Anonymous
2026-11-14 16:32:51
UTC ·
(12 minutes ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
🇿🇦
conure.sh
2026-11-13 02:54:47
UTC ·
(1 day ago)
csagent: score 20.3: secrets grab x2, 404 noise floor x2; 1 domain(s) in 11s
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 00:39:43
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.64.141.119 (119.141.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 19:39:38.723276 2026] [security2:error] [pid 22853:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.64.141.119 (119.141.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 19:39:38.723276 2026] [security2:error] [pid 22853:tid 22853] [client 34.64.141.119:32990] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rosoctechnologies.com"] [uri "/.git/config"] [unique_id "avZcSiwxqpjIDoKKG600owAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-11-13 00:21:41
UTC ·
(1 day ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇳🇱
homeshowdomain.nl
2026-11-12 22:59:54
UTC ·
(1 day ago)
Auto-ban: >3000 req/min op 2026-11-12
Web App Attack
SSH
Hacking
🇫🇷
masterguru
2026-11-12 22:32:17
UTC ·
(1 day ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-201)
Hacking
Web App Attack
🇸🇪
vaia.cloud
2026-11-12 20:10:02
UTC ·
(1 day ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack
🇨🇭
Origon
2026-11-12 20:05:05
UTC ·
(1 day ago)
plesk-modsecurity - IP: 34.64.141.119 - [12/Nov/2026:21:05:04.072338 +0100] avYb8LDkr6j2XS-1bm9iqAAAAAI 34.64.141.119 40746 127.0.0.1 7081 [12/Nov/2026:21:05:04.535282 +0100] avYb8LDkr6j2XS-1bm9iqgAAAAM 34.64.141.119 40788 127.0.0.1 7081 [12/Nov/202 ...
show more
plesk-modsecurity - IP: 34.64.141.119 - [12/Nov/2026:21:05:04.072338 +0100] avYb8LDkr6j2XS-1bm9iqAAAAAI 34.64.141.119 40746 127.0.0.1 7081 [12/Nov/2026:21:05:04.535282 +0100] avYb8LDkr6j2XS-1bm9iqgAAAAM 34.64.141.119 40788 127.0.0.1 7081 [12/Nov/2026:21:05:04.762034 +0100] avYb8LDkr6j2XS-1bm9iqwAAAA4 34.64.141.119 40810 127.0.0.1 7081 [12/Nov/2026:21:05:04.993758 +0100] avYb8LDkr6j2XS-1bm9irAAAAAQ 34.64.141.119 40824 127.0.0.1 7081
show less
Web App Attack
🇩🇪
FeG Deutschland
2026-11-12 19:54:37
UTC ·
(1 day ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 19:43:13
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.64.141.119 (119.141.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 14:43:06.274938 2026] [security2:error] [pid 11490:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.64.141.119 (119.141.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 14:43:06.274938 2026] [security2:error] [pid 11490:tid 11499] [client 34.64.141.119:47388] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rosendalsateri.com"] [uri "/.git/config"] [unique_id "avYWypFLKRAGzK4gv9mEeAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-11-12 19:41:37
UTC ·
(1 day ago)
Scanning for secret files (.env, .git, credentials, config backups)
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 19:04:53
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.64.141.119 (119.141.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 14:04:45.713298 2026] [security2:error] [pid 29312:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.64.141.119 (119.141.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 14:04:45.713298 2026] [security2:error] [pid 29312:tid 29312] [client 34.64.141.119:33870] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rosemeadefarms.com"] [uri "/.git/config"] [unique_id "avYNzaAwHmqH2_rajKvWRAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 18:34:46
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.64.141.119 (119.141.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 13:34:39.712200 2026] [security2:error] [pid 10914:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.64.141.119 (119.141.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 13:34:39.712200 2026] [security2:error] [pid 10914:tid 10914] [client 34.64.141.119:46448] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "roselockecasting.com"] [uri "/.git/config"] [unique_id "avYGv5_lHvpnUZTF0weYhgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-11-12 18:30:08
UTC ·
(1 day ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack