🇺🇸
TPI-Abuse
2026-09-11 18:20:22
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.22.250.9 (9.250.22.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.22.250.9 (9.250.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 14:20:18.616454 2026] [security2:error] [pid 10617:tid 10617] [client 34.22.250.9:51554] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "olgapottery.com"] [uri "/%2E%2E/%2E%2E/%2E%2E/%2E%2E/.env"] [unique_id "aqRGYjYaHgdStHQpEBhHvAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-11 17:58:22
(12 hours ago)
(mod_security) mod_security (id:210730) triggered by 34.22.250.9 (9.250.22.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210730) triggered by 34.22.250.9 (9.250.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 13:58:15.558435 2026] [security2:error] [pid 4439:tid 4553] [client 34.22.250.9:46826] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||oldestgunclub.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "oldestgunclub.com"] [uri "/z9x8c7v6b5-debug-trigger-oldestgunclub.com"] [unique_id "aqRBN_bwg-3_qzpM-SZb4wAAAhA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-09-11 17:05:37
(13 hours ago)
Too many Status 40X (13)
Brute-Force
Web App Attack
🇬🇧
oja
2026-09-11 16:53:09
(13 hours ago)
Aggressive web scanner
Web App Attack
2026-09-11 16:34:06
(14 hours ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-11 16:30:59
(14 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.22.250.9 (9.250.22.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.22.250.9 (9.250.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 12:30:52.783354 2026] [security2:error] [pid 12415:tid 12415] [client 34.22.250.9:37974] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ohiokaisers.com"] [uri "/%2E%2E/%2E%2E/%2E%2E/%2E%2E/.env"] [unique_id "aqQsvBPg4g1RO5j9wj4D4QAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-09-11 16:28:01
(14 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇫🇷
Octopuce
2026-09-11 16:17:26
(14 hours ago)
Aggressive web search of vulnerable pages: /files../.env /static//app/.env /static//.env /api/.env/p ...
show more
Aggressive web search of vulnerable pages: /files../.env /static//app/.env /static//.env /api/.env/public/.env //.env ...
show less
Web App Attack
🇺🇸
etu brutus
2026-09-11 16:14:22
(14 hours ago)
34.22.250.9 has been banned for [WebApp Attack]
...
Hacking
Bad Web Bot
Web App Attack
🇺🇸
IndigoRidge
2026-09-11 16:13:20
(14 hours ago)
34.22.250.9 - - [11/Sep/2026:12:13:17 -0400] "GET /.git/config HTTP/1.1" 403 5769 "-" "Mozilla/5.0 ( ...
show more
34.22.250.9 - - [11/Sep/2026:12:13:17 -0400] "GET /.git/config HTTP/1.1" 403 5769 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"
34.22.250.9 - - [11/Sep/2026:12:13:17 -0400] "GET /.aws/credentials HTTP/1.1" 404 34069 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )"
34.22.250.9 - - [11/Sep/2026:12:13:19 -0400] "GET /.env HTTP/1.1" 403 5769 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
show less
Web App Attack
🇫🇷
masterguru
2026-09-11 16:06:43
(14 hours ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-196)
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-09-11 16:06:18
(14 hours ago)
(mod_security) mod_security (id:210730) triggered by 34.22.250.9 (9.250.22.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210730) triggered by 34.22.250.9 (9.250.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 12:06:13.860165 2026] [security2:error] [pid 24098:tid 24098] [client 34.22.250.9:57058] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||oficinasydespachosmurcia.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "oficinasydespachosmurcia.com"] [uri "/z9x8c7v6b5-debug-trigger-oficinasydespachosmurcia.com"] [unique_id "aqQm9UXanoqJCkBu0CQwrQAAADM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-09-11 16:01:33
(14 hours ago)
Multiple WAF Violations
Web App Attack
🇮🇹
VHosting
2026-09-11 16:00:05
(14 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇫🇷
masterguru
2026-09-11 15:49:14
(14 hours ago)
Restricted File Access Attempt. Matched phrase "/@fs/" at REQUEST_FILENAME. (930130-193)
Hacking
Web App Attack
