2026-01-05 20:13:38
(5 months ago)
Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.05 is noted in report tim ...
show more
Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.05 is noted in report timestamp
show less
Hacking
Brute-Force
2025-12-23 05:46:10
(5 months ago)
2025-12-23T07:46:10.284142+02:00 zanati wp(www.sahpa.co.za)[2527591]: Blocked authentication attempt ...
show more
2025-12-23T07:46:10.284142+02:00 zanati wp(www.sahpa.co.za)[2527591]: Blocked authentication attempt for [email protected] from 209.50.187.197
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 06:26:32
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.187.197 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.187.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:26:27.793596 2025] [security2:error] [pid 21313:tid 21313] [client 209.50.187.197:51041] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.tcomputerguy.com"] [uri "/.env"] [unique_id "aSVMExDwj_aALq_gYEhV9AAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 06:05:35
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.187.197 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.187.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:05:28.955108 2025] [security2:error] [pid 12551:tid 12551] [client 209.50.187.197:51823] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.michaelthompson.biz"] [uri "/.git/HEAD"] [unique_id "aSVHKI87Z3e0LHZasC2A6gAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 04:35:10
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.187.197 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.187.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:35:05.925641 2025] [security2:error] [pid 29865:tid 29865] [client 209.50.187.197:37881] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.xcengineering.xyz"] [uri "/.svn/wc.db"] [unique_id "aSUx-V_-6Yvgxj2wseTjzAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 04:10:23
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.187.197 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.187.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:10:17.104378 2025] [security2:error] [pid 25493:tid 25493] [client 209.50.187.197:28873] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.carl-fink.name"] [uri "/.svn/wc.db"] [unique_id "aSUsKdD_pDUy6PnkMyBaRAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 02:06:58
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.187.197 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.187.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:06:51.157430 2025] [security2:error] [pid 15002:tid 15002] [client 209.50.187.197:18621] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.edenberg.com"] [uri "/.svn/wc.db"] [unique_id "aSUPO4jX4mLg33pi8ldW1wAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 00:40:58
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.187.197 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.187.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 19:40:49.369131 2025] [security2:error] [pid 19117:tid 19117] [client 209.50.187.197:59353] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hollywoo11.exotic-dancers-los-angeles.com"] [uri "/.git/HEAD"] [unique_id "aST7EX311ZYFJPS0lLGHrwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack