🇺🇸
TPI-Abuse
2026-09-06 04:52:07
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 34.187.41.183 (183.41.187.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.187.41.183 (183.41.187.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 06 00:52:01.907781 2026] [security2:error] [pid 8156:tid 8156] [client 34.187.41.183:47304] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||cartilla.aguasolar.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "cartilla.aguasolar.com"] [uri "/backup.sql"] [unique_id "apzxcUTzuxW6CafGT3ap5QAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
SSH-Admin
2026-09-06 04:00:05
(1 day ago)
Probing for Exploits on ns200
Exploited Host
Web App Attack
🇫🇷
Octopuce
2026-09-06 02:51:40
(1 day ago)
Aggressive web search of vulnerable pages: /database.sql /backup.tar /dump.tar.gz /dump.sql /web.zip ...
show more
Aggressive web search of vulnerable pages: /database.sql /backup.tar /dump.tar.gz /dump.sql /web.zip ...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-06 01:57:40
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.187.41.183 (183.41.187.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.187.41.183 (183.41.187.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 21:57:33.595997 2026] [security2:error] [pid 3505775:tid 3505871] [client 34.187.41.183:60194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.oplconnect.com"] [uri "/app/.git/config"] [unique_id "apzIjb8ERl7gWgWoAPLx2AAAAY0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-05 23:32:33
(1 day ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-09-05 23:06:27
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.187.41.183 (183.41.187.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.187.41.183 (183.41.187.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 19:06:22.780479 2026] [security2:error] [pid 14650:tid 14650] [client 34.187.41.183:37854] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.sandpointidaho.com"] [uri "/app/.git/config"] [unique_id "apygbglMs5XjIfWt07Vv1wAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
SSH-Admin
2026-09-05 22:58:03
(1 day ago)
Probing for Exploits on ns45
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-09-05 21:25:40
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.187.41.183 (183.41.187.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.187.41.183 (183.41.187.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 17:25:35.854622 2026] [security2:error] [pid 29201:tid 29201] [client 34.187.41.183:40326] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "crm.vientodelevante.es"] [uri "/public/.git/config"] [unique_id "apyIz0ehAOe4FFPRopvSXwAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-05 21:00:48
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.187.41.183 (183.41.187.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.187.41.183 (183.41.187.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 17:00:41.783127 2026] [security2:error] [pid 8280:tid 8280] [client 34.187.41.183:58756] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emeraldisland.iainrealtor.com"] [uri "/.git/config"] [unique_id "apyC-fnyoSUNuneD021WfQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-09-05 14:26:10
(1 day ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇫🇷
dynamix
2026-09-05 00:46:51
(2 days ago)
Multiple WAF Violations
Web App Attack