๐บ๐ธ
TPI-Abuse
2026-09-17 03:24:21
(41 minutes ago)
(mod_security) mod_security (id:210492) triggered by 34.82.16.103 (103.16.82.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.82.16.103 (103.16.82.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 23:24:16.071555 2026] [security2:error] [pid 4816:tid 4816] [client 34.82.16.103:55270] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tobyscott.com"] [uri "/.git/config"] [unique_id "aqtdYHPz_U8L2Pc8_zDuxQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
masterguru
2026-09-17 03:24:19
(41 minutes ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-201)
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-17 02:56:43
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 34.82.16.103 (103.16.82.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.82.16.103 (103.16.82.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 22:56:37.629469 2026] [security2:error] [pid 12465:tid 12547] [client 34.82.16.103:44300] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "toastandfigs.com"] [uri "/.git/config"] [unique_id "aqtW5QQXez817wMaDJexcwAAAhY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
pscriptos
2026-09-17 02:44:56
(1 hour ago)
This IP was detected by CrowdSec triggering crowdsecurity/appsec-vpatch
Web App Attack
๐ฎ๐น
Progetto1
2026-09-16 18:55:03
(9 hours ago)
Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
๐ฎ๐น
CoreTech srl
2026-09-16 18:53:56
(9 hours ago)
cloudlinux2 fail2ban: 2026-09-16 20:49:15,841 fail2ban.filter [1818]: INFO [plesk-modsecu ...
show more
cloudlinux2 fail2ban: 2026-09-16 20:49:15,841 fail2ban.filter [1818]: INFO [plesk-modsecurity] Found 185.76.178.199 - 2026-09-16 20:49:15cloudlinux2 fail2ban: 2026-09-16 20:50:52,379 fail2ban.actions [1818]: NOTICE [plesk-modsecurity] Ban 185.76.178.199cloudlinux2 fail2ban: 2026-09-16 20:50:52,385 fail2ban.filter [1818]: INFO [recidive] Found 185.76.178.199 - 2026-09-16 20:50:52cloudlinux2 fail2ban: 2026-09-16 20:50:52,205 fail2ban.filter [1818]: INFO [plesk-modsecurity] Found 185.76.178.199 - 2026-09-16 20:50:52cloudlinux2 fail2ban: 2026-09-16 20:51:25,859 fail2ban.filter [1818]: INFO [plesk-modsecurity] Found 134.199.231.147 - 2026-09-16 20:51:25cloudlinux2 fail2ban: 2026-09-16 20:52:11,078 fail2ban.actions [1818]: NOTICE [plesk-modsecurity] Unban 100.54.19.211cloudlinux2 fail2ban: 2026-09-16 20:52:18,733 fail2ban.filter [1818]: INFO [plesk-modsecurity] Found 34.82.16.103 - 2026-09-16 20:52:18cloudlinux2 fail2ban: 2026-09-16 20:52:19,700
show less
Brute-Force
๐บ๐ธ
TPI-Abuse
2026-09-16 18:31:14
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.82.16.103 (103.16.82.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.82.16.103 (103.16.82.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 14:31:09.413656 2026] [security2:error] [pid 29800:tid 29800] [client 34.82.16.103:57386] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "supportconvalelementary.com"] [uri "/.git/config"] [unique_id "aqrgbbtKb9RwCyAoLMlPzQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
venus.launch.bz
2026-09-16 18:06:38
(9 hours ago)
(mod_security) mod_security triggered on hostname [redacted] 34.82.16.103 (US/United States/103.16.8 ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.82.16.103 (US/United States/103.16.82.34.bc.googleusercontent.com)
show less
SQL Injection
๐บ๐ธ
TPI-Abuse
2026-09-16 17:21:58
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.82.16.103 (103.16.82.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.82.16.103 (103.16.82.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 13:21:53.385122 2026] [security2:error] [pid 137870:tid 137870] [client 34.82.16.103:42880] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "support.tbvfc.com"] [uri "/.git/config"] [unique_id "aqrQMburTGd4jscdUrpJbQAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
FD-IX
2026-09-16 16:48:25
(11 hours ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-16 16:10:58
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.82.16.103 (103.16.82.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.82.16.103 (103.16.82.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 12:10:50.006636 2026] [security2:error] [pid 6636:tid 6636] [client 34.82.16.103:34824] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tarekshohaieb.online"] [uri "/.git/config"] [unique_id "aqq_ipJ123F-liX1OoscPgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-16 16:05:04
(12 hours ago)
suspicious request in access.log
Web App Attack
๐ฉ๐ช
ger-stg-sifi1
2026-09-16 16:04:02
(12 hours ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
๐ณ๐ด
jad-abuse
2026-09-16 16:01:17
(12 hours ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_expos ...
show more
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_exposure, env_probe, source_backup. Observed by 1 sensor(s); 318 hits.
show less
Web App Attack
๐ธ๐ช
vaia.cloud
2026-09-16 15:55:02
(12 hours ago)
crowdsecurity/http-probing
Brute-Force
Web App Attack