🇺🇸
TPI-Abuse
2026-09-20 22:23:49
(13 minutes ago)
(mod_security) mod_security (id:210492) triggered by 34.22.79.247 (247.79.22.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.22.79.247 (247.79.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 18:23:46.110023 2026] [security2:error] [pid 26641:tid 26641] [client 34.22.79.247:46420] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lmjetservices.com"] [uri "/.git/config"] [unique_id "arBc8r5aPfvPgfkL8RnSoQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-20 21:43:32
(54 minutes ago)
(mod_security) mod_security (id:210492) triggered by 34.22.79.247 (247.79.22.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.22.79.247 (247.79.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 17:43:29.204150 2026] [security2:error] [pid 5026:tid 5026] [client 34.22.79.247:55736] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lmffl.com"] [uri "/.git/config"] [unique_id "arBTgaIAFUruMvUGstKnYQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-20 19:12:07
(3 hours ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇳🇱
Site.eu
2026-09-20 18:43:54
(3 hours ago)
Excessive multi-domain requests
Brute-Force
2026-09-20 18:30:04
(4 hours ago)
Bot / scanning and/or hacking attempts: GET /.env_copy HTTP/1.1, GET /.env2 HTTP/1.1, GET /.env.json ...
show more
Bot / scanning and/or hacking attempts: GET /.env_copy HTTP/1.1, GET /.env2 HTTP/1.1, GET /.env.json HTTP/1.1, GET /.env.txt HTTP/1.1, GET /.env.stage HTTP/1.1, GET /.env.swp HTTP/1.1, GET /.env.live HTTP/1.1, GET /.env1 HTTP/1.1, GET /.env~ HTTP/1.1
show less
Hacking
Web App Attack
2026-09-20 18:08:55
(4 hours ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-09-20 17:52:49
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.22.79.247 (247.79.22.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.22.79.247 (247.79.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 13:52:43.308711 2026] [security2:error] [pid 3142039:tid 3142039] [client 34.22.79.247:34530] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lloydprins.com"] [uri "/.git/config"] [unique_id "arAda7TJmCsIYIOl2VpR5wAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
ConsulHosting
2026-09-20 17:07:39
(5 hours ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
🇳🇱
Site.eu
2026-09-20 16:50:21
(5 hours ago)
Excessive 404/403 errors
Brute-Force
🇫🇷
HerrWolf
2026-09-20 16:30:07
(6 hours ago)
CrowdSec Detection: crowdsecurity/http-admin-interface-probing
Web App Attack
2026-09-20 16:10:10
(6 hours ago)
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: KR, Attack patterns: Word ...
show more
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: KR, Attack patterns: WordPress scanning, Backup file probing, Cloud secrets probing
show less
Bad Web Bot
Web App Attack
🇪🇸
Francisco Vallejo
2026-09-20 15:49:40
(6 hours ago)
[Sun Sep 20 17:49:38.720200 2026] [authz_core:error] [pid 3147447:tid 127876879873728] [client 34.22 ...
show more
[Sun Sep 20 17:49:38.720200 2026] [authz_core:error] [pid 3147447:tid 127876879873728] [client 34.22.79.247:46680] AH01630: client denied by server configuration: proxy:http://localhost:3001/
[Sun Sep 20 17:49:38.990869 2026] [authz_core:error] [pid 3147447:tid 127877668394688] [client 34.22.79.247:46680] AH01630: client denied by server configuration: proxy:http://localhost:3001/
[Sun Sep 20 17:49:39.261205 2026] [authz_core:error] [pid 3147447:tid 127876863088320] [client 34.22.79.247:46680] AH01630: client denied by server configuration: proxy:http://localhost:3001/
[Sun Sep 20 17:49:39.708125 2026] [authz_core:error] [pid 3147447:tid 127877634823872] [client 34.22.79.247:46680] AH01630: client denied by server configuration: proxy:http://localhost:3001/
[Sun Sep 20 17:49:39.980408 2026] [authz_core:error] [pid 3147447:tid 127876871481024] [client 34.22.79.247:46680] AH01630: client denied by server configuration: proxy:http://localhost:3001/.git/config
...
show less
Brute-Force
SSH
🇩🇪
MBombeck
2026-09-20 15:39:43
(6 hours ago)
Fail2Ban/traefik-botsearch on apps-01: banned after 5 failures
Web App Attack
🇺🇸
TPI-Abuse
2026-09-20 14:01:02
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.22.79.247 (247.79.22.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.22.79.247 (247.79.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 10:00:56.058409 2026] [security2:error] [pid 3874:tid 3874] [client 34.22.79.247:35818] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "llew.life.78cardsofthetarot-tarotmancy-tarot-cards-and-tarot-readings.com"] [uri "/.git/config"] [unique_id "aq_nGOMRQDkXDhQR2ntAcAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇭🇰
amyriad
2026-09-20 13:35:35
(9 hours ago)
34.22.79.247 - - [20/Sep/2026:21:35:35 +0800] "GET /.env HTTP/1.1" 404 402 "-" "Mozilla/5.0 (Macinto ...
show more
34.22.79.247 - - [20/Sep/2026:21:35:35 +0800] "GET /.env HTTP/1.1" 404 402 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.22.79.247 - - [20/Sep/2026:21:35:35 +0800] "GET /.env.local HTTP/1.1" 404 402 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.22.79.247 - - [20/Sep/2026:21:35:35 +0800] "GET /.env.production HTTP/1.1" 404 402 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
DDoS Attack
Hacking
Brute-Force