🇺🇸
TPI-Abuse
2026-09-16 08:55:36
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.84.117.194 (194.117.84.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.84.117.194 (194.117.84.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 04:55:31.767094 2026] [security2:error] [pid 29390:tid 29390] [client 34.84.117.194:51478] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "moodyauto.com"] [uri "/.env"] [unique_id "aqpZg1-AyerB2Ahhke0OJgAAAG0"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-16 02:25:39
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.84.117.194 (194.117.84.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.84.117.194 (194.117.84.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 22:25:36.386448 2026] [security2:error] [pid 2444:tid 2444] [client 34.84.117.194:39938] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "loisalm.com"] [uri "/.env"] [unique_id "aqn-IMK-juFmGDYbDCiAggAAAAI"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-09-16 02:09:51
(1 day ago)
[ti-tinov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34 ...
show more
[ti-tinov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34.84.117.194 - - \[16/Sep/2026:04:09:49 +0200\] "GET /.env HTTP/1.1" 301 594 "https://www.google.com/" "Mozilla/5.0 \(Windows\; U\; MSIE 6.1\; Linux x86_64\; .NET CLR 3.4.3107\; X11\)"
...
show less
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-09-15 21:52:03
(1 day ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-09-15 21:36:08
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.84.117.194 (194.117.84.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.84.117.194 (194.117.84.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 17:36:03.963753 2026] [security2:error] [pid 6915:tid 6915] [client 34.84.117.194:48724] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "horizontravelgroup.com"] [uri "/.env"] [unique_id "aqm6Q2DsHQpCsOlwhEdWQQAAABM"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-15 21:13:30
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.84.117.194 (194.117.84.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.84.117.194 (194.117.84.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 17:13:23.872796 2026] [security2:error] [pid 19896:tid 19896] [client 34.84.117.194:33608] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "horizonsoundchicago.com"] [uri "/.env"] [unique_id "aqm080kY1xRgYFfEJD2zMQAAAAs"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-15 20:41:21
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.84.117.194 (194.117.84.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.84.117.194 (194.117.84.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 16:41:17.608174 2026] [security2:error] [pid 7232:tid 7232] [client 34.84.117.194:50472] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "geceindia.com"] [uri "/.env"] [unique_id "aqmtbRbzWx29hVCY0M7PvwAAAAM"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
todix
2026-09-15 19:44:19
(1 day ago)
Web App Attack Exploid from 34.84.117.194
Web App Attack
🇳🇱
Mangelot Hosting
2026-09-15 19:36:47
(1 day ago)
(modsecurity) srv102 ModSecurity 34.84.117.194 (JP/Japan/194.117.84.34.bc.googleusercontent.com): 30 ...
show more
(modsecurity) srv102 ModSecurity 34.84.117.194 (JP/Japan/194.117.84.34.bc.googleusercontent.com): 30 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-15 14:55:01
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.84.117.194 (194.117.84.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.84.117.194 (194.117.84.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 10:54:55.578668 2026] [security2:error] [pid 25000:tid 25000] [client 34.84.117.194:49106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "carlsvoice.com"] [uri "/.env"] [unique_id "aqlcP0FMam_oCd43H8UZsQAAACA"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
WellSpring
2026-09-15 10:59:37
(2 days ago)
env leak on comrepute.org/core/app/.env — WellSpr.ing/NetSentinel civic-AI security layer
Web App Attack
🇺🇸
TPI-Abuse
2026-09-15 10:46:43
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.84.117.194 (194.117.84.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.84.117.194 (194.117.84.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 06:46:39.388003 2026] [security2:error] [pid 16134:tid 16134] [client 34.84.117.194:45964] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "computerizer.org"] [uri "/.env"] [unique_id "aqkiD8BN2a6NmPyQnXZq3wAAABw"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
e.fierstra
2026-09-15 08:15:00
(2 days ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇪🇪
maxxsense
2026-09-15 07:50:01
(2 days ago)
(mod_security) mod_security triggered on hostname [redacted] 34.84.117.194 (JP/Japan/194.117.84.34.b ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.84.117.194 (JP/Japan/194.117.84.34.bc.googleusercontent.com)
show less
SQL Injection