🇮🇩
securejdprop
2026-10-03 17:29:47
(1 week ago)
This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET DROP Spamhaus D ...
show more
This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET DROP Spamhaus DROP Listed Traffic Inbound group 66).
show less
Hacking
Web App Attack
🇺🇸
drewf.ink
2026-09-29 04:27:23
(2 weeks ago)
[04:27] Attempted HTTPS access to the GlobalProtect prelogin endpoint (VPN gateway fingerprinting/re ...
show more
[04:27] Attempted HTTPS access to the GlobalProtect prelogin endpoint (VPN gateway fingerprinting/recon)
show less
Web App Attack
🇺🇸
SX Communications
2026-08-24 15:34:19
(1 month ago)
Blocked abusive HTTP application-layer DoS / botnet traffic from 209.50.190.97: traffic from this ad ...
show more
Blocked abusive HTTP application-layer DoS / botnet traffic from 209.50.190.97: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host.
show less
DDoS Attack
Bad Web Bot
Exploited Host
🇧🇪
cmbplf
2026-05-06 19:53:48
(5 months ago)
2.293 requests with url.path *.env
Brute-Force
Bad Web Bot
🇺🇸
TheMadBeaker
2026-04-02 09:53:57
(6 months ago)
Fail2Ban - HTTP Exploit Attempt
Brute-Force
Web App Attack
2026-02-14 16:31:08
(7 months ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
🇺🇸
TPI-Abuse
2025-11-25 05:21:30
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.190.97 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.190.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 00:21:27.965353 2025] [security2:error] [pid 28971:tid 28971] [client 209.50.190.97:44293] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.tribalvisions.net"] [uri "/.svn/wc.db"] [unique_id "aSU819IfXLC1T1Y8QKVApgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 05:05:44
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.190.97 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.190.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 00:05:36.512262 2025] [security2:error] [pid 5872:tid 5872] [client 209.50.190.97:23087] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.grollman.com"] [uri "/.git/HEAD"] [unique_id "aSU5IMe0Fy2y23krk_8scAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 04:40:39
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.190.97 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.190.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:40:31.486658 2025] [security2:error] [pid 27690:tid 27690] [client 209.50.190.97:36593] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.fastpc.biz"] [uri "/.env"] [unique_id "aSUzPz0VotvSoKsb5D_8owAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 03:52:43
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.190.97 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.190.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:52:30.786806 2025] [security2:error] [pid 32734:tid 32760] [client 209.50.190.97:23895] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.xavidominguez.com"] [uri "/.svn/wc.db"] [unique_id "aSUn_irPMGOurG3RzwZDBgAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 03:31:03
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.190.97 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.190.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:30:56.669515 2025] [security2:error] [pid 15403:tid 15403] [client 209.50.190.97:11567] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "museum.henning.org"] [uri "/.env"] [unique_id "aSUi8LFH_DPabr8AG3unfwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 02:57:08
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.190.97 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.190.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:56:57.593154 2025] [security2:error] [pid 15082:tid 15082] [client 209.50.190.97:26157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.rimworld.com"] [uri "/.git/HEAD"] [unique_id "aSUa-VqDV-BoBHZk8lGL9AAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 02:05:42
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.190.97 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.190.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:05:37.078607 2025] [security2:error] [pid 16917:tid 16917] [client 209.50.190.97:29529] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.imerka.com.mx"] [uri "/.svn/wc.db"] [unique_id "aSUO8RQk-VW-Ge1VoCccdQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 01:26:16
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 209.50.190.97 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.50.190.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 20:26:12.398159 2025] [security2:error] [pid 9282:tid 9282] [client 209.50.190.97:32225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.psychicangelreader.com"] [uri "/.env"] [unique_id "aSUFtEcyaADLOfShPrWPKgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
