🇺🇸
TPI-Abuse
2026-11-06 15:28:04
UTC ·
(24 minutes ago)
(mod_security) mod_security (id:210492) triggered by 34.12.247.54 (54.247.12.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 10:28:01.071979 2026] [security2:error] [pid 11482:tid 11 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.12.247.54 (54.247.12.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 10:28:01.071979 2026] [security2:error] [pid 11482:tid 11482] [client 34.12.247.54:5766] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "terakilbride.socalcomedyclub.com"] [uri "/.git/HEAD"] [unique_id "au3yAWW8A7KvgEVmnvB9gwAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇹
penguin-solutions.at
2026-11-06 14:33:01
UTC ·
(1 hour ago)
Excessive 403/404 errors
...
Brute-Force
Web App Attack
2026-11-06 14:07:39
UTC ·
(1 hour ago)
34.12.247.54 - - [06/Nov/2026:15:07:38 +0100] "GET /.env HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
Web App Attack
🇩🇪
McClay
2026-11-06 13:14:11
UTC ·
(2 hours ago)
HTTP-404 spam:34.12.247.54 - - [06/Nov/2026:14:14:09 +0100] "GET /stats.json HTTP/1.1" 404 995 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.12.247.54 - - [06/Nov/2026:14:14:0 ...
show more
HTTP-404 spam:34.12.247.54 - - [06/Nov/2026:14:14:09 +0100] "GET /stats.json HTTP/1.1" 404 995 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.12.247.54 - - [06/Nov/2026:14:14:09 +0100] "GET /.git/HEAD HTTP/1.1" 404 995 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.12.247.54 - - [06/Nov/2026:14:14:09 +0100] "GET /_next/static/chunks/framework.js HTTP/1.1" 404 995 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.12.247.54 - - [06/Nov/2026:14:14:10 +0100] "GET /asset-manifest.json HTTP/1.1" 404 995 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.12.247.54 - - [06/Nov/2026:14:14:10 +0100] "GET /bundle.js.map HTTP/1.1" 404 995 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chro
...
show less
Web App Attack
🇳🇱
Savvii
2026-11-06 10:06:04
UTC ·
(5 hours ago)
20 attempts against mh-misbehave-ban on ozone
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-11-06 09:21:53
UTC ·
(6 hours ago)
Web attack/malicious scanning detected
Web App Attack
2026-11-06 09:13:31
UTC ·
(6 hours ago)
Web application attack detected.
Web App Attack
🇫🇷
IRISIO
2026-11-06 08:55:12
UTC ·
(6 hours ago)
scans/SQL injection/spam posts : 118 queries
Web App Attack
SQL Injection
🇺🇸
TPI-Abuse
2026-11-06 08:31:27
UTC ·
(7 hours ago)
(mod_security) mod_security (id:248270) triggered by 34.12.247.54 (54.247.12.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 03:31:22.605264 2026] [security2:error] [pid 19105:tid 19 ...
show more
(mod_security) mod_security (id:248270) triggered by 34.12.247.54 (54.247.12.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 03:31:22.605264 2026] [security2:error] [pid 19105:tid 19127] [client 34.12.247.54:57494] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\$\\\\{jndi:(ldaps?|rmi|dns|iiop|nis|nds|corba|\\\\$\\\\{(?:lower|upper)):" at REQUEST_HEADERS:Referer. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "7626"] [id "248270"] [rev "1"] [msg "COMODO WAF: Remote code execution in Apache log4j||letterstomyhusband.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "letterstomyhusband.com"] [uri "/"] [unique_id "au2QWmmlTfnh8Mt-j0P-dwAAANQ"], referer: ${jndi:ldap://127.0.0.1/bifrost-probe}
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
CDO
2026-11-06 08:22:06
UTC ·
(7 hours ago)
URL Injection attempt detected. Automated web attack.
Hacking
Bad Web Bot
Web App Attack
🇿🇦
Megasurf
2026-11-06 06:55:53
UTC ·
(8 hours ago)
web application attack (blocked by the web application firewall). Blocked automatically by our firewall (LF_MODSEC).
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 05:43:55
UTC ·
(10 hours ago)
(mod_security) mod_security (id:248270) triggered by 34.12.247.54 (54.247.12.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 00:43:47.828602 2026] [security2:error] [pid 4430:tid 443 ...
show more
(mod_security) mod_security (id:248270) triggered by 34.12.247.54 (54.247.12.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 00:43:47.828602 2026] [security2:error] [pid 4430:tid 4430] [client 34.12.247.54:7986] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\$\\\\{jndi:(ldaps?|rmi|dns|iiop|nis|nds|corba|\\\\$\\\\{(?:lower|upper)):" at REQUEST_HEADERS:Referer. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "7626"] [id "248270"] [rev "1"] [msg "COMODO WAF: Remote code execution in Apache log4j||whiteweddinginvitations.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "whiteweddinginvitations.net"] [uri "/"] [unique_id "au1pE6TTjMHKgQIzzXHftgAAAA8"], referer: ${jndi:ldap://127.0.0.1/bifrost-probe}
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Aetherweb Ark
2026-11-06 05:43:05
UTC ·
(10 hours ago)
(mod_security) mod_security (id:949110) triggered by 34.12.247.54 (NL/The Netherlands/54.247.12.34.bc.googleusercontent.com): N in the last X secs
Web App Attack
🇳🇱
Alt255
2026-11-06 05:23:57
UTC ·
(10 hours ago)
[ti-09al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.12.247.54 - - [06/Nov/2026:06:23:37 +0100] "GET /.git/HEAD HTTP/1.1" 301 5866 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.3 ...
show more
[ti-09al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.12.247.54 - - [06/Nov/2026:06:23:37 +0100] "GET /.git/HEAD HTTP/1.1" 301 5866 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇩🇪
big-cloud.nl
2026-11-06 05:23:54
UTC ·
(10 hours ago)
Try to access /.git/HEAD
Web App Attack
