๐บ๐ธ
chronos
2026-10-12 06:51:34
(9 hours ago)
[AUTORAVALT][[12/10/2026 - 03:51:34 -03:00 UTC]
Attack from [Google LLC]
[34.46.22.134][134.22.46.34 ...
show more
[AUTORAVALT][[12/10/2026 - 03:51:34 -03:00 UTC]
Attack from [Google LLC]
[34.46.22.134][134.22.46.34.bc.googleusercontent.com]
Action: BLocKed
Hacking... Unauthorized attempts to access the server.
Web App Attack -> Attempts to probe for or exploit installed web applications such as a CMS like WordPress/Drupal, e-commerce solutions, forum software, phpMyAdmin]
...
show less
Hacking
Web App Attack
๐บ๐ธ
1gz
2026-10-11 04:15:34
(1 day ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: CHALLENGE
Protocol: HTTP/2 (GET met ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: CHALLENGE
Protocol: HTTP/2 (GET method)
Endpoint: /build../.env
UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐บ๐ธ
chronos
2026-10-11 04:13:36
(1 day ago)
[AUTORAVALT][[11/10/2026 - 01:13:36 -03:00 UTC]
Attack from [Google LLC]
[34.46.22.134][134.22.46.34 ...
show more
[AUTORAVALT][[11/10/2026 - 01:13:36 -03:00 UTC]
Attack from [Google LLC]
[34.46.22.134][134.22.46.34.bc.googleusercontent.com]
Action: BLocKed
Hacking... Unauthorized attempts to access the server.
Web App Attack -> Attempts to probe for or exploit installed web applications such as a CMS like WordPress/Drupal, e-commerce solutions, forum software, phpMyAdmin]
...
show less
Hacking
Web App Attack
๐ง๐ช
cmbplf
2026-10-11 03:28:16
(1 day ago)
389 requests with url.path */proc/*
220 requests with url.path *credentials.json
Brute-Force
Bad Web Bot
Anonymous
2026-10-11 03:06:29
(1 day ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
๐ซ๐ท
Allolatr
2026-10-11 02:43:28
(1 day ago)
Oct 11 04:43:28 [redacted] j443: ::ffff:34.46.22.134 [redacted].com "GET /z9x8c7v6b5-debug-trigger-[ ...
show more
Oct 11 04:43:28 [redacted] j443: ::ffff:34.46.22.134 [redacted].com "GET /z9x8c7v6b5-debug-trigger-[redacted].com HTTP/2.0" 301 166 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" Oct 11 04:43:28 [redacted] j443: ::ffff:34.46.22.134 [redacted].com "GET /dist/manifest.json HTTP/2.0" 301 166 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
show less
Bad Web Bot
Web App Attack
๐ธ๐ฌ
Cloudkul Cloudkul
2026-10-11 02:42:25
(1 day ago)
Attempted Brute Force on our application
Brute-Force
Web App Attack
๐ง๐ฌ
HighWay
2026-10-11 02:40:36
(1 day ago)
34.46.22.134 - - [11/Oct/2026:02:40:32 +0000] "GET /service-account.json HTTP/1.1" 404 770 "-" "Mozi ...
show more
34.46.22.134 - - [11/Oct/2026:02:40:32 +0000] "GET /service-account.json HTTP/1.1" 404 770 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
34.46.22.134 - - [11/Oct/2026:02:40:32 +0000] "GET /secrets.json HTTP/1.1" 404 770 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36"
...
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
[email protected]
2026-10-11 02:39:18
(1 day ago)
CrowdSec ban: crowdsecurity/http-crawl-non_statics (duration: 71h59m58s)
Web App Attack
๐ฒ๐พ
Rizzy
2026-10-11 02:26:46
(1 day ago)
Multiple WAF Violations
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-11 02:24:28
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 34.46.22.134 (134.22.46.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.46.22.134 (134.22.46.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 22:24:22.314649 2026] [security2:error] [pid 12872:tid 12872] [client 34.46.22.134:44492] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||thereddoorlounge.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "thereddoorlounge.com"] [uri "/z9x8c7v6b5-debug-trigger-thereddoorlounge.com"] [unique_id "asrzVnortyK71e_boLB8-gAAAC0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-11 02:16:20
(1 day ago)
34.46.22.134 - - [10/Oct/2026:21:16:16 -0500] "GET /.env?raw?? HTTP/1.1" 403 199 "http://synapseresu ...
show more
34.46.22.134 - - [10/Oct/2026:21:16:16 -0500] "GET /.env?raw?? HTTP/1.1" 403 199 "http://synapseresults.com/@fs/../.env?raw??" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.70.50.93
34.46.22.134 - - [10/Oct/2026:21:16:17 -0500] "GET /.env?import&raw?? HTTP/1.1" 403 199 "http://synapseresults.com/@fs/../.env?import&raw??" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )" 172.70.50.92
34.46.22.134 - - [10/Oct/2026:21:16:19 -0500] "GET /.env?import&raw HTTP/1.1" 301 258 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)" 172.69.17.26
34.46.22.134 - - [10/Oct/2026:21:16:19 -0500] "GET /.env?raw HTTP/1.1" 301 247 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)" 172.69.17.26
34.46.22.134 - - [10/Oct/2026:21:16:19 -0500] "GET /.env.development?ra
...
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฏ๐ต
syakesaba
2026-10-11 02:16:10
(1 day ago)
โ๏ธ This host failed 5 times connecting my WEB server. My contact: https://www.syakesaba.com/
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-11 02:08:46
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 34.46.22.134 (134.22.46.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.46.22.134 (134.22.46.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 22:08:43.590421 2026] [security2:error] [pid 28121:tid 28121] [client 34.46.22.134:55130] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||sparler.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "sparler.com"] [uri "/z9x8c7v6b5-debug-trigger-sparler.com"] [unique_id "asrvqzGgNLf9-mSjUaId3gAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-11 01:42:20
(1 day ago)
This IP was detected by CrowdSec triggering crowdsecurity/appsec-vpatch
Web App Attack