🇩🇪
FD-IX
2026-10-19 07:54:20
(46 minutes ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-10-19 07:45:09
(55 minutes ago)
20 attempts against mh-misbehave-ban on pyrus
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-19 06:59:16
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 34.154.54.85 (85.54.154.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.154.54.85 (85.54.154.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 02:59:11.122839 2026] [security2:error] [pid 23677:tid 23677] [client 34.154.54.85:41066] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "argcreativegroup.com"] [uri "/.git/config"] [unique_id "atW_v2Y4uOZ3f77U3YII1gAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-10-19 05:51:27
(2 hours ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-197)
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-10-19 00:02:11
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.154.54.85 (85.54.154.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.154.54.85 (85.54.154.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 20:02:06.691848 2026] [security2:error] [pid 28623:tid 28623] [client 34.154.54.85:36830] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "areaware-archive.com"] [uri "/.git/config"] [unique_id "atVd_pj20gx0myTg91WWhAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-10-18 23:59:15
(8 hours ago)
[MonOct1901:59:10.7060552026][security2:error][pid354167:tid354199][client34.154.54.85:0]ModSecurity ...
show more
[MonOct1901:59:10.7060552026][security2:error][pid354167:tid354199][client34.154.54.85:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"areatbroker.ch.136-243-54-122.cpanel.site\"][uri\"/phpinfo.php.bak\"][unique_id\"atVdTlA2ymUWsTZjy3t20QAAAAM\"]
show less
Port Scan
Brute-Force
Web App Attack
2026-10-18 23:15:43
(9 hours ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇬🇧
consul.to
2026-10-18 22:31:55
(10 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇳🇱
e.fierstra
2026-10-18 21:45:18
(10 hours ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 20:52:35
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.154.54.85 (85.54.154.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.154.54.85 (85.54.154.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 16:52:29.799300 2026] [security2:error] [pid 32066:tid 32066] [client 34.154.54.85:38852] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ardeeapps.com"] [uri "/.git/config"] [unique_id "atUxjfteGz7OBeK4uqRjWQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-10-18 20:38:17
(12 hours ago)
Excessive 404/403 errors
Brute-Force
🇺🇸
TPI-Abuse
2026-10-18 20:32:16
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.154.54.85 (85.54.154.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.154.54.85 (85.54.154.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 16:32:11.027227 2026] [security2:error] [pid 8998:tid 8998] [client 34.154.54.85:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ard.global"] [uri "/.git/config"] [unique_id "atUsy211uFItIu1KEmP1qQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
vaia.cloud
2026-10-18 19:40:02
(13 hours ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
🇮🇹
VHosting
2026-10-18 19:00:05
(13 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
2026-10-18 18:47:56
(13 hours ago)
Banned by Fail2Ban on server
Web App Attack
