🇬🇧
Aetherweb Ark
2026-09-04 14:13:14
UTC ·
(2 months ago)
(mod_security) mod_security (id:949110) triggered by 34.95.207.232 (BR/Brazil/232.207.95.34.bc.googleusercontent.com): N in the last X secs
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 14:07:18
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.95.207.232 (232.207.95.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 10:07:13.685137 2026] [security2:error] [pid 29119:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.95.207.232 (232.207.95.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 10:07:13.685137 2026] [security2:error] [pid 29119:tid 29119] [client 34.95.207.232:55550] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.paintriver.com"] [uri "/.env.local"] [unique_id "aprQkVWd_rOOF5Qfv2CzJwAAADk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
Klaverstyn
2026-09-04 13:06:10
UTC ·
(2 months ago)
Repeated 403 Forbidden responses
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-09-04 12:53:51
UTC ·
(2 months ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇩🇪
todix
2026-09-04 12:28:36
UTC ·
(2 months ago)
Web App Attack Exploid from 34.95.207.232
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 11:56:09
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.95.207.232 (232.207.95.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 07:56:03.756981 2026] [security2:error] [pid 27156:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.95.207.232 (232.207.95.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 07:56:03.756981 2026] [security2:error] [pid 27156:tid 27156] [client 34.95.207.232:60320] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stringsonfire.com"] [uri "/wp-config.php~"] [unique_id "apqx0xKa_29IP0qwV4gaYAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
zynex
2026-09-04 11:24:15
UTC ·
(2 months ago)
URL Probing: /.env
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 11:02:16
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.95.207.232 (232.207.95.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 07:02:11.119575 2026] [security2:error] [pid 3023:tid 3 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.95.207.232 (232.207.95.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 07:02:11.119575 2026] [security2:error] [pid 3023:tid 3343] [client 34.95.207.232:47286] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hongkongstockexchange.org.aafm.us"] [uri "/.env.prod"] [unique_id "apqlM15P-R4laH8FBXw-CgAAAQ8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
big-cloud.nl
2026-09-04 10:55:38
UTC ·
(2 months ago)
Try to access /.env
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 10:08:34
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.95.207.232 (232.207.95.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 06:08:28.601525 2026] [security2:error] [pid 19794:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.95.207.232 (232.207.95.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 06:08:28.601525 2026] [security2:error] [pid 19794:tid 19794] [client 34.95.207.232:42214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jetpower.com"] [uri "/.env.save"] [unique_id "apqYnAcMFpxh3TpHiMSj0QAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-04 09:55:05
UTC ·
(2 months ago)
Bot / scanning and/or hacking attempts: GET /storage/logs/laravel.log HTTP/1.1, GET /.env HTTP/1.1, GET /.env.bak HTTP/1.1, GET /.env.production HTTP/1.1, GET /actuator/env HTTP/1.1
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 09:19:54
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.95.207.232 (232.207.95.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 05:19:47.192529 2026] [security2:error] [pid 9071:tid 9 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.95.207.232 (232.207.95.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 05:19:47.192529 2026] [security2:error] [pid 9071:tid 9071] [client 34.95.207.232:35398] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.addocc.com"] [uri "/.env.prod"] [unique_id "apqNMzmI1CKIZUnQeC-Y_AAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-04 08:22:36
UTC ·
(2 months ago)
Blocked by ModSec and CSF
Port Scan
🇳🇱
GabrielJST
2026-09-04 08:19:52
UTC ·
(2 months ago)
(mod_security) mod_security triggered on hostname [redacted] 34.95.207.232 (BR/Brazil/232.207.95.34.bc.googleusercontent.com): (CF_ENABLE)
SQL Injection
🇺🇸
TPI-Abuse
2026-09-04 08:15:50
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.95.207.232 (232.207.95.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 04:15:46.317285 2026] [security2:error] [pid 2999:tid 2 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.95.207.232 (232.207.95.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 04:15:46.317285 2026] [security2:error] [pid 2999:tid 2999] [client 34.95.207.232:44262] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "disenowebprofesional.com.spyasociados.com"] [uri "/.env.old"] [unique_id "app-MvJP4eeoP2AKR0PidwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack