๐ง๐ช
cmbplf
2026-10-14 23:30:40
(1 day ago)
128 requests with url.path */@fs/*
Brute-Force
Bad Web Bot
๐ฉ๐ช
maxpower
2026-10-14 20:24:44
(2 days ago)
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 34.182.18.146 (US/United States/146.18.1 ...
show more
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 34.182.18.146 (US/United States/146.18.182.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.182.18.146 - - [14/Oct/2026:22:24:43 +0200] "GET /.ssh/id_rsa HTTP/2.0" 200 4805 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)" "34.182.18.146" host=consorzioaet.it
show less
Port Scan
๐ณ๐ฑ
Savvii
2026-10-14 20:07:58
(2 days ago)
20 attempts against mh-misbehave-ban on choy
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-14 19:43:45
(2 days ago)
34.182.18.146 - - [14/Oct/2026:21:43:45 +0200] "GET /dashboard%2F.env HTTP/2.0" 404 265 "-" "Mozilla ...
show more
34.182.18.146 - - [14/Oct/2026:21:43:45 +0200] "GET /dashboard%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)"
34.182.18.146 - - [14/Oct/2026:21:43:45 +0200] "GET /appearance/../../.env HTTP/2.0" 400 295 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
34.182.18.146 - - [14/Oct/2026:21:43:45 +0200] "GET /%2E%2E/%2E%2E/%2E%2E/%2E%2E/.env HTTP/2.0" 400 295 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
34.182.18.146 - - [14/Oct/2026:21:43:45 +0200] "GET /api%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)"
34.182.18.146 - - [14/Oct/2026:21:43:45 +0200] "GET /%2E%2E/%2E%2E/%2E%2E/%2E%2E/proc/self/environ HTTP/2.0" 400 295 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https:/
...
show less
Brute-Force
SSH
Anonymous
2026-10-14 19:00:58
(2 days ago)
34.182.18.146 - - [14/Oct/2026:21:00:57 +0200] "GET /..%2f..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5 ...
show more
34.182.18.146 - - [14/Oct/2026:21:00:57 +0200] "GET /..%2f..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
34.182.18.146 - - [14/Oct/2026:21:00:57 +0200] "GET /icons/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/proc/self/environ HTTP/2.0" 400 295 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
34.182.18.146 - - [14/Oct/2026:21:00:57 +0200] "GET /uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
34.182.18.146 - - [14/Oct/2026:21:00:57 +0200] "GET /admin%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)"
34.182.18.146 - - [14/Oct/2026:21:00:57 +0200] "GET /api/uploads/%2e%2e%2f%2e%2e%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 AppleWebKit/53
...
show less
Brute-Force
SSH
๐ช๐ธ
robotstxt
2026-10-14 18:04:53
(2 days ago)
34.182.18.146 - - [14/Oct/2026:18:04:17 +0000] "GET /robots.txt HTTP/2.0" 403 93 "https://ccoo.cat/r ...
show more
34.182.18.146 - - [14/Oct/2026:18:04:17 +0000] "GET /robots.txt HTTP/2.0" 403 93 "https://ccoo.cat/robots.txt" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)" "34.182.18.146" edge="162.158.19.18"
34.182.18.146 - - [14/Oct/2026:18:04:19 +0000] "GET /wp-content/themes/generatepress/assets/js/menu.min.js HTTP/2.0" 403 34540 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36 EdgA/152.0.0.0" "34.182.18.146" edge="162.158.14.68"
34.182.18.146 - - [14/Oct/2026:18:04:19 +0000] "GET /wp-includes/js/jquery/ui/tabs.min.js HTTP/2.0" 403 34415 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36 EdgA/152.0.0.0" "34.182.18.146" edge="162.158.14.210"
34.182.18.146 - - [14/Oct/2026:18:04:19 +0000] "GET /wp-content/plugins/gp-premium/menu-plus/functions/js/offside.min.js HTTP/2.0" 403 34417 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (K
...
show less
Web App Attack
Anonymous
2026-10-14 17:55:12
(2 days ago)
34.182.18.146 - - [14/Oct/2026:19:55:11 +0200] "GET /%2e%2e/.env HTTP/2.0" 400 295 "-" "Mozilla/5.0 ...
show more
34.182.18.146 - - [14/Oct/2026:19:55:11 +0200] "GET /%2e%2e/.env HTTP/2.0" 400 295 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
34.182.18.146 - - [14/Oct/2026:19:55:11 +0200] "GET /..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )"
34.182.18.146 - - [14/Oct/2026:19:55:11 +0200] "GET /uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)"
34.182.18.146 - - [14/Oct/2026:19:55:11 +0200] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)"
34.182.18.146 - - [14/Oct/2026:19:55:11 +0200] "GET /settings%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible;
...
show less
Brute-Force
SSH
Anonymous
2026-10-14 17:48:11
(2 days ago)
IP matched detection query Detection of too many failed responses.
Brute-Force
Bad Web Bot
Hacking
Anonymous
2026-10-14 17:07:26
(2 days ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
Anonymous
2026-10-14 17:05:29
(2 days ago)
34.182.18.146 - - [14/Oct/2026:19:05:28 +0200] "GET /dashboard%2F.env HTTP/2.0" 404 265 "-" "Mozilla ...
show more
34.182.18.146 - - [14/Oct/2026:19:05:28 +0200] "GET /dashboard%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
34.182.18.146 - - [14/Oct/2026:19:05:28 +0200] "GET /api%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36"
34.182.18.146 - - [14/Oct/2026:19:05:28 +0200] "GET /settings%2F.env HTTP/2.0" 404 265 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
34.182.18.146 - - [14/Oct/2026:19:05:28 +0200] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ HTTP/2.0" 404 265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)"
34.182.18.146 - - [14/Oct/2026:19:05:28 +0200] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
...
show less
Brute-Force
SSH
Anonymous
2026-10-14 16:59:30
(2 days ago)
Apache vulnerability scan
Brute-Force
Web App Attack
๐บ๐ธ
kosada.com
2026-10-14 15:48:48
(2 days ago)
Repeated exploit attempts, for example: /img../.env /.env (HTTP/2.0 port 443, user agent: "Mozilla/5 ...
show more
Repeated exploit attempts, for example: /img../.env /.env (HTTP/2.0 port 443, user agent: "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )")
show less
Web App Attack
Anonymous
2026-10-14 15:40:13
(2 days ago)
| Multiple common web attacks from same source ip. (multiple servers)
Web App Attack
Hacking
SQL Injection
๐ท๐ด
clauss
2026-10-14 15:32:41
(2 days ago)
34.182.18.146 - - [14/Oct/2026:18:32:40 +0300] "GET /api/.env/public/.env HTTP/2.0" 403 146 "-" "Duc ...
show more
34.182.18.146 - - [14/Oct/2026:18:32:40 +0300] "GET /api/.env/public/.env HTTP/2.0" 403 146 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
34.182.18.146 - - [14/Oct/2026:18:32:40 +0300] "GET /firebase-adminsdk.json HTTP/2.0" 403 273 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
...
show less
Web App Attack
๐ฎ๐ช
RoboSOC
2026-10-14 15:31:01
(2 days ago)
HTTP Directory Traversal Request Attempt , PTR: 146.18.182.34.bc.googleusercontent.com.
Hacking