๐ฒ๐พ
Rizzy
2026-08-31 15:52:01
(3 hours ago)
Multiple WAF Violations
Brute-Force
Web App Attack
๐ฎ๐น
CoreTech srl
2026-08-31 14:43:56
(4 hours ago)
cloudlinux2 fail2ban: 2026-08-31 16:39:19,249 fail2ban.filter [1605]: INFO [plesk-modsecu ...
show more
cloudlinux2 fail2ban: 2026-08-31 16:39:19,249 fail2ban.filter [1605]: INFO [plesk-modsecurity] Found 85.10.140.160 - 2026-08-31 16:39:19cloudlinux2 fail2ban: 2026-08-31 16:39:15,886 fail2ban.filter [1605]: INFO [plesk-wordpress] Found 89.253.113.4 - 2026-08-31 16:39:15cloudlinux2 fail2ban: 2026-08-31 16:39:18,321 fail2ban.filter [1605]: INFO [plesk-modsecurity] Found 85.10.140.160 - 2026-08-31 16:39:18cloudlinux2 fail2ban: 2026-08-31 16:39:36,944 fail2ban.filter [1605]: INFO [plesk-wordpress] Found 114.202.1.216 - 2026-08-31 16:39:36cloudlinux2 fail2ban: 2026-08-31 16:40:46,444 fail2ban.filter [1605]: INFO [plesk-modsecurity] Found 34.158.124.90 - 2026-08-31 16:40:46cloudlinux2 fail2ban: 2026-08-31 16:40:45,346 fail2ban.filter [1605]: INFO [plesk-modsecurity] Found 34.158.124.90 - 2026-08-31 16:40:45cloudlinux2 fail2ban: 2026-08-31 16:40:53,676 fail2ban.filter [1605]: INFO [plesk-wordpress] Found 90.28.192.77 - 2026-08-31 16:40:52clo
show less
Web App Attack
๐ซ๐ฎ
paissangroup
2026-08-31 13:41:08
(5 hours ago)
Multiple WAF Violations
Web App Attack
๐ณ๐ฑ
Mangelot Hosting
2026-08-31 12:38:01
(6 hours ago)
(modsecurity) srv201 ModSecurity 35.186.153.247 (SG/Singapore/247.153.186.35.bc.googleusercontent.co ...
show more
(modsecurity) srv201 ModSecurity 35.186.153.247 (SG/Singapore/247.153.186.35.bc.googleusercontent.com): 30 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-31 11:46:42
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.186.153.247 (247.153.186.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.186.153.247 (247.153.186.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 07:46:35.333357 2026] [security2:error] [pid 3924:tid 3949] [client 35.186.153.247:59324] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.corianworks.conceptsinammunition.com"] [uri "/.git/config"] [unique_id "apVpm54h89yU5KpgIxoN5wAAARU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
EGP Abuse Dept
2026-08-31 10:59:46
(8 hours ago)
Scanning for web/db/file exploits on www.corefinance.nl
SQL Injection
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-31 08:48:42
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.186.153.247 (247.153.186.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.186.153.247 (247.153.186.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 04:48:36.666810 2026] [security2:error] [pid 10682:tid 10682] [client 35.186.153.247:40614] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.copiersasheville.computersraleigh.com"] [uri "/.git/config"] [unique_id "apU_5HBZtJi65VxxHmda3QAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-08-31 08:34:23
(10 hours ago)
Banned by Fail2Ban on server
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-31 08:28:32
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.186.153.247 (247.153.186.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.186.153.247 (247.153.186.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 04:28:23.685863 2026] [security2:error] [pid 5929:tid 5929] [client 35.186.153.247:56534] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.copa.gabosoftware.com"] [uri "/.git/config"] [unique_id "apU7J__WrQXBUy34-LcvBAAAACE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
big-cloud.nl
2026-08-31 07:22:52
(11 hours ago)
Try to access /.git/config
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-31 07:10:35
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.186.153.247 (247.153.186.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.186.153.247 (247.153.186.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 03:10:30.461381 2026] [security2:error] [pid 23587:tid 23587] [client 35.186.153.247:33114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.coolcustomproducts.benshermanguitar.com"] [uri "/.git/config"] [unique_id "apUo5qk0DCn_0yFCIXFf9wAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-31 06:14:34
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.186.153.247 (247.153.186.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.186.153.247 (247.153.186.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 02:14:29.697193 2026] [security2:error] [pid 9387:tid 9387] [client 35.186.153.247:38736] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cook-islands-boat-registration.com.boatregistrationdelaware.com"] [uri "/.git/config"] [unique_id "apUbxW06b8oXuC7QHXD42gAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-31 05:55:37
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.186.153.247 (247.153.186.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.186.153.247 (247.153.186.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 01:55:30.549089 2026] [security2:error] [pid 8556:tid 8556] [client 35.186.153.247:39398] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.conveyorizedovens.com.daveweisman.com"] [uri "/.git/config"] [unique_id "apUXUquTmlwq3pTspfmvTAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
Octopuce
2026-08-31 05:40:09
(13 hours ago)
Aggressive web search of vulnerable pages: /.env /.env.local /app/.env /apps/.env /api/.env ...
Web App Attack
๐ฉ๐ช
LRob
2026-08-31 05:27:22
(13 hours ago)
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: ...
show more
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: /.git/config (+1 more) | 2026-08-31 05:27 UTC
show less
Hacking
Web App Attack