๐ณ๐ฑ
Savvii
2026-10-12 22:49:59
(1 day ago)
20 attempts against mh-misbehave-ban on mars
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-12 19:39:09
(1 day ago)
34.140.60.136 - - [12/Oct/2026:21:38:59 +0200] "GET /.aws/credentials HTTP/2.0" 403 272 "-" "Mozilla ...
show more
34.140.60.136 - - [12/Oct/2026:21:38:59 +0200] "GET /.aws/credentials HTTP/2.0" 403 272 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot"
show less
Web Spam
Blog Spam
Brute-Force
Web App Attack
๐ฉ๐ช
maxpower
2026-10-12 19:36:40
(1 day ago)
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 34.140.60.136 (BE/Belgium/136.60.140.34. ...
show more
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 34.140.60.136 (BE/Belgium/136.60.140.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.140.60.136 - - [12/Oct/2026:21:36:38 +0200] "GET /secrets.env HTTP/2.0" 403 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" "34.140.60.136" host=villapardi.it
show less
Port Scan
Anonymous
2026-10-12 19:20:03
(1 day ago)
| Multiple common web attacks from same source ip. (multiple servers)
Web App Attack
Hacking
SQL Injection
๐ซ๐ท
Zundapper
2026-10-12 18:55:53
(1 day ago)
34.140.60.136 - - [12/Oct/2026:20:55:53 +0200] "GET /dist/manifest.json HTTP/2.0" 404 2334 "-" "Mozi ...
show more
34.140.60.136 - - [12/Oct/2026:20:55:53 +0200] "GET /dist/manifest.json HTTP/2.0" 404 2334 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.140.60.136 - - [12/Oct/2026:20:55:53 +0200] "GET /assets/manifest.json HTTP/2.0" 404 2334 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.140.60.136 - - [12/Oct/2026:20:55:53 +0200] "GET /ncsucu6po60krksybwn0 HTTP/2.0" 404 2334 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
34.140.60.136 - - [12/Oct/2026:20:55:53 +0200] "GET /asset-manifest.json HTTP/2.0" 404 2334 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
...
show less
Web App Attack
Port Scan
Anonymous
2026-10-12 18:23:51
(1 day ago)
34.140.60.136 - - [12/Oct/2026:18:23:50 +0000] "GET /pl/upload/.env HTTP/2.0" 302 61 "-" "Mozilla/5. ...
show more
34.140.60.136 - - [12/Oct/2026:18:23:50 +0000] "GET /pl/upload/.env HTTP/2.0" 302 61 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"
...
show less
Bad Web Bot
Web App Attack
๐ง๐ช
voormedia
2026-10-12 18:17:19
(1 day ago)
Accessed trap at '/.gitlab-ci.yml'
Web App Attack
๐ฉ๐ช
maxpower
2026-10-12 18:07:45
(1 day ago)
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 34.140.60.136 (BE/Belgium/136.60.140.34. ...
show more
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 34.140.60.136 (BE/Belgium/136.60.140.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.140.60.136 - - [12/Oct/2026:20:07:38 +0200] "GET /@fs/home/ubuntu/.aws/credentials?raw?? HTTP/2.0" 429 41 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)" "34.140.60.136" host=notaiopanella.it
show less
Port Scan
๐ณ๐ฑ
Alt255
2026-10-12 18:02:27
(1 day ago)
[cb-16al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[cb-16al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.140.60.136 - - [12/Oct/2026:20:02:07 +0200] "GET /app/.env HTTP/2.0" 403 146 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)"
...
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
palla89
2026-10-12 17:23:04
(1 day ago)
(mod_security) mod_security triggered on hostname [redacted] 34.140.60.136 (BE/Belgium/136.60.140.34 ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.140.60.136 (BE/Belgium/136.60.140.34.bc.googleusercontent.com)
show less
SQL Injection
๐ณ๐ฑ
Savvii
2026-10-12 17:05:07
(1 day ago)
20 attempts against mh-misbehave-ban on ozone
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
maxpower
2026-10-12 17:03:54
(1 day ago)
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 34.140.60.136 (BE/Belgium/136.60.140.34. ...
show more
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 34.140.60.136 (BE/Belgium/136.60.140.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.140.60.136 - - [12/Oct/2026:19:03:49 +0200] "GET /@fs/home/ec2-user/.aws/credentials?raw?? HTTP/2.0" 429 41 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" "34.140.60.136" host=lasfiziosapizzeria.it
show less
Port Scan
๐ฎ๐น
CoreTech srl
2026-10-12 16:46:11
(1 day ago)
CloudLinux/Plesk alert - host=cloudlinux dominio=ircsport.it ip=34.140.60.136 richieste=282 rischio= ...
show more
CloudLinux/Plesk alert - host=cloudlinux dominio=ircsport.it ip=34.140.60.136 richieste=282 rischio=ALTO score=24 motivi=molte_richieste,molte_uri_uniche,molti_404,molti_403,errori_5xx,ua_script_bot,alcune_post,path_sospetti,api cat_id=21,19 periodo=10min
show less
Web App Attack
Bad Web Bot
๐ฉ๐ช
maxpower
2026-10-12 16:42:00
(1 day ago)
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 34.140.60.136 (BE/Belgium/136.60.140.34. ...
show more
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 34.140.60.136 (BE/Belgium/136.60.140.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.140.60.136 - - [12/Oct/2026:18:41:55 +0200] "GET /secrets.json HTTP/2.0" 403 0 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" "34.140.60.136" host=insegnesolution.it
show less
Port Scan
๐ฎ๐น
Inartis
2026-10-12 16:39:06
(1 day ago)
34.140.60.136 - - [12/Oct/2026:18:39:04 +0200] "GET /.env.testing HTTP/1.1" 403 179 "-" "Mozilla/5.0 ...
show more
34.140.60.136 - - [12/Oct/2026:18:39:04 +0200] "GET /.env.testing HTTP/1.1" 403 179 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)"
34.140.60.136 - - [12/Oct/2026:18:39:04 +0200] "GET /.envrc HTTP/1.1" 403 5481 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
34.140.60.136 - - [12/Oct/2026:18:39:04 +0200] "GET /.env.prod.local HTTP/1.1" 403 179 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
...
show less
Brute-Force
Bad Web Bot
Web App Attack