🇦🇺
HJ5Ss4Ju
2026-08-21 19:10:41
(4 days ago)
Blocked by Wordfence (SID 6)
Web App Attack
🇫🇷
Sklurk
2026-08-05 01:45:45
(3 weeks ago)
Web App Attack
Web App Attack
🇫🇷
Sklurk
2026-07-31 02:16:03
(3 weeks ago)
Web App Attack
Web App Attack
🇫🇷
Sklurk
2026-07-30 02:06:55
(3 weeks ago)
Web App Attack
Web App Attack
🇩🇪
raph
2026-06-25 17:40:47
(2 months ago)
[Wordpress] crawler /wp-admin/*, /wp-content/*, etc.
Bad Web Bot
Web App Attack
2026-04-26 07:08:30
(4 months ago)
2026-04-26T09:08:30.079970+02:00 zanati wp(www.sahpa.co.za)[380091]: Blocked authentication attempt ...
show more
2026-04-26T09:08:30.079970+02:00 zanati wp(www.sahpa.co.za)[380091]: Blocked authentication attempt for [email protected] from 209.50.181.114
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-02-20 06:13:11
(6 months ago)
(mod_security) mod_security (id:225170) triggered by 209.50.181.114 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 209.50.181.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 20 01:13:07.863667 2026] [security2:error] [pid 31721:tid 31760] [client 209.50.181.114:16383] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||andestravel.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "andestravel.net"] [uri "/wp-json/wp/v2/users"] [unique_id "aZf7c4WUDhLL1mW6_nqjSQAAAVc"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-12-31 13:05:45
(7 months ago)
wordpress-trap
Web App Attack
🇭🇺
bcsaba
2025-12-17 00:27:26
(8 months ago)
Joomla spam
209.50.181.114 - - [17/Dec/2025:01:27:23 +0100] "GET /index.php?option=com_easyblog&view ...
show more
Joomla spam
209.50.181.114 - - [17/Dec/2025:01:27:23 +0100] "GET /index.php?option=com_easyblog&view=dashboard&layout=write HTTP/1.1" 404 789 "https://*REDACTED*" "Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36"
show less
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 04:57:13
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.181.114 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.181.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:57:01.286042 2025] [security2:error] [pid 7322:tid 7322] [client 209.50.181.114:52261] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.leobynum.com"] [uri "/.env"] [unique_id "aSU3HfSFrq0azoHBynV2hgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 03:53:34
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.181.114 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.181.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:53:25.736473 2025] [security2:error] [pid 28821:tid 28821] [client 209.50.181.114:12995] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.satanisdead.com"] [uri "/.svn/wc.db"] [unique_id "aSUoNTHTkOyzz_VGmxNcrQAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 03:08:07
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.181.114 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.181.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:07:47.955606 2025] [security2:error] [pid 713558:tid 713558] [client 209.50.181.114:11907] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.neff.family.name"] [uri "/.git/HEAD"] [unique_id "aSUdg4j9utY6tMaTwDDcIAAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 01:13:10
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.181.114 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.181.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 20:12:56.416393 2025] [security2:error] [pid 27931:tid 27931] [client 209.50.181.114:21601] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.wendeeholtcamp.com"] [uri "/.svn/wc.db"] [unique_id "aSUCmDWuOFf84Lh1EEVzKgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-10-30 14:45:52
(9 months ago)
WordPress Brute Force
Brute-Force
🇳🇿
billyborsht
2025-10-27 03:31:48
(9 months ago)
2025-10-27T16:31:47.033158+13:00 southern wordpress(temukarau.nz)[480721]: Authentication attempt fo ...
show more
2025-10-27T16:31:47.033158+13:00 southern wordpress(temukarau.nz)[480721]: Authentication attempt for unknown user temukarau.nz from 209.50.181.114
...
show less
Hacking
Web App Attack