🇺🇸
TPI-Abuse
2026-11-14 23:51:33
UTC ·
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.185.86.247 (247.86.185.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 18:51:29.821748 2026] [security2:error] [pid 21788:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.185.86.247 (247.86.185.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 18:51:29.821748 2026] [security2:error] [pid 21788:tid 21788] [client 34.185.86.247:55238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "penjoki.us"] [uri "/.git/config"] [unique_id "avj0Ad85ynGQQ14Wm4Z9EAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-11-14 23:43:41
UTC ·
(6 hours ago)
LH-Watcher: HONEYPOT
Hacking
SSH
🇿🇦
conure.sh
2026-11-14 23:40:03
UTC ·
(6 hours ago)
csagent: score 20.5: secrets grab x2, 404 noise floor x2; 2 domain(s) in 0s
Web App Attack
🇩🇪
Holger
2026-11-14 23:39:18
UTC ·
(6 hours ago)
Bruteforce WebAttack
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 23:34:15
UTC ·
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.185.86.247 (247.86.185.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 18:34:11.836072 2026] [security2:error] [pid 4099:tid 4 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.185.86.247 (247.86.185.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 18:34:11.836072 2026] [security2:error] [pid 4099:tid 4276] [client 34.185.86.247:34484] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "peluqueriabuhos.com"] [uri "/.git/config"] [unique_id "avjv83fAOqiTTnZKzBsdTgAAANE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
CoreTech srl
2026-11-14 23:28:57
UTC ·
(6 hours ago)
cloudlinux2 fail2ban: 2026-11-15 00:24:16,951 fail2ban.filter [1443]: INFO [plesk-modsecurity] Found 93.93.112.98 - 2026-11-15 00:24:16cloudlinux2 fail2ban: 2026-11-15 00:25:07,132 fail2ban.filter [1443]: INFO [plesk-wordpress] ...
show more
cloudlinux2 fail2ban: 2026-11-15 00:24:16,951 fail2ban.filter [1443]: INFO [plesk-modsecurity] Found 93.93.112.98 - 2026-11-15 00:24:16cloudlinux2 fail2ban: 2026-11-15 00:25:07,132 fail2ban.filter [1443]: INFO [plesk-wordpress] Found 193.36.224.202 - 2026-11-15 00:25:05cloudlinux2 fail2ban: 2026-11-15 00:25:10,480 fail2ban.filter [1443]: INFO [plesk-wordpress] Found 169.1.153.122 - 2026-11-15 00:25:09cloudlinux2 fail2ban: 2026-11-15 00:25:29,817 fail2ban.filter [1443]: INFO [plesk-wordpress] Found 138.59.142.8 - 2026-11-15 00:25:29cloudlinux2 fail2ban: 2026-11-15 00:26:59,612 fail2ban.filter [1443]: INFO [plesk-wordpress] Found 177.234.198.92 - 2026-11-15 00:26:59cloudlinux2 fail2ban: 2026-11-15 00:27:07,759 fail2ban.filter [1443]: INFO [plesk-modsecurity] Found 143.105.239.245 - 2026-11-15 00:27:07cloudlinux2 fail2ban: 2026-11-15 00:27:24,660 fail2ban.filter [1443]: INFO [plesk-wordpress] Found 193.36.224.202 - 2026-11-15 00:27:24cl
show less
Web App Attack
🇩🇪
shurizma
2026-11-14 23:28:39
UTC ·
(6 hours ago)
[14/Nov/2026:23:28:38 +0000] - 404 404 - GET https pelican.shuri.gg "/.git/config" [Client 34.185.86.247] [Length 3207] [Gzip -] [Sent-to 127.0.0.1] "-" "-"
...
Web App Attack
Bad Web Bot
🇧🇪
cmbplf
2026-11-14 23:28:10
UTC ·
(6 hours ago)
519 requests with url.path */.git/config
200 requests with url.path *.git/*
Brute-Force
Bad Web Bot
🇺🇦
hardhosts
2026-11-14 23:28:09
UTC ·
(6 hours ago)
Web exploit blocked by ModSecurity on ds.hardhostserv.net [Restricted File Access Attempt]. URI: /.git/config.
Logs:
[Sat Nov 14 23:28:08.563938 2026] [security2:error] [pid 24676:tid 24676] [client 34.185.86.247:46688] ModSecurity: Warning. Matched ...
show more
Web exploit blocked by ModSecurity on ds.hardhostserv.net [Restricted File Access Attempt]. URI: /.git/config.
Logs:
[Sat Nov 14 23:28:08.563938 2026] [security2:error] [pid 24676:tid 24676] [client 34.185.86.247:46688] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [rev "1"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [hostname "pelican.hardhostserv.net"] [uri "/.git/config"] [unique_id "avjuiE4LKWLjs3b2nm5jGgAAABo"]
[Sat Nov 14 23:28:08.877121 2026] [security2:error] [pid 24676:tid 24676] [client 34.185.86.247:46688] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=5,RCE=0,PHPI=0,HTTP=0,SESS=0): Restricted File Access Attempt"] [hostname "pelican.hardhostserv.net"] [uri "/public/index.php"] [unique_id "avjuiE4LKWLjs3b2nm5jGgAAABo"]
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 23:17:28
UTC ·
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.185.86.247 (247.86.185.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 18:17:22.426631 2026] [security2:error] [pid 12682:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.185.86.247 (247.86.185.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 18:17:22.426631 2026] [security2:error] [pid 12682:tid 12682] [client 34.185.86.247:51766] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "peggyannjones.us"] [uri "/.git/config"] [unique_id "avjsAr5t56Z-ubYsS8i5WgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Hary74656
2026-11-14 23:16:41
UTC ·
(6 hours ago)
Fail2Ban on schani.hostmi.at: jail=apache-instablock, failures=1.
[client 34.185.86.247] [realclient 34.185.86.247] [15/Nov/2026:00:16:39 +0100] [vhost schani.hostmi.at] 403 "GET /.git/config HTTP/1.1"
Web App Attack
🇩🇪
Blexyel
2026-11-14 23:13:19
UTC ·
(6 hours ago)
34.185.86.247 - - [15/Nov/2026:00:13:18 +0100] "GET /.git/config HTTP/1.1" 200 265 "-" "-" "pingusmc.org"
...
Brute-Force
Web App Attack
🇧🇪
boxed-it
2026-11-14 23:12:04
UTC ·
(6 hours ago)
GET /.git/config (Tarpitted for 2s, wasted 240B)
Web App Attack
🇳🇱
Alt255
2026-11-14 23:10:06
UTC ·
(6 hours ago)
[ti-14al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34.185.86.247 - - \[15/Nov/2026:00:09:53 +0100\] "GET /.git/config HTTP/1.1" 301 5872 "-" "-"
...
Bad Web Bot
Web App Attack
🇬🇧
Aetherweb Ark
2026-11-14 23:08:09
UTC ·
(6 hours ago)
(mod_security) mod_security (id:949110) triggered by 34.185.86.247 (US/United States/247.86.185.34.bc.googleusercontent.com): N in the last X secs
Web App Attack