Anonymous
2026-08-27 22:35:16
(20 hours ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
๐ซ๐ท
Baking333
2026-08-27 22:19:34
(20 hours ago)
[redacted] 34.67.80.79 - - [27/Aug/2026:23:19:32 +0100] "GET /app/.git/config HTTP/1.1" 307 5690 "-" ...
show more
[redacted] 34.67.80.79 - - [27/Aug/2026:23:19:32 +0100] "GET /app/.git/config HTTP/1.1" 307 5690 "-" "crusader-worker/1.0" [redacted] 34.67.80.79 - - [27/Aug/2026:23:19:32 +0100] "GET /wordpress/.git/config HTTP/1.1" 307 5690 "-" "crusader-worker/1.0"
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-27 19:12:01
(23 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.67.80.79 (79.80.67.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.67.80.79 (79.80.67.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 15:11:54.661207 2026] [security2:error] [pid 23022:tid 23022] [client 34.67.80.79:45844] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.walskipper.jbaydeliveries.com"] [uri "/.git/config"] [unique_id "apCL-tGRzBkLqTIv5j9ZiQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-27 16:26:37
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.67.80.79 (79.80.67.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.67.80.79 (79.80.67.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 12:26:30.140529 2026] [security2:error] [pid 30751:tid 30751] [client 34.67.80.79:37570] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "naturopathicsource.com"] [uri "/api/.git/config"] [unique_id "apBlNpAQTnNk4XSLMeDGeQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
mnsf
2026-08-27 16:05:14
(1 day ago)
Scanning/Probing (24)
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-27 15:22:01
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.67.80.79 (79.80.67.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.67.80.79 (79.80.67.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 11:21:52.986995 2026] [security2:error] [pid 11864:tid 11864] [client 34.67.80.79:56022] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.tracdynamics.com"] [uri "/htdocs/.git/config"] [unique_id "apBWEK2FpLQY7w-ol-lINAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฟ
Antinson
2026-08-27 15:01:41
(1 day ago)
Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)
Bad Web Bot
๐ฎ๐น
VHosting
2026-08-27 13:50:07
(1 day ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-27 13:39:41
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.67.80.79 (79.80.67.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.67.80.79 (79.80.67.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 09:39:33.625565 2026] [security2:error] [pid 15645:tid 15645] [client 34.67.80.79:57872] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tijuana-bibles.com"] [uri "/.git/config"] [unique_id "apA-FdHsdDbAbm5v1u7aDAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-27 12:10:04
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.67.80.79 (79.80.67.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.67.80.79 (79.80.67.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 08:09:58.770796 2026] [security2:error] [pid 14399:tid 14399] [client 34.67.80.79:41160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "eclipsesoftware.andrew.weigel.name"] [uri "/htdocs/.git/config"] [unique_id "apApFmE1e50anqau_z-dZwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
big-cloud.nl
2026-08-27 11:01:10
(1 day ago)
Try to access /var/www/.git/config
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-27 11:00:17
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.67.80.79 (79.80.67.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.67.80.79 (79.80.67.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 07:00:13.983354 2026] [security2:error] [pid 14833:tid 14833] [client 34.67.80.79:53636] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.wa211.org"] [uri "/src/.git/config"] [unique_id "apAYvdnEiFJENN1jtD_5oAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack