๐บ๐ธ
TPI-Abuse
2026-09-17 06:28:53
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:12:b78e::1 (srv941197.hstgr.cloud): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:12:b78e::1 (srv941197.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 02:28:47.235607 2026] [security2:error] [pid 21310:tid 21310] [client 2a02:4780:12:b78e::1:50796] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.automatebi.whitmarshinc.com"] [uri "/wp-config.php.orig"] [unique_id "aquIn1VES3nIuQslXgGv9wAAACE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-17 04:21:13
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:12:b78e::1 (srv941197.hstgr.cloud): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:12:b78e::1 (srv941197.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 00:21:10.066075 2026] [security2:error] [pid 5037:tid 5037] [client 2a02:4780:12:b78e::1:52486] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kbalan.com"] [uri "/wp-config.php.bak"] [unique_id "aqtqtp2LtKx10iJpL-UKkQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-17 03:57:18
(1 day ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
๐ณ๐ฑ
homeshowdomain.nl
2026-09-16 21:59:05
(1 day ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-15.
show less
Web App Attack
SSH
Hacking
Anonymous
2026-09-16 14:53:21
(1 day ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
๐บ๐ธ
TPI-Abuse
2026-09-16 07:18:44
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:12:b78e::1 (srv941197.hstgr.cloud): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:12:b78e::1 (srv941197.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 03:18:38.451801 2026] [security2:error] [pid 5241:tid 5241] [client 2a02:4780:12:b78e::1:49474] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.antiradares.net"] [uri "/.git/config"] [unique_id "aqpCzuMSS2C8KkE5aVk-hAAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-16 03:26:12
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:12:b78e::1 (srv941197.hstgr.cloud): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:12:b78e::1 (srv941197.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 23:26:05.611586 2026] [security2:error] [pid 11636:tid 11636] [client 2a02:4780:12:b78e::1:51674] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.covid19.mavikalem.org"] [uri "/wp-config.php~"] [unique_id "aqoMTRloL3mZPocx4PtiIwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
Blexyel
2026-09-15 22:17:01
(2 days ago)
2a02:4780:12:b78e::1 - - [16/Sep/2026:00:17:01 +0200] "GET /.git/config HTTP/1.1" 301 169 "-" "Mozil ...
show more
2a02:4780:12:b78e::1 - - [16/Sep/2026:00:17:01 +0200] "GET /.git/config HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" "pingusmc.org"
...
show less
Brute-Force
Web App Attack
๐ณ๐ฑ
Alt255
2026-09-15 20:42:25
(2 days ago)
[ti-24al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-24al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 2a02:4780:12:b78e::1 - - [15/Sep/2026:22:42:25 +0200] "GET /.git/config HTTP/1.1" 301 540 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-15 16:43:29
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:12:b78e::1 (srv941197.hstgr.cloud): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:12:b78e::1 (srv941197.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 12:43:20.477054 2026] [security2:error] [pid 19492:tid 19492] [client 2a02:4780:12:b78e::1:60016] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.anthonyanimalclinic.net"] [uri "/.git/config"] [unique_id "aql1qEAfC17hwh9eGTJ95wAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-15 09:39:05
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:12:b78e::1 (srv941197.hstgr.cloud): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:12:b78e::1 (srv941197.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 05:39:02.008727 2026] [security2:error] [pid 19284:tid 19284] [client 2a02:4780:12:b78e::1:38710] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pcga.golf"] [uri "/wp-config.php.save"] [unique_id "aqkSNpGbh4WR8xpo4z8jYgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
4server
2026-09-15 06:22:35
(3 days ago)
[TueSep1508:22:33.5591702026][security2:error][pid2861733:tid2861851][client2a02:4780:12:b78e::1:0]M ...
show more
[TueSep1508:22:33.5591702026][security2:error][pid2861733:tid2861851][client2a02:4780:12:b78e::1:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"assistenza-pc-mac-ticino.ch\"][uri\"/.git/config\"][unique_id\"aqjkKcO-QpsN4qMKej-nhgAAANU\"]
show less
Port Scan
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-15 05:07:13
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:12:b78e::1 (srv941197.hstgr.cloud): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:12:b78e::1 (srv941197.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 01:07:07.874171 2026] [security2:error] [pid 5848:tid 5852] [client 2a02:4780:12:b78e::1:45030] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arthansl.com"] [uri "/.git/config"] [unique_id "aqjSe3-pm3-B9_HgkYX4EQAAAME"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-15 04:39:08
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:12:b78e::1 (srv941197.hstgr.cloud): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:12:b78e::1 (srv941197.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 00:39:04.431993 2026] [security2:error] [pid 379:tid 379] [client 2a02:4780:12:b78e::1:53252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "armandselmwoodpark.com"] [uri "/.git/config"] [unique_id "aqjL6MZC471Qdw26MQxwmAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-15 03:38:08
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:12:b78e::1 (srv941197.hstgr.cloud): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:12:b78e::1 (srv941197.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 14 23:38:04.390174 2026] [security2:error] [pid 12835:tid 12835] [client 2a02:4780:12:b78e::1:48476] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "apuntesdeinversion.com.visionremota.info"] [uri "/.git/config"] [unique_id "aqi9nEeYBGM15d3kVW7kbQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack