๐ซ๐ท
mail.avx.gr
2026-07-27 15:40:20
(1 day ago)
Plesk Fail2Ban jail: Plesk-Web-Exploits. Evidence: 34.45.214.22 - - [25/Jul/2026:18:26:28 +0300] "GE ...
show more
Plesk Fail2Ban jail: Plesk-Web-Exploits. Evidence: 34.45.214.22 - - [25/Jul/2026:18:26:28 +0300] "GET /.git/config HTTP/1.1" 403 6265 "-" "-"
show less
Web App Attack
๐ณ๐ฑ
homeshowdomain.nl
2026-07-26 22:04:40
(2 days ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-25.
show less
Web App Attack
SSH
Hacking
๐ฎ๐ณ
evicky2002
2026-07-26 06:00:00
(3 days ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
Anonymous
2026-07-25 20:16:46
(3 days ago)
Fuzzing/Looking for credentials files.
Brute-Force
Web App Attack
๐จ๐ฆ
polycoda
2026-07-25 18:24:55
(3 days ago)
AutoBlock: โ๏ธ Configuration File Access (Non Decay-Based)
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-25 17:07:57
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.45.214.22 (22.214.45.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.45.214.22 (22.214.45.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 13:07:53.026749 2026] [security2:error] [pid 2782453:tid 2782489] [client 34.45.214.22:59480] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cepspublishing.com.frcconstruction.com"] [uri "/.git/config"] [unique_id "amTtadIVBf3Gudxcnn01KQAAAMc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฆ๐บ
paulshipley.com.au
2026-07-25 17:04:45
(3 days ago)
[Sun Jul 26 03:04:45.026703 2026] [security2:error] [pid 808289] [client 34.45.214.22:48872] [client ...
show more
[Sun Jul 26 03:04:45.026703 2026] [security2:error] [pid 808289] [client 34.45.214.22:48872] [client 34.45.214.22] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "shotbysuzanne.com.au"] [uri "/.git/config"] [unique_id "amTsrQfxVnXIclRnHt07RgAAAAs"]
...
show less
Web App Attack
๐ฌ๐ง
Oakley
2026-07-25 17:01:42
(3 days ago)
(confirmed_bot_sig) Confirmed bot
Hacking
๐บ๐ธ
TPI-Abuse
2026-07-25 16:50:51
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.45.214.22 (22.214.45.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.45.214.22 (22.214.45.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 12:50:45.358040 2026] [security2:error] [pid 26667:tid 26667] [client 34.45.214.22:59890] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "darkmysteries.biz"] [uri "/.git/config"] [unique_id "amTpZWBOj1fHDQ7phS9z4gAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
omartin
2026-07-25 16:47:21
(3 days ago)
Critical Vulnerability Scan detected
Hacking
Brute-Force
Exploited Host
Web App Attack
๐บ๐ฆ
URAN Publishing Service
2026-07-25 16:33:56
(3 days ago)
34.45.214.22 - - [25/Jul/2026:19:27:32 +0300] "GET /.git/config HTTP/1.1" 404 4682 "-" "-"
34.45.214 ...
show more
34.45.214.22 - - [25/Jul/2026:19:27:32 +0300] "GET /.git/config HTTP/1.1" 404 4682 "-" "-"
34.45.214.22 - - [25/Jul/2026:19:33:55 +0300] "GET /.git/config HTTP/1.1" 404 4697 "-" "-"
...
show less
Web App Attack
Anonymous
2026-07-25 16:32:32
(3 days ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
๐บ๐ธ
TPI-Abuse
2026-07-25 16:05:18
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.45.214.22 (22.214.45.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.45.214.22 (22.214.45.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 12:05:13.303545 2026] [security2:error] [pid 1523287:tid 1523287] [client 34.45.214.22:52314] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "presucad.com"] [uri "/.git/config"] [unique_id "amTeuVm4L2U5C1j9xgjjWgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ง๐ฌ
pa4080
2026-07-25 15:58:03
(3 days ago)
Detected by ModSecurity. Request URI: /.git/config
Web App Attack
๐บ๐ธ
interbiznw.com
2026-07-25 15:57:34
(3 days ago)
malicious-web-requests-vulnerability-scanning
Hacking
Brute-Force
Exploited Host
Web App Attack