Anonymous
2026-10-21 09:18:02
(1 day ago)
Bot / scanning and/or hacking attempts: GET /.git/config HTTP/1.1
Hacking
Web App Attack
๐ฉ๐ช
neckaralb-admin.de
2026-10-21 02:58:25
(1 day ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
๐ฉ๐ช
MusicLibrary
2026-10-21 02:55:45
(1 day ago)
Attempted access to sensitive configuration files (.env, .git, etc.)
Bad Web Bot
Web App Attack
๐ซ๐ท
GoodOldTOS
2026-10-21 02:21:08
(1 day ago)
Highly suspect IP
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-21 01:41:38
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.50.4.162 (162.4.50.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.50.4.162 (162.4.50.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 21:41:33.499710 2026] [security2:error] [pid 19668:tid 19742] [client 34.50.4.162:47916] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "saryagroup.pershia.net"] [uri "/.git/config"] [unique_id "atgYTd_xhoD2gfXm1BMeEAAAAUI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฎ๐น
CoreTech srl
2026-10-21 00:58:56
(1 day ago)
cloudlinux2 fail2ban: 2026-10-21 02:54:14,271 fail2ban.filter [1957]: INFO [plesk-modsecu ...
show more
cloudlinux2 fail2ban: 2026-10-21 02:54:14,271 fail2ban.filter [1957]: INFO [plesk-modsecurity] Found 154.192.197.45 - 2026-10-21 02:54:14cloudlinux2 fail2ban: 2026-10-21 02:54:33,988 fail2ban.filter [1957]: INFO [plesk-wordpress] Found 181.118.50.6 - 2026-10-21 02:54:32cloudlinux2 fail2ban: 2026-10-21 02:54:56,356 fail2ban.filter [1957]: INFO [plesk-modsecurity] Found 154.192.197.45 - 2026-10-21 02:54:56cloudlinux2 fail2ban: 2026-10-21 02:55:17,455 fail2ban.filter [1957]: INFO [plesk-modsecurity] Found 154.192.197.45 - 2026-10-21 02:55:17cloudlinux2 fail2ban: 2026-10-21 02:55:17,765 fail2ban.filter [1957]: INFO [recidive] Found 154.192.197.45 - 2026-10-21 02:55:17cloudlinux2 fail2ban: 2026-10-21 02:55:19,806 fail2ban.filter [1957]: INFO [plesk-modsecurity] Found 34.50.4.162 - 2026-10-21 02:55:19cloudlinux2 fail2ban: 2026-10-21 02:55:19,984 fail2ban.filter [1957]: INFO [recidive] Found 34.50.4.162 - 2026-10-21 02:55:19cloudlinux2 fail
show less
Web App Attack
๐ฌ๐ง
consul.to
2026-10-21 00:50:10
(1 day ago)
Web attack/malicious scanning detected
Web App Attack
๐ง๐ช
cmbplf
2026-10-21 00:33:59
(1 day ago)
4.459 requests with url.path *.env
942 requests with url.path *phpinfo.php
Brute-Force
Bad Web Bot
๐ซ๐ฎ
paissangroup
2026-10-20 23:05:31
(1 day ago)
Multiple WAF Violations
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-20 21:14:30
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.50.4.162 (162.4.50.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.50.4.162 (162.4.50.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 17:14:27.393418 2026] [security2:error] [pid 31399:tid 31399] [client 34.50.4.162:35686] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sargentandco.com"] [uri "/.git/config"] [unique_id "atfZs9cDy9dtqHvIjJdZYQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-20 19:29:39
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.50.4.162 (162.4.50.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.50.4.162 (162.4.50.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 15:29:33.134299 2026] [security2:error] [pid 9504:tid 9504] [client 34.50.4.162:50052] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sarawatt.com"] [uri "/.git/config"] [unique_id "atfBHbjNVc72zUpIALiApAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-20 18:46:29
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.50.4.162 (162.4.50.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.50.4.162 (162.4.50.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 14:46:21.046811 2026] [security2:error] [pid 439:tid 439] [client 34.50.4.162:50242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "saratogaequity.com"] [uri "/.git/config"] [unique_id "ate2_RT6-IVuVUzy7AeE8gAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Site.eu
2026-10-20 17:39:17
(2 days ago)
Excessive multi-domain requests
Brute-Force
๐จ๐ญ
4server
2026-10-20 17:00:01
(2 days ago)
[TueOct2018:59:55.6248172026][security2:error][pid1813947:tid1814001][client34.50.4.162:0]ModSecurit ...
show more
[TueOct2018:59:55.6248172026][security2:error][pid1813947:tid1814001][client34.50.4.162:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"710\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"sarand.ch.81-17-25-250.cpanel.site\"][uri\"/.env~\"][unique_id\"ateeC0MJpa_3GV4xBPT7jAAAAIU\"]
show less
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-20 16:44:25
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.50.4.162 (162.4.50.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.50.4.162 (162.4.50.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 12:44:18.200369 2026] [security2:error] [pid 32002:tid 32002] [client 34.50.4.162:52854] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "saramics.net"] [uri "/.git/config"] [unique_id "ateaYheQB8rockxDS1e-EwAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack