🇳🇱
Site.eu
2026-06-26 01:36:22
(1 month ago)
Excessive 404/403 errors
Brute-Force
🇫🇷
dynamix
2026-06-25 23:15:11
(1 month ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-06-25 22:58:31
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 34.125.6.127 (127.6.125.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.125.6.127 (127.6.125.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 18:58:24.748510 2026] [security2:error] [pid 28387:tid 28387] [client 34.125.6.127:40636] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||mmailbox.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mmailbox.com"] [uri "/.config/gcloud/credentials.db"] [unique_id "aj2ykASvkmlDVo2K4IFS2gAAAC0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇷🇴
gtheo99
2026-06-25 20:51:02
(1 month ago)
(CT) IP 34.125.6.127 (US/United States/127.6.125.34.bc.googleusercontent.com) found to have 842 conn ...
show more
(CT) IP 34.125.6.127 (US/United States/127.6.125.34.bc.googleusercontent.com) found to have 842 connections
show less
Port Scan
🇺🇸
sean markis
2026-06-25 16:31:00
(1 month ago)
Thursday 25th of June 2026 at 09:41:14 AM blocked IP address 34.125.6.127.
The reason is: "Exceeded ...
show more
Thursday 25th of June 2026 at 09:41:14 AM blocked IP address 34.125.6.127.
The reason is: "Exceeded the maximum number of page not found errors per minute for a crawler.".
The duration of the block is 1 day.
User IP: 34.125.6.127
User hostname: 127.6.125.34.bc.googleusercontent.com
User location: Las Vegas, Nevada, United States
show less
DDoS Attack
Port Scan
Spoofing
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
FTP Brute-Force
Ping of Death
Phishing
VPN IP
Hacking
🇷🇺
Mga Admin
2026-06-25 13:23:03
(1 month ago)
34.125.6.127 - - [25/Jun/2026:20:23:02 +0700] "GET /configprops HTTP/1.1" 404 1360 "-" "Mozilla/5.0 ...
show more
34.125.6.127 - - [25/Jun/2026:20:23:02 +0700] "GET /configprops HTTP/1.1" 404 1360 "-" "Mozilla/5.0 (Linux; U; Android 8.1.0; zh-CN; EML-AL00 Build/HUAWEIEML-AL00) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 baidu.sogo.uc.UCBrowser/11.9.4.974 UWS/2.13.1.48 Mobile Safari/537.36 AliApp(DingTalk/4.5.11) com.alibaba.android.rimet/10487439 Channel/227200 language/zh-CN"
...
show less
Web App Attack
🇫🇷
COMAITE
2026-06-25 12:31:18
(1 month ago)
Suspicious URL access.
Web App Attack
🇺🇸
TPI-Abuse
2026-05-17 12:59:33
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.125.6.127 (127.6.125.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.125.6.127 (127.6.125.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 17 08:59:27.575553 2026] [security2:error] [pid 25376:tid 25376] [client 34.125.6.127:54804] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "selfdirecteddiscovery.com"] [uri "/.git/config"] [unique_id "agm7r3obuHlV5aLhn63xWgAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-05-17 11:03:38
(2 months ago)
Scenarios: http-probing, http-sensitive-files
Total requests: 32
[17/May/2026:11:03:34 +0000] [Clien ...
show more
Scenarios: http-probing, http-sensitive-files
Total requests: 32
[17/May/2026:11:03:34 +0000] [Client: 34.125.6.127] POST [405] "/" User-Agent: "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
[17/May/2026:11:03:35 +0000] [Client: 34.125.6.127] POST [405] "/" User-Agent: "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
[17/May/2026:11:03:35 +0000] [Client: 34.125.6.127] POST [405] "/" User-Agent: "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
[17/May/2026:11:03:35 +0000] [Client: 34.125.6.127] GET [404] "/.git/config" User-Agent: "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
[17/May/2026:11:03:35 +0000] [Client: 34.125.6.127] POST [405] "/" User-Agent: "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
show less
Web App Attack
🇫🇮
Christopher Hughes
2026-05-17 09:13:49
(2 months ago)
[Sun May 17 10:13:48.091167 2026] [proxy_fcgi:error] [pid 3409654:tid 139774375474752] [client 34.12 ...
show more
[Sun May 17 10:13:48.091167 2026] [proxy_fcgi:error] [pid 3409654:tid 139774375474752] [client 34.125.6.127:57448] AH01071: Got error 'Primary script unknown'
[Sun May 17 10:13:48.255112 2026] [proxy_fcgi:error] [pid 3409654:tid 139773654062656] [client 34.125.6.127:57448] AH01071: Got error 'Primary script unknown'
[Sun May 17 10:13:48.418780 2026] [proxy_fcgi:error] [pid 3409654:tid 139773670848064] [client 34.125.6.127:57448] AH01071: Got error 'Primary script unknown'
[Sun May 17 10:13:48.582701 2026] [proxy_fcgi:error] [pid 3409654:tid 139774383867456] [client 34.125.6.127:57448] AH01071: Got error 'Primary script unknown'
[Sun May 17 10:13:48.747451 2026] [proxy_fcgi:error] [pid 3409654:tid 139773637277248] [client 34.125.6.127:57448] AH01071: Got error 'Primary script unknown'
...
show less
Web App Attack