🇺🇸
TPI-Abuse
2026-09-16 09:03:23
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.93.99.12 (12.99.93.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.93.99.12 (12.99.93.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 05:03:17.642832 2026] [security2:error] [pid 7475:tid 7475] [client 34.93.99.12:58076] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "notforhirellc.com"] [uri "/.env"] [unique_id "aqpbVUwcmowlBIo0SS2z_QAAAAA"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-16 07:52:25
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.93.99.12 (12.99.93.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.93.99.12 (12.99.93.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 03:52:18.453353 2026] [security2:error] [pid 18799:tid 18799] [client 34.93.99.12:34976] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "notepromd.com"] [uri "/.env"] [unique_id "aqpKsq40F_qA8a4q5lR9UQAAAAQ"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-16 02:44:07
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.93.99.12 (12.99.93.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.93.99.12 (12.99.93.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 22:44:02.386917 2026] [security2:error] [pid 562:tid 562] [client 34.93.99.12:37510] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "metalgecko.com"] [uri "/.env"] [unique_id "aqoCcsJnBZXvJxOZ2kyf0QAAAAk"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-15 21:48:56
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.93.99.12 (12.99.93.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.93.99.12 (12.99.93.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 17:48:47.968218 2026] [security2:error] [pid 21793:tid 21793] [client 34.93.99.12:41402] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jangambleandco.com"] [uri "/.env"] [unique_id "aqm9PzmprSprZhkIHNN3HQAAAAY"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-15 17:32:31
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.93.99.12 (12.99.93.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.93.99.12 (12.99.93.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 13:32:23.161214 2026] [security2:error] [pid 10111:tid 10183] [client 34.93.99.12:54416] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "forestvalleyranch.com"] [uri "/.env"] [unique_id "aqmBJx198T2Wrg6UoVZecQAAAMc"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
zynex
2026-09-15 15:49:59
(5 days ago)
URL Probing: /lab/.env
Web App Attack
🇺🇸
TPI-Abuse
2026-09-15 14:38:25
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 34.93.99.12 (12.99.93.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.93.99.12 (12.99.93.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 10:38:18.513186 2026] [security2:error] [pid 26225:tid 26225] [client 34.93.99.12:35772] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "contactsportsagility.com"] [uri "/.env"] [unique_id "aqlYWq3qCoH1h09e25mKZQAAAAU"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-15 13:06:16
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 34.93.99.12 (12.99.93.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.93.99.12 (12.99.93.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 09:06:11.894209 2026] [security2:error] [pid 9210:tid 9210] [client 34.93.99.12:41584] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brodyworks.com"] [uri "/.env"] [unique_id "aqlCw2Y_IWrR8nKvj9riiwAAAAo"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-15 12:44:49
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 34.93.99.12 (12.99.93.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.93.99.12 (12.99.93.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 08:44:40.741723 2026] [security2:error] [pid 6759:tid 6759] [client 34.93.99.12:38598] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brodericktourville.com"] [uri "/.env"] [unique_id "aqk9uPGZlHQFL-gVdTojqQAAAAM"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-09-15 12:37:14
(5 days ago)
Multiple WAF Violations
Web App Attack
🇩🇪
LRob
2026-09-15 11:08:44
(5 days ago)
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: ...
show more
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: /.env | 2026-09-15 11:08 UTC
show less
Hacking
Web App Attack
2026-09-15 10:25:24
(5 days ago)
Logfile match
Web App Attack