Anonymous
2026-09-22 16:33:56
(3 weeks ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
๐ธ๐ช
vaia.cloud
2026-09-20 07:25:02
(4 weeks ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
๐ฆ๐บ
rubixstudios
2026-09-20 06:55:03
(4 weeks ago)
Excessive HTTP requests consistent with automated attack behaviour detected by Imunify360
DDoS Attack
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-20 05:14:34
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.93.249.73 (73.249.93.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.93.249.73 (73.249.93.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 01:14:30.821424 2026] [security2:error] [pid 25356:tid 25356] [client 34.93.249.73:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vidacellenlaweb.com"] [uri "/.git/config"] [unique_id "aq9rtpiaxLxs-qaFLu7vGQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
ger-stg-sifi1
2026-09-20 04:18:02
(4 weeks ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-20 03:35:16
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.93.249.73 (73.249.93.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.93.249.73 (73.249.93.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 23:35:08.828800 2026] [security2:error] [pid 30655:tid 30655] [client 34.93.249.73:53476] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "victotex.com"] [uri "/.git/config"] [unique_id "aq9UbNmi2x86ateqIB_aOQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
BlueWire Hosting
2026-09-20 01:09:15
(4 weeks ago)
High-confidence malicious configuration/VCS probe
Web App Attack
๐ฉ๐ช
BlueWire Hosting
2026-09-18 09:38:09
(1 month ago)
High-confidence malicious configuration/VCS probe
Web App Attack
๐จ๐ฆ
Anytech
2026-09-18 06:52:42
(1 month ago)
Blocked by ConnMonitor
Web App Attack
๐ซ๐ท
dynamix
2026-09-16 18:35:48
(1 month ago)
Multiple WAF Violations
Web App Attack
๐ช๐ธ
Francisco Vallejo
2026-09-16 17:16:36
(1 month ago)
[Wed Sep 16 19:16:35.511360 2026] [authz_core:error] [pid 2537235:tid 126542948591296] [client 34.93 ...
show more
[Wed Sep 16 19:16:35.511360 2026] [authz_core:error] [pid 2537235:tid 126542948591296] [client 34.93.249.73:54922] AH01630: client denied by server configuration: proxy:http://localhost:8096/
[Wed Sep 16 19:16:35.660284 2026] [authz_core:error] [pid 2537235:tid 126544139765440] [client 34.93.249.73:54922] AH01630: client denied by server configuration: proxy:http://localhost:8096/
[Wed Sep 16 19:16:35.808527 2026] [authz_core:error] [pid 2537235:tid 126544248805056] [client 34.93.249.73:54922] AH01630: client denied by server configuration: proxy:http://localhost:8096/
[Wed Sep 16 19:16:35.957146 2026] [authz_core:error] [pid 2537235:tid 126543242172096] [client 34.93.249.73:54922] AH01630: client denied by server configuration: proxy:http://localhost:8096/
[Wed Sep 16 19:16:36.106010 2026] [authz_core:error] [pid 2537235:tid 126544114587328] [client 34.93.249.73:54922] AH01630: client denied by server configuration: proxy:http://localhost:8096/.git/config
...
show less
Brute-Force
SSH
๐ฉ๐ช
Gwyneth Llewelyn
2026-09-16 16:59:29
(1 month ago)
2026/09/16 17:59:18 [error] 1464671#1464671: *117522 access forbidden by rule, client: 34.93.249.73, ...
show more
2026/09/16 17:59:18 [error] 1464671#1464671: *117522 access forbidden by rule, client: 34.93.249.73, server: video.betatechnologies.info, request: "GET /.env HTTP/2.0", host: "video.betatechnologies.info"
34.93.249.73 - - [16/Sep/2026:17:59:18 +0100] "GET /.env HTTP/2.0" 403 1045 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
2026/09/16 17:59:27 [error] 1464671#1464671: *117522 access forbidden by rule, client: 34.93.249.73, server: video.betatechnologies.info, request: "GET /app/.env HTTP/2.0", host: "video.betatechnologies.info"
show less
Brute-Force
Web App Attack
๐ช๐ธ
pipeline.es
2026-09-16 16:11:22
(1 month ago)
Web scanning / probing for vulnerable paths | URL: /crm/.env | Evidence: vidatour.com.br 34.93.249.7 ...
show more
Web scanning / probing for vulnerable paths | URL: /crm/.env | Evidence: vidatour.com.br 34.93.249.73 - - [16/Sep/2026:18:10:38 +0200] \"GET /crm/.env HTTP/1.1\" 404 19115 \"-\" \"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\" GEOIP_COUNTRY_CODE=IN | ASN: GOOGLE-CLOUD-PLATFORM | Country: IN
show less
Port Scan
Web App Attack
๐ฉ๐ช
ger-stg-sifi1
2026-09-16 15:21:37
(1 month ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-16 14:42:34
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.93.249.73 (73.249.93.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.93.249.73 (73.249.93.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 10:42:27.564665 2026] [security2:error] [pid 3440:tid 3440] [client 34.93.249.73:54640] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "victorvictor.biz"] [uri "/.git/config"] [unique_id "aqqq0xchfr24OvS2FkK_rgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack