๐บ๐ธ
TPI-Abuse
2026-10-02 15:34:41
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 34.118.176.47 (47.176.118.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.118.176.47 (47.176.118.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 11:34:35.159046 2026] [security2:error] [pid 554:tid 554] [client 34.118.176.47:49138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.ruthbalser.org"] [uri "/.htpasswd"] [unique_id "ar_PCwEjazJk7H7rc4x9cAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
bazter.pro
2026-10-02 13:40:57
(6 days ago)
Fail2Ban: plesk-bot-aggressive - 15 failures
Port Scan
Bad Web Bot
Web App Attack
๐ซ๐ท
LoneRider
2026-10-02 13:31:51
(6 days ago)
[02/Oct/2026:15:31:49.721869 +0200] ar-yRRL_Vn5avQ3fclYGLAAAAAM 34.118.176.47 56652 127.0.0.1 7081
[ ...
show more
[02/Oct/2026:15:31:49.721869 +0200] ar-yRRL_Vn5avQ3fclYGLAAAAAM 34.118.176.47 56652 127.0.0.1 7081
[02/Oct/2026:15:31:49.725289 +0200] ar-yRbKYXFlc5WhhC6cayQAAAAA 34.118.176.47 56656 127.0.0.1 7081
[02/Oct/2026:15:31:50.082270 +0200] ar-yRtdbZ5IZj8n-jdOQsQAAAAU 34.118.176.47 59266 127.0.0.1 7081
...
show less
Hacking
๐บ๐ธ
TPI-Abuse
2026-10-02 12:49:07
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 34.118.176.47 (47.176.118.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.118.176.47 (47.176.118.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 08:49:02.071193 2026] [security2:error] [pid 16289:tid 16289] [client 34.118.176.47:41916] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bayareahiphopforever.org"] [uri "/static../.env"] [unique_id "ar-oPlWsspWp2kvqVL3rxQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
EvilTurkey
2026-10-02 12:21:57
(6 days ago)
Web app attack against financial institution website.
Web App Attack
Hacking
๐บ๐ธ
TPI-Abuse
2026-10-02 11:43:45
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 34.118.176.47 (47.176.118.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.118.176.47 (47.176.118.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 07:43:39.976751 2026] [security2:error] [pid 4723:tid 4723] [client 34.118.176.47:41230] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.mvscouts.org"] [uri "/cache/original/%2e%2e/.env"] [unique_id "ar-Y6yQOc3N0HMKVUOb4zQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
melroy89
2026-10-02 11:18:01
(6 days ago)
2026/10/02 13:18:00 [error] 1985743#1985743: *378175 limiting requests, excess: 5.194 by zone "ip", ...
show more
2026/10/02 13:18:00 [error] 1985743#1985743: *378175 limiting requests, excess: 5.194 by zone "ip", client: "34.118.176.47", server: "_", request_line: "GET /.env.js HTTP/1.1", host: "cryptoterminal.org"
2026/10/02 13:18:01 [error] 1985743#1985743: *378175 limiting requests, excess: 5.426 by zone "ip", client: "34.118.176.47", server: "_", request_line: "GET /sw.js HTTP/1.1", host: "cryptoterminal.org"
2026/10/02 13:18:01 [error] 1985743#1985743: *378156 limiting requests, excess: 5.198 by zone "ip", client: "34.118.176.47", server: "_", request_line: "GET /aws-exports.js HTTP/1.1", host: "cryptoterminal.org"
...
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-02 11:06:29
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 34.118.176.47 (47.176.118.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.118.176.47 (47.176.118.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 07:06:25.533368 2026] [security2:error] [pid 26116:tid 26116] [client 34.118.176.47:60444] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.adultandchild.org"] [uri "/cache/original/%2e%2e/%2e%2e/.env"] [unique_id "ar-QMWzv3akWhgDoFDXj9AAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-02 10:27:55
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 34.118.176.47 (47.176.118.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.118.176.47 (47.176.118.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 06:27:51.246314 2026] [security2:error] [pid 14345:tid 14345] [client 34.118.176.47:39378] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.thepinman.org"] [uri "/assets../.env"] [unique_id "ar-HJ0h0wGLQRoO2ilbXYwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-02 09:28:13
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 34.118.176.47 (47.176.118.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.118.176.47 (47.176.118.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 05:28:05.705842 2026] [security2:error] [pid 9566:tid 9566] [client 34.118.176.47:54744] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.joplinlittletheatre.org"] [uri "/static../.env"] [unique_id "ar95JYIAs84cSsXyub6nSAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-02 08:37:56
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 34.118.176.47 (47.176.118.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.118.176.47 (47.176.118.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 04:37:51.620340 2026] [security2:error] [pid 26930:tid 26930] [client 34.118.176.47:38546] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.thenewplantation.org"] [uri "/.env"] [unique_id "ar9tX65h8GMF37YYUVnAxAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-02 08:20:01
(6 days ago)
suspicious request in access.log
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-02 08:12:47
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 34.118.176.47 (47.176.118.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.118.176.47 (47.176.118.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 04:12:42.260443 2026] [security2:error] [pid 4715:tid 4715] [client 34.118.176.47:46660] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "glendaleheritage.org"] [uri "/@fs/app/.env"] [unique_id "ar9nemHNHFHzbSjLtwl4YgAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-02 07:53:16
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 34.118.176.47 (47.176.118.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.118.176.47 (47.176.118.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 03:53:11.123739 2026] [security2:error] [pid 4125:tid 4125] [client 34.118.176.47:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ruralcommunitycare.org"] [uri "/.htpasswd"] [unique_id "ar9i5_fTcxss5hJUnp0TjgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-02 07:37:56
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 34.118.176.47 (47.176.118.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.118.176.47 (47.176.118.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 03:37:51.088267 2026] [security2:error] [pid 22519:tid 22519] [client 34.118.176.47:39130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.thesilverlegion.org"] [uri "/static../.env"] [unique_id "ar9fTxY1Z7Q2h0nHz-EASwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack