🇳🇱
debestelapp
2026-09-28 23:40:08
(1 day ago)
Web App Attack
🇩🇪
paissangroup
2026-09-28 17:34:43
(1 day ago)
Multiple WAF Violations
Web App Attack
🇳🇱
Site.eu
2026-09-28 05:25:36
(2 days ago)
Excessive 404/403 errors
Brute-Force
🇺🇸
TPI-Abuse
2026-09-27 17:29:31
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.26.237.4 (4.237.26.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.26.237.4 (4.237.26.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 27 13:29:24.277950 2026] [security2:error] [pid 32376:tid 32389] [client 34.26.237.4:36464] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "phpbb2.hkyiquan.org"] [uri "/.git/config"] [unique_id "arlSdLsWan4XWuVX5qQCnwAAAQk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2026-09-27 17:01:38
(2 days ago)
13.034 requests in 1 hour (1mo1w6d)
Brute-Force
Bad Web Bot
2026-09-26 20:36:37
(3 days ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
2026-09-26 20:18:53
(3 days ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇫🇷
dynamix
2026-09-26 10:04:52
(4 days ago)
Multiple WAF Violations
Web App Attack
🇩🇪
IloGus
2026-09-25 20:02:33
(4 days ago)
WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail
Web App Attack
🇺🇸
mnsf
2026-09-25 06:05:14
(5 days ago)
Scanning/Probing (17)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-24 19:44:39
(5 days ago)
(mod_security) mod_security (id:949110) triggered by 34.26.237.4 (4.237.26.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:949110) triggered by 34.26.237.4 (4.237.26.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 15:44:33.159834 2026] [security2:error] [pid 1309:tid 1309] [client 34.26.237.4:60478] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sio-org.cescfoundation.org"] [uri "/.git/config"] [unique_id "arV9obQBnIYlHyhsnZX19AAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-24 18:45:40
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 34.26.237.4 (4.237.26.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.26.237.4 (4.237.26.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 14:45:34.992142 2026] [security2:error] [pid 319342:tid 319342] [client 34.26.237.4:48962] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sinsky.net.mrcd.org"] [uri "/.git/config"] [unique_id "arVvzjk5NkHBKcnf28OuzAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-24 18:05:07
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 34.26.237.4 (4.237.26.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.26.237.4 (4.237.26.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 14:05:03.357183 2026] [security2:error] [pid 26155:tid 26155] [client 34.26.237.4:37042] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sinobit.org"] [uri "/.git/config"] [unique_id "arVmT_d3HWLWMgtqJ3qQ-AAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-24 04:41:20
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 34.26.237.4 (4.237.26.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.26.237.4 (4.237.26.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 00:41:13.963655 2026] [security2:error] [pid 20374:tid 20374] [client 34.26.237.4:51592] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pamolson.org"] [uri "/.git/config"] [unique_id "arSp6SCtNntptVcQ8wMC3QAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-09-23 21:59:05
(6 days ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-22.
show less
Web App Attack
SSH
Hacking