🇺🇸
mnsf
2026-06-04 13:05:05
(3 weeks ago)
Abuse Detected (4)
Brute-Force
Web App Attack
🇩🇪
Bedios GmbH
2026-06-04 09:35:24
(3 weeks ago)
Login credentials theft attempt
Hacking
🇺🇸
TPI-Abuse
2026-06-04 09:19:39
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 185.132.187.141 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 185.132.187.141 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 05:19:33.820760 2026] [security2:error] [pid 23209:tid 23209] [client 185.132.187.141:36485] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "meghanmack.name"] [uri "/.git/HEAD"] [unique_id "aiFDJZIghOaSaMO74RNclQAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-04 08:59:48
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 185.132.187.141 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 185.132.187.141 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 04:59:43.882943 2026] [security2:error] [pid 8187:tid 8187] [client 185.132.187.141:24067] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "russiacoin.info"] [uri "/.git/HEAD"] [unique_id "aiE-f3H-0BXxrRMp_iOVnwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-04 08:32:01
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 185.132.187.141 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 185.132.187.141 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 04:31:56.099187 2026] [security2:error] [pid 26390:tid 26442] [client 185.132.187.141:30877] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rdumail.us"] [uri "/.git/HEAD"] [unique_id "aiE3_N9QGWx9p-7okeG8TgAAAJQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-04 08:01:51
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 185.132.187.141 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 185.132.187.141 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 04:01:44.016367 2026] [security2:error] [pid 19289:tid 19289] [client 185.132.187.141:63209] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "meridianranchdrc.org"] [uri "/.git/HEAD"] [unique_id "aiEw6MheBetEM7zFtXXRKQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-04 07:16:02
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 185.132.187.141 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 185.132.187.141 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 03:15:55.370761 2026] [security2:error] [pid 31414:tid 31414] [client 185.132.187.141:51067] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "omahareact.org"] [uri "/.git/config"] [unique_id "aiEmK0IGih2GkG2e1e2kTgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇿🇦
Tokolosh Hunters
2026-04-30 03:18:02
(1 month ago)
AutoBlockWindow-Known bad useragent query-2026-04-30 03:18:01
Bad Web Bot
🇺🇸
mnsf
2026-04-29 18:05:21
(1 month ago)
Too many Status 40X (12)
Brute-Force
Web App Attack
🇺🇦
URAN Publishing Service
2026-04-29 16:23:54
(1 month ago)
185.132.187.141 - - [29/Apr/2026:19:23:53 +0300] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" ...
show more
185.132.187.141 - - [29/Apr/2026:19:23:53 +0300] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 404 706 "-" "Go-http-client/1.1"
185.132.187.141 - - [29/Apr/2026:19:23:53 +0300] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 404 706 "-" "Go-http-client/1.1"
...
show less
Web App Attack
🇳🇱
Site.eu
2026-04-15 09:12:52
(2 months ago)
Excessive 404/403 errors
Brute-Force
🇺🇸
TPI-Abuse
2026-03-15 00:28:46
(3 months ago)
(mod_security) mod_security (id:210730) triggered by 185.132.187.141 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210730) triggered by 185.132.187.141 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 14 20:28:42.348807 2026] [security2:error] [pid 3497699:tid 3497699] [client 185.132.187.141:42741] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||kwtlaw.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "kwtlaw.com"] [uri "/backup.sql"] [unique_id "abX9Ovh5pQ5Y7UP1f_q_BAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-14 13:00:52
(3 months ago)
(mod_security) mod_security (id:210730) triggered by 185.132.187.141 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210730) triggered by 185.132.187.141 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 14 09:00:45.116489 2026] [security2:error] [pid 14147:tid 14147] [client 185.132.187.141:65313] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dudleyanddudley.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dudleyanddudley.com"] [uri "/restore/backup.sql"] [unique_id "abVb_YfiPhaghhgoQb9mLAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
bescared
2026-03-11 16:42:27
(3 months ago)
F2B - Malicious activity detected. URL Probing.
Hacking
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-06 11:04:45
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 185.132.187.141 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 185.132.187.141 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 06 06:04:36.935591 2026] [security2:error] [pid 15234:tid 15234] [client 185.132.187.141:40869] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.oualierealty.com"] [uri "/.env.dev"] [unique_id "aaq0xPTeDfWv3-DPKJipzQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack