🇮🇹
VHosting
2026-10-23 03:15:04
(2 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-10-23 01:27:43
(3 days ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
🇺🇦
URAN Publishing Service
2026-09-07 20:23:53
(1 month ago)
[07/Sep/2026:23:23:52 +0300] -- 185.132.187.100 Ban reason: User-Agent Go-http-client
Bad Web Bot
Web App Attack
2026-09-03 02:17:34
(1 month ago)
denied traffic to a honeypot network. destination port 53.
Port Scan
Hacking
2026-08-03 02:04:09
(2 months ago)
denied traffic to a honeypot network. destination port 53.
Port Scan
Hacking
🇺🇸
TPI-Abuse
2026-06-29 23:10:10
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 185.132.187.100 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 185.132.187.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 29 19:10:03.193625 2026] [security2:error] [pid 4187:tid 4187] [client 185.132.187.100:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.pixacast.com"] [uri "/.env"] [unique_id "akL7SxKQx13SxeZBDdIvGAAAACM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Octopuce
2026-06-05 22:04:29
(4 months ago)
Aggressive web search of vulnerable pages: /wp-includes/blocks/calendar/index.php /wp-content/plugin ...
show more
Aggressive web search of vulnerable pages: /wp-includes/blocks/calendar/index.php /wp-content/plugins/fix/up.php /.well-known/acme-challenge/at ...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-06-03 18:40:44
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 185.132.187.100 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 185.132.187.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 14:40:40.285513 2026] [security2:error] [pid 5250:tid 5250] [client 185.132.187.100:20835] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "koswerks.net"] [uri "/.git/"] [unique_id "aiB1KPSKG7iDeNARn-KujQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-03 18:22:07
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 185.132.187.100 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 185.132.187.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 14:22:01.696335 2026] [security2:error] [pid 28875:tid 28875] [client 185.132.187.100:41453] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "eliteregenmed.com"] [uri "/.git/config"] [unique_id "aiBwyQd5ffC5b5IaeVPYNAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-03 16:04:11
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 185.132.187.100 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 185.132.187.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 12:04:04.398675 2026] [security2:error] [pid 6906:tid 6906] [client 185.132.187.100:39007] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cygnuslabs.com"] [uri "/.git/"] [unique_id "aiBQdHiEqHTf4jhX3SNAmQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-03 15:47:33
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 185.132.187.100 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 185.132.187.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 11:47:27.542908 2026] [security2:error] [pid 10098:tid 10098] [client 185.132.187.100:25347] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "exresearch.com"] [uri "/.git/HEAD"] [unique_id "aiBMj8Alh0znGDzepX5-AgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-03 15:14:44
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 185.132.187.100 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 185.132.187.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 11:14:40.608070 2026] [security2:error] [pid 8414:tid 8455] [client 185.132.187.100:38139] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "frasers.biz"] [uri "/.git/HEAD"] [unique_id "aiBE4Kn5MT22pkJHym-lXQAAAQc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
LRob
2026-06-03 15:00:03
(4 months ago)
WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail
Web App Attack
🇺🇸
TPI-Abuse
2026-06-03 14:05:05
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 185.132.187.100 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 185.132.187.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 10:04:57.747389 2026] [security2:error] [pid 9124:tid 9274] [client 185.132.187.100:28371] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rmoeis.com"] [uri "/.git/HEAD"] [unique_id "aiA0ib2nLeccdqFIdpDyLAAAAtc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-03 12:59:53
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 185.132.187.100 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 185.132.187.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 08:59:48.116013 2026] [security2:error] [pid 11907:tid 11907] [client 185.132.187.100:62795] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "insearchofacure.org"] [uri "/.git/config"] [unique_id "aiAlRHmNX-7zp2hGkl3OTAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
