🇦🇹
René Hickersberger
2026-07-30 21:03:40
(1 hour ago)
malicious bot detected: violations="hit-honeypot"; user_agent="Python-urllib/3.10"
Web App Attack
🇺🇸
TPI-Abuse
2026-07-30 17:53:08
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 193.37.32.143 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 193.37.32.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 30 13:53:02.220667 2026] [security2:error] [pid 1872716:tid 1872716] [client 193.37.32.143:39811] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "myplans.johnlittlehorn.com"] [uri "/.git/HEAD"] [unique_id "amuPfgoO4QxE8URCVPW39gAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-30 12:48:04
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 193.37.32.143 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 193.37.32.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 30 08:47:57.874252 2026] [security2:error] [pid 1248737:tid 1248737] [client 193.37.32.143:33051] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.catholicshoppercom.frankpollicino.com"] [uri "/.git/HEAD"] [unique_id "amtH_YXjIgKoIVXsEETkTAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
alferez
2026-07-30 10:43:11
(12 hours ago)
wp2shell bug exploit
Hacking
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-07-30 09:32:58
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 193.37.32.143 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 193.37.32.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 30 05:32:37.677334 2026] [security2:error] [pid 1101739:tid 1101757] [client 193.37.32.143:23321] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.piazza9.com"] [uri "/.env.production"] [unique_id "amsaNT0fbQ2owmtk2wC9vwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇹🇷
neron
2026-07-29 20:19:38
(1 day ago)
CrowdSec blocked: http:exploit detected via OPNsense firewall
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-07-29 17:24:28
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 193.37.32.143 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 193.37.32.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 29 13:24:04.489760 2026] [security2:error] [pid 1860:tid 1860] [client 193.37.32.143:27277] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lavozdom.aguasolar.com"] [uri "/.git/HEAD"] [unique_id "amo3NMJcE2eB6iaMuDX0WwAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-29 16:38:40
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 193.37.32.143 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 193.37.32.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 29 12:38:23.682767 2026] [security2:error] [pid 838982:tid 838982] [client 193.37.32.143:63185] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agristor.totalstorage.solutions"] [uri "/.git/HEAD"] [unique_id "amosf0AO8FGvhsIsuuaXkwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-29 16:12:52
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 193.37.32.143 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 193.37.32.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 29 12:12:43.521505 2026] [security2:error] [pid 459811:tid 459811] [client 193.37.32.143:39107] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.mispar.solutions"] [uri "/.git/HEAD"] [unique_id "amome484KcZ-MyG8lhez7QAAACQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mawan
2026-07-29 08:16:44
(1 day ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
🇺🇸
TPI-Abuse
2026-07-29 07:53:31
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 193.37.32.143 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 193.37.32.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 29 03:53:26.669566 2026] [security2:error] [pid 2239284:tid 2239284] [client 193.37.32.143:20751] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.meridianranchdrc.org"] [uri "/.git/HEAD"] [unique_id "ammxdmvImkvYawUZ69BPtQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇦
URAN Publishing Service
2026-07-28 21:14:22
(2 days ago)
193.37.32.143 - - [29/Jul/2026:00:14:20 +0300] "GET /.git/HEAD HTTP/1.1" 301 625 "-" "Python-urllib/ ...
show more
193.37.32.143 - - [29/Jul/2026:00:14:20 +0300] "GET /.git/HEAD HTTP/1.1" 301 625 "-" "Python-urllib/3.10"
...
show less
Web App Attack
🇹🇷
neron
2026-07-28 20:19:38
(2 days ago)
CrowdSec blocked: http:exploit detected via OPNsense firewall
Hacking
Web App Attack
🇨🇭
backslash
2026-07-28 15:33:00
(2 days ago)
block ruleset bad bot: misc bad content F608233CC4C86EE814CE8DDDA9C4A0D3C79882F6
Bad Web Bot
2026-07-23 00:41:10
(1 week ago)
Attack detected: 193.37.32.143 [2026-07-23]
Categories: 21
--- webshell/admin probe (7 hits) ---
193 ...
show more
Attack detected: 193.37.32.143 [2026-07-23]
Categories: 21
--- webshell/admin probe (7 hits) ---
193.37.32.143 - - [14/Jun/2026:08:10:42 +0000] "GET /cgi-bin/wp-conflg.php HTTP/1.1" 404 107651 "-" "Go-http-client/1.1"
193.37.32.143 - - [14/Jun/2026:08:10:46 +0000] "GET /wp-admin/wp-conflg.php HTTP/1.1" 404 107653 "-" "Go-http-client/1.1"
193.37.32.143 - - [14/Jun/2026:08:11:35 +0000] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 404 107659 "-" "Go-http-client/1.1"
193.37.32.143 - - [14/Jun/2026:08:12:02 +0000] "GET /wp-content/uploads/profile.php HTTP/1.1" 404 107670 "-" "Go-http-client/1.1"
193.37.32.143 - - [14/Jun/2026:08:12:44 +0000] "GET /wp-content/uploads/wp-config.php HTTP/1.1" 404 107674 "-" "Go-http-client/1.1"
show less
Web App Attack