This IP address has been reported a total of
24
times from
21 distinct
sources.
34.140.111.128 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Malicious activity against marketblitzer.com (BLITZER Trading Platform)
Web App Attack
Hacking
Anonymous
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: BE, Attack patterns: Clou ...
show moreBlocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: BE, Attack patterns: Cloud secrets probing, Directory traversal
show less
226 attacks on directory traversals, shell probes, VC URLs, PHP URLs, config grabbing URLs (type 2), ...
show more226 attacks on directory traversals, shell probes, VC URLs, PHP URLs, config grabbing URLs (type 2), env grabbing URLs (type 2), password/key grabbing URLs, env grabbing URLs:
GET /..%2f..%2f.env HTTP/1.1
POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1
GET /.git/config HTTP/1.1
POST /index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp://input HTTP/1.1
GET /config/settings.local.yml HTTP/1.1
GET /public/plugins/grafana-clock-panel/../../../../../../../../proc/self/environ HTTP/1.1
GET /Dockerrun.aws.json HTTP/1.1
GET /prisma/.env HTTP/1.1
show less
Hacking
Web App Attack
Anonymous
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: BE, Attack patterns: Clou ...
show moreBlocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: BE, Attack patterns: Cloud secrets probing, Directory traversal
show less
Bad Web Bot
Web App Attack
Anonymous
[da.kdns.gr] httpd-config-scan: sites=global; logs=/var/log/httpd/access_log; samples=/%2e%2e/%2e%2e ...
show more[da.kdns.gr] httpd-config-scan: sites=global; logs=/var/log/httpd/access_log; samples=/%2e%2e/%2e%2e/%2e%2e/%2e%2e/proc/self/environ | /@fs/app/.env | /@fs/proc/self/environ
show less
Hacking
Web App Attack
Anonymous
(mod_security) mod_security triggered on hostname [redacted] 34.140.111.128 (BE/Belgium/128.111.140. ...
show more(mod_security) mod_security triggered on hostname [redacted] 34.140.111.128 (BE/Belgium/128.111.140.34.bc.googleusercontent.com): (CF_ENABLE)
show less
Automated honeypot report from mcarthey.com. 30 hits across 7 bait families (backup-dir, dotenv, git ...
show moreAutomated honeypot report from mcarthey.com. 30 hits across 7 bait families (backup-dir, dotenv, git-config, git-head, internal-admin, secret, vault) in the last 24h. Full log: https://mcarthey.com/Shame
show less
{"level":"info","ts":1791995800.554772,"logger":"http.log.access.log1","msg":"handled request","requ ...
show more{"level":"info","ts":1791995800.554772,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.140.111.128","remote_port":"33730","client_ip":"34.140.111.128","proto":"HTTP/2.0","method":"GET","host":"status.mattgadient.com","uri":"/webpack-stats.json","headers":{"X-Nextjs-Data":["1"],"Accept-Language":["en-US,en;q=0.9"],"Priority":["u=0, i"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"],"Sec-Ch-Ua-Platform":["\"Windows\""],"Accept-Encoding":["gzip, deflate, br, zstd"],"Sec-Fetch-Dest":["document"],"Sec-Ch-Ua-Mobile":["?0"],"Sec-Fetch-Mode":["navigate"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8"],"Sec-Fetch-Site":["none"],"Sec-Fetch-User":["?1"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_midd
...
show less
(mod_security) mod_security triggered on hostname [redacted] 34.140.111.128 (BE/Belgium/128.111.140. ...
show more(mod_security) mod_security triggered on hostname [redacted] 34.140.111.128 (BE/Belgium/128.111.140.34.bc.googleusercontent.com)
show less