🇳🇱
Site.eu
2026-09-16 08:40:17
(2 days ago)
Excessive multi-domain requests
Brute-Force
🇩🇪
EGP Abuse Dept
2026-09-16 08:19:58
(2 days ago)
Scanning for web/db/file exploits on most-models.com
SQL Injection
Bad Web Bot
Web App Attack
🇫🇷
✨
2026-09-16 02:27:12
(2 days ago)
Domain : lorrayndepeyer.com
Rule : env
2026-09-16 02:26:00 ***hidden-privacy*** GET /.env - 80 - 34. ...
show more
Domain : lorrayndepeyer.com
Rule : env
2026-09-16 02:26:00 ***hidden-privacy*** GET /.env - 80 - 34.104.202.124 HTTP/1.1 Mozilla/5.0 (Windows NT 6.1; WOW64) Gecko/20021406 Firefox/11.0 https://www.google.com/ lorrayndepeyer.com 301 0 64 0 265 6561 - -
show less
Hacking
SQL Injection
🇺🇸
TPI-Abuse
2026-09-16 00:07:04
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.104.202.124 (124.202.104.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.104.202.124 (124.202.104.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 20:06:59.646570 2026] [security2:error] [pid 30158:tid 30158] [client 34.104.202.124:43144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "marcosmelero.com"] [uri "/.env"] [unique_id "aqndo4HdSCw9N8l0u4j-7QAAAAo"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-15 20:00:42
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.104.202.124 (124.202.104.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.104.202.124 (124.202.104.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 16:00:37.873931 2026] [security2:error] [pid 27974:tid 27974] [client 34.104.202.124:47938] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "geofreightint.com"] [uri "/.env"] [unique_id "aqmj5biemRsPKlKTK6pdUgAAAAs"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-15 14:41:22
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.104.202.124 (124.202.104.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.104.202.124 (124.202.104.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 10:41:14.081280 2026] [security2:error] [pid 14394:tid 14394] [client 34.104.202.124:48400] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "casalaaldehuela.com"] [uri "/.env"] [unique_id "aqlZCoR8mpmAkCa6otamAQAAAAY"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-09-15 14:37:01
(3 days ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇩🇪
BlueWire Hosting
2026-09-15 14:27:13
(3 days ago)
High-confidence malicious configuration/VCS probe
Web App Attack
2026-09-15 14:13:38
(3 days ago)
Banned by Fail2Ban on server
Web App Attack
🇺🇸
TPI-Abuse
2026-09-15 13:59:02
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.104.202.124 (124.202.104.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.104.202.124 (124.202.104.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 09:58:57.131068 2026] [security2:error] [pid 5107:tid 5107] [client 34.104.202.124:37282] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "casagrotto.com"] [uri "/.env"] [unique_id "aqlPIYu-XxRAQizlXBZ1eAAAAA0"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-15 11:03:19
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.104.202.124 (124.202.104.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.104.202.124 (124.202.104.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 07:03:13.651634 2026] [security2:error] [pid 29749:tid 29749] [client 34.104.202.124:59234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "davidmoisan.org"] [uri "/.env"] [unique_id "aqkl8RTBwx5PCp2mfpjOcgAAABM"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
maxxsense
2026-09-15 09:35:05
(3 days ago)
(mod_security) mod_security triggered on hostname [redacted] 34.104.202.124 (JP/Japan/124.202.104.34 ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.104.202.124 (JP/Japan/124.202.104.34.bc.googleusercontent.com)
show less
SQL Injection
🇳🇱
Site.eu
2026-09-15 08:31:20
(3 days ago)
Excessive 404/403 errors
Brute-Force
🇬🇧
consul.to
2026-09-15 08:02:57
(3 days ago)
Web attack/malicious scanning detected
Web App Attack