๐ซ๐ท
143.244.57.90
49 seconds ago
(PERMBLOCK) 143.244.57.90 (FR/France/unn-143-244-57-90.datapacket.com) has had more than 4 temp bloc ...
show more
(PERMBLOCK) 143.244.57.90 (FR/France/unn-143-244-57-90.datapacket.com) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs:
show less
Port Scan
๐ง๐ช
35.240.58.49
6 minutes ago
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 35.240.58.49 (BE/Belgium/49.58.240.35.bc ...
show more
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 35.240.58.49 (BE/Belgium/49.58.240.35.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 35.240.58.49 - - [20/Oct/2026:02:47:16 +0200] "GET /sendgrid.env HTTP/2.0" 403 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "35.240.58.49" host=ctpescara.it
show less
Port Scan
๐บ๐ธ
8.228.114.53
8 minutes ago
(nginx_hardened) REGOLA 3 - Nginx Hardening Triggered 8.228.114.53 (US/United States/53.114.228.8.bc ...
show more
(nginx_hardened) REGOLA 3 - Nginx Hardening Triggered 8.228.114.53 (US/United States/53.114.228.8.bc.googleusercontent.com): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 2026/10/20 02:45:58 [error] 1485499#1485499: *5073886 access forbidden by rule, client: 8.228.114.53, server: oremcorazzati.it.orem.it, request: "GET //xmlrpc.php?rsd HTTP/1.1", host: "www.oremcorazzati.it"
2026/10/20 02:45:58 [error] 1485499#1485499: *5073886 access forbidden by rule, client: 8.228.114.53, server: oremcorazzati.it.orem.it, request: "GET //?author=1 HTTP/1.1", host: "www.oremcorazzati.it"
2026/10/20 02:45:58 [error] 1485499#1485499: *5073886 access forbidden by rule, client: 8.228.114.53, server: oremcorazzati.it.orem.it, request: "GET //?author=2 HTTP/1.1", host: "www.oremcorazzati.it"
show less
Port Scan
๐ณ๐ฑ
34.7.231.176
9 minutes ago
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 34.7.231.176 (176.231.7.34.bc.googleuser ...
show more
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 34.7.231.176 (176.231.7.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.7.231.176 - - [20/Oct/2026:02:45:14 +0200] "GET /secrets.json HTTP/2.0" 403 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )" "34.7.231.176" host=conapipescara.it
show less
Port Scan
๐บ๐ธ
34.60.125.130
9 minutes ago
(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 34.60.125.130 (US/United States/130.125.60.34. ...
show more
(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 34.60.125.130 (US/United States/130.125.60.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.60.125.130 - - [20/Oct/2026:02:44:44 +0200] "GET //wp-json/wp/v2/users/ HTTP/1.1" 200 1362 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" "-" host=emmeimpiantimilano.it
show less
Port Scan
๐ณ๐ฑ
45.153.34.43
12 minutes ago
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 45.153.34.43 (-): 1 in the last 3600 sec ...
show more
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 45.153.34.43 (-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 45.153.34.43 - - [20/Oct/2026:02:41:46 +0200] "GET /.aws/credentials HTTP/1.1" 404 30706 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" "45.153.34.43" host=abruzzotour.it
show less
Port Scan
๐บ๐ธ
34.72.244.41
13 minutes ago
(junkbot) REGOLA 8 - Junk Bot Blocked 34.72.244.41 (US/United States/41.244.72.34.bc.googleuserconte ...
show more
(junkbot) REGOLA 8 - Junk Bot Blocked 34.72.244.41 (US/United States/41.244.72.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.72.244.41 - - [20/Oct/2026:02:40:50 +0200] "GET /@fs/var/run/secrets/kubernetes.io/serviceaccount/token?raw?? HTTP/2.0" 200 12167 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)" "-" host=iampieriarredamenti.it
show less
Port Scan
๐บ๐ธ
34.74.160.161
15 minutes ago
(junkbot) REGOLA 8 - Junk Bot Blocked 34.74.160.161 (US/United States/161.160.74.34.bc.googleusercon ...
show more
(junkbot) REGOLA 8 - Junk Bot Blocked 34.74.160.161 (US/United States/161.160.74.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.74.160.161 - - [20/Oct/2026:02:38:29 +0200] "GET /h94dov2najtlpcdi6je0 HTTP/2.0" 200 4816 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot" "34.74.160.161" host=tikitakaplanet.it
show less
Port Scan
๐ฉ๐ช
64.89.163.34
16 minutes ago
(backdoor_scan) REGOLA 7 - Backdoor Scan Attempt 64.89.163.34 (US/United States/-): 1 in the last 36 ...
show more
(backdoor_scan) REGOLA 7 - Backdoor Scan Attempt 64.89.163.34 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 64.89.163.34 - - [20/Oct/2026:02:37:20 +0200] "GET /wp-content/themes/seotheme/db.php?u HTTP/2.0" 200 4829 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "64.89.163.34" host=canarybusinesshhs.com
show less
Port Scan
๐บ๐ธ
18.97.9.99
20 minutes ago
(junkbot) REGOLA 8 - Junk Bot Blocked 18.97.9.99 (US/United States/ec2-18-97-9-99.compute-1.amazonaw ...
show more
(junkbot) REGOLA 8 - Junk Bot Blocked 18.97.9.99 (US/United States/ec2-18-97-9-99.compute-1.amazonaws.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 18.97.9.99 - - [20/Oct/2026:02:34:10 +0200] "GET /wp-content/uploads/2016/06/immagine-in-evidenza.jpg HTTP/2.0" 200 4869 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" "18.97.9.99" host=masterlabvideoproduzioni.it
show less
Port Scan
๐บ๐ธ
18.97.9.102
20 minutes ago
(junkbot) REGOLA 8 - Junk Bot Blocked 18.97.9.102 (US/United States/ec2-18-97-9-102.compute-1.amazon ...
show more
(junkbot) REGOLA 8 - Junk Bot Blocked 18.97.9.102 (US/United States/ec2-18-97-9-102.compute-1.amazonaws.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 18.97.9.102 - - [20/Oct/2026:02:34:10 +0200] "GET /wp-content/uploads/2016/06/immagine-in-evidenza.jpg HTTP/2.0" 200 4844 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" "18.97.9.102" host=masterlabvideoproduzioni.it
show less
Port Scan
๐ณ๐ฑ
34.7.219.80
22 minutes ago
(junkbot) REGOLA 8 - Junk Bot Blocked 34.7.219.80 (80.219.7.34.bc.googleusercontent.com): 1 in the l ...
show more
(junkbot) REGOLA 8 - Junk Bot Blocked 34.7.219.80 (80.219.7.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.7.219.80 - - [20/Oct/2026:02:32:14 +0200] "GET /z9x8c7v6b5-debug-trigger-mail.archabi.it HTTP/2.0" 200 12043 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)" "-" host=mail.archabi.it
show less
Port Scan
๐ฉ๐ช
96.62.224.241
30 minutes ago
(PERMBLOCK) 96.62.224.241 (DE/Germany/-) has had more than 4 temp blocks in the last 86400 secs; Por ...
show more
(PERMBLOCK) 96.62.224.241 (DE/Germany/-) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs:
show less
Port Scan
๐ง๐ช
35.241.132.20
32 minutes ago
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 35.241.132.20 (BE/Belgium/20.132.241.35. ...
show more
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 35.241.132.20 (BE/Belgium/20.132.241.35.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 35.241.132.20 - - [20/Oct/2026:02:22:08 +0200] "GET /sendgrid.env HTTP/2.0" 403 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "35.241.132.20" host=canarybusinesshhs.com
show less
Port Scan
๐บ๐ธ
170.9.237.94
32 minutes ago
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 170.9.237.94 (US/United States/-): 1 in ...
show more
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 170.9.237.94 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 170.9.237.94 - - [20/Oct/2026:02:21:29 +0200] "GET /secrets.env HTTP/1.1" 200 4816 "-" "WebSiphon/next-0.1" "-" host=51.89.75.189
show less
Port Scan
๐บ๐ธ
34.73.160.40
33 minutes ago
(junkbot) REGOLA 8 - Junk Bot Blocked 34.73.160.40 (US/United States/40.160.73.34.bc.googleuserconte ...
show more
(junkbot) REGOLA 8 - Junk Bot Blocked 34.73.160.40 (US/United States/40.160.73.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.73.160.40 - - [20/Oct/2026:02:20:58 +0200] "GET /gc5dncm4d91s34cdmxma HTTP/2.0" 200 12067 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot" "-" host=www.macrodental.it
show less
Port Scan
๐บ๐ธ
163.192.214.36
33 minutes ago
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 163.192.214.36 (US/United States/-): 1 i ...
show more
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 163.192.214.36 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 163.192.214.36 - - [20/Oct/2026:02:20:56 +0200] "GET /credentials.env HTTP/1.1" 200 4818 "-" "WebSiphon/next-0.1" "-" host=51.89.20.64
show less
Port Scan
๐บ๐ธ
170.9.241.157
33 minutes ago
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 170.9.241.157 (US/United States/-): 1 in ...
show more
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 170.9.241.157 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 170.9.241.157 - - [20/Oct/2026:02:20:41 +0200] "GET /secrets.env HTTP/1.1" 200 4814 "-" "WebSiphon/next-0.1" "-" host=51.89.83.26
show less
Port Scan
๐บ๐ธ
163.192.211.135
33 minutes ago
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 163.192.211.135 (US/United States/-): 1 ...
show more
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 163.192.211.135 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 163.192.211.135 - - [20/Oct/2026:02:20:41 +0200] "GET /secrets.env HTTP/1.1" 200 4817 "-" "WebSiphon/next-0.1" "-" host=51.89.2.97
show less
Port Scan
๐บ๐ธ
163.192.99.99
35 minutes ago
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 163.192.99.99 (US/United States/-): 1 in ...
show more
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 163.192.99.99 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 163.192.99.99 - - [20/Oct/2026:02:18:52 +0200] "GET /credentials.env HTTP/1.1" 200 4819 "-" "WebSiphon/next-0.1" "-" host=51.77.95.118
show less
Port Scan
๐บ๐ธ
149.130.213.129
35 minutes ago
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 149.130.213.129 (US/United States/-): 1 ...
show more
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 149.130.213.129 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 149.130.213.129 - - [20/Oct/2026:02:18:52 +0200] "GET /secrets.env HTTP/1.1" 200 4814 "-" "WebSiphon/next-0.1" "-" host=51.77.95.119
show less
Port Scan
๐บ๐ธ
163.192.210.102
35 minutes ago
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 163.192.210.102 (US/United States/-): 1 ...
show more
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 163.192.210.102 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 163.192.210.102 - - [20/Oct/2026:02:18:50 +0200] "GET /secrets.env HTTP/1.1" 200 4809 "-" "WebSiphon/next-0.1" "-" host=51.89.2.98
show less
Port Scan
๐บ๐ธ
147.224.148.163
35 minutes ago
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 147.224.148.163 (US/United States/-): 1 ...
show more
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 147.224.148.163 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 147.224.148.163 - - [20/Oct/2026:02:18:43 +0200] "GET /secrets.env HTTP/1.1" 301 162 "-" "WebSiphon/next-0.1" "-" host=51.89.83.26
show less
Port Scan
๐บ๐ธ
147.224.216.92
35 minutes ago
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 147.224.216.92 (US/United States/-): 1 i ...
show more
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 147.224.216.92 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 147.224.216.92 - - [20/Oct/2026:02:18:26 +0200] "GET /credentials.env HTTP/1.1" 200 4816 "-" "WebSiphon/next-0.1" "-" host=51.77.95.116
show less
Port Scan
๐บ๐ธ
147.224.138.14
35 minutes ago
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 147.224.138.14 (US/United States/-): 1 i ...
show more
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 147.224.138.14 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 147.224.138.14 - - [20/Oct/2026:02:18:19 +0200] "GET /secrets.env HTTP/1.1" 200 4812 "-" "WebSiphon/next-0.1" "-" host=51.89.2.96
show less
Port Scan