48:40
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.176.4 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.176.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 22:48:36.423347 2025] [security2:error] [pid 28514:tid 28514] [client 209.50.176.4:9397] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "animz.com"] [uri "/.svn/wc.db"] [unique_id "aTJWFEkGaU9QtE6vMD36nwAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 02:52:09
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.176.4 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.176.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 21:52:03.420433 2025] [security2:error] [pid 15150:tid 15180] [client 209.50.176.4:31681] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "famousafricanamericanartist.com"] [uri "/.env"] [unique_id "aTJI00YyIIZCNeLEf7czEgAAAJU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 09:29:06
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.176.4 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.176.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:28:56.084860 2025] [security2:error] [pid 3436:tid 3436] [client 209.50.176.4:50979] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.ursell.org"] [uri "/.git/HEAD"] [unique_id "aSQlWDdeRtIhff65KerMZQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
iNetWorker
2025-11-24 07:39:38
(6 months ago)
trolling for resource vulnerabilities
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 07:13:33
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.176.4 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.176.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:13:26.187552 2025] [security2:error] [pid 31087:tid 31087] [client 209.50.176.4:33213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.darrowco.com"] [uri "/.env"] [unique_id "aSQFlpMAddvK9fxhRFmUjgAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack