🇩🇪
EGP Abuse Dept
2026-09-05 05:08:52
(5 hours ago)
Scanning for web/db/file exploits on api.allpa.nl
SQL Injection
Bad Web Bot
Web App Attack
🇺🇸
alecj.com
2026-09-05 03:39:42
(7 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/appsec-vpatch
Web App Attack
🇫🇮
albionfreemarket.com
2026-09-05 03:30:40
(7 hours ago)
34.151.182.153 - - [05/Sep/2026:03:29:53 +0000] "GET /graphql/.env HTTP/2.0" 403 555 "-" "Mozilla/5. ...
show more
34.151.182.153 - - [05/Sep/2026:03:29:53 +0000] "GET /graphql/.env HTTP/2.0" 403 555 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 0.000 "-" "AU"
34.151.182.153 - - [05/Sep/2026:03:30:38 +0000] "GET /phpinfo.php HTTP/2.0" 403 555 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 0.000 "-" "AU"
...
show less
Bad Web Bot
Web App Attack
🇩🇪
Kreapptivo
2026-09-04 15:26:37
(19 hours ago)
34.151.182.153 - [2026-09-04T17:26:32+02:00] "POST / HTTP/1.1" 400 "code=400, message=missing or ma ...
show more
34.151.182.153 - [2026-09-04T17:26:32+02:00] "POST / HTTP/1.1" 400 "code=400, message=missing or malformed jwt" 44 "api.abschlussfilm.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "" 37641
34.151.182.153 - [2026-09-04T17:26:32+02:00] "GET /.env HTTP/1.1" 400 "code=400, message=missing or malformed jwt" 44 "api.abschlussfilm.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "" 31791
34.151.182.153 - [2026-09-04T17:26:33+02:00] "GET /.env.local HTTP/1.1" 400 "code=400, message=missing or malformed jwt" 44 "api.abschlussfilm.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "" 41299
34.151.182.153 - [2026-09-04T17:26:33+02:00] "GET /.env.production HTTP/1.1" 400 "code=400, message=missing or malformed jwt" 44 "api.abschlussfilm.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537
show less
Bad Web Bot
Web App Attack
🇸🇬
WMK965
2026-09-04 13:59:28
(20 hours ago)
34.151.182.153 - - [04/Sep/2026:21:59:27 +0800] "GET /phpinfo.php HTTP/1.1" 404 1436 "-" "Mozilla/5. ...
show more
34.151.182.153 - - [04/Sep/2026:21:59:27 +0800] "GET /phpinfo.php HTTP/1.1" 404 1436 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
34.151.182.153 - - [04/Sep/2026:21:59:27 +0800] "GET /info.php HTTP/1.1" 404 1436 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
34.151.182.153 - - [04/Sep/2026:21:59:28 +0800] "GET /php.php HTTP/1.1" 404 1436 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
34.151.182.153 - - [04/Sep/2026:21:59:28 +0800] "GET /i.php HTTP/1.1" 404 1436 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
34.151.182.153 - - [04/Sep/2026:21:59:28 +0800] "GET /pi.php HTTP/1.1" 404 1436 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, l
show less
Port Scan
Web App Attack
🇩🇪
bazter.pro
2026-09-03 19:06:16
(1 day ago)
Fail2Ban: plesk-bot-aggressive - 15 failures
Port Scan
Bad Web Bot
Web App Attack
Anonymous
2026-09-03 16:37:50
(1 day ago)
IP matched detection query 50 and more bad rqs apache.
Hacking
Bad Web Bot
Brute-Force
Web App Attack
🇫🇷
Feelautom
2026-09-03 15:26:44
(1 day ago)
[FeelAutom Auto-Ban] PathScan: /.env.backup (Score: 200)
Port Scan
Anonymous
2026-09-03 11:59:12
(1 day ago)
Automated report from fail2ban jail nginx-botsearch. No log content included.
Web App Attack
Anonymous
2026-09-03 11:23:42
(1 day ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
Anonymous
2026-09-03 05:37:07
(2 days ago)
[Thu Sep 03 05:37:06.835748 2026] [authz_core:error] [pid 1277879:tid 1277879] [client 34.151.182.15 ...
show more
[Thu Sep 03 05:37:06.835748 2026] [authz_core:error] [pid 1277879:tid 1277879] [client 34.151.182.153:37682] AH01630: client denied by server configuration: /var/www/erp.alien.net.au/htdocs/
[Thu Sep 03 05:37:07.080997 2026] [authz_core:error] [pid 1277995:tid 1277995] [client 34.151.182.153:37692] AH01630: client denied by server configuration: /var/www/erp.alieninternet.be/htdocs/
[Thu Sep 03 05:37:07.152468 2026] [authz_core:error] [pid 1277879:tid 1277879] [client 34.151.182.153:37682] AH01630: client denied by server configuration: /var/www/erp.alien.net.au/htdocs/
[Thu Sep 03 05:37:07.393424 2026] [authz_core:error] [pid 1277995:tid 1277995] [client 34.151.182.153:37692] AH01630: client denied by server configuration: /var/www/erp.alieninternet.be/htdocs/
[Thu Sep 03 05:37:07.466234 2026] [authz_core:error] [pid 1277879:tid 1277879] [client 34.151.182.153:37682] AH01630: client denied by server configuration: /var/www/erp.alien.net.au/htdocs/
...
show less
Brute-Force
🇫🇷
dynamix
2026-09-03 05:00:51
(2 days ago)
Multiple WAF Violations
Web App Attack
🇳🇱
Savvii
2026-09-03 00:30:40
(2 days ago)
15 attempts against mh-modsecurity-ban on comet
Brute-Force
Web App Attack
🇮🇩
Burayot
2026-09-02 21:05:26
(2 days ago)
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 34.151.182.153 (AU/Australia/153.182 ...
show more
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 34.151.182.153 (AU/Australia/153.182.151.34.bc.googleusercontent.com): 2 in the last 3600 secs
show less
Web App Attack
Anonymous
2026-09-01 20:20:04
(3 days ago)
| [Dangerous/Australia] Aggressive IP 34.151.182.153 (~30 hits). Type: DoS Defender- Web server 400 ...
show more
| [Dangerous/Australia] Aggressive IP 34.151.182.153 (~30 hits). Type: DoS Defender- Web server 400 error code
show less
Web App Attack
Hacking
SQL Injection