🇫🇮
paissangroup
2026-11-05 11:36:22
UTC ·
(1 day ago)
Multiple WAF Violations
Web App Attack
🇫🇮
Christopher Hughes
2026-11-05 11:00:50
UTC ·
(1 day ago)
34.146.50.145 - - [05/Nov/2026:11:00:49 +0000] "GET /static../.env HTTP/2.0" 200 6016 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2 ...
show more
34.146.50.145 - - [05/Nov/2026:11:00:49 +0000] "GET /static../.env HTTP/2.0" 200 6016 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
show less
Web App Attack
🇬🇧
thetomtaylor.co.uk
2026-11-05 08:05:05
UTC ·
(2 days ago)
Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [ice01,ice02,wa01,wa02]
Hacking
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
Christopher Hughes
2026-11-05 06:09:51
UTC ·
(2 days ago)
34.146.50.145 - - [05/Nov/2026:06:09:50 +0000] "GET /static//.env HTTP/2.0" 200 1455 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2. ...
show more
34.146.50.145 - - [05/Nov/2026:06:09:50 +0000] "GET /static//.env HTTP/2.0" 200 1455 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
show less
Web App Attack
🇬🇧
thetomtaylor.co.uk
2026-11-05 05:42:02
UTC ·
(2 days ago)
Fail2Ban - [WAF]ModSecurity rule violation on modsecurity ... [wa02]
Hacking
SQL Injection
Web App Attack
🇫🇮
Christopher Hughes
2026-11-05 05:06:38
UTC ·
(2 days ago)
34.146.50.145 - - [05/Nov/2026:05:06:37 +0000] "GET /gcp-key.json HTTP/2.0" 200 1456 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2. ...
show more
34.146.50.145 - - [05/Nov/2026:05:06:37 +0000] "GET /gcp-key.json HTTP/2.0" 200 1456 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
show less
Web App Attack
🇫🇮
Christopher Hughes
2026-11-05 03:58:42
UTC ·
(2 days ago)
34.146.50.145 - - [05/Nov/2026:03:58:41 +0000] "GET /gtpaans37n4zlqq3yunb HTTP/2.0" 200 6012 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
Web App Attack
🇬🇧
Nick Lewis
2026-11-05 03:41:46
UTC ·
(2 days ago)
(mod_security) mod_security triggered on hostname [redacted] 34.146.50.145 (JP/Japan/145.50.146.34.bc.googleusercontent.com)
SQL Injection
🇬🇧
Aetherweb Ark
2026-11-05 02:22:38
UTC ·
(2 days ago)
(mod_security) mod_security (id:949110) triggered by 34.146.50.145 (JP/Japan/145.50.146.34.bc.googleusercontent.com): N in the last X secs
Web App Attack
Anonymous
2026-11-05 00:53:16
UTC ·
(2 days ago)
Multiple web server 400 error codes from same source ip
Web App Attack
🇳🇱
mieg
2026-11-05 00:50:10
UTC ·
(2 days ago)
Web vulnerability probing
Brute-Force
Web App Attack
🇺🇸
hostmach
2026-11-05 00:50:00
UTC ·
(2 days ago)
(cpanel) Failed cPanel login from 34.146.50.145 (JP/Japan/145.50.146.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CPANEL; Logs: [2026-11-04 19:49:56 -0500] info [webmaild] 34.146.50.145 - - "GET /site ...
show more
(cpanel) Failed cPanel login from 34.146.50.145 (JP/Japan/145.50.146.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CPANEL; Logs: [2026-11-04 19:49:56 -0500] info [webmaild] 34.146.50.145 - - "GET /sitemap.xml HTTP/1.1" FAILED LOGIN webmaild: login attempt without username
[2026-11-04 19:49:57 -0500] info [webmaild] 34.146.50.145 - - "GET /ngsw.json HTTP/1.1" FAILED LOGIN webmaild: login attempt without username
[2026-11-04 19:49:57 -0500] info [webmaild] 34.146.50.145 - - "GET /0jlni6bo670gffl6zxqr HTTP/1.1" FAILED LOGIN webmaild: login attempt without username
[2026-11-04 19:49:57 -0500] info [webmaild] 34.146.50.145 - - "GET /z9x8c7v6b5-debug-trigger-webmail.criahost.com.br HTTP/1.1" FAILED LOGIN webmaild: login attempt without username
[2026-11-04 19:49:57 -0500] info [webmaild] 34.146.50.145 - - "GET /o52uogci9faa73qlh298 HTTP/1.1" FAILED LOGIN webmaild: login attempt without username
show less
Brute-Force
SSH
🇬🇧
consul.to
2026-11-04 23:33:00
UTC ·
(2 days ago)
Web attack/malicious scanning detected
Web App Attack
🇩🇪
LRob
2026-11-04 23:01:19
UTC ·
(2 days ago)
Crawler ignoring refusals | ua: Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler), Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/), Mozilla/5.0 AppleWebKit/537.36 ( ...
show more
Crawler ignoring refusals | ua: Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler), Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/), Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] ) (+4 more) | path: /wp-admin/.env, /....//....//....//..../.env, /.env%3F.css (+5 more)
show less
Bad Web Bot
🇧🇪
cmbplf
2026-11-04 22:40:55
UTC ·
(2 days ago)
157 requests with url.path *config.json
Brute-Force
Bad Web Bot