🇫🇷
ELYAZ
2026-06-18 10:04:53
(32 minutes ago)
(y4) Failed scan -byebye- from 209.50.178.168 (BR/Brazil/-): (CF_ENABLE)
Hacking
🇦🇺
screwlooseit.com.au
2025-12-30 10:18:58
(5 months ago)
Blocked by CSF 13 firewall - Rule: XMLRPC
US/United States/-
Web App Attack
🇮🇹
VHosting
2025-12-28 23:55:06
(5 months ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 06:35:54
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.178.168 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.178.168 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:35:48.775607 2025] [security2:error] [pid 7534:tid 7534] [client 209.50.178.168:54857] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.stagemadrid.com"] [uri "/.svn/wc.db"] [unique_id "aSVORAG2NPAUxGRYYfwuYwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 05:52:35
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.178.168 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.178.168 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 00:52:26.797872 2025] [security2:error] [pid 19497:tid 19497] [client 209.50.178.168:40929] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.lloydprins.com"] [uri "/.svn/wc.db"] [unique_id "aSVEGndGJGf3emdE9uBQtQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 05:24:02
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.178.168 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.178.168 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 00:23:57.270386 2025] [security2:error] [pid 8577:tid 8577] [client 209.50.178.168:50141] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.siteworkestimating.prospecinspections.com"] [uri "/.svn/wc.db"] [unique_id "aSU9bRr6yOyJhZjuoKgKvgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 04:29:45
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.178.168 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.178.168 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:29:38.182322 2025] [security2:error] [pid 16558:tid 16558] [client 209.50.178.168:59923] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.newcangroup.com"] [uri "/.env"] [unique_id "aSUwstefW_0qQ2_00PecYQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 04:10:49
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.178.168 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.178.168 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:10:41.096866 2025] [security2:error] [pid 31595:tid 31595] [client 209.50.178.168:28341] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.goldenstatealliance.com"] [uri "/.svn/wc.db"] [unique_id "aSUsQbMtISNRGFj4GUq8GAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇩
Burayot
2025-11-25 03:48:33
(6 months ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 209.50.178.168 (BR/Brazil/-): 1 in ...
show more
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 209.50.178.168 (BR/Brazil/-): 1 in the last 3600 secs
show less
Web App Attack
🇩🇪
Carsten
2025-11-25 03:06:16
(6 months ago)
GET [.svn/wc.db]
Port Scan
🇺🇸
TPI-Abuse
2025-11-25 02:54:30
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.178.168 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.178.168 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:54:22.332279 2025] [security2:error] [pid 18641:tid 18641] [client 209.50.178.168:13663] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.moontouchmassage.com"] [uri "/.env"] [unique_id "aSUaXnENOx2lD_IS3wMvXgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 01:27:18
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.178.168 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.178.168 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 20:27:15.107647 2025] [security2:error] [pid 5502:tid 5502] [client 209.50.178.168:22423] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.investorsfundingusa.com"] [uri "/.env"] [unique_id "aSUF82ZVjpgi58-iy4aAlAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Interceptor_HQ
2025-11-25 00:44:15
(6 months ago)
request_uri: /.aws/credentials -- automatic report --
Hacking
Brute-Force
🇳🇱
i-turnradio.nl
2025-11-25 00:04:24
(6 months ago)
2025-11-25 @ 01:04:24 (CET) ~ Blocked for trying to access: /.svn/wc.db
Web App Attack
🇦🇺
oncord
2025-11-16 22:04:44
(7 months ago)
Form spam
Web Spam