🇺🇸
TPI-Abuse
2026-02-09 18:58:23
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.187.18 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.187.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 13:58:16.026387 2026] [security2:error] [pid 15965:tid 15965] [client 209.50.187.18:36061] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fynyx.com"] [uri "/backend/.env"] [unique_id "aYouSNuWts2D4aw2PlPKpwAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-09 16:27:45
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.187.18 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.187.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 11:27:39.757368 2026] [security2:error] [pid 1172346:tid 1172346] [client 209.50.187.18:46439] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ftiptondds.com"] [uri "/.env.save"] [unique_id "aYoK-3AgCXW9eHo1yn5jKQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-09 11:26:39
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.187.18 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.187.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 06:26:33.884711 2026] [security2:error] [pid 174437:tid 174534] [client 209.50.187.18:10321] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "galenaproperties.com"] [uri "/backend/.env"] [unique_id "aYnEaZ6BO_Ujr-6P95JEwgAAAVQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-09 04:38:11
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.187.18 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.187.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 08 23:38:05.216091 2026] [security2:error] [pid 12910:tid 12910] [client 209.50.187.18:48259] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fullyevil.com"] [uri "/api/.env"] [unique_id "aYlkrU8wdPHn99MvPVju1wAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-09 03:17:28
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.187.18 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.187.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 08 22:17:12.247849 2026] [security2:error] [pid 4409:tid 4409] [client 209.50.187.18:24539] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fuegolounge813.com"] [uri "/site/.git/config"] [unique_id "aYlRuMW8TWGGYozE-hDwdgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Petros Stefanakis
2026-01-04 00:36:59
(5 months ago)
(mod_security) mod_security triggered on hostname [redacted] 209.50.187.18 (CA/Canada/-)
SQL Injection
🇫🇷
dynamix
2025-12-22 11:40:51
(5 months ago)
Multiple WAF Violations
Web App Attack
🇺🇸
nowyouknow
2025-11-22 09:10:24
(6 months ago)
(From [email protected] ) Are you searching for a job that can be done right away? If so, countl ...
show more
(From [email protected] ) Are you searching for a job that can be done right away? If so, countless businesses are hiring website chat support agents - no experience is needed, as full training will be provided.
Click here to complete your application if you are interested.
-----> https://themoneyfromhome.com
show less
Phishing
Web Spam
🇦🇺
oncord
2025-11-07 07:27:01
(7 months ago)
Form spam
Web Spam
🇦🇺
oncord
2025-11-03 10:51:33
(7 months ago)
Form spam
Web Spam
🇪🇪
Unwasted
2025-11-02 07:52:52
(7 months ago)
Odoo contact form spam
Web Spam
Blog Spam
2025-10-08 01:53:23
(8 months ago)
wordpress-trap
Web App Attack
🇺🇸
vandomatos
2025-10-01 03:32:48
(8 months ago)
Sep 30 20:32:36 servidor sshd[2277911]: Invalid user admin from 209.50.187.18 port 26645
Sep 30 20:3 ...
show more
Sep 30 20:32:36 servidor sshd[2277911]: Invalid user admin from 209.50.187.18 port 26645
Sep 30 20:32:41 servidor sshd[2277911]: Failed password for invalid user admin from 209.50.187.18 port 26645 ssh2
Sep 30 20:32:46 servidor sshd[2277911]: Connection closed by invalid user admin 209.50.187.18 port 26645 [preauth]
...
show less
Brute-Force
SSH