🇺🇸
TPI-Abuse
2026-06-04 12:30:49
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 185.132.187.109 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 185.132.187.109 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 08:30:42.972692 2026] [security2:error] [pid 516:tid 516] [client 185.132.187.109:27297] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tallahasseepartybuses.com"] [uri "/.git/config"] [unique_id "aiFv8kBkllbj3ffEjkp33gAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-04 09:33:34
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 185.132.187.109 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 185.132.187.109 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 05:33:30.419919 2026] [security2:error] [pid 18147:tid 18158] [client 185.132.187.109:24557] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pueblodermatology.com"] [uri "/.git/config"] [unique_id "aiFGarFm7tB_0BPKvPUWBQAAAgg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-04 09:01:28
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 185.132.187.109 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 185.132.187.109 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 05:01:22.639844 2026] [security2:error] [pid 20415:tid 20415] [client 185.132.187.109:54117] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "werzi.com"] [uri "/.git/HEAD"] [unique_id "aiE-4uBPG8WHXvI9Xn2EFAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-04 08:32:26
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 185.132.187.109 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 185.132.187.109 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 04:32:22.457838 2026] [security2:error] [pid 26392:tid 26486] [client 185.132.187.109:32065] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rdumail.us"] [uri "/.git/HEAD"] [unique_id "aiE4Fk7otI96L_XP7hg8swAAAco"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-06-04 08:06:58
(3 weeks ago)
Abuse Detected (1)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-04 08:04:05
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 185.132.187.109 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 185.132.187.109 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 04:03:58.245283 2026] [security2:error] [pid 26925:tid 26925] [client 185.132.187.109:20803] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "embossedweddingnapkins.com"] [uri "/.git/HEAD"] [unique_id "aiExbpKN5vvpVCe3Re0LhQAAADA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-04 07:48:44
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 185.132.187.109 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 185.132.187.109 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 03:48:38.151649 2026] [security2:error] [pid 24723:tid 24723] [client 185.132.187.109:64059] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ryanc.net"] [uri "/.git/HEAD"] [unique_id "aiEt1ogNLjVRYhXTIbvVIwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-04 07:07:51
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 185.132.187.109 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 185.132.187.109 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 03:07:48.162431 2026] [security2:error] [pid 16795:tid 16795] [client 185.132.187.109:46633] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vendor21.com"] [uri "/.git/HEAD"] [unique_id "aiEkRCX1Tz43PANtnA81LAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Octopuce
2026-05-05 22:28:49
(1 month ago)
Aggressive web search of vulnerable pages: /link.php /tiny.php /user.php /menu.php /alfa.php /file.p ...
show more
Aggressive web search of vulnerable pages: /link.php /tiny.php /user.php /menu.php /alfa.php /file.php /mini.php /info.php /log.php /wso.php /m ...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-05-05 20:57:37
(1 month ago)
(mod_security) mod_security (id:234930) triggered by 185.132.187.109 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:234930) triggered by 185.132.187.109 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 05 16:57:31.757113 2026] [security2:error] [pid 15420:tid 15420] [client 185.132.187.109:59751] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\/lib\\\\/php\\\\/connector\\\\.minimal\\\\.php$" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/27_Apps_WPPlugin.conf"] [line "6778"] [id "234930"] [rev "2"] [msg "COMODO WAF: File upload vulnerability in the file manager plugin before 6.9 for WordPress (CVE-2020-25213)||compassionfatigue.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "compassionfatigue.org"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "afpZu0HJE6NTqKBuMBF2lwAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-05-02 17:54:37
(1 month ago)
Multiple WAF Violations
Web App Attack
🇿🇦
Tokolosh Hunters
2026-04-30 03:17:51
(1 month ago)
AutoBlockWindow-Known bad useragent query-2026-04-30 03:17:50
Bad Web Bot
🇺🇸
mnsf
2026-04-29 17:05:13
(1 month ago)
Too many Status 40X (13)
Brute-Force
Web App Attack
🇺🇸
nyt
2026-04-29 16:58:11
(1 month ago)
404 flood (16/60s), 404 flood (17/60s)
Bad Web Bot
Web App Attack
🇺🇦
URAN Publishing Service
2026-04-29 16:24:08
(1 month ago)
185.132.187.109 - - [29/Apr/2026:19:24:07 +0300] "GET /wp-content/plugins/schema/yanz.php HTTP/1.1" ...
show more
185.132.187.109 - - [29/Apr/2026:19:24:07 +0300] "GET /wp-content/plugins/schema/yanz.php HTTP/1.1" 404 706 "-" "Go-http-client/1.1"
185.132.187.109 - - [29/Apr/2026:19:24:08 +0300] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 404 706 "-" "Go-http-client/1.1"
...
show less
Web App Attack