2026-08-28 04:36:02
(2 hours ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
2026-08-27 22:15:40
(9 hours ago)
WordPress Enforcement Protection.
Web App Attack
🇧🇾
lns.bz
2026-08-27 22:14:07
(9 hours ago)
.env scanning [BY]
Web App Attack
🇺🇸
mnsf
2026-08-27 20:05:14
(11 hours ago)
Abuse Detected (10)
Brute-Force
Web App Attack
🇬🇧
Shadymint
2026-08-27 19:50:55
(11 hours ago)
cms login attempt from IP marked as abusive
Web App Attack
🇩🇪
Hazzard
2026-08-27 19:17:09
(12 hours ago)
(mod_security) mod_security triggered on hostname [redacted]): (CF_ENABLE)
SQL Injection
🇺🇸
TPI-Abuse
2026-08-27 18:47:16
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.69.214.44 (44.214.69.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.69.214.44 (44.214.69.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 14:47:07.546198 2026] [security2:error] [pid 2544:tid 2544] [client 34.69.214.44:38404] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.wiki.juncurryahn.com"] [uri "/.env.bak"] [unique_id "apCGK8G6RGieDn7gYkVasAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
vaia.cloud
2026-08-27 18:20:04
(13 hours ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack
🇫🇷
dynamix
2026-08-27 18:15:49
(13 hours ago)
Multiple WAF Violations
Web App Attack
🇨🇭
4server
2026-08-27 17:50:46
(13 hours ago)
[ThuAug2719:50:39.5176802026][security2:error][pid1905150:tid1905264][client34.69.214.44:0]ModSecuri ...
show more
[ThuAug2719:50:39.5176802026][security2:error][pid1905150:tid1905264][client34.69.214.44:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"610\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"www.whatsdecor.ch\"][uri\"/.env.old\"][unique_id\"apB47_QKWVx-omcnXRC7qwAAAUQ\"]
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-08-27 16:19:29
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.69.214.44 (44.214.69.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.69.214.44 (44.214.69.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 12:19:22.433759 2026] [security2:error] [pid 25179:tid 25179] [client 34.69.214.44:33678] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.jonnyonthespot.biz"] [uri "/.env.production"] [unique_id "apBjimaBWiBhqu3o6gAUrwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
webanyone
2026-08-27 16:01:46
(15 hours ago)
WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail
Web App Attack
🇺🇸
TPI-Abuse
2026-08-27 15:31:55
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.69.214.44 (44.214.69.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.69.214.44 (44.214.69.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 11:31:45.957390 2026] [security2:error] [pid 12315:tid 12358] [client 34.69.214.44:51362] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.clinicadelparabrisas.com.venezuelaguia.com"] [uri "/wp-config.php~"] [unique_id "apBYYToMFjjy67VRK2y_AAAAAEs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
maxpower
2026-08-27 15:27:43
(16 hours ago)
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 34.69.214.44 (US/United States/44.214.69 ...
show more
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 34.69.214.44 (US/United States/44.214.69.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.69.214.44 - - [27/Aug/2026:17:27:40 +0200] "GET /wp-config.php.bak HTTP/1.1" 200 11920 "-" "crusader-worker/1.0" "-" host=hosting.mediaqualitylab.com
show less
Port Scan
🇳🇱
e.fierstra
2026-08-27 14:59:49
(16 hours ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack