🇲🇽
octageeks.com
2026-06-24 04:17:03
(5 days ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇫🇷
ELYAZ
2026-06-22 19:53:06
(6 days ago)
(y4) Failed scan -byebye- from 209.50.186.190 (IT/Italy/-): (CF_ENABLE)
Hacking
🇦🇺
oncord
2025-12-29 15:12:03
(6 months ago)
Form spam
Web Spam
🇺🇸
TPI-Abuse
2025-12-02 16:33:44
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.186.190 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.186.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 11:33:37.573548 2025] [security2:error] [pid 1214:tid 1214] [client 209.50.186.190:37429] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bitcointoolfair.com"] [uri "/.git/HEAD"] [unique_id "aS8U4R3F1iU0_mqY99ro4QAAACQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 07:14:35
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.186.190 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.186.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 02:14:29.921459 2025] [security2:error] [pid 16981:tid 16981] [client 209.50.186.190:57587] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.garmeltech.com"] [uri "/.env"] [unique_id "aSVXVdYARYUFwVMMluqkEwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 06:24:28
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.186.190 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.186.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:24:21.275947 2025] [security2:error] [pid 23583:tid 23583] [client 209.50.186.190:57245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.bacona.org"] [uri "/.env"] [unique_id "aSVLld1knIa48dZHP-TO-gAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 05:36:11
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.186.190 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.186.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 00:36:07.649338 2025] [security2:error] [pid 25101:tid 25101] [client 209.50.186.190:55233] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.rphenry.com"] [uri "/.git/HEAD"] [unique_id "aSVAR68ah5B9Rtf0-FOk6QAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 04:55:21
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.186.190 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.186.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:55:05.752891 2025] [security2:error] [pid 24736:tid 24736] [client 209.50.186.190:12109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.secuencia.com"] [uri "/.env"] [unique_id "aSU2qWprlVVlSX2dV93k2wAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 04:15:28
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.186.190 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.186.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:15:22.431287 2025] [security2:error] [pid 20317:tid 20317] [client 209.50.186.190:48941] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.romancewritersfoundation.org"] [uri "/.svn/wc.db"] [unique_id "aSUtWq5QCKlXB5jdYh_A5AAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
IROK
2025-11-25 02:40:54
(7 months ago)
25/Nov/2025:03:40:53.742201 +0100Apache-Error: [file "apache2_util.c"] [line 273] [level 3] [client ...
show more
25/Nov/2025:03:40:53.742201 +0100Apache-Error: [file "apache2_util.c"] [line 273] [level 3] [client 209.50.186.190] ModSecurity: Access denied with code 403 (phase 2). String match "/.env" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430057"] [msg "Malware.Expert - request_uri: .ENV Files"] [tag "MEWAF"] [hostname "webdisk.mojrzeczoznawca.pl"] [uri "/.env"] [unique_id "aSUXNarqJzg6kidRXbnq-wAAAFY"]
...
show less
Hacking
🇺🇸
TPI-Abuse
2025-11-25 02:06:37
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.186.190 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.186.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:06:31.721947 2025] [security2:error] [pid 14164:tid 14164] [client 209.50.186.190:14951] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.hawkinsenterprise.com"] [uri "/.svn/wc.db"] [unique_id "aSUPJ6bFbS-KbclNa10R-wAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 01:06:37
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.186.190 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.186.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 20:06:31.690685 2025] [security2:error] [pid 25297:tid 25297] [client 209.50.186.190:27911] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.wildimaginings.org"] [uri "/.svn/wc.db"] [unique_id "aSUBF3nkGBeEIoL9hxhtrQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 08:12:51
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.186.190 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.186.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:11:47.331471 2025] [security2:error] [pid 21168:tid 21168] [client 209.50.186.190:10565] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.b-radsautodetailing.com"] [uri "/.svn/wc.db"] [unique_id "aSQTQyiRwqGbljiWJugK6AAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 07:17:41
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.186.190 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.186.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:17:23.008432 2025] [security2:error] [pid 17991:tid 17991] [client 209.50.186.190:54227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.maycockfamily.com"] [uri "/.git/HEAD"] [unique_id "aSQGg8jgO0UkXEcqJD813wAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 05:22:35
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.186.190 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.186.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:22:32.185265 2025] [security2:error] [pid 18194:tid 18302] [client 209.50.186.190:49505] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jessewallaceart.aussiepens.com"] [uri "/.git/HEAD"] [unique_id "aSPrmO9urIyQu8V3f-3l2wAAAJI"]
show less
Brute-Force
Bad Web Bot
Web App Attack