🇪🇸
Gem
2026-05-15 22:09:23
(1 month ago)
Unauthorized web scan.
Web App Attack
🇫🇷
dynamix
2026-05-09 09:04:56
(1 month ago)
Multiple WAF Violations
Web App Attack
🇨🇭
ca
2026-05-09 08:57:02
(1 month ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent
Web App Attack
Bad Web Bot
🇬🇧
consul.to
2026-05-09 08:17:59
(1 month ago)
Web attack/malicious scanning detected
Web App Attack
🇩🇪
webanyone
2026-05-09 08:15:06
(1 month ago)
Repeated 404 errors, blocked by Fail2ban in custom-404 jail
Bad Web Bot
🇺🇸
interbiznw.com
2026-05-09 07:49:57
(1 month ago)
malicious-web-requests-vulnerability-scanning
Hacking
Brute-Force
Exploited Host
Web App Attack
🇪🇸
IT Infraestructura
2026-05-09 07:15:00
(1 month ago)
Multiple Illegal Resource Access Request blocked to /.git/config(GET) /.ssh/id_rsa(GET) /.aw ...
show more
Multiple Illegal Resource Access Request blocked to /.git/config(GET) /.ssh/id_rsa(GET) /.aws/credentials(GET)
show less
Bad Web Bot
Web App Attack
🇬🇧
Aetherweb Ark
2026-05-07 20:32:11
(1 month ago)
(mod_security) mod_security (id:949110) triggered by 185.184.71.126 (DE/Germany/-): N in the last X ...
show more
(mod_security) mod_security (id:949110) triggered by 185.184.71.126 (DE/Germany/-): N in the last X secs
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-05-07 18:56:28
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 185.184.71.126 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 185.184.71.126 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 07 14:56:21.292908 2026] [security2:error] [pid 23647:tid 23647] [client 185.184.71.126:48486] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.constructionloansfunding.com|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.constructionloansfunding.com"] [uri "/storage/logs/laravel.log"] [unique_id "afzgVTvRCmajgqRMXvyUdAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-07 18:27:23
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 185.184.71.126 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 185.184.71.126 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 07 14:27:15.042057 2026] [security2:error] [pid 12196:tid 12196] [client 185.184.71.126:42724] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.clearlakelots.com"] [uri "/.env.test"] [unique_id "afzZg9-GcxdUS1FHjjv1UgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-07 17:34:25
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 185.184.71.126 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 185.184.71.126 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 07 13:34:21.473012 2026] [security2:error] [pid 14407:tid 14407] [client 185.184.71.126:60950] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.casagrotto.com"] [uri "/.git/config"] [unique_id "afzNHaMt5NsbcTa6ot68PgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-07 17:03:26
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 185.184.71.126 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 185.184.71.126 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 07 13:03:20.283948 2026] [security2:error] [pid 19527:tid 19527] [client 185.184.71.126:34852] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.butterflymornings.com"] [uri "/.env.test"] [unique_id "afzF2Bn1jzxZ5qlfEPQScQAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-07 16:40:11
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 185.184.71.126 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 185.184.71.126 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 07 12:39:58.295730 2026] [security2:error] [pid 24768:tid 24768] [client 185.184.71.126:50300] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.brexitop.com"] [uri "/app/.env"] [unique_id "afzAXojEiCqSfxSa6TOFZwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-07 16:15:21
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 185.184.71.126 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 185.184.71.126 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 07 12:15:14.340550 2026] [security2:error] [pid 21685:tid 21685] [client 185.184.71.126:45746] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.bkspeck.com|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.bkspeck.com"] [uri "/storage/logs/laravel.log"] [unique_id "afy6ki-7vL7mtQGzRRiBjgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-07 15:43:47
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 185.184.71.126 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 185.184.71.126 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 07 11:43:39.412620 2026] [security2:error] [pid 1275:tid 1275] [client 185.184.71.126:38588] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.be4ventures.com"] [uri "/api/.env"] [unique_id "afyzK5ndSAo7e-_l5bgsiQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack