🇮🇹
CoreTech srl
2026-07-28 01:43:56
(13 hours ago)
cloudlinux2 fail2ban: 2026-07-28 03:39:34,059 fail2ban.filter [1917]: INFO [plesk-wordpre ...
show more
cloudlinux2 fail2ban: 2026-07-28 03:39:34,059 fail2ban.filter [1917]: INFO [plesk-wordpress] Found 37.140.223.69 - 2026-07-28 03:39:33cloudlinux2 fail2ban: 2026-07-28 03:41:56,750 fail2ban.filter [1917]: INFO [plesk-wordpress] Found 173.239.214.84 - 2026-07-28 03:41:56cloudlinux2 fail2ban: 2026-07-28 03:41:57,950 fail2ban.filter [1917]: INFO [plesk-modsecurity] Found 178.20.30.241 - 2026-07-28 03:41:57cloudlinux2 fail2ban: 2026-07-28 03:42:09,721 fail2ban.filter [1917]: INFO [plesk-wordpress] Found 188.213.202.9 - 2026-07-28 03:42:09cloudlinux2 fail2ban: 2026-07-28 03:42:13,733 fail2ban.filter [1917]: INFO [plesk-wordpress] Found 188.213.202.9 - 2026-07-28 03:42:13cloudlinux2 fail2ban: 2026-07-28 03:43:33,784 fail2ban.filter [1917]: INFO [plesk-modsecurity] Found 108.130.197.80 - 2026-07-28 03:43:33cloudlinux2 fail2ban: 2026-07-28 03:43:32,782 fail2ban.filter [1917]: INFO [plesk-modsecurity] Found 108.130.197.80 - 2026-07-28 03:43:32
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-07-27 16:10:23
(22 hours ago)
(mod_security) mod_security (id:210492) triggered by 108.130.197.80 (ec2-108-130-197-80.eu-west-1.co ...
show more
(mod_security) mod_security (id:210492) triggered by 108.130.197.80 (ec2-108-130-197-80.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 12:10:17.772803 2026] [security2:error] [pid 3944581:tid 3944581] [client 108.130.197.80:51258] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mphq.net"] [uri "/.git/config"] [unique_id "ameC6c1Y2ulI5EoUpWVULwAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-27 01:12:07
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 108.130.197.80 (ec2-108-130-197-80.eu-west-1.co ...
show more
(mod_security) mod_security (id:210492) triggered by 108.130.197.80 (ec2-108-130-197-80.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 21:12:00.377328 2026] [security2:error] [pid 339347:tid 339347] [client 108.130.197.80:35378] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "intrinsicreef.com"] [uri "/.git/config"] [unique_id "amawYOrpqCktZswxm1Bf1AAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-07-27 00:05:07
(1 day ago)
Blocked: Reason='Vulnerability probing — PHP scan detected (41/60 min)'; Requests=41
Port Scan
🇳🇱
homeshowdomain.nl
2026-07-25 22:07:57
(2 days ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-24.
show less
Web App Attack
SSH
Hacking
2026-07-25 16:32:15
(2 days ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
🇳🇱
Site.eu
2026-07-25 14:26:07
(3 days ago)
Excessive 404/403 errors
Brute-Force
🇺🇸
TPI-Abuse
2026-07-25 01:41:34
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 108.130.197.80 (ec2-108-130-197-80.eu-west-1.co ...
show more
(mod_security) mod_security (id:210492) triggered by 108.130.197.80 (ec2-108-130-197-80.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 21:41:31.112523 2026] [security2:error] [pid 3663967:tid 3663967] [client 108.130.197.80:41720] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bccnews.starrmail.net"] [uri "/.git/config"] [unique_id "amQUS7Gn59CKIYnGXCFqGQAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-07-24 23:50:05
(3 days ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇩🇪
grassau.com
2026-07-24 16:23:49
(3 days ago)
(mod_security) mod_security triggered on hostname [redacted] 108.130.197.80 (IE/Ireland/Leinster/Dub ...
show more
(mod_security) mod_security triggered on hostname [redacted] 108.130.197.80 (IE/Ireland/Leinster/Dublin/ec2-108-130-197-80.eu-west-1.compute.amazonaws.com)
show less
SQL Injection
🇺🇸
TPI-Abuse
2026-07-24 07:51:54
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 108.130.197.80 (ec2-108-130-197-80.eu-west-1.co ...
show more
(mod_security) mod_security (id:210492) triggered by 108.130.197.80 (ec2-108-130-197-80.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 03:51:48.608163 2026] [security2:error] [pid 3589127:tid 3589127] [client 108.130.197.80:58502] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bvi-boat-registration.com.boatregistrationdelaware.com"] [uri "/.git/config"] [unique_id "amMZlGaRIhJ9mNC7o5Z0RQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack