๐ณ๐ฑ
Site.eu
2026-09-29 05:01:16
(2 weeks ago)
Excessive multi-domain requests
Brute-Force
๐ฉ๐ช
ghostwarriors
2026-09-28 20:20:13
(2 weeks ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-28 14:03:17
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.141.46.72 (72.46.141.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.141.46.72 (72.46.141.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 10:03:12.922644 2026] [security2:error] [pid 25584:tid 25584] [client 34.141.46.72:60286] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "etoyfun.com"] [uri "/.git/config"] [unique_id "arpzoJ1uUepN2xi0Uvx5LwAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-26 19:50:28
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.141.46.72 (72.46.141.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.141.46.72 (72.46.141.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 15:50:22.164873 2026] [security2:error] [pid 8210:tid 8210] [client 34.141.46.72:50122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "chicagogreetingcards.com"] [uri "/.git/config"] [unique_id "argh_jBXjAHkw_zkbqS_3wAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
homeshowdomain.nl
2026-09-25 22:00:56
(2 weeks ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-24.
show less
Web App Attack
SSH
Hacking
๐ฌ๐ง
Aetherweb Ark
2026-09-25 17:08:30
(2 weeks ago)
(mod_security) mod_security (id:949110) triggered by 34.141.46.72 (DE/Germany/72.46.141.34.bc.google ...
show more
(mod_security) mod_security (id:949110) triggered by 34.141.46.72 (DE/Germany/72.46.141.34.bc.googleusercontent.com): N in the last X secs
show less
Web App Attack
๐ฌ๐ง
gws-hostmaster
2026-09-25 02:40:29
(2 weeks ago)
ModSecurity OWASP CRS (Anomaly Score: 50): JavaScript Prototype Pollution;JSON-Based SQL Injection;N ...
show more
ModSecurity OWASP CRS (Anomaly Score: 50): JavaScript Prototype Pollution;JSON-Based SQL Injection;Node.js Injection Attack 1/2;PHP Injection Attack: Variable Access Found;Remote Command Execution: Direct Unix Command Execution;Remote Command Execution: Unix Shell Expression Found;Restricted File Access Attempt;SQL Injection Attack: SQL function name detected;URL file extension is restricted by policy;
show less
Web App Attack
Anonymous
2026-09-24 23:59:22
(2 weeks ago)
Aggressive web scan
Web App Attack
๐ฉ๐ช
webanyone
2026-09-24 03:32:11
(2 weeks ago)
WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail
Web App Attack
Anonymous
2026-09-24 02:07:00
(2 weeks ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
๐บ๐ธ
TPI-Abuse
2026-09-22 10:45:21
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.141.46.72 (72.46.141.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.141.46.72 (72.46.141.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 06:45:16.339095 2026] [security2:error] [pid 21553:tid 21553] [client 34.141.46.72:49204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "haddadpharmacy.com"] [uri "/.git/config"] [unique_id "arJcPErogV079fahS2MhXQAAAC4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-22 09:09:48
(3 weeks ago)
[server.tmg.gr] httpd-config-scan: sites=www.hacm.gr; logs=/var/log/httpd/domains/hacm.gr.log; sampl ...
show more
[server.tmg.gr] httpd-config-scan: sites=www.hacm.gr; logs=/var/log/httpd/domains/hacm.gr.log; samples=/.git/config | /.env | /.env.local
show less
Hacking
Web App Attack
Anonymous
2026-09-21 21:56:16
(3 weeks ago)
(config_exploit_scan) Configuratie Scanner / Nep GPTBot 34.141.46.72 (DE/Germany/72.46.141.34.bc.goo ...
show more
(config_exploit_scan) Configuratie Scanner / Nep GPTBot 34.141.46.72 (DE/Germany/72.46.141.34.bc.googleusercontent.com): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.141.46.72 - - [21/Sep/2026:23:56:10 +0200] "GET /.env HTTP/1.1" 406 518
34.141.46.72 - - [21/Sep/2026:23:56:10 +0200] "GET /.env.local HTTP/1.1" 406 6714
34.141.46.72 - - [21/Sep/2026:23:56:10 +0200] "GET /.env.production HTTP/1.1" 406 6714
show less
Port Scan
๐บ๐ธ
TPI-Abuse
2026-09-21 07:43:52
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.141.46.72 (72.46.141.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.141.46.72 (72.46.141.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 03:43:44.744696 2026] [security2:error] [pid 29202:tid 29202] [client 34.141.46.72:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "luisguacache.com"] [uri "/.git/config"] [unique_id "arDgMPrf9_SmXEs_-jfOngAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
masterguru
2026-09-21 06:55:47
(3 weeks ago)
Remote Command Execution: Unix Command Injection (command without evasion). Pattern match "(?i)(?:b ...
show more
Remote Command Execution: Unix Command Injection (command without evasion). Pattern match "(?i)(?:b (932235-195)
show less
Hacking