2026-11-11 16:37:32
UTC ·
(3 days ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
🇳🇱
ConsulHosting
2026-11-05 10:10:13
UTC ·
(1 week ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
🇳🇱
Site.eu
2026-11-05 08:35:14
UTC ·
(1 week ago)
Scanning for secret files (.env, .git, credentials, config backups)
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 06:03:58
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.141.77.179 (179.77.141.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 01:03:50.878413 2026] [security2:error] [pid 4118:tid 4 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.141.77.179 (179.77.141.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 01:03:50.878413 2026] [security2:error] [pid 4118:tid 4118] [client 34.141.77.179:59766] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.etoyfun.com"] [uri "/.env.keys"] [unique_id "auwcRrKizK1nQInVWLXbZgAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇿🇦
Megasurf
2026-11-05 04:24:34
UTC ·
(1 week ago)
web application attack (blocked by the web application firewall). Blocked automatically by our firewall (LF_MODSEC).
Web App Attack
🇿🇦
hostsec_za
2026-11-05 04:10:07
UTC ·
(1 week ago)
cPanel/Webmail Auth Attack. 391 failed logins in 24 hours.
Brute-Force
🇩🇪
4server
2026-11-05 03:37:21
UTC ·
(1 week ago)
[ThuNov0504:37:18.8547192026][security2:error][pid3493825:tid3493911][client34.141.77.179:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:queryintrospectionquery\?\|__schema\\\\\\\\\?{\?\(\?:querytype\|types\?\)\)\?\\\\\\\\{\"atREQ ...
show more
[ThuNov0504:37:18.8547192026][security2:error][pid3493825:tid3493911][client34.141.77.179:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:queryintrospectionquery\?\|__schema\\\\\\\\\?{\?\(\?:querytype\|types\?\)\)\?\\\\\\\\{\"atREQUEST_BODY.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"234\"][id\"344378\"][rev\"2\"][msg\"Atomicorp.comWAFRules:GraphQLInjectionAttackattempt\"][data\"MatchedData:__schema{types{foundwithinREQUEST_BODY:{\\\\x22query\\\\x22:\\\\x22{__schema{types{namefields{nameargs{namedefaultvalue}}}}}\\\\x22}\"][severity\"CRITICAL\"][tag\"SQLi\"][hostname\"formet.ch\"][uri\"/graphql\"][unique_id\"auv57sUIQykn8RUzOSEBWAAAAJI\"]\,referer:https://formet.ch
show less
Port Scan
Brute-Force
Web App Attack
🇦🇺
rubixstudios
2026-11-05 03:22:02
UTC ·
(1 week ago)
Excessive HTTP requests consistent with automated attack behaviour detected by Imunify360
DDoS Attack
Brute-Force
Web App Attack
2026-11-05 03:05:06
UTC ·
(1 week ago)
Blocked by ModSec and CSF
Port Scan
🇸🇬
Cloudkul Cloudkul
2026-11-05 02:38:05
UTC ·
(1 week ago)
Attempted Not Found (404 status code) requests on our application, more than 30% of their total requests.
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 02:29:58
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.141.77.179 (179.77.141.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 21:29:52.320509 2026] [security2:error] [pid 4469:tid 4 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.141.77.179 (179.77.141.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 21:29:52.320509 2026] [security2:error] [pid 4469:tid 4469] [client 34.141.77.179:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "forsaleincr.com"] [uri "/.env.production.bak"] [unique_id "auvqII_a8nay8gTJ-9_AkQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
artful
2026-11-05 02:19:00
UTC ·
(1 week ago)
Excessive errors in recent hours
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 01:44:46
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.141.77.179 (179.77.141.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 20:44:41.209662 2026] [security2:error] [pid 9053:tid 9 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.141.77.179 (179.77.141.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 20:44:41.209662 2026] [security2:error] [pid 9053:tid 9053] [client 34.141.77.179:60782] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.esslinger.us"] [uri "/wp/.env"] [unique_id "auvfiYbDKbwQdv1kAUyMhwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
masterguru
2026-11-05 00:28:32
UTC ·
(1 week ago)
BAD BOT - Detected and Blocked.. Matched phrase "baidu" at REQUEST_HEADERS:User-Agent. (1100000-122)
Bad Web Bot
🇫🇷
rellik
2026-11-04 23:51:00
UTC ·
(1 week ago)
Brute Force Scanning Critical Files & Directories
Hacking
Brute-Force
Web App Attack
