๐ณ๐ฟ
Antinson
2026-05-20 21:59:52
(1 month ago)
High error rate and elevated request volume targeting cPanel servers
Bad Web Bot
๐ท๐บ
DZBOT
2026-05-20 21:35:53
(1 month ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
๐บ๐ธ
mnsf
2026-05-20 21:05:24
(1 month ago)
Too many Status 40X (12)
Brute-Force
Web App Attack
๐ซ๐ท
ELYAZ
2026-05-20 20:35:50
(1 month ago)
(y4) Failed scan -byebye- from 34.162.238.25 (US/United States/25.238.162.34.bc.googleusercontent.co ...
show more
(y4) Failed scan -byebye- from 34.162.238.25 (US/United States/25.238.162.34.bc.googleusercontent.com): (CF_ENABLE)
show less
Hacking
๐ฉ๐ช
FeG Deutschland
2026-05-20 20:01:12
(1 month ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247
Exploited Host
Web App Attack
๐จ๐ฆ
polycoda
2026-05-20 19:30:34
(1 month ago)
AutoBlock: ๐ฏ Vulnerability Scanner (Non Decay-Based) - โช๏ธ Excessive 30X Errors (Decay-Based)
Hacking
Bad Web Bot
Web App Attack
๐ณ๐ฑ
homeshowdomain.nl
2026-05-04 22:02:39
(1 month ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-05-03.
show less
Web App Attack
SSH
Hacking
๐ณ๐ฑ
homeshowdomain.nl
2026-05-03 22:01:42
(1 month ago)
Auto-ban: >3000 req/min op 2026-05-03
Web App Attack
SSH
Hacking
๐ง๐ช
cmbplf
2026-05-03 19:37:39
(1 month ago)
2.280 requests with url.path *.git/*
426 requests with url.path */.git/config
Brute-Force
Bad Web Bot
๐ซ๐ท
dynamix
2026-05-03 19:04:18
(1 month ago)
Multiple WAF Violations
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-05-03 18:56:26
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.162.238.25 (25.238.162.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.162.238.25 (25.238.162.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 03 14:56:21.528080 2026] [security2:error] [pid 3943:tid 3967] [client 34.162.238.25:42202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.pecanvalleyestates.net"] [uri "/.git/config"] [unique_id "afeaVXk_DghlLjkOBueZPgAAAFI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ญ
4server
2026-05-03 17:03:00
(1 month ago)
[SunMay0319:02:55.1957492026][security2:error][pid1387691:tid1388050][client34.162.238.25:0]ModSecur ...
show more
[SunMay0319:02:55.1957492026][security2:error][pid1387691:tid1388050][client34.162.238.25:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"364\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"efg-investment.ch.81-17-25-250.cpanel.site\"][uri\"/.git/config\"][unique_id\"afd_v3jaWTmKfWNjVmBGEQAAAMM\"]
show less
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-05-03 16:53:43
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.162.238.25 (25.238.162.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.162.238.25 (25.238.162.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 03 12:53:39.609405 2026] [security2:error] [pid 17893:tid 17893] [client 34.162.238.25:48800] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "overlandpublishing.com"] [uri "/.git/config"] [unique_id "afd9k-dXwo5OM3GvgPP81gAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-05-03 16:34:41
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.162.238.25 (25.238.162.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.162.238.25 (25.238.162.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 03 12:34:34.683892 2026] [security2:error] [pid 4416:tid 4416] [client 34.162.238.25:43226] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kingdomvalleyfarm.com"] [uri "/.git/config"] [unique_id "afd5Gu2vlHgFSx1Fcg1YHwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-05-03 16:12:28
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.162.238.25 (25.238.162.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.162.238.25 (25.238.162.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 03 12:12:25.230422 2026] [security2:error] [pid 19654:tid 19654] [client 34.162.238.25:51508] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "professionalpianomoversinc.com"] [uri "/.git/config"] [unique_id "afdz6VHehAkt2BriXgh_rAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack