Anonymous
2026-11-06 20:14:52
UTC ·
(7 hours ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇲🇾
Rizzy
2026-11-06 20:09:12
UTC ·
(7 hours ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇪🇸
masterguru
2026-11-06 19:02:59
UTC ·
(8 hours ago)
Inbound Anomaly Score Exceeded (Total Score: 5). Operator GE matched 5 at TX:anomaly_score. (949110-122)
Hacking
🇺🇸
TPI-Abuse
2026-11-06 18:12:20
UTC ·
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.21.174.44 (44.174.21.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 13:12:16.541063 2026] [security2:error] [pid 17980:tid 17 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.21.174.44 (44.174.21.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 13:12:16.541063 2026] [security2:error] [pid 17980:tid 17980] [client 34.21.174.44:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.marshallcurry.com"] [uri "/v1/.env"] [unique_id "au4YgCY1e12voKIuiQ7JZwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇷🇴
gtheo99
2026-11-06 17:48:34
UTC ·
(9 hours ago)
(mod_security) mod_security (id:900006) triggered by 34.21.174.44 (SG/Singapore/44.174.21.34.bc.googleusercontent.com): 3 in the last 900 secs (CF_ENABLE)
Port Scan
🇿🇦
hostsec_za
2026-11-06 17:45:08
UTC ·
(9 hours ago)
cPanel/Webmail Auth Attack. 140 failed logins in 1 hour.
Brute-Force
Anonymous
2026-11-06 17:43:50
UTC ·
(9 hours ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇪🇸
masterguru
2026-11-06 16:27:38
UTC ·
(11 hours ago)
BAD BOT - Detected and Blocked.. Matched phrase "claudebot" at REQUEST_HEADERS:User-Agent. (1100000-122)
Bad Web Bot
🇺🇸
TPI-Abuse
2026-11-06 16:21:31
UTC ·
(11 hours ago)
(mod_security) mod_security (id:210730) triggered by 34.21.174.44 (44.174.21.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 11:21:24.970786 2026] [security2:error] [pid 18721:tid 18 ...
show more
(mod_security) mod_security (id:210730) triggered by 34.21.174.44 (44.174.21.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 11:21:24.970786 2026] [security2:error] [pid 18721:tid 18721] [client 34.21.174.44:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||mail.local639.com|F|2"] [data ".local639.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mail.local639.com"] [uri "/z9x8c7v6b5-debug-trigger-mail.local639.com"] [unique_id "au3-hFnEBMctz2aheCrCOwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
4server
2026-11-06 16:15:06
UTC ·
(11 hours ago)
[FriNov0617:14:59.4117462026][security2:error][pid2609627:tid2609696][client34.21.174.44:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"710\"][id\"960720 ...
show more
[FriNov0617:14:59.4117462026][security2:error][pid2609627:tid2609696][client34.21.174.44:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"710\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"whm.mio-ip.ch\"][uri\"/config.env\"][unique_id\"au39A67-m1lYt6KYVDsDkQAAAIY\"]
show less
Hacking
Web App Attack
Anonymous
2026-11-06 15:44:08
UTC ·
(11 hours ago)
IP matched detection query Detection of too many failed responses.
Brute-Force
Bad Web Bot
Hacking
🇺🇸
TPI-Abuse
2026-11-06 15:35:54
UTC ·
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.21.174.44 (44.174.21.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 10:35:51.228182 2026] [security2:error] [pid 1483738:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.21.174.44 (44.174.21.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 10:35:51.228182 2026] [security2:error] [pid 1483738:tid 1483779] [client 34.21.174.44:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.mindgardens.com"] [uri "/.env.development.local"] [unique_id "au3z13b-e35rpyFXgruoWwAAAEI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇿🇦
conure.sh
2026-11-06 14:44:23
UTC ·
(12 hours ago)
csagent: score 20.7: 404 noise floor x3, secrets grab x2; 1 domain(s) in 7s
Web App Attack
🇫🇷
dynamix
2026-11-06 14:26:26
UTC ·
(13 hours ago)
Multiple WAF Violations
Web App Attack
🇫🇷
Zundapper
2026-11-06 14:14:26
UTC ·
(13 hours ago)
34.21.174.44 - - [06/Nov/2026:15:14:24 +0100] "GET /robots.txt HTTP/2.0" 404 106 "https://www.modulilaser.com/robots.txt" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
34.21.174.44 - - [06/Nov/2026:15:14:25 +0100] "GET /sitemap.xml HTTP/ ...
show more
34.21.174.44 - - [06/Nov/2026:15:14:24 +0100] "GET /robots.txt HTTP/2.0" 404 106 "https://www.modulilaser.com/robots.txt" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
34.21.174.44 - - [06/Nov/2026:15:14:25 +0100] "GET /sitemap.xml HTTP/2.0" 404 106 "https://www.modulilaser.com/sitemap.xml" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )"
34.21.174.44 - - [06/Nov/2026:15:14:25 +0100] "GET /sitemap_index.xml HTTP/2.0" 404 106 "https://www.modulilaser.com/sitemap_index.xml" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
34.21.174.44 - - [06/Nov/2026:15:14:25 +0100] "GET /internal HTTP/2.0" 404 167 "https://www.modulilaser.com/internal" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36"
34.21.174.44 - - [06/Nov/2026:15:14:25 +0100] "GET /billing HTTP/2.0" 404 167 "https://www.modulilaser.com/billing" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKi
...
show less
Web App Attack
Port Scan