🇩🇪
big-cloud.nl
2026-09-01 12:17:05
(1 day ago)
Try to access /.git/config
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 11:05:52
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.163.80.148 (148.80.163.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.163.80.148 (148.80.163.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 07:05:47.747420 2026] [security2:error] [pid 20081:tid 20111] [client 34.163.80.148:51870] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "catapultpt.com"] [uri "/.git/config"] [unique_id "apaxi1TFwdOKcQJZPCRSqQAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-01 08:57:45
(1 day ago)
Web App Attack
Brute-Force
Exploited Host
Web App Attack
🇬🇧
consul.to
2026-09-01 07:15:36
(1 day ago)
Web attack/malicious scanning detected
Web App Attack
🇦🇺
screwlooseit.com.au
2026-09-01 07:02:30
(1 day ago)
Blocked by CSF 13 firewall - Rule: config-dotfile
US/United States/148.80.163.34.bc.googleuserconten ...
show more
Blocked by CSF 13 firewall - Rule: config-dotfile
US/United States/148.80.163.34.bc.googleusercontent.com
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 05:57:05
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.163.80.148 (148.80.163.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.163.80.148 (148.80.163.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 01:56:57.813931 2026] [security2:error] [pid 19724:tid 19724] [client 34.163.80.148:46526] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "catalog.apuntesdeinversion.com"] [uri "/.git/config"] [unique_id "apZpKR1WM6COtZM-YJSVEwAAAJI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
antlac1
2026-09-01 02:46:11
(1 day ago)
crowdsecurity/http-probing
Brute-Force
Web App Attack
🇩🇪
iNetWorker
2026-09-01 02:22:28
(1 day ago)
trolling for resource vulnerabilities
Web App Attack
🇳🇱
Site.eu
2026-09-01 02:02:34
(1 day ago)
Excessive multi-domain requests
Brute-Force
🇮🇹
CoreTech srl
2026-09-01 01:38:56
(1 day ago)
cloudlinux2 fail2ban: 2026-09-01 03:35:46,238 fail2ban.actions [1605]: NOTICE [plesk-modsecu ...
show more
cloudlinux2 fail2ban: 2026-09-01 03:35:46,238 fail2ban.actions [1605]: NOTICE [plesk-modsecurity] Unban 35.252.245.247cloudlinux2 fail2ban: 2026-09-01 03:36:20,298 fail2ban.actions [1605]: NOTICE [plesk-modsecurity] Ban 34.163.80.148cloudlinux2 fail2ban: 2026-09-01 03:36:19,924 fail2ban.filter [1605]: INFO [plesk-modsecurity] Found 34.163.80.148 - 2026-09-01 03:36:19cloudlinux2 fail2ban: 2026-09-01 03:36:19,633 fail2ban.filter [1605]: INFO [plesk-modsecurity] Found 34.163.80.148 - 2026-09-01 03:36:19cloudlinux2 fail2ban: 2026-09-01 03:36:19,785 fail2ban.filter [1605]: INFO [plesk-modsecurity] Found 34.163.80.148 - 2026-09-01 03:36:19cloudlinux2 fail2ban: 2026-09-01 03:36:19,106 fail2ban.filter [1605]: INFO [plesk-modsecurity] Found 34.163.80.148 - 2026-09-01 03:36:19cloudlinux2 fail2ban: 2026-09-01 03:36:20,307 fail2ban.filter [1605]: INFO [recidive] Found 34.163.80.148 - 2026-09-01 03:36:20cloudlinux2 fail2ban: 2026-09-01 03:36:19,507 fai
show less
Brute-Force
🇫🇮
paissangroup
2026-09-01 01:00:26
(1 day ago)
Multiple WAF Violations
Web App Attack
🇩🇪
LRob
2026-09-01 00:52:18
(1 day ago)
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: ...
show more
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: /.git/config (+1 more) | 2026-09-01 00:52 UTC
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 00:50:14
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.163.80.148 (148.80.163.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.163.80.148 (148.80.163.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 20:50:08.296640 2026] [security2:error] [pid 15879:tid 15879] [client 34.163.80.148:33888] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "castedguy.com"] [uri "/.git/config"] [unique_id "apYhQDOKVEc-eMS_zVSYXAAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-09-01 00:34:15
(1 day ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 00:31:15
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.163.80.148 (148.80.163.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.163.80.148 (148.80.163.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 20:31:08.665446 2026] [security2:error] [pid 15972:tid 15972] [client 34.163.80.148:49864] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "castagnino.com"] [uri "/.git/config"] [unique_id "apYczGwzBU3ies6a58RRGgAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack