🇨🇦
zXero
2026-09-30 02:08:01
UTC ·
(1 month ago)
Fail2Ban automatic report - jail: recidive
Brute-Force
SSH
DDoS Attack
🇨🇦
zXero
2026-09-26 12:21:07
UTC ·
(1 month ago)
Fail2Ban automatic report - jail: recidive
Brute-Force
SSH
DDoS Attack
🇨🇦
zXero
2026-09-23 12:41:06
UTC ·
(1 month ago)
Fail2Ban automatic report - jail: recidive
Brute-Force
SSH
DDoS Attack
🇺🇸
chronos
2026-09-21 06:53:47
UTC ·
(1 month ago)
[AUTORAVALT][[21/09/2026 - 03:53:47 -03:00 UTC]
Attack from [Google LLC]
[34.80.244.151][151.244.80.34.bc.googleusercontent.com]
Action: BLocKed
Hacking... Unauthorized attempts to access the server.
Web App Attack -> Attempts to probe for or explo ...
show more
[AUTORAVALT][[21/09/2026 - 03:53:47 -03:00 UTC]
Attack from [Google LLC]
[34.80.244.151][151.244.80.34.bc.googleusercontent.com]
Action: BLocKed
Hacking... Unauthorized attempts to access the server.
Web App Attack -> Attempts to probe for or exploit installed web applications such as a CMS like WordPress/Drupal, e-commerce solutions, forum software, phpMyAdm]
...
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-09-21 05:05:41
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.80.244.151 (151.244.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 01:05:37.624499 2026] [security2:error] [pid 22396:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.80.244.151 (151.244.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 01:05:37.624499 2026] [security2:error] [pid 22396:tid 22408] [client 34.80.244.151:49936] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dulemba.com"] [uri "/server/.env"] [unique_id "arC7IQ6fz1nU-ZJfupTsDAAAAQo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-09-21 04:24:14
UTC ·
(1 month ago)
Enumerating paths that do not exist (scanning) | method: GET | path: /.aws/config (+9 more) | ua: Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html) (+5 more) | 2026-09-21 04:24 UTC
Port Scan
Web App Attack
🇺🇸
TPI-Abuse
2026-09-21 03:02:06
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.80.244.151 (151.244.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 23:02:00.601275 2026] [security2:error] [pid 5115:tid 5 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.80.244.151 (151.244.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 23:02:00.601275 2026] [security2:error] [pid 5115:tid 5115] [client 34.80.244.151:57820] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.gulftelecom.com"] [uri "/.env.js"] [unique_id "arCeKLofZiKI7cDngMrLuwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
zXero
2026-09-21 02:20:10
UTC ·
(1 month ago)
Fail2Ban automatic report - jail: web-exploit
Brute-Force
SSH
DDoS Attack
Anonymous
2026-09-21 02:20:03
UTC ·
(1 month ago)
| [Dangerous/Taiwan] Aggressive IP 34.80.244.151 (~30 hits). Type: DoS Defender- Web server 400 error code
Web App Attack
Hacking
SQL Injection
Anonymous
2026-09-21 01:20:31
UTC ·
(1 month ago)
Logfile match
Web App Attack
🇺🇸
robotstxt
2026-09-21 00:17:16
UTC ·
(1 month ago)
34.80.244.151 - - [21/Sep/2026:00:16:27 +0000] "GET /.aws/config HTTP/2.0" 403 36272 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)" "34.80.244.151" edge="172.71.210.63"
34.80.244.151 - - [21/Sep/2026:00:16:28 +0000] "GET /.git- ...
show more
34.80.244.151 - - [21/Sep/2026:00:16:27 +0000] "GET /.aws/config HTTP/2.0" 403 36272 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)" "34.80.244.151" edge="172.71.210.63"
34.80.244.151 - - [21/Sep/2026:00:16:28 +0000] "GET /.git-credentials HTTP/2.0" 403 2 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" "34.80.244.151" edge="172.71.210.63"
34.80.244.151 - - [21/Sep/2026:00:16:29 +0000] "GET /.gitconfig HTTP/2.0" 403 2 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)" "34.80.244.151" edge="172.71.210.63"
34.80.244.151 - - [21/Sep/2026:00:16:29 +0000] "GET /.gitlab-ci.yml HTTP/2.0" 403 2 "-" "Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)" "34.80.244.151" edge="172.71.210.63"
34.80.244.151 - - [21/Sep/2026:00:16:30 +0000] "GET /.env.production HTTP/2.0" 403 2 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36" "34.
...
show less
Web App Attack
🇩🇪
ghostwarriors
2026-09-20 23:50:06
UTC ·
(1 month ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
🇩🇪
yitzhaq
2026-09-20 23:41:12
UTC ·
(1 month ago)
34.80.244.151 - - [21/Sep/2026:01:41:10 +0200] "GET /wp-config.php.old HTTP/2.0" 404 299 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"
34.80.244.151 - - [21/Sep/2026:01:41:10 +0200] "GET /wp-config.php.bak HTTP/2.0" 403 303 ...
show more
34.80.244.151 - - [21/Sep/2026:01:41:10 +0200] "GET /wp-config.php.old HTTP/2.0" 404 299 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"
34.80.244.151 - - [21/Sep/2026:01:41:10 +0200] "GET /wp-config.php.bak HTTP/2.0" 403 303 "-" "Mozilla/5.0 (compatible; Bytespider; [email]) AppleWebKit/537.36"
34.80.244.151 - - [21/Sep/2026:01:41:10 +0200] "GET /config/.env.php HTTP/2.0" 404 299 "-" "Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)"
34.80.244.151 - - [21/Sep/2026:01:41:10 +0200] "POST /v1/graphql HTTP/2.0" 404 299 "https://[site]" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36"
34.80.244.151 - - [21/Sep/2026:01:41:10 +0200] "GET /.env.local HTTP/2.0" 404 299 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
34.80.244.151 - - [21/Sep/2026:01:41:10 +0200] "GET /.env.production HTTP/2.0" 403 303 "-" "Mozilla/5.0 (compatible; cohere-ai; +htt
show less
Web App Attack
Brute-Force
🇺🇸
TPI-Abuse
2026-09-20 23:35:06
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.80.244.151 (151.244.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 19:34:58.026742 2026] [security2:error] [pid 32582:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.80.244.151 (151.244.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 19:34:58.026742 2026] [security2:error] [pid 32582:tid 32582] [client 34.80.244.151:50882] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.disenowebprofesional.com"] [uri "/packages/.env"] [unique_id "arBtopGcyqsj-H08XFYXlQAAACQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
chronos
2026-09-20 23:28:40
UTC ·
(1 month ago)
[AUTORAVALT][[20/09/2026 - 20:28:39 -03:00 UTC]
Attack from [Google LLC]
[34.80.244.151][151.244.80.34.bc.googleusercontent.com]
Action: BLocKed
Hacking... Unauthorized attempts to access the server.
Web App Attack -> Attempts to probe for or explo ...
show more
[AUTORAVALT][[20/09/2026 - 20:28:39 -03:00 UTC]
Attack from [Google LLC]
[34.80.244.151][151.244.80.34.bc.googleusercontent.com]
Action: BLocKed
Hacking... Unauthorized attempts to access the server.
Web App Attack -> Attempts to probe for or exploit installed web applications such as a CMS like WordPress/Drupal, e-commerce solutions, forum software, phpMyAdm]
...
show less
Hacking
Web App Attack