🇩🇪
grassau.com
2026-08-26 14:07:09
(14 minutes ago)
*Port Scan* detected from 34.125.13.73 (US/United States/Nevada/Las Vegas/73.13.125.34.bc.googleuser ...
show more
*Port Scan* detected from 34.125.13.73 (US/United States/Nevada/Las Vegas/73.13.125.34.bc.googleusercontent.com).
show less
Port Scan
🇫🇷
COMAITE
2026-08-26 13:52:49
(28 minutes ago)
Suspicious URL access.
Web App Attack
2026-08-26 13:13:00
(1 hour ago)
Excessive crawling/scraping. Vulnerable file probing.
Brute-Force
Bad Web Bot
Web App Attack
2026-08-26 12:31:11
(1 hour ago)
Bot / seems abusive / Apache connections: 68
DDoS Attack
Web Spam
Bad Web Bot
Web App Attack
🇸🇪
vaia.cloud
2026-08-26 12:25:02
(1 hour ago)
crowdsecurity/http-wordpress_wpconfig
Brute-Force
Web App Attack
🇳🇱
javierin
2026-08-26 07:42:20
(6 hours ago)
34.125.13.73 - regalo-para-gato.es - - [26/Aug/2026:07:42:20 +0000] "GET /?file=../../../../etc/pass ...
show more
34.125.13.73 - regalo-para-gato.es - - [26/Aug/2026:07:42:20 +0000] "GET /?file=../../../../etc/passwd HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:127.5) Gecko/20100101 Firefox/127.5; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot"
34.125.13.73 - regalo-para-gato.es - - [26/Aug/2026:07:42:20 +0000] "GET /files../etc/passwd HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Claude-SearchBot/1.0; +https://www.anthropic.com/claude-searchbot)"
...
show less
Web App Attack
Hacking
🇩🇪
akasolutions.de
2026-08-26 07:14:06
(7 hours ago)
(mod_security) mod_security triggered on hostname [redacted] 34.125.13.73 (US/United States/73.13.12 ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.125.13.73 (US/United States/73.13.125.34.bc.googleusercontent.com)
show less
SQL Injection
🇺🇸
TPI-Abuse
2026-08-26 07:10:52
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.125.13.73 (73.13.125.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.125.13.73 (73.13.125.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 03:10:47.480481 2026] [security2:error] [pid 21659:tid 21659] [client 34.125.13.73:55338] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "worshipconcert.com"] [uri "/static../.env"] [unique_id "ao6RdxG2A-cmVMD_KkcWLgAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-26 06:53:30
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.125.13.73 (73.13.125.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.125.13.73 (73.13.125.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 02:53:27.018944 2026] [security2:error] [pid 1950:tid 1950] [client 34.125.13.73:26236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lauracooper.co"] [uri "/.env.local"] [unique_id "ao6NZw1nbnW_tE2EBqRphgAAAEw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-08-26 06:52:32
(7 hours ago)
Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-196)
Hacking
Web App Attack
🇫🇷
Octopuce
2026-08-26 06:36:02
(7 hours ago)
Aggressive web search of vulnerable pages: /app/.env /.env.local /static../.env /media../.env /api/. ...
show more
Aggressive web search of vulnerable pages: /app/.env /.env.local /static../.env /media../.env /api/.env ...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-08-26 06:33:28
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.125.13.73 (73.13.125.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.125.13.73 (73.13.125.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 02:33:24.565244 2026] [security2:error] [pid 18608:tid 18608] [client 34.125.13.73:61274] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jessemack.com"] [uri "/media../.env"] [unique_id "ao6ItH7NeC5ngFNXVLpNDgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-08-26 06:05:44
(8 hours ago)
Abuse Detected (1)
Brute-Force
Web App Attack
2026-08-26 06:01:07
(8 hours ago)
Suspicious URL access.
Hacking
🇳🇿
Tripwire
2026-08-26 05:24:15
(8 hours ago)
Fake Applebot "Mozilla/5.0 (compatible; Applebot/0.1; +http://www.apple.com/go/applebot)"
Bad Web Bot