This IP address has been reported a total of
48
times from
38 distinct
sources.
34.48.186.221 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
19 requests, including :
GET /wp-config.php.swp HTTP/1.1
GET /.env.bak HTTP/1.1
GET /crusader-404-p ...
show more19 requests, including :
GET /wp-config.php.swp HTTP/1.1
GET /.env.bak HTTP/1.1
GET /crusader-404-probe HTTP/1.1
GET /.env.old HTTP/1.1
GET /.env.local HTTP/1.1
GET /actuator/configprops HTTP/1.1
GET /_ignition/health-check HTTP/1.1
GET /.env.production HTTP/1.1
GET /.env.prod HTTP/1.1
GET /.env.example HTTP/1.1
GET /wp-config.php.bak HTTP/1.1
GET /wp-config.php~ HTTP/1.1
GET /actuator/env HTTP/1.1
GET /env HTTP/1.1
GET /.env.backup HTTP/1.1
GET /.env.save HTTP/1.1
GET /storage/logs/laravel.log HTTP/1.1
GET /.env.dev HTTP/1.1
show less
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show moreAuto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-08-28.
show less
[SatAug2904:17:53.0791642026][security2:error][pid3472247:tid3472358][client34.48.186.221:0]ModSecur ...
show more[SatAug2904:17:53.0791642026][security2:error][pid3472247:tid3472358][client34.48.186.221:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"kvsm-blackstone.com\"][uri\"/.env.bak\"][unique_id\"apJBUcl8tYzOXEthbKDv0gAAAMQ\"]
show less