๐จ๐ญ
4server
2026-10-16 21:34:23
(12 hours ago)
[FriOct1623:34:18.8082542026][security2:error][pid695463:tid695593][client34.22.47.196:0]ModSecurity ...
show more
[FriOct1623:34:18.8082542026][security2:error][pid695463:tid695593][client34.22.47.196:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"710\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"mail.comarcosa.com.81-17-25-250.cpanel.site\"][uri\"/.env~\"][unique_id\"atKYWu7-30B_pSGjtALxxAAAARY\"]
show less
Hacking
Web App Attack
๐ท๐ด
iulianh
2026-10-16 21:27:54
(12 hours ago)
80,443
Brute-Force
SSH
๐ซ๐ท
Catalin Negru
2026-10-16 21:10:28
(12 hours ago)
Recidive ban by fail2ban on server.blackbit.ro
Brute-Force
๐บ๐ธ
TPI-Abuse
2026-10-16 20:24:46
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.22.47.196 (196.47.22.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.22.47.196 (196.47.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 16:24:40.726187 2026] [security2:error] [pid 6396:tid 6396] [client 34.22.47.196:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.coiledtubingdrilling.com"] [uri "/.git/config"] [unique_id "atKICK27IzrKrGAdzfHgEQAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
Zundapper
2026-10-16 18:41:40
(15 hours ago)
34.22.47.196 - - [16/Oct/2026:20:41:21 +0200] "GET /config/.env HTTP/1.1" 404 548 "-" "Mozilla/5.0 ( ...
show more
34.22.47.196 - - [16/Oct/2026:20:41:21 +0200] "GET /config/.env HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.22.47.196 - - [16/Oct/2026:20:41:30 +0200] "GET /vendor/.env HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.22.47.196 - - [16/Oct/2026:20:41:32 +0200] "GET /bin/.env HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.22.47.196 - - [16/Oct/2026:20:41:38 +0200] "GET /temp/.env HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.22.47.196 - - [16/Oct/2026:20:41:40 +0200] "GET /logs/.env HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/13
...
show less
Web App Attack
Port Scan
๐บ๐ธ
TPI-Abuse
2026-10-16 17:20:28
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.22.47.196 (196.47.22.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.22.47.196 (196.47.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 13:20:23.583226 2026] [security2:error] [pid 27155:tid 27155] [client 34.22.47.196:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.cloudbursttechnologies.com"] [uri "/.git/config"] [unique_id "atJc1wwXPuhHSqo96VBkhgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
Aetherweb Ark
2026-10-16 16:10:44
(17 hours ago)
(mod_security) mod_security (id:949110) triggered by 34.22.47.196 (US/United States/196.47.22.34.bc. ...
show more
(mod_security) mod_security (id:949110) triggered by 34.22.47.196 (US/United States/196.47.22.34.bc.googleusercontent.com): N in the last X secs
show less
Web App Attack
๐ณ๐ฑ
Site.eu
2026-10-16 15:24:01
(18 hours ago)
Excessive multi-domain requests
Brute-Force
๐ท๐ด
clauss
2026-10-16 14:49:24
(19 hours ago)
34.22.47.196 - - [16/Oct/2026:17:49:23 +0300] "GET /.git/config HTTP/1.1" 403 177 "-" "Mozilla/5.0 ( ...
show more
34.22.47.196 - - [16/Oct/2026:17:49:23 +0300] "GET /.git/config HTTP/1.1" 403 177 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.22.47.196 - - [16/Oct/2026:17:49:23 +0300] "GET /.env.local HTTP/1.1" 403 177 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-16 13:43:29
(20 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.22.47.196 (196.47.22.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.22.47.196 (196.47.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 09:43:20.707285 2026] [security2:error] [pid 11130:tid 11130] [client 34.22.47.196:49480] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.cityviewsportsbar.com"] [uri "/.git/config"] [unique_id "atIp-BrVvgncnlXRHsY0uAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-16 13:26:35
(20 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.22.47.196 (196.47.22.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.22.47.196 (196.47.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 09:26:30.555637 2026] [security2:error] [pid 28274:tid 28294] [client 34.22.47.196:39926] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.citrusserviceandconsulting.com"] [uri "/.git/config"] [unique_id "atImBj7Mgs0nFCZwjFdbAAAAAJE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-16 12:14:00
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.22.47.196 (196.47.22.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.22.47.196 (196.47.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 08:13:55.748229 2026] [security2:error] [pid 11446:tid 11446] [client 34.22.47.196:36220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.cidv.net"] [uri "/.git/config"] [unique_id "atIVA5CRaCVQbyfTeBj_HAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-16 10:39:58
(23 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.22.47.196 (196.47.22.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.22.47.196 (196.47.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 06:39:50.260136 2026] [security2:error] [pid 28094:tid 28094] [client 34.22.47.196:42460] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.choice-builders.com"] [uri "/.git/config"] [unique_id "atH-9kMPsZRhGzDjdFYJwgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-16 10:17:53
(23 hours ago)
34.22.47.196 - - [16/Oct/2026:10:17:52 +0000] "POST / HTTP/1.1" 405 568 "-" "Mozilla/5.0 (X11; Linux ...
show more
34.22.47.196 - - [16/Oct/2026:10:17:52 +0000] "POST / HTTP/1.1" 405 568 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.22.47.196 - - [16/Oct/2026:10:17:52 +0000] "POST / HTTP/1.1" 405 568 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Web App Attack
Anonymous
2026-10-16 08:40:45
(1 day ago)
(mod_security) mod_security triggered on hostname [redacted])
SQL Injection