π«π·
Little Iguana
2026-09-12 11:16:26
(1 month ago)
Attempt to hack Wordpress Login, XMLRPC or other login
Hacking
Anonymous
2026-09-07 06:18:34
(1 month ago)
(config_exploit_scan) Configuratie Scanner / Nep GPTBot 34.22.51.247 (US/United States/247.51.22.34. ...
show more
(config_exploit_scan) Configuratie Scanner / Nep GPTBot 34.22.51.247 (US/United States/247.51.22.34.bc.googleusercontent.com): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.22.51.247 - - [07/Sep/2026:08:18:29 +0200] "GET /.env HTTP/1.1" 406 518 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.22.51.247 - - [07/Sep/2026:08:18:29 +0200] "GET /.env.local HTTP/1.1" 406 4888 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.22.51.247 - - [07/Sep/2026:08:18:30 +0200] "GET /.env.production HTTP/1.1" 406 4886 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
show less
Port Scan
π³π±
Mangelot Hosting
2026-09-07 06:04:20
(1 month ago)
(modsecurity) srv104 ModSecurity 34.22.51.247 (US/United States/247.51.22.34.bc.googleusercontent.co ...
show more
(modsecurity) srv104 ModSecurity 34.22.51.247 (US/United States/247.51.22.34.bc.googleusercontent.com): 30 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
πΊπΈ
abenage
2026-09-07 06:02:10
(1 month ago)
34.22.51.247 - - [07/Sep/2026:00:02:10 -0600] "GET /phpinfo.php HTTP/1.1" 404 564 "-" "Mozilla/5.0 ( ...
show more
34.22.51.247 - - [07/Sep/2026:00:02:10 -0600] "GET /phpinfo.php HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
show less
Bad Web Bot
Web App Attack
π·πΊ
DZBOT
2026-09-07 05:25:47
(1 month ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
π³π±
SysAdmin Dylan
2026-09-07 04:19:26
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.22.51.247 (US/United States/247.51.22.34.bc. ...
show more
(mod_security) mod_security (id:210492) triggered by 34.22.51.247 (US/United States/247.51.22.34.bc.googleusercontent.com): 10 in the last 3600 secs
show less
Brute-Force
π³π±
e.fierstra
2026-09-07 03:44:06
(1 month ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
π«π·
bazter.pro
2026-09-07 02:06:40
(1 month ago)
Auto-Ban [2026-09-07 05:06:40]: CRITICAL: .env attack; DC: Google LLC [Paths: 272] | Details: Exploi ...
show more
Auto-Ban [2026-09-07 05:06:40]: CRITICAL: .env attack; DC: Google LLC [Paths: 272] | Details: Exploit trap paths: /.git/config, /.env, /.env.local, /.env.production, /.env.staging | Sensitive files/paths: /.git/config, /.env, /.env.local, /.env.production, /.env.staging | 404 errors (277): /gateway/.env, /beta/.env, /dev/phpinfo.php, /dist/.env, /public/phpinfo.php, /uat/phpinfo.php, /.env.preprod, /sbin/.env, /cloud/.env, /site/.env (and 262 more)
show less
Web App Attack
Hacking
πΊπΈ
TPI-Abuse
2026-09-07 01:59:25
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.22.51.247 (247.51.22.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.22.51.247 (247.51.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 06 21:59:17.803390 2026] [security2:error] [pid 4507:tid 4507] [client 34.22.51.247:56496] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.bbproductionsonline.com"] [uri "/.git/config"] [unique_id "ap4adQViHBXLKXPMVkL47QAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π¬π§
Aetherweb Ark
2026-09-07 01:28:16
(1 month ago)
(mod_security) mod_security (id:949110) triggered by 34.22.51.247 (US/United States/247.51.22.34.bc. ...
show more
(mod_security) mod_security (id:949110) triggered by 34.22.51.247 (US/United States/247.51.22.34.bc.googleusercontent.com): N in the last X secs
show less
Web App Attack
πΊπΈ
TPI-Abuse
2026-09-07 01:06:00
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.22.51.247 (247.51.22.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.22.51.247 (247.51.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 06 21:05:56.303679 2026] [security2:error] [pid 19759:tid 19759] [client 34.22.51.247:38640] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.baumannarchitecture.com"] [uri "/.git/config"] [unique_id "ap4N9OlvEKsyAdaK2cFHgQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π«π·
Little Iguana
2026-09-07 00:40:16
(1 month ago)
Attempt to hack Wordpress Login, XMLRPC or other login
Hacking
πΊπΈ
TPI-Abuse
2026-09-07 00:12:31
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.22.51.247 (247.51.22.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.22.51.247 (247.51.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 06 20:12:27.340660 2026] [security2:error] [pid 27778:tid 27778] [client 34.22.51.247:37746] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.basicsa.com"] [uri "/.git/config"] [unique_id "ap4Ba4OYSI86a6yphcHqqQAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-09-06 22:38:36
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.22.51.247 (247.51.22.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.22.51.247 (247.51.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 06 18:38:29.704801 2026] [security2:error] [pid 32232:tid 32232] [client 34.22.51.247:52644] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.baptismnapkins.com"] [uri "/.git/config"] [unique_id "ap3rZTmblYBAVl_d3OlhTwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πͺπΈ
alferez
2026-09-06 22:03:02
(1 month ago)
Searching .(env|sql|zip|tar|rar) files
Hacking
Exploited Host
Web App Attack