🇳🇴
Abuse Buster
2026-09-06 12:27:14
(11 minutes ago)
34.148.52.233 - [06/Sep/2026:14:27:12 +0200] "GET /.bashrc HTTP/2.0" 403 146 "-" "Mozilla/5.0 (compa ...
show more
34.148.52.233 - [06/Sep/2026:14:27:12 +0200] "GET /.bashrc HTTP/2.0" 403 146 "-" "Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)"
34.148.52.233 - [06/Sep/2026:14:27:12 +0200] "GET /z9x8c7v6b5-debug-trigger-www.wingthor.net HTTP/2.0" 404 1862 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
34.148.52.233 - [06/Sep/2026:14:27:12 +0200] "GET /build/manifest.json HTTP/2.0" 404 1862 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
...
show less
Web App Attack
🇬🇧
Mendip_Defender
2026-09-06 11:54:18
(44 minutes ago)
34.148.52.233 - - [06/Sep/2026:12:54:30 +0100] "GET /config.json HTTP/1.1" 404 6497 "-" "Mozilla/5.0 ...
show more
34.148.52.233 - - [06/Sep/2026:12:54:30 +0100] "GET /config.json HTTP/1.1" 404 6497 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"
34.148.52.233 - - [06/Sep/2026:12:54:30 +0100] "GET /firebase-config.json HTTP/1.1" 404 6497 "-" "Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)"
34.148.52.233 - - [06/Sep/2026:12:54:30 +0100] "GET /.well-known/jwks.json HTTP/1.1" 404 6497 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"
...
show less
Hacking
Web App Attack
🇩🇪
pscriptos
2026-09-06 10:51:36
(1 hour ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇬🇧
Aetherweb Ark
2026-09-06 10:08:55
(2 hours ago)
(mod_security) mod_security (id:949110) triggered by 34.148.52.233 (US/United States/233.52.148.34.b ...
show more
(mod_security) mod_security (id:949110) triggered by 34.148.52.233 (US/United States/233.52.148.34.bc.googleusercontent.com): N in the last X secs
show less
Web App Attack
🇩🇪
LRob
2026-09-06 09:54:26
(2 hours ago)
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: ...
show more
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: /.//.env (+3 more) | 2026-09-06 09:54 UTC
show less
Hacking
Web App Attack
🇩🇪
raph
2026-09-06 09:48:37
(2 hours ago)
[PROTECTED PATHS] crawler credentials.ini, aws.ini, aws.yml, etc.
Bad Web Bot
Web App Attack
🇺🇸
TAY
2026-09-06 09:39:20
(2 hours ago)
34.148.52.233 - - [06/Sep/2026:17:39:18 +0800] "GET /api/w/starter/jobs_u/get_log_file/../../../../p ...
show more
34.148.52.233 - - [06/Sep/2026:17:39:18 +0800] "GET /api/w/starter/jobs_u/get_log_file/../../../../proc/self/environ HTTP/1.1" 404 7866 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36 EdgA/149.0.0.0"
34.148.52.233 - - [06/Sep/2026:17:39:18 +0800] "GET /public/plugins/alertlist/../../../../../../../../proc/self/cmdline HTTP/1.1" 400 2057 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36 EdgA/149.0.0.0"
34.148.52.233 - - [06/Sep/2026:17:39:18 +0800] "GET /public/plugins/alertlist/../../../../../../../../var/run/secrets/kubernetes.io/serviceaccount/token HTTP/1.1" 400 7873 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36 EdgA/149.0.0.0"
34.148.52.233 - - [06/Sep/2026:17:39:19 +0800] "GET /@fs/../.env?import&raw?? HTTP/1.1" 404 2050 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.3
...
show less
Brute-Force
🇺🇸
mnsf
2026-09-06 09:05:53
(3 hours ago)
Too many Status 40X (11)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-06 09:01:31
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.148.52.233 (233.52.148.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.148.52.233 (233.52.148.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 06 05:01:22.931744 2026] [security2:error] [pid 25461:tid 25461] [client 34.148.52.233:45022] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.spyasociados.com"] [uri "/uploads../.env"] [unique_id "ap0r4gs0myyeesi8fZR5sAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
bohl-aiG5aef
2026-09-06 08:59:38
(3 hours ago)
Suricata Alert [SID:2101071] GPL WEB_SERVER .htpasswd access
Web App Attack
Anonymous
2026-09-06 07:50:54
(4 hours ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
Anonymous
2026-09-06 07:45:17
(4 hours ago)
34.148.52.233 - - [06/Sep/2026:15:45:15 +0800] "GET /server.key HTTP/1.1" 404 39532 "-" "Mozilla/5.0 ...
show more
34.148.52.233 - - [06/Sep/2026:15:45:15 +0800] "GET /server.key HTTP/1.1" 404 39532 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 Edg/149.0.0.0"
34.148.52.233 - - [06/Sep/2026:15:45:16 +0800] "GET /z9x8c7v6b5-debug-trigger-nonsensemakers.com HTTP/1.1" 404 39532 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 Edg/149.0.0.0"
34.148.52.233 - - [06/Sep/2026:15:45:16 +0800] "GET /rclone.conf HTTP/1.1" 404 39532 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 Edg/149.0.0.0"
34.148.52.233 - - [06/Sep/2026:15:45:16 +0800] "GET /id_ecdsa HTTP/1.1" 404 39532 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 Edg/149.0.0.0"
34.148.52.233 - - [06/Sep/2026:15:45:16 +0800] "GET /__/firebase/init.json HTTP/1.1" 404 47528 "-" "Mozi
...
show less
Bad Web Bot
Web App Attack
Anonymous
2026-09-06 07:35:00
(5 hours ago)
Aggressive web scan
Web App Attack
🇫🇷
dynamix
2026-09-06 07:25:38
(5 hours ago)
Multiple WAF Violations
Web App Attack
🇮🇹
VHosting
2026-09-06 07:15:09
(5 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack