Anonymous
2026-08-31 10:35:15
(3 hours ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
๐บ๐ธ
TPI-Abuse
2026-08-31 09:26:31
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.175.3.148 (148.3.175.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.175.3.148 (148.3.175.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 05:26:23.894360 2026] [security2:error] [pid 23126:tid 23126] [client 34.175.3.148:46570] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dukemason.com"] [uri "/.git/config"] [unique_id "apVIv_6fT5De_jMNPturlgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
FeG Deutschland
2026-08-31 09:04:57
(4 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247
Exploited Host
Web App Attack
Anonymous
2026-08-31 09:03:02
(4 hours ago)
Bot / scanning and/or hacking attempts: GET /site/.env HTTP/1.1, GET /.env.yml HTTP/1.1, GET /.env.y ...
show more
Bot / scanning and/or hacking attempts: GET /site/.env HTTP/1.1, GET /.env.yml HTTP/1.1, GET /.env.yaml HTTP/1.1, GET /apps/.env HTTP/1.1, GET /backend/.env HTTP/1.1, GET /.env.txt HTTP/1.1, GET /web/.env HTTP/1.1, GET /app/.env HTTP/1.1, GET /api/.env HTTP/1.1, GET /.env.json HTTP/1.1, GET /.env2 HTTP/1.1, GET /.env.ci HTTP/1.1, GET /admin/.env HTTP/1.1, GET /public/.env HTTP/1.1
show less
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-31 08:48:58
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.175.3.148 (148.3.175.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.175.3.148 (148.3.175.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 04:48:52.882859 2026] [security2:error] [pid 23810:tid 23810] [client 34.175.3.148:46548] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "duhcathlon.com"] [uri "/.git/config"] [unique_id "apU_9Nm0pM9CJSVUTDARFgAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-31 08:12:49
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.175.3.148 (148.3.175.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.175.3.148 (148.3.175.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 04:12:46.003989 2026] [security2:error] [pid 27015:tid 27015] [client 34.175.3.148:57430] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "duermaseaprisa.com"] [uri "/.git/config"] [unique_id "apU3fi_bgJRxoSKv3wuQRQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-31 07:40:17
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.175.3.148 (148.3.175.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.175.3.148 (148.3.175.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 03:40:09.839053 2026] [security2:error] [pid 25527:tid 25527] [client 34.175.3.148:47202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dudleyanddudley.com"] [uri "/.git/config"] [unique_id "apUv2XB-dVqxZ5r-vfWCIAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Site.eu
2026-08-31 07:08:20
(6 hours ago)
Excessive multi-domain requests
Brute-Force
Anonymous
2026-08-31 07:07:03
(6 hours ago)
Automated web scanner. Requested suspicious paths: /.git/config. UTC: 2026-08-31 06:45:38.
Web App Attack
๐ซ๐ท
Octopuce
2026-08-31 06:23:55
(7 hours ago)
Aggressive web search of vulnerable pages: /.env /.env.local /app/.env /apps/.env /api/.env ...
Web App Attack
๐ท๐บ
DZBOT
2026-08-31 06:14:15
(7 hours ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-31 05:45:47
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.175.3.148 (148.3.175.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.175.3.148 (148.3.175.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 01:45:40.304584 2026] [security2:error] [pid 3599661:tid 3599738] [client 34.175.3.148:57246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dubarch.com"] [uri "/.git/config"] [unique_id "apUVBHYI5P9GpAKmU_SNKwAAAZU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
consul.to
2026-08-31 05:34:53
(8 hours ago)
Web attack/malicious scanning detected
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-31 04:48:33
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.175.3.148 (148.3.175.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.175.3.148 (148.3.175.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 00:48:28.634102 2026] [security2:error] [pid 23726:tid 23726] [client 34.175.3.148:36234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dualspiralsystems.com"] [uri "/.git/config"] [unique_id "apUHnDOLe0pTe4Bl5jlKFAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
dynamix
2026-08-31 04:21:10
(9 hours ago)
Multiple WAF Violations
Web App Attack