๐ฉ๐ช
webanyone
2026-09-16 15:32:29
(14 hours ago)
WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail
Web App Attack
๐จ๐ฆ
zXero
2026-09-16 15:25:34
(14 hours ago)
Fail2Ban automatic report - jail: no-wordpress
Brute-Force
SSH
DDoS Attack
Anonymous
2026-09-16 15:22:02
(14 hours ago)
Bot / scanning and/or hacking attempts: GET /_profiler/phpinfo HTTP/1.1, GET /webroot/index.php/_env ...
show more
Bot / scanning and/or hacking attempts: GET /_profiler/phpinfo HTTP/1.1, GET /webroot/index.php/_environment HTTP/1.1, GET /hosting/phpinfo.php HTTP/1.1, GET /info HTTP/1.1, GET /phpinfo.php.old HTTP/1.1, GET /phpinfo.php.bak HTTP/1.1, GET /webmail/phpinfo.php HTTP/1.1, GET /smtp/phpinfo.php HTTP/1.1, GET /server-info.php HTTP/1.1, GET /cpanel/phpinfo.php HTTP/1.1, GET /server-status.php HTTP/1.1, GET /_environment HTTP/1.1, GET /dev/phpinfo.php HTTP/1.1, GET /mail/phpinfo.php HTTP/1.1, GET /phpinfo.php~ HTTP/1.1
show less
Hacking
Web App Attack
๐บ๐ธ
brightenfield
2026-09-16 14:02:53
(15 hours ago)
Web App Attack
Web App Attack
๐ฆ๐บ
aranguren.org
2026-09-16 13:31:31
(16 hours ago)
34.40.177.73 - - [16/Sep/2026:23:31:30 +1000] "GET /.env HTTP/1.1" 404 992 "-" "Mozilla/5.0 (Macinto ...
show more
34.40.177.73 - - [16/Sep/2026:23:31:30 +1000] "GET /.env HTTP/1.1" 404 992 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.40.177.73 - - [16/Sep/2026:23:31:30 +1000] "GET /.env.local HTTP/1.1" 404 992 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.40.177.73 - - [16/Sep/2026:23:31:30 +1000] "GET /.env.production HTTP/1.1" 404 992 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.40.177.73 - - [16/Sep/2026:23:31:30 +1000] "GET /.env.staging HTTP/1.1" 404 992 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.40.177.73 - - [16/Sep/2026:23:31:30 +1000] "GET /.env.development HTTP/1.1" 404 992 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko)
...
show less
Bad Web Bot
๐ณ๐ฑ
Site.eu
2026-09-16 12:41:11
(16 hours ago)
Excessive multi-domain requests
Brute-Force
๐ซ๐ท
dynamix
2026-09-16 12:08:44
(17 hours ago)
Multiple WAF Violations
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-16 10:46:17
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.40.177.73 (73.177.40.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.40.177.73 (73.177.40.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 06:46:11.042673 2026] [security2:error] [pid 15060:tid 15060] [client 34.40.177.73:40496] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "photojeniq.com"] [uri "/.git/config"] [unique_id "aqpzc0u2WDvk2SHtUt7AVgAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-16 10:04:55
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.40.177.73 (73.177.40.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.40.177.73 (73.177.40.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 06:04:50.573187 2026] [security2:error] [pid 31863:tid 31863] [client 34.40.177.73:50370] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "photography.thenewplace.org"] [uri "/.git/config"] [unique_id "aqppwtWv-pdHPnfYSGEmdgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-16 10:03:59
(19 hours ago)
Blocked by siteaihub.com: auto: matched exact:/.git/config
Hacking
Bad Web Bot
๐บ๐ฆ
URAN Publishing Service
2026-09-16 08:24:44
(21 hours ago)
[16/Sep/2026:11:24:43 +0300] -- 34.40.177.73 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.git/ ...
show more
[16/Sep/2026:11:24:43 +0300] -- 34.40.177.73 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.git/config HTTP/1.1
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-16 07:36:35
(22 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.40.177.73 (73.177.40.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.40.177.73 (73.177.40.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 03:36:28.180664 2026] [security2:error] [pid 6322:tid 6322] [client 34.40.177.73:56218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "photoboothtogo.com"] [uri "/.git/config"] [unique_id "aqpG_EDHg426Zs5sTNv3rQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
LRob
2026-09-16 07:28:54
(22 hours ago)
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: ...
show more
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: /.git/config | 2026-09-16 07:28 UTC
show less
Hacking
Web App Attack
๐ณ๐ฑ
Site.eu
2026-09-16 07:04:22
(22 hours ago)
Excessive 404/403 errors
Brute-Force
๐ฌ๐ง
rakkor
2026-09-16 04:49:20
(1 day ago)
2026/09/16 05:49:18 [error] 8540#8540: *6360932 open() "/usr/syno/synoman/.git/config" failed (2: No ...
show more
2026/09/16 05:49:18 [error] 8540#8540: *6360932 open() "/usr/syno/synoman/.git/config" failed (2: No such file or directory), client: 34.40.177.73, server: photo.rakkor.uk, request: "GET /.git/config HTTP/1.1", host: "photo.rakkor.uk"
2026/09/16 05:49:18 [error] 8540#8540: *6360932 open() "/usr/syno/synoman/.env" failed (2: No such file or directory), client: 34.40.177.73, server: photo.rakkor.uk, request: "GET /.env HTTP/1.1", host: "photo.rakkor.uk"
...
show less
Brute-Force
Hacking
Web App Attack