🇩🇪
paissangroup
2026-09-11 08:07:22
(1 hour ago)
Multiple WAF Violations
Web App Attack
🇬🇧
consul.to
2026-09-11 06:53:40
(2 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇮🇹
CoreTech srl
2026-09-11 06:43:57
(2 hours ago)
cloudlinux2 fail2ban: 2026-09-11 08:39:02,198 fail2ban.filter [1606]: INFO [plesk-modsecu ...
show more
cloudlinux2 fail2ban: 2026-09-11 08:39:02,198 fail2ban.filter [1606]: INFO [plesk-modsecurity] Found 103.211.18.123 - 2026-09-11 08:39:02cloudlinux2 fail2ban: 2026-09-11 08:39:21,629 fail2ban.filter [1606]: INFO [plesk-modsecurity] Found 34.176.44.21 - 2026-09-11 08:39:21cloudlinux2 fail2ban: 2026-09-11 08:39:20,978 fail2ban.filter [1606]: INFO [plesk-modsecurity] Found 34.176.44.21 - 2026-09-11 08:39:20cloudlinux2 fail2ban: 2026-09-11 08:39:22,059 fail2ban.filter [1606]: INFO [plesk-modsecurity] Found 34.176.44.21 - 2026-09-11 08:39:22cloudlinux2 fail2ban: 2026-09-11 08:39:20,992 fail2ban.filter [1606]: INFO [plesk-wordpress] Found 173.239.218.133 - 2026-09-11 08:39:20cloudlinux2 fail2ban: 2026-09-11 08:39:21,414 fail2ban.filter [1606]: INFO [plesk-modsecurity] Found 34.176.44.21 - 2026-09-11 08:39:21cloudlinux2 fail2ban: 2026-09-11 08:39:21,845 fail2ban.filter [1606]: INFO [plesk-modsecurity] Found 34.176.44.21 - 2026-09-11 08:39:2
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-11 06:41:02
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.176.44.21 (21.44.176.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.176.44.21 (21.44.176.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 02:40:55.938988 2026] [security2:error] [pid 24787:tid 24787] [client 34.176.44.21:42324] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "firingsquadfilms.com"] [uri "/.git/config"] [unique_id "aqOid-cM9A1OLe-1oNrLBQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇭🇺
miszterx.hu
2026-09-11 06:30:11
(2 hours ago)
XORP (haproxy): 12x HTTP 404/403/500 or handshake failure in 24h. Automated report from log_check_ip ...
show more
XORP (haproxy): 12x HTTP 404/403/500 or handshake failure in 24h. Automated report from log_check_iptables_generator.sh (xorp.hu)
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-11 06:21:49
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.176.44.21 (21.44.176.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.176.44.21 (21.44.176.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 02:21:41.144291 2026] [security2:error] [pid 9500:tid 9500] [client 34.176.44.21:40430] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "firewoodstudio.com"] [uri "/.git/config"] [unique_id "aqOd9cdpTKkpQ3tBlfL-HwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
NihiliousMonk
2026-09-11 05:34:00
(3 hours ago)
Fail2Ban report from jail npm-scanners
Bad Web Bot
Web App Attack
🇲🇾
Rizzy
2026-09-11 04:38:03
(4 hours ago)
Multiple WAF Violations
Brute-Force
Web App Attack
Anonymous
2026-09-11 03:45:41
(5 hours ago)
[da.kdns.gr] httpd-config-scan: sites=www.firepits.gr; logs=/var/log/httpd/domains/firepits.gr.log; ...
show more
[da.kdns.gr] httpd-config-scan: sites=www.firepits.gr; logs=/var/log/httpd/domains/firepits.gr.log; samples=/.git/config | /.env | /.env.local
show less
Hacking
Web App Attack
🇩🇪
webanyone
2026-09-11 03:32:28
(5 hours ago)
WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail
Web App Attack
🇮🇹
Inartis
2026-09-11 03:31:04
(5 hours ago)
34.176.44.21 - - [11/Sep/2026:05:31:03 +0200] "GET /.git/config HTTP/1.1" 403 179 "-" "Mozilla/5.0 ( ...
show more
34.176.44.21 - - [11/Sep/2026:05:31:03 +0200] "GET /.git/config HTTP/1.1" 403 179 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-11 02:15:27
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.176.44.21 (21.44.176.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.176.44.21 (21.44.176.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 10 22:15:22.509402 2026] [security2:error] [pid 9710:tid 9710] [client 34.176.44.21:42728] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fireflypov.com"] [uri "/.git/config"] [unique_id "aqNkOvPY6C5rS7bmuSCibgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
scm
2026-09-10 20:31:52
(12 hours ago)
Web App Attack
🇵🇱
lns.bz
2026-09-10 14:39:12
(18 hours ago)
Web app attack [PL.Lu]
Exploited Host
Web App Attack
🇳🇱
Site.eu
2026-09-10 13:54:44
(19 hours ago)
Excessive multi-domain requests
Brute-Force