๐ณ๐ฑ
tmiland
2026-09-18 13:02:00
(2 days ago)
Detected 121 connections from 34.139.14.40 last 10 minutes.; lone high-rate source (combined 242 req ...
show more
Detected 121 connections from 34.139.14.40 last 10 minutes.; lone high-rate source (combined 242 requests in both windows); Logs: 34.139.14.40 - - [18/Sep/2026:15:01:46 +0200] "GET / HTTP/1.1" 200 50802 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" 34.139.14.40 - - [18/Sep/2026:15:01:46 +0200] "GET /__/firebase/init.json HTTP/1.1" 404 2992 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 34.139.14.40 - - [18/Sep/2026:15:01:46 +0200] "GET /.github/workflows/deploy.yml HTTP/1.1" 404 2992 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 34.139.14.40 - - [18/Sep/2026:15:01:46 +0200] "GET /webpack-stats.json HTTP/1.1" 404 2992 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" 34.139.14.40 - - [18/Sep/2026:15:01:46 +0200] "GE
show less
DDoS Attack
Bad Web Bot
Web App Attack
๐ณ๐ฑ
tmiland
2026-09-18 13:01:49
(2 days ago)
(nginx_404) Dot directory Honeypot Trap 34.139.14.40 (US/United States/40.14.139.34.bc.googleusercon ...
show more
(nginx_404) Dot directory Honeypot Trap 34.139.14.40 (US/United States/40.14.139.34.bc.googleusercontent.com): 2 in the last 3600 secs; IP: 34.139.14.40; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.139.14.40 - - [18/Sep/2026:15:01:46 +0200] "GET /.github/workflows/deploy.yml HTTP/1.1" 404 2992 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 34.139.14.40 - - [18/Sep/2026:15:01:46 +0200] "GET /.gitlab-ci.yml HTTP/1.1" 404 2992 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)"
show less
Brute-Force
๐ฌ๐ง
venus.launch.bz
2026-09-18 11:08:05
(2 days ago)
(mod_security) mod_security triggered on hostname [redacted] 34.139.14.40 (US/United States/40.14.13 ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.139.14.40 (US/United States/40.14.139.34.bc.googleusercontent.com)
show less
SQL Injection
๐ฉ๐ช
IVski.com
2026-09-18 08:46:21
(2 days ago)
IVski WAF | Sensitive file probe detected - looking for .env
Hacking
Brute-Force
Web App Attack
๐ซ๐ท
vtchost.com
2026-09-18 05:54:15
(2 days ago)
scanning closed ports
...
Port Scan
Anonymous
2026-09-18 04:26:26
(2 days ago)
Web probing (125 hits in 24h) on content.museumvalkenburg.nl,default-vhost: sensitive-path scans and ...
show more
Web probing (125 hits in 24h) on content.museumvalkenburg.nl,default-vhost: sensitive-path scans and/or 404 bursts. Reported by CRMON.
show less
Web App Attack
๐ช๐ธ
robotstxt
2026-09-18 01:51:32
(2 days ago)
34.139.14.40 - - [18/Sep/2026:01:50:29 +0000] "GET /.ssh/id_ecdsa HTTP/2.0" 403 16024 "https://circl ...
show more
34.139.14.40 - - [18/Sep/2026:01:50:29 +0000] "GET /.ssh/id_ecdsa HTTP/2.0" 403 16024 "https://circleci.temporada-alta.com/.ssh/id_ecdsa" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )"
34.139.14.40 - - [18/Sep/2026:01:50:29 +0000] "GET /.ssh/id_dsa HTTP/2.0" 403 16023 "https://circleci.temporada-alta.com/.ssh/id_dsa" "Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)"
34.139.14.40 - - [18/Sep/2026:01:50:29 +0000] "GET /.ssh/id_ed25519 HTTP/2.0" 403 16026 "https://circleci.temporada-alta.com/.ssh/id_ed25519" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
34.139.14.40 - - [18/Sep/2026:01:50:30 +0000] "GET /.ssh/authorized_keys HTTP/2.0" 403 16028 "https://circleci.temporada-alta.com/.ssh/authorized_keys" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"
34.139.14.40 - - [18/Sep/2026:01:50:30 +0000] "GET /.ssh/config HTTP/2.0" 403 1
...
show less
Web App Attack
๐ฉ๐ช
raph
2026-09-17 23:19:33
(2 days ago)
[LIB DIR] crawler /vendor/*, /node_modules/*, /laravel/*, etc.
Bad Web Bot
Web App Attack
Anonymous
2026-09-17 21:43:03
(2 days ago)
Linux System Files Information Disclosure.
Hacking
๐ช๐ธ
robotstxt
2026-09-17 20:29:40
(2 days ago)
34.139.14.40 - - [17/Sep/2026:20:29:01 +0000] "GET /.zshrc HTTP/2.0" 403 16015 "https://bak.temporad ...
show more
34.139.14.40 - - [17/Sep/2026:20:29:01 +0000] "GET /.zshrc HTTP/2.0" 403 16015 "https://bak.temporada-alta.com/.zshrc" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)"
34.139.14.40 - - [17/Sep/2026:20:29:01 +0000] "GET /.bashrc HTTP/2.0" 403 16016 "https://bak.temporada-alta.com/.bashrc" "Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36"
34.139.14.40 - - [17/Sep/2026:20:29:01 +0000] "GET /.bash_profile HTTP/2.0" 403 16020 "https://bak.temporada-alta.com/.bash_profile" "Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)"
34.139.14.40 - - [17/Sep/2026:20:29:01 +0000] "GET /.profile HTTP/2.0" 403 16015 "https://bak.temporada-alta.com/.profile" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )"
...
show less
Web App Attack
๐ซ๐ท
dynamix
2026-09-17 19:44:39
(2 days ago)
Multiple WAF Violations
Web App Attack
๐ท๐ด
clauss
2026-09-17 16:08:42
(3 days ago)
34.139.14.40 - - [17/Sep/2026:19:08:41 +0300] "GET /rclone.conf HTTP/2.0" 403 146 "-" "DuckAssistBot ...
show more
34.139.14.40 - - [17/Sep/2026:19:08:41 +0300] "GET /rclone.conf HTTP/2.0" 403 146 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
34.139.14.40 - - [17/Sep/2026:19:08:41 +0300] "GET /.vscode/launch.json HTTP/2.0" 404 201 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
...
show less
Web App Attack
Anonymous
2026-09-17 15:40:23
(3 days ago)
34.139.14.40 - - [17/Sep/2026:10:40:22 -0500] "GET /.env?raw HTTP/1.1" 403 199 "-" "Mozilla/5.0 Appl ...
show more
34.139.14.40 - - [17/Sep/2026:10:40:22 -0500] "GET /.env?raw HTTP/1.1" 403 199 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 34.139.14.40
34.139.14.40 - - [17/Sep/2026:10:40:22 -0500] "GET /.env?import&raw HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)" 34.139.14.40
34.139.14.40 - - [17/Sep/2026:10:40:22 -0500] "GET /.env?import&url&inline HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)" 34.139.14.40
34.139.14.40 - - [17/Sep/2026:10:40:22 -0500] "GET /.env.local?import&raw HTTP/1.1" 403 199 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 34.139.14.40
34.139.14.40 - - [17/Sep/2026:10:40:22 -0500] "GET /.env.local?raw HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)" 34.139.14.40
34.139.14.40 - - [17/Sep/2026:10:40:22
...
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ช๐ธ
robotstxt
2026-09-17 15:37:48
(3 days ago)
34.139.14.40 - - [17/Sep/2026:15:36:49 +0000] "GET /.bash_profile HTTP/2.0" 403 16022 "https://api2. ...
show more
34.139.14.40 - - [17/Sep/2026:15:36:49 +0000] "GET /.bash_profile HTTP/2.0" 403 16022 "https://api2.temporada-alta.com/.bash_profile" "Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)"
34.139.14.40 - - [17/Sep/2026:15:36:49 +0000] "GET /.bashrc HTTP/2.0" 403 16018 "https://api2.temporada-alta.com/.bashrc" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"
34.139.14.40 - - [17/Sep/2026:15:36:49 +0000] "GET /.profile HTTP/2.0" 403 16018 "https://api2.temporada-alta.com/.profile" "CCBot/2.0 (https://commoncrawl.org/faq/)"
34.139.14.40 - - [17/Sep/2026:15:36:49 +0000] "GET /@fs/app/.env?raw?? HTTP/2.0" 403 16026 "https://api2.temporada-alta.com/@fs/app/.env?raw??" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
34.139.14.40 - - [17/Sep/2026:15:36:50 +0000] "GET /.env?raw?? HTTP/2.0" 403 16022 "https://api2.temporada-alta.com/@fs/../.env?raw??" "Mozilla/5.0 (compatible; Baiduspid
...
show less
Web App Attack
๐ง๐ช
Ivo Vynckier
2026-09-17 14:30:00
(3 days ago)
34.139.14.40 - - [17/Sep/2026:02:58:43 +0200] "GET /assets/manifest.json HTTP/2.0" 404 2143 "-" "Moz ...
show more
34.139.14.40 - - [17/Sep/2026:02:58:43 +0200] "GET /assets/manifest.json HTTP/2.0" 404 2143 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36 EdgA/151.0.0.0"
34.139.14.40 - - [17/Sep/2026:02:58:43 +0200] "GET /dist/manifest.json HTTP/2.0" 404 2143 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36 EdgA/151.0.0.0"
34.139.14.40 - - [17/Sep/2026:02:58:43 +0200] "GET /manifest.json HTTP/2.0" 404 2143 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36 EdgA/151.0.0.0"
34.139.14.40 - - [17/Sep/2026:02:58:43 +0200] "GET /asset-manifest.json HTTP/2.0" 404 2143 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36 EdgA/151.0.0.0"
show less
Web App Attack