🇫🇷
ELYAZ
2026-06-12 01:50:19
(1 day ago)
(y4) Failed scan -byebye- from 209.50.177.129 (BR/Brazil/-): (CF_ENABLE)
Hacking
🇺🇸
dtorrer
2026-06-11 22:20:05
(1 day ago)
Brute-force general attack.
Brute-Force
🇺🇸
koinkash.org
2026-06-10 20:10:45
(2 days ago)
They are fraudulent. Malicious threat actor requesting php file /wp-login.php
Web App Attack
🇺🇸
TPI-Abuse
2026-02-10 02:49:25
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.177.129 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.177.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 21:49:19.359248 2026] [security2:error] [pid 1396270:tid 1396270] [client 209.50.177.129:57081] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "madisonworkshopwest.com"] [uri "/.env.production"] [unique_id "aYqcryQlb4Dws3kDbycsnAAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-09 23:43:42
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.177.129 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.177.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 18:43:39.488438 2026] [security2:error] [pid 15128:tid 15128] [client 209.50.177.129:38057] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kelvinlouie.com"] [uri "/dev/.git/config"] [unique_id "aYpxK85F14SKcCVwF5Tp5AAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-09 23:03:02
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.177.129 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.177.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 18:02:59.570903 2026] [security2:error] [pid 26422:tid 26422] [client 209.50.177.129:30697] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "howtosellmorepizza.com"] [uri "/backup/.git/config"] [unique_id "aYpno9MP3dUnH1FO4xvRmQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Carsten
2026-02-09 22:36:04
(4 months ago)
GET [app/.git/config]
Port Scan
🇺🇸
TPI-Abuse
2026-02-09 21:58:50
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.177.129 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.177.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 16:58:43.860173 2026] [security2:error] [pid 23897:tid 23897] [client 209.50.177.129:46455] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "katemcleod.net"] [uri "/app/.env"] [unique_id "aYpYk2wustjmvyi9MZEdMAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-09 21:21:04
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.177.129 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.177.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 16:20:56.260530 2026] [security2:error] [pid 2486:tid 2486] [client 209.50.177.129:41373] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "horsesaw.com"] [uri "/app/.env"] [unique_id "aYpPuLTmkXbo26Y7_J-_2wAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
myagent.site
2026-02-09 20:06:57
(4 months ago)
Blocking for trying to access an exploit file: /backend/.env
Hacking
2025-10-30 15:07:15
(7 months ago)
WordPress Brute Force
Brute-Force