๐ซ๐ท
masterguru
2026-10-21 07:05:10
(41 minutes ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-201)
Hacking
Web App Attack
๐ซ๐ท
masterguru
2026-10-21 06:07:42
(1 hour ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-196)
Hacking
Web App Attack
๐ณ๐ฑ
Site.eu
2026-10-21 06:07:25
(1 hour ago)
Excessive 404/403 errors
Brute-Force
๐ช๐ธ
robotstxt
2026-10-21 06:06:05
(1 hour ago)
34.97.21.42 - - [21/Oct/2026:06:05:45 +0000] "POST / HTTP/1.1" 403 23624 "-" "Mozilla/5.0 (X11; Linu ...
show more
34.97.21.42 - - [21/Oct/2026:06:05:45 +0000] "POST / HTTP/1.1" 403 23624 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.97.21.42"
34.97.21.42 - - [21/Oct/2026:06:05:45 +0000] "POST / HTTP/1.1" 403 23624 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.97.21.42"
34.97.21.42 - - [21/Oct/2026:06:05:46 +0000] "GET /.git/config HTTP/1.1" 403 31 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.97.21.42"
34.97.21.42 - - [21/Oct/2026:06:05:47 +0000] "GET /.env HTTP/1.1" 403 12527 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.97.21.42"
34.97.21.42 - - [21/Oct/2026:06:05:48 +0000] "GET /.env.local HTTP/1.1" 403 12527 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0
...
show less
Web App Attack
๐ฒ๐ฝ
octageeks.com
2026-10-21 04:25:54
(3 hours ago)
Wordpress malicious attack:[octablocked]
Web App Attack
๐ฎ๐น
CoreTech srl
2026-10-21 03:53:56
(3 hours ago)
cloudlinux2 fail2ban: 2026-10-21 05:49:06,388 fail2ban.filter [1488]: INFO [plesk-wordpre ...
show more
cloudlinux2 fail2ban: 2026-10-21 05:49:06,388 fail2ban.filter [1488]: INFO [plesk-wordpress] Found 196.176.230.124 - 2026-10-21 05:49:06cloudlinux2 fail2ban: 2026-10-21 05:49:57,927 fail2ban.filter [1488]: INFO [plesk-wordpress] Found 187.190.28.195 - 2026-10-21 05:49:57cloudlinux2 fail2ban: 2026-10-21 05:50:24,832 fail2ban.filter [1488]: INFO [plesk-modsecurity] Found 103.168.240.163 - 2026-10-21 05:50:24cloudlinux2 fail2ban: 2026-10-21 05:50:31,124 fail2ban.filter [1488]: INFO [plesk-wordpress] Found 37.55.4.10 - 2026-10-21 05:50:30cloudlinux2 fail2ban: 2026-10-21 05:50:26,604 fail2ban.filter [1488]: INFO [plesk-wordpress] Found 41.208.191.222 - 2026-10-21 05:50:26cloudlinux2 fail2ban: 2026-10-21 05:51:20,962 fail2ban.filter [1488]: INFO [plesk-modsecurity] Found 34.97.21.42 - 2026-10-21 05:51:20cloudlinux2 fail2ban: 2026-10-21 05:51:24,426 fail2ban.actions [1488]: NOTICE [plesk-modsecurity] Ban 34.97.21.42cloudlinux2 fail2ban: 2026-1
show less
Web App Attack
๐ฒ๐พ
Rizzy
2026-10-21 02:40:38
(5 hours ago)
Multiple WAF Violations
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-21 01:51:59
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.97.21.42 (42.21.97.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.97.21.42 (42.21.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 21:51:51.844706 2026] [security2:error] [pid 24615:tid 24666] [client 34.97.21.42:60786] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cosmeticdermatologist.aafm.us"] [uri "/.git/config"] [unique_id "atgat5bDl1mcTJXZG9iPdAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
masterguru
2026-10-21 00:51:17
(6 hours ago)
Remote Command Execution: Unix Command Injection (command without evasion). Pattern match "(?i)(?:b ...
show more
Remote Command Execution: Unix Command Injection (command without evasion). Pattern match "(?i)(?:b (932235-195)
show less
Hacking
๐ช๐ธ
robotstxt
2026-10-21 00:09:36
(7 hours ago)
34.97.21.42 - - [21/Oct/2026:00:08:34 +0000] "POST / HTTP/1.1" 403 23624 "-" "Mozilla/5.0 (X11; Linu ...
show more
34.97.21.42 - - [21/Oct/2026:00:08:34 +0000] "POST / HTTP/1.1" 403 23624 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.97.21.42"
34.97.21.42 - - [21/Oct/2026:00:08:35 +0000] "POST / HTTP/1.1" 403 23624 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.97.21.42"
34.97.21.42 - - [21/Oct/2026:00:08:35 +0000] "GET /.git/config HTTP/1.1" 403 31 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.97.21.42"
34.97.21.42 - - [21/Oct/2026:00:08:36 +0000] "GET /.env HTTP/1.1" 403 12527 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.97.21.42"
34.97.21.42 - - [21/Oct/2026:00:08:37 +0000] "GET /.env.local HTTP/1.1" 403 12527 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0
...
show less
Web App Attack
๐ซ๐ท
dynamix
2026-10-21 00:01:22
(7 hours ago)
Multiple WAF Violations
Web App Attack
๐ณ๐ฑ
Site.eu
2026-10-20 23:59:23
(7 hours ago)
Excessive multi-domain requests
Brute-Force
๐บ๐ธ
TPI-Abuse
2026-10-20 22:42:14
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.97.21.42 (42.21.97.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.97.21.42 (42.21.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 18:42:10.053122 2026] [security2:error] [pid 13922:tid 13922] [client 34.97.21.42:38736] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cortona.ws.montepulciano.org"] [uri "/.git/config"] [unique_id "atfuQquZq4Fxw6A1qRQUoQAAADU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฎ๐น
CoreTech srl
2026-10-20 21:53:59
(9 hours ago)
cloudlinux2 fail2ban: 2026-10-20 23:49:05,752 fail2ban.filter [1957]: INFO [plesk-wordpre ...
show more
cloudlinux2 fail2ban: 2026-10-20 23:49:05,752 fail2ban.filter [1957]: INFO [plesk-wordpress] Found 36.71.155.102 - 2026-10-20 23:49:05cloudlinux2 fail2ban: 2026-10-20 23:49:05,438 fail2ban.filter [1957]: INFO [plesk-wordpress] Found 190.245.114.81 - 2026-10-20 23:49:03cloudlinux2 fail2ban: 2026-10-20 23:49:12,477 fail2ban.filter [1957]: INFO [plesk-wordpress] Found 88.164.14.32 - 2026-10-20 23:49:12cloudlinux2 fail2ban: 2026-10-20 23:49:47,601 fail2ban.filter [1957]: INFO [plesk-wordpress] Found 186.6.248.227 - 2026-10-20 23:49:47cloudlinux2 fail2ban: 2026-10-20 23:51:15,174 fail2ban.filter [1957]: INFO [plesk-modsecurity] Found 34.97.21.42 - 2026-10-20 23:51:15cloudlinux2 fail2ban: 2026-10-20 23:51:12,109 fail2ban.filter [1957]: INFO [plesk-modsecurity] Found 34.97.21.42 - 2026-10-20 23:51:12cloudlinux2 fail2ban: 2026-10-20 23:51:15,554 fail2ban.actions [1957]: NOTICE [plesk-modsecurity] Ban 34.97.21.42cloudlinux2 fail2ban: 2026-10-20
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-20 19:38:01
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.97.21.42 (42.21.97.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.97.21.42 (42.21.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 15:37:55.262663 2026] [security2:error] [pid 28679:tid 28679] [client 34.97.21.42:47212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.correo.gisur.com"] [uri "/.git/config"] [unique_id "atfDE4UrgSiEC4YTT9KVGwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack