Anonymous
2026-08-09 04:33:13
(1 month ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
๐บ๐ธ
TPI-Abuse
2026-08-06 16:04:17
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:12:917f::1 (srv1672831.hstgr.cloud): ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:12:917f::1 (srv1672831.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 06 12:04:09.877591 2026] [security2:error] [pid 2969660:tid 2969660] [client 2a02:4780:12:917f::1:45440] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dianadelapava.com"] [uri "/.git/config"] [unique_id "anSwecYsJFCqyqUbDyFbZgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ง๐ช
cmbplf
2026-08-06 14:31:22
(1 month ago)
289 requests with url.path */.git/config
286 requests with url.path *.git/*
Brute-Force
Bad Web Bot
๐ฉ๐ช
4server
2026-08-06 14:04:33
(1 month ago)
[ThuAug0616:04:29.7325792026][security2:error][pid4088712:tid4088732][client2a02:4780:12:917f::1:0]M ...
show more
[ThuAug0616:04:29.7325792026][security2:error][pid4088712:tid4088732][client2a02:4780:12:917f::1:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\|wget\|python\|nikto\|sqlmap\|acunetix\|fimap\|dirbuster\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"dgtime.ch\"][uri\"/.git/config\"][unique_id\"anSUba1ZXGv3cEMpEkRUZQAAAAg\"]
show less
Port Scan
Brute-Force
Web App Attack
๐ฉ๐ช
Blexyel
2026-08-06 06:22:31
(1 month ago)
2a02:4780:12:917f::1 - - [06/Aug/2026:08:22:31 +0200] "GET /.git/config HTTP/1.1" 404 435 "-" "pytho ...
show more
2a02:4780:12:917f::1 - - [06/Aug/2026:08:22:31 +0200] "GET /.git/config HTTP/1.1" 404 435 "-" "python-requests/2.31.0" "deranged.blog"
...
show less
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-06 05:39:41
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:12:917f::1 (srv1672831.hstgr.cloud): ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:12:917f::1 (srv1672831.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 06 01:39:35.550638 2026] [security2:error] [pid 144217:tid 144217] [client 2a02:4780:12:917f::1:40032] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "deolu.org"] [uri "/.git/config"] [unique_id "anQeF7TjA_TN1D8kFWJ2HgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-06 05:24:16
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:12:917f::1 (srv1672831.hstgr.cloud): ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:12:917f::1 (srv1672831.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 06 01:24:07.611425 2026] [security2:error] [pid 1313886:tid 1313886] [client 2a02:4780:12:917f::1:53468] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dentsville398.org"] [uri "/.git/config"] [unique_id "anQad8sP5b3mXdA2480vmgAAAEc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
BlueWire Hosting
2026-07-27 23:33:20
(1 month ago)
Bad bot ignoring robot.txt
Bad Web Bot
๐ฉ๐ช
4server
2026-07-27 19:05:16
(1 month ago)
[MonJul2721:05:12.3679782026][security2:error][pid3355010:tid3355057][client2a02:4780:12:917f::1:0]M ...
show more
[MonJul2721:05:12.3679782026][security2:error][pid3355010:tid3355057][client2a02:4780:12:917f::1:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\|wget\|python\|nikto\|sqlmap\|acunetix\|fimap\|dirbuster\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"dellafoglia.ch\"][uri\"/.git/config\"][unique_id\"amer6B94SRbd7jYndCHVVAAAAEk\"]
show less
Port Scan
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-25 06:39:23
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:12:917f::1 (srv1672831.hstgr.cloud): ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:12:917f::1 (srv1672831.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 02:39:17.256359 2026] [security2:error] [pid 952721:tid 952721] [client 2a02:4780:12:917f::1:33120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "davidquiroa.com"] [uri "/.git/config"] [unique_id "amRaFXWLUODxs4HnK1g-GQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-25 06:22:12
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:12:917f::1 (srv1672831.hstgr.cloud): ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:12:917f::1 (srv1672831.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 02:22:04.988916 2026] [security2:error] [pid 3458509:tid 3458509] [client 2a02:4780:12:917f::1:59588] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "davidocchino.com"] [uri "/.git/config"] [unique_id "amRWDGBPbFGa_nXB8Ue-FQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-25 03:02:51
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:12:917f::1 (srv1672831.hstgr.cloud): ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:12:917f::1 (srv1672831.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 23:02:44.403560 2026] [security2:error] [pid 2171387:tid 2171387] [client 2a02:4780:12:917f::1:54346] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "daveskountrykatering.com"] [uri "/.git/config"] [unique_id "amQnVNbQQ03zH1UrE9o42QAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-23 19:27:12
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:12:917f::1 (srv1672831.hstgr.cloud): ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:12:917f::1 (srv1672831.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 15:27:05.950795 2026] [security2:error] [pid 3339308:tid 3339308] [client 2a02:4780:12:917f::1:47510] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "damova.net"] [uri "/.git/config"] [unique_id "amJrCaGWqKG9-MFE7CvcRAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
mashamal
2026-07-23 08:45:37
(1 month ago)
Vulnerability Probe
...
Web App Attack
๐ฉ๐ช
filstal.org
2026-07-23 07:39:06
(1 month ago)
Persistent bad bot: repeated automated abuse detected
Bad Web Bot
Web App Attack