🇹🇷
hostopya.com
2026-10-23 18:25:54
UTC ·
(3 weeks ago)
[plesk-apache] 6 failed attempt(s). Log: [Sat Sep 26 15:58:47.729589 2026] [authz_core:error] [pid 150338] [client 34.79.145.171:0] AH01630: client denied by server configuration: /var/www/vhosts/wiantex.com/alarm/.env|[Sat Sep 26 15:58:47.829626 202 ...
show more
[plesk-apache] 6 failed attempt(s). Log: [Sat Sep 26 15:58:47.729589 2026] [authz_core:error] [pid 150338] [client 34.79.145.171:0] AH01630: client denied by server configuration: /var/www/vhosts/wiantex.com/alarm/.env|[Sat Sep 26 15:58:47.829626 2026] [authz_core:error] [pid 153323] [client 34.79.145.171:0] AH01630: client denied by server configuration: /var/www/vhosts/wiantex.com/alarm/.env.local|[Sat Sep 26 15:58:47.942724 2026] [authz_core:error] [pid 157501] [client 34.79.145.171:0] AH01630: client denied by server configuration: /var/www/vhosts/wiantex.com/alarm/.env.production|[Sat Sep 26 15:58:48.311757 2026] [authz_core:error] [pid 150442] [client 34.79.145.171:0] AH01630: client denied by server configuration: /var/www/vhosts/wiantex.com/alarm/.env.staging|[Sat Sep 26 15:58:48.454971 2026] [authz_core:error] [pid 150338] [client 34.79.145.171:0] AH01630: client denied by server configuration: /var/www/vhosts/wiantex.com/alarm/.env.development
show less
Brute-Force
Web App Attack
Anonymous
2026-09-30 06:09:22
UTC ·
(1 month ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
Anonymous
2026-09-30 05:09:52
UTC ·
(1 month ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇹🇷
hostopya.com
2026-09-26 12:58:50
UTC ·
(1 month ago)
[plesk-apache] 6 failed attempt(s). Log: [Sat Sep 26 15:58:47.729589 2026] [authz_core:error] [pid 150338] [client 34.79.145.171:0] AH01630: client denied by server configuration: /var/www/vhosts/wiantex.com/alarm/.env|[Sat Sep 26 15:58:47.829626 202 ...
show more
[plesk-apache] 6 failed attempt(s). Log: [Sat Sep 26 15:58:47.729589 2026] [authz_core:error] [pid 150338] [client 34.79.145.171:0] AH01630: client denied by server configuration: /var/www/vhosts/wiantex.com/alarm/.env|[Sat Sep 26 15:58:47.829626 2026] [authz_core:error] [pid 153323] [client 34.79.145.171:0] AH01630: client denied by server configuration: /var/www/vhosts/wiantex.com/alarm/.env.local|[Sat Sep 26 15:58:47.942724 2026] [authz_core:error] [pid 157501] [client 34.79.145.171:0] AH01630: client denied by server configuration: /var/www/vhosts/wiantex.com/alarm/.env.production|[Sat Sep 26 15:58:48.311757 2026] [authz_core:error] [pid 150442] [client 34.79.145.171:0] AH01630: client denied by server configuration: /var/www/vhosts/wiantex.com/alarm/.env.staging|[Sat Sep 26 15:58:48.454971 2026] [authz_core:error] [pid 150338] [client 34.79.145.171:0] AH01630: client denied by server configuration: /var/www/vhosts/wiantex.com/alarm/.env.development
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-24 18:01:25
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.79.145.171 (171.145.79.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 14:01:17.228208 2026] [security2:error] [pid 24299:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.79.145.171 (171.145.79.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 14:01:17.228208 2026] [security2:error] [pid 24299:tid 24299] [client 34.79.145.171:58314] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.intertecs.org"] [uri "/.git/config"] [unique_id "arVlba98R6idD8yxgTl1AAAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-24 17:28:32
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.79.145.171 (171.145.79.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 13:28:26.414618 2026] [security2:error] [pid 31324:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.79.145.171 (171.145.79.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 13:28:26.414618 2026] [security2:error] [pid 31324:tid 31324] [client 34.79.145.171:51626] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.interculturaldimensions.org"] [uri "/.git/config"] [unique_id "arVdujf6obOMJwwiXjszmwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
e.fierstra
2026-09-21 22:04:25
UTC ·
(1 month ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-09-21 22:03:52
UTC ·
(1 month ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-20.
Web App Attack
SSH
Hacking
🇩🇪
ghostwarriors
2026-09-21 14:20:48
UTC ·
(1 month ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Philister11
2026-09-21 01:04:40
UTC ·
(1 month ago)
CrowdSec: crowdsecurity/http-probing (BE/AS396982)
Web App Attack
Hacking
🇨🇭
Origon
2026-09-20 18:40:19
UTC ·
(1 month ago)
http-sensitive-files - IP: 34.79.145.171 - time="2026-09-20T20:40:19+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-sensitive-files by ip 34.79.145.171 (BE/396982) : 4h ban on Ip 34.79.145.171" ...
show more
http-sensitive-files - IP: 34.79.145.171 - time="2026-09-20T20:40:19+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-sensitive-files by ip 34.79.145.171 (BE/396982) : 4h ban on Ip 34.79.145.171" module=db
show less
Web App Attack