🇩🇪
LRob.fr
2026-02-16 12:38:52
(3 months ago)
Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail
Bad Web Bot
Web App Attack
🇱🇻
garmtech.com
2026-01-15 12:39:27
(4 months ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 14-39.209.50.187.206.web-spamm ...
show more
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 14-39.209.50.187.206.web-spammers.v2.rbl.imunify.com._v4 succeeded.
show less
Web App Attack
2026-01-01 04:44:49
(5 months ago)
(wordpress) Failed wordpress login from 209.50.187.206 (CA/Canada/-)
Brute-Force
🇩🇪
Packets-Decreaser.NET
2025-12-29 14:00:56
(5 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
🇺🇸
TPI-Abuse
2025-12-02 21:23:56
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.187.206 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.187.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 16:23:51.868333 2025] [security2:error] [pid 1442:tid 1442] [client 209.50.187.206:38233] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "needtoorderprinting.com"] [uri "/.env"] [unique_id "aS9Y5y1wMa8ylFSnXah0mwAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 19:45:14
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.187.206 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.187.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 14:45:09.064966 2025] [security2:error] [pid 19506:tid 19506] [client 209.50.187.206:31869] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wave94.com"] [uri "/.svn/wc.db"] [unique_id "aS9BxXu1MXnO82IdKit3ygAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 11:41:27
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.187.206 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.187.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 06:41:21.623717 2025] [security2:error] [pid 20055:tid 20055] [client 209.50.187.206:59705] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fromsaintlouis.com"] [uri "/.git/HEAD"] [unique_id "aS7QYeL_Ew7NMWj8osmADgAAACg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 08:29:55
(6 months ago)
(mod_security) mod_security (id:210740) triggered by 209.50.187.206 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210740) triggered by 209.50.187.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 03:29:48.587217 2025] [security2:error] [pid 27188:tid 27188] [client 209.50.187.206:45565] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||studiopilates.net|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "studiopilates.net"] [uri "/contact/gaestebuch.php"] [unique_id "aS6jfEKC5WCLhBiYJnuyLQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 05:50:49
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.187.206 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.187.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 00:50:44.264307 2025] [security2:error] [pid 30975:tid 30975] [client 209.50.187.206:21541] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kelvinlouie.com"] [uri "/.git/HEAD"] [unique_id "aS5-NEcktkD5GOpJt4jP-wAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 10:45:41
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.187.206 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.187.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 05:45:38.097458 2025] [security2:error] [pid 19331:tid 19331] [client 209.50.187.206:50141] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dpcreamery.com"] [uri "/.svn/wc.db"] [unique_id "aSbaUnIH11iRlekrKcrHKwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 08:21:06
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.187.206 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.187.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 03:21:00.025051 2025] [security2:error] [pid 12236:tid 12236] [client 209.50.187.206:24217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.primecomputer.net"] [uri "/.git/HEAD"] [unique_id "aSa4bGQ9MVY87Ja01TQGcAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 06:55:38
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.187.206 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.187.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 01:55:35.629616 2025] [security2:error] [pid 9542:tid 9558] [client 209.50.187.206:15917] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.anthonydalessandro.com"] [uri "/.svn/wc.db"] [unique_id "aSakZ43KfyUJoLcCWK2MGwAAAUs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 05:30:45
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.187.206 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.187.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 00:30:42.491357 2025] [security2:error] [pid 23217:tid 23217] [client 209.50.187.206:51451] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.amiance.com"] [uri "/.svn/wc.db"] [unique_id "aSaQgtIC9ziGLfu3RWxmAwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 09:14:12
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.187.206 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.187.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:14:07.441008 2025] [security2:error] [pid 10924:tid 10924] [client 209.50.187.206:49193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.asociacioncopan.org"] [uri "/.env"] [unique_id "aSQh309dknrF7zkRouylLgAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 08:29:50
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.187.206 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.187.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:29:42.973262 2025] [security2:error] [pid 27192:tid 27192] [client 209.50.187.206:43777] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.longsans.com"] [uri "/.env"] [unique_id "aSQXdil4dUSltTTr5vXRqwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack