๐ฆ๐บ
rubixstudios
2026-09-22 18:42:02
(3 weeks ago)
Excessive HTTP requests consistent with automated attack behaviour detected by Imunify360
DDoS Attack
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-22 16:51:44
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.162.17.238 (238.17.162.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.162.17.238 (238.17.162.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 12:51:38.820299 2026] [security2:error] [pid 20440:tid 20440] [client 34.162.17.238:59418] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.itimetable21.com"] [uri "/.git/config"] [unique_id "arKyGp6FE3eMYIDqK0DGdAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-22 16:29:19
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.162.17.238 (238.17.162.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.162.17.238 (238.17.162.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 12:29:11.643465 2026] [security2:error] [pid 22587:tid 22587] [client 34.162.17.238:56478] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.isyourcompanysafe.com"] [uri "/.git/config"] [unique_id "arKs1zkHO2VdpKtLaTfjVwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ฆ
polycoda
2026-09-22 12:22:11
(3 weeks ago)
๐ฅ VERY AGGRESSIVE SCANNER probed over 500 inexistent files and PHP scripts in less than an hour.
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-22 10:43:38
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.162.17.238 (238.17.162.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.162.17.238 (238.17.162.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 06:43:36.101059 2026] [security2:error] [pid 30515:tid 30515] [client 34.162.17.238:49914] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.indie100.com"] [uri "/.git/config"] [unique_id "arJb2DAjFwuDrenACARO0gAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ฆ
polycoda
2026-09-22 09:21:23
(3 weeks ago)
AutoBlock: ๐ฏ Vulnerability Scanner (Non Decay-Based) - โ๏ธ Configuration File Access (Non Decay-Based ...
show more
AutoBlock: ๐ฏ Vulnerability Scanner (Non Decay-Based) - โ๏ธ Configuration File Access (Non Decay-Based)
show less
Hacking
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-22 06:21:47
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.162.17.238 (238.17.162.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.162.17.238 (238.17.162.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 02:21:42.518627 2026] [security2:error] [pid 21859:tid 21859] [client 34.162.17.238:35864] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.iconbizpromo.com"] [uri "/.git/config"] [unique_id "arIedkRCVF-PEv6CsvDGQwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-22 04:02:37
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.162.17.238 (238.17.162.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.162.17.238 (238.17.162.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 00:02:33.444071 2026] [security2:error] [pid 32226:tid 32226] [client 34.162.17.238:32848] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.hvacs-aircon.com"] [uri "/.git/config"] [unique_id "arH92VfjmLOgp6zH8MbQvQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-22 03:32:15
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.162.17.238 (238.17.162.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.162.17.238 (238.17.162.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 23:32:10.753578 2026] [security2:error] [pid 30632:tid 30748] [client 34.162.17.238:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.humanet.io"] [uri "/.git/config"] [unique_id "arH2ujW9OP9Db4Q3BTbdiQAAAFM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-22 03:00:00
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.162.17.238 (238.17.162.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.162.17.238 (238.17.162.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 22:59:52.188680 2026] [security2:error] [pid 20588:tid 20588] [client 34.162.17.238:46886] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.hteca.com"] [uri "/.git/config"] [unique_id "arHvKL0locmSqTSZWKR45gAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-21 22:00:49
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.162.17.238 (238.17.162.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.162.17.238 (238.17.162.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 18:00:44.907379 2026] [security2:error] [pid 5841:tid 5841] [client 34.162.17.238:55222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.hiscreativedesign.com"] [uri "/.git/config"] [unique_id "arGpDLIG_O-PM-3muIeopAAAACU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฎ๐น
VHosting
2026-09-21 18:10:04
(4 weeks ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
๐ฉ๐ช
4server
2026-09-21 18:02:40
(4 weeks ago)
[MonSep2120:02:34.7582402026][security2:error][pid3823805:tid3823910][client34.162.17.238:0]ModSecur ...
show more
[MonSep2120:02:34.7582402026][security2:error][pid3823805:tid3823910][client34.162.17.238:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"cpanel.hdcadvisory.ch\"][uri\"/.env.bak\"][unique_id\"arFxOvcS1RhSn0X9cu9VAgAAAM8\"]
show less
Port Scan
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-21 17:29:24
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.162.17.238 (238.17.162.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.162.17.238 (238.17.162.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 13:29:20.703213 2026] [security2:error] [pid 17581:tid 17581] [client 34.162.17.238:60382] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.haywardcarpentry.com"] [uri "/.git/config"] [unique_id "arFpcOIZxnPyhgPZgmZyHgAAACk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
Hazzard
2026-09-20 08:01:08
(4 weeks ago)
(mod_security) mod_security triggered on hostname [redacted]): (CF_ENABLE)
SQL Injection