🇩🇪
Holger
2026-05-20 21:50:22
UTC ·
(5 months ago)
Bruteforce WebAttack
Brute-Force
Web App Attack
🇩🇪
Holger
2026-05-19 16:18:04
UTC ·
(5 months ago)
Bruteforce WebAttack
Brute-Force
Web App Attack
🇩🇪
Tamsweb
2026-05-19 01:11:03
UTC ·
(5 months ago)
Unauthorized connection attempt or scan from 34.130.99.133 on port 9200
...
Port Scan
🇫🇷
GabrielJST
2026-05-19 00:57:09
UTC ·
(5 months ago)
*Port Scan* detected from 34.130.99.133 (CA/Canada/133.99.130.34.bc.googleusercontent.com).
Port Scan
🇫🇷
centurion
2026-05-19 00:50:36
UTC ·
(5 months ago)
Blocked by UFW on dc00 [8001/tcp]
Source port: 51835
TTL: 244
Packet length: 40
TOS: 0x00
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇩🇪
Holger
2026-05-17 21:02:25
UTC ·
(5 months ago)
Bruteforce WebAttack
Brute-Force
Web App Attack
🇨🇭
Cybercat
2026-05-15 08:23:18
UTC ·
(5 months ago)
CrowdSec detection: crowdsecurity/http-sensitive-files
Hacking
🇺🇸
TPI-Abuse
2026-05-15 05:30:15
UTC ·
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 34.130.99.133 (133.99.130.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 01:30:08.594073 2026] [security2:error] [pid 15914:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.130.99.133 (133.99.130.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 01:30:08.594073 2026] [security2:error] [pid 15914:tid 15914] [client 34.130.99.133:38144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bigheartskitchen.com"] [uri "/.env"] [unique_id "agavYNr6A5Qmbc2-xna0ywAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
mondor.ro
2026-05-15 04:38:57
UTC ·
(5 months ago)
Cluster member 148.251.176.225 (DE/Germany/antares.webyouridea.ro) said, DENY 34.130.99.133, Reason:[(mod_security) mod_security (id:210492) triggered by 34.130.99.133 (CA/Canada/133.99.130.34.bc.googleusercontent.com): 3 in the last 3600 secs]; Port ...
show more
Cluster member 148.251.176.225 (DE/Germany/antares.webyouridea.ro) said, DENY 34.130.99.133, Reason:[(mod_security) mod_security (id:210492) triggered by 34.130.99.133 (CA/Canada/133.99.130.34.bc.googleusercontent.com): 3 in the last 3600 secs]; Ports: *; Direction: inout; Trigger: LF_CLUSTER; Logs:
show less
Port Scan
🇺🇸
TPI-Abuse
2026-05-15 04:15:28
UTC ·
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 34.130.99.133 (133.99.130.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 00:15:24.375119 2026] [security2:error] [pid 32069:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.130.99.133 (133.99.130.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 00:15:24.375119 2026] [security2:error] [pid 32069:tid 32069] [client 34.130.99.133:35318] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.photos.jpwatters.com"] [uri "/.env"] [unique_id "agad3KxrMZzSgg7DJdrbHgAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-05-15 04:06:56
UTC ·
(5 months ago)
Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-193)
Hacking
Web App Attack
🇩🇪
Holger
2026-05-15 04:06:31
UTC ·
(5 months ago)
Bruteforce WebAttack
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-05-15 03:58:21
UTC ·
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 34.130.99.133 (133.99.130.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 14 23:58:14.962759 2026] [security2:error] [pid 23810:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.130.99.133 (133.99.130.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 14 23:58:14.962759 2026] [security2:error] [pid 23810:tid 23835] [client 34.130.99.133:60294] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sasintegrated.com"] [uri "/app/.env"] [unique_id "agaZ1rQwZ0cYPVKRA1bBAQAAAFc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2026-05-15 02:50:49
UTC ·
(5 months ago)
139 requests with url.path *.env
Brute-Force
Bad Web Bot
Anonymous
2026-05-15 02:25:38
UTC ·
(5 months ago)
(caddyscan) Scanner path probe from 34.130.99.133 (CA/Canada/133.99.130.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.130.99.133 - - [15/May/2026:02:25:34 +0 ...
show more
(caddyscan) Scanner path probe from 34.130.99.133 (CA/Canada/133.99.130.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.130.99.133 - - [15/May/2026:02:25:34 +0000] "GET /api/.env HTTP/1.1"
[REDACTED] 200 2627 34.130.99.133 - - [15/May/2026:02:25:34 +0000] "GET /.env.dev.local HTTP/1.1"
[REDACTED] 200 2627 34.130.99.133 - - [15/May/2026:02:25:34 +0000] "GET /.env.development.local HTTP/1.1"
[REDACTED] 200 2627 34.130.99.133 - - [15/May/2026:02:25:34 +0000] "GET /app/.env.local HTTP/1.1"
[REDACTED] 200 2627 34.130.99.133 - - [15/May/2026:02:25:34 +0000] "GET /.env.dev HTTP/1.1"
show less
Port Scan