🇩🇪
4server
2026-08-20 13:08:13
UTC ·
(2 months ago)
[ThuAug2015:08:10.3805562026][security2:error][pid3898486:tid3898607][client34.182.158.83:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\" ...
show more
[ThuAug2015:08:10.3805562026][security2:error][pid3898486:tid3898607][client34.182.158.83:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"safeoncloud.ch\"][uri\"/xmlrpc.php\"][unique_id\"aob8Ou1IiksZClUKbiu1SgAAAko\"]
show less
Port Scan
Brute-Force
Web App Attack
🇩🇪
ger-stg-sifi1
2026-08-20 13:05:06
UTC ·
(2 months ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
🇳🇱
homeshowdomain.nl
2026-07-18 22:05:44
UTC ·
(3 months ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-17.
Web App Attack
SSH
Hacking
🇿🇦
conure.sh
2026-07-18 12:03:14
UTC ·
(3 months ago)
csagent: score 19.9: secrets grab x2; 2 domain(s) in 2s
Web App Attack
🇮🇳
evicky2002
2026-07-18 06:00:00
UTC ·
(3 months ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
🇬🇧
openstrike.co.uk
2026-07-18 05:14:56
UTC ·
(3 months ago)
5 attacks on VC URLs:
GET /.git/config HTTP/1.1
Hacking
🇺🇸
mnsf
2026-07-18 04:06:53
UTC ·
(3 months ago)
Abuse Detected (63)
Brute-Force
Web App Attack
🇬🇧
AvonleaConsulting
2026-07-17 22:59:15
UTC ·
(3 months ago)
Attempts to probe web pages for vulnerable PHP or other applications
Web App Attack
🇺🇸
TPI-Abuse
2026-07-17 20:15:25
UTC ·
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 34.182.158.83 (83.158.182.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 16:15:21.148096 2026] [security2:error] [pid 1011:tid 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.182.158.83 (83.158.182.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 16:15:21.148096 2026] [security2:error] [pid 1011:tid 1011] [client 34.182.158.83:42170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.reyesleyva.gabosoftware.com"] [uri "/.git/config"] [unique_id "alqNWa1ZJCT-MLqIRZ4l9wAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-17 19:45:09
UTC ·
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 34.182.158.83 (83.158.182.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 15:45:04.434502 2026] [security2:error] [pid 3054:tid 3 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.182.158.83 (83.158.182.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 15:45:04.434502 2026] [security2:error] [pid 3054:tid 3054] [client 34.182.158.83:58418] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.resume.alexsource.com"] [uri "/.git/config"] [unique_id "alqGQFSrReuM4Yz82d7VkgAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-07-17 19:39:04
UTC ·
(3 months ago)
Bot / scanning and/or hacking attempts: GET /.git/config HTTP/1.1
Hacking
Web App Attack
🇫🇷
masterguru
2026-07-17 19:36:40
UTC ·
(3 months ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)
Hacking
Web App Attack
🇧🇬
Stoyko Stoykov
2026-07-17 19:28:58
UTC ·
(3 months ago)
34.182.158.83 - - [17/Jul/2026:22:28:58 +0300] "GET /.git/config HTTP/1.1" 404 0 "-" "-"
...
Hacking
Web App Attack
🇮🇹
CoreTech srl
2026-07-17 19:23:56
UTC ·
(3 months ago)
cloudlinux2 fail2ban: 2026-07-17 21:20:03,816 fail2ban.filter [1598]: INFO [plesk-modsecurity] Found 209.242.218.1 - 2026-07-17 21:20:03cloudlinux2 fail2ban: 2026-07-17 21:20:15,372 fail2ban.filter [1598]: INFO [plesk-wordpress] ...
show more
cloudlinux2 fail2ban: 2026-07-17 21:20:03,816 fail2ban.filter [1598]: INFO [plesk-modsecurity] Found 209.242.218.1 - 2026-07-17 21:20:03cloudlinux2 fail2ban: 2026-07-17 21:20:15,372 fail2ban.filter [1598]: INFO [plesk-wordpress] Found 173.239.240.137 - 2026-07-17 21:20:13cloudlinux2 fail2ban: 2026-07-17 21:20:15,537 fail2ban.filter [1598]: INFO [plesk-wordpress] Found 173.239.240.120 - 2026-07-17 21:20:13cloudlinux2 fail2ban: 2026-07-17 21:20:53,936 fail2ban.filter [1598]: INFO [plesk-modsecurity] Found 34.182.158.83 - 2026-07-17 21:20:53cloudlinux2 fail2ban: 2026-07-17 21:21:57,134 fail2ban.filter [1598]: INFO [recidive] Found 104.28.164.42 - 2026-07-17 21:21:57cloudlinux2 fail2ban: 2026-07-17 21:21:56,738 fail2ban.filter [1598]: INFO [plesk-wordpress] Found 104.28.164.42 - 2026-07-17 21:21:56cloudlinux2 fail2ban: 2026-07-17 21:21:56,692 fail2ban.filter [1598]: INFO [plesk-wordpress] Found 104.28.164.42 - 2026-07-17 21:21:56cloudlin
show less
Web App Attack
🇬🇧
consul.to
2026-07-17 19:21:18
UTC ·
(3 months ago)
Web attack/malicious scanning detected
Web App Attack