🇺🇸
TPI-Abuse
2026-09-22 16:54:37
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.47.46.232 (232.46.47.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.47.46.232 (232.46.47.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 12:54:30.593787 2026] [security2:error] [pid 4695:tid 4695] [client 34.47.46.232:39608] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sarcd.com"] [uri "/.env.dev"] [unique_id "arKyxijCgLMVKii18TppngAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
e.fierstra
2026-09-22 16:13:20
(3 hours ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇺🇸
Rip
2026-09-22 15:57:42
(3 hours ago)
WordPress fingerprinting and attack surface probing
Port Scan
Web App Attack
2026-09-22 15:30:52
(4 hours ago)
GET /.env.backup HTTP/1.1
...
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 14:40:34
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.47.46.232 (232.46.47.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.47.46.232 (232.46.47.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 10:40:27.128529 2026] [security2:error] [pid 17805:tid 17899] [client 34.47.46.232:47578] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lynchburg.windowtailors.com"] [uri "/.env"] [unique_id "arKTWwve4LolRg2B5dMwZwAAAVE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-22 14:26:29
(5 hours ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇩🇪
MarkGGN
2026-09-22 14:25:47
(5 hours ago)
Web attack. 34.47.46.232 - - [22/Sep/2026:16:25:46 +0200] "GET /wp-config.php.bak HTTP/1.1" 404 27 " ...
show more
Web attack. 34.47.46.232 - - [22/Sep/2026:16:25:46 +0200] "GET /wp-config.php.bak HTTP/1.1" 404 27 "-" "crusader-worker/1.0"
34.47.46.232 - - [22/Sep/2026:16:25:47 +0200] "GET /wp-config.php.swp HTTP/1.1" 404 27 "-" "crusader-worker/1.0"
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 14:13:19
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.47.46.232 (232.46.47.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.47.46.232 (232.46.47.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 10:13:14.269544 2026] [security2:error] [pid 13964:tid 13964] [client 34.47.46.232:54142] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kadinisi.org"] [uri "/.env.production"] [unique_id "arKM-qZY-eC8H5Kp109NLQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 13:48:47
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.47.46.232 (232.46.47.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.47.46.232 (232.46.47.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 09:48:43.227469 2026] [security2:error] [pid 4865:tid 4865] [client 34.47.46.232:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hvacs-aircon.com"] [uri "/.env.production"] [unique_id "arKHO4tBv3baPFLXK76mEQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-22 13:15:03
(6 hours ago)
Blocked by os-abuseipdb; 62 hits, proto=tcp, ports=443,80
Port Scan
Hacking
🇮🇹
Progetto1
2026-09-22 12:30:04
(7 hours ago)
Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇫🇷
dynamix
2026-09-22 11:29:09
(8 hours ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 11:20:35
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.47.46.232 (232.46.47.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.47.46.232 (232.46.47.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 07:20:28.414898 2026] [security2:error] [pid 19462:tid 19462] [client 34.47.46.232:47024] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bodybuildbid.com"] [uri "/.env.backup"] [unique_id "arJkfAEiIm17I8iRsBbU6wAAACM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-09-22 11:05:04
(8 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇨🇭
Origon
2026-09-22 10:54:12
(8 hours ago)
http-sensitive-files - IP: 34.47.46.232 - time="2026-09-22T12:54:12+02:00" level=info msg="(555f66b ...
show more
http-sensitive-files - IP: 34.47.46.232 - time="2026-09-22T12:54:12+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-sensitive-files by ip 34.47.46.232 (CA/396982) : 4h ban on Ip 34.47.46.232" module=db
show less
Web App Attack
