Anonymous
2026-10-24 18:39:42
(52 minutes ago)
2026/10/24 20:39:40 [error] 1221#1221: *26014 access forbidden by rule, client: 34.22.209.113, serve ...
show more
2026/10/24 20:39:40 [error] 1221#1221: *26014 access forbidden by rule, client: 34.22.209.113, server: sahpa.co.za, request: "GET /dist/.vite/manifest.json HTTP/2.0", host: "sahpa.co.za"
2026/10/24 20:39:40 [error] 1221#1221: *26014 access forbidden by rule, client: 34.22.209.113, server: sahpa.co.za, request: "GET /.vite/manifest.json HTTP/2.0", host: "sahpa.co.za"
2026/10/24 20:39:41 [error] 1221#1221: *26014 access forbidden by rule, client: 34.22.209.113, server: sahpa.co.za, request: "GET /.aws/credentials HTTP/2.0", host: "sahpa.co.za"
...
show less
Hacking
Web App Attack
๐ซ๐ฎ
paissangroup
2026-10-24 18:38:58
(53 minutes ago)
Multiple WAF Violations
Web App Attack
๐ฉ๐ช
palla89
2026-10-24 16:55:17
(2 hours ago)
(mod_security) mod_security triggered on hostname [redacted] 34.22.209.113 (BE/Belgium/113.209.22.34 ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.22.209.113 (BE/Belgium/113.209.22.34.bc.googleusercontent.com)
show less
SQL Injection
๐ณ๐ฑ
Eric
2026-10-24 16:27:38
(3 hours ago)
[Sat Oct 24 16:27:35.583482 2026] [security2:error] [pid 3081458:tid 3081458] [client 34.22.209.113: ...
show more
[Sat Oct 24 16:27:35.583482 2026] [security2:error] [pid 3081458:tid 3081458] [client 34.22.209.113:0] [client 34.22.209.113] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "pop-the-slots.com"] [uri "/z9x8c7v6b5-debug-trigger-pop-the-slots.com"] [unique_id "atzcd0uzy4ul_8p6kkYIxwAAAFc"]
[Sat Oct 24 16:27:36.582592 2026] [security2:error] [pid 3081466:tid 3081466] [client 34.22.209.113:0] [client 34.22.209.113] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Scor
...
show less
Hacking
Web App Attack
๐ง๐ช
voormedia
2026-10-24 15:55:08
(3 hours ago)
Accessed trap at '/docker-compose.yml'
Web App Attack
๐ช๐ธ
robotstxt
2026-10-24 15:43:05
(3 hours ago)
34.22.209.113 - - [24/Oct/2026:15:42:39 +0000] "GET /robots.txt HTTP/2.0" 403 135 "-" "Mozilla/5.0 A ...
show more
34.22.209.113 - - [24/Oct/2026:15:42:39 +0000] "GET /robots.txt HTTP/2.0" 403 135 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )" "-" edge="34.22.209.113"
34.22.209.113 - - [24/Oct/2026:15:42:41 +0000] "GET /sitemap.xml HTTP/2.0" 403 20 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" "-" edge="34.22.209.113"
34.22.209.113 - - [24/Oct/2026:15:42:42 +0000] "GET /sitemap_index.xml HTTP/2.0" 403 675 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)" "-" edge="34.22.209.113"
34.22.209.113 - - [24/Oct/2026:15:42:46 +0000] "GET /dist/.vite/manifest.json HTTP/2.0" 403 18497 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" "-" edge="34.22.209.113"
34.22.209.113 - - [24/Oct/2026:15:42:46 +0000] "GET /z9x8c7v6b5-debug-trigger-noveldadigital.es HTTP/2.0" 403 19303 "-" "
...
show less
Web App Attack
๐ณ๐ฑ
Savvii
2026-10-24 14:42:36
(4 hours ago)
20 attempts against mh-misbehave-ban on choy
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
MaxSmartCode
2026-10-24 14:37:00
(4 hours ago)
Credential brute-force attacks on webpage.
Brute-Force
SSH
๐ซ๐ท
LoneRider
2026-10-24 14:27:53
(5 hours ago)
[24/Oct/2026:16:27:52.197143 +0200] atzAaI_P3ltp9sGaz0eQvwAAAAg 34.22.209.113 38270 127.0.0.1 7081
[ ...
show more
[24/Oct/2026:16:27:52.197143 +0200] atzAaI_P3ltp9sGaz0eQvwAAAAg 34.22.209.113 38270 127.0.0.1 7081
[24/Oct/2026:16:27:52.220525 +0200] atzAaMcwp8mg5f3zdK0LTgAAAAU 34.22.209.113 38280 127.0.0.1 7081
[24/Oct/2026:16:27:52.701900 +0200] atzAaCPn5zNZsG9s3dFJuwAAAAE 34.22.209.113 38426 127.0.0.1 7081
...
show less
Hacking
๐ณ๐ฑ
Savvii
2026-10-24 14:25:16
(5 hours ago)
20 attempts against mh-misbehave-ban on ethyl
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-24 14:17:43
(5 hours ago)
[Sat Oct 24 16:17:38.131044 2026] [access_compat:error] [pid 2172304:tid 2172304] [client 34.22.209. ...
show more
[Sat Oct 24 16:17:38.131044 2026] [access_compat:error] [pid 2172304:tid 2172304] [client 34.22.209.113:0] AH01797: client denied by server configuration: /var/www/wordpress/loretlargent.info/rclone.conf, referer: https://loretlargent.info/rclone.conf
[Sat Oct 24 16:17:41.348070 2026] [access_compat:error] [pid 2172299:tid 2172299] [client 34.22.209.113:0] AH01797: client denied by server configuration: /var/www/wordpress/loretlargent.info/.ssh, referer: https://loretlargent.info/.ssh/known_hosts
[Sat Oct 24 16:17:41.933876 2026] [access_compat:error] [pid 2172304:tid 2172304] [client 34.22.209.113:0] AH01797: client denied by server configuration: /var/www/wordpress/loretlargent.info/localhost.key, referer: https://loretlargent.info/localhost.key
[Sat Oct 24 16:17:41.944724 2026] [access_compat:error] [pid 2173489:tid 2173489] [client 34.22.209.113:0] AH01797: client denied by server configuration: /var/www/wordpress/loretlargent.info/host.key, referer: https://loretlargent.info/host.
...
show less
Web Spam
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-24 14:11:13
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.22.209.113 (113.209.22.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.22.209.113 (113.209.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 10:11:09.021575 2026] [security2:error] [pid 24720:tid 24720] [client 34.22.209.113:40164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "linguistes.com"] [uri "/.env.development::$DATA"] [unique_id "aty8fYJQxILeZJDFBIDX7wAAACg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
dynamix
2026-10-24 14:04:38
(5 hours ago)
Multiple WAF Violations
Web App Attack
๐ฉ๐ช
brechtr
2026-10-24 13:57:49
(5 hours ago)
[Press84-BanHammer] 404 flood โ 30 hits in 60s โ Sourced from: www.langsvlaamsewegen.be โ Request: G ...
show more
[Press84-BanHammer] 404 flood โ 30 hits in 60s โ Sourced from: www.langsvlaamsewegen.be โ Request: GET /app
show less
Bad Web Bot
Web App Attack
๐ณ๐ฑ
BlueWire Hosting
2026-10-24 13:34:38
(5 hours ago)
Bad bot ignoring robot.txt
Bad Web Bot