2026-11-09 07:49:11
UTC ·
(1 day ago)
34.118.148.113 - - [08/Nov/2026:09:18:01 -0600] "GET /.env.credentials HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 34.118.148.113
34.118.148.113 - - [08/Nov/2026:09:18:01 -0600] "GET /.env%3Ffoo=ba ...
show more
34.118.148.113 - - [08/Nov/2026:09:18:01 -0600] "GET /.env.credentials HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 34.118.148.113
34.118.148.113 - - [08/Nov/2026:09:18:01 -0600] "GET /.env%3Ffoo=bar HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 34.118.148.113
34.118.148.113 - - [08/Nov/2026:09:18:01 -0600] "GET /.env.prod.local HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 34.118.148.113
34.118.148.113 - - [08/Nov/2026:09:18:01 -0600] "GET /.env.testing HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)" 34.118.148.113
34.118.148.113 - - [08/Nov/2026:09:18:01 -0600] "GET /.env.config HTTP/1.1" 403 199 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude
...
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
updown.io
2026-11-08 19:49:59
UTC ·
(2 days ago)
{"level":"info","ts":1794167399.1717687,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.118.148.113","remote_port":"53834","client_ip":"34.118.148.113","proto":"HTTP/2.0","method":"GET","host":"status.focus-economic ...
show more
{"level":"info","ts":1794167399.1717687,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.118.148.113","remote_port":"53834","client_ip":"34.118.148.113","proto":"HTTP/2.0","method":"GET","host":"status.focus-economics.com","uri":"/integrations","headers":{"Sec-Ch-Ua":["\"Chromium\";v=\"152\", \"Not?A_Brand\";v=\"24\", \"Brave\";v=\"152\""],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"],"Upgrade-Insecure-Requests":["1"],"Sec-Fetch-Mode":["navigate"],"Priority":["u=0, i"],"Sec-Ch-Ua-Mobile":["?0"],"Sec-Ch-Ua-Platform":["\"Windows\""],"Accept-Encoding":["gzip, deflate, br, zstd"],"Accept-Language":["en-US,en;q=0.9"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8"],"Sec-Fetch-Dest":["document"],"Sec-Fetch-Site":["none"],"Sec-Fetch-User":["?1"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name"
...
show less
DDoS Attack
Web App Attack
🇨🇦
SSH-Admin
2026-11-08 19:00:16
UTC ·
(2 days ago)
Probing for Exploits on ns200
Exploited Host
Web App Attack
🇳🇱
MyGlobalFlowers
2026-11-08 18:46:17
UTC ·
(2 days ago)
Multiple WAF Violations
Web App Attack
🇪🇸
pipeline.es
2026-11-08 17:24:30
UTC ·
(2 days ago)
Web scanning / probing for vulnerable paths | URL: /firebase-admin.json | Evidence: focus-viagens.com 34.118.148.113 - - [08/Nov/2026:18:22:54 +0100] \"GET /firebase-admin.json HTTP/2.0\" 404 22692 \"-\" \"Mozilla/5.0 (compatible; DeepSeekBot/1.0; +h ...
show more
Web scanning / probing for vulnerable paths | URL: /firebase-admin.json | Evidence: focus-viagens.com 34.118.148.113 - - [08/Nov/2026:18:22:54 +0100] \"GET /firebase-admin.json HTTP/2.0\" 404 22692 \"-\" \"Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)\" GEOIP_COUNTRY_CODE=CA 26056 | ASN: GOOGLE-CLOUD-PLATFORM | Country: CA
show less
Port Scan
Web App Attack
🇳🇱
Site.eu
2026-11-08 17:13:45
UTC ·
(2 days ago)
Scanning for secret files (.env, .git, credentials, config backups)
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-11-08 17:10:06
UTC ·
(2 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇨🇦
SSH-Admin
2026-11-08 16:40:02
UTC ·
(2 days ago)
Probing for Exploits on ns56
Exploited Host
Web App Attack
2026-11-08 15:46:43
UTC ·
(2 days ago)
(mod_security) mod_security triggered on hostname [redacted] 34.118.148.113 (CA/Canada/113.148.118.34.bc.googleusercontent.com)
SQL Injection
🇩🇪
konseptit
2026-11-08 15:23:21
UTC ·
(2 days ago)
(mod_security) mod_security triggered on hostname [redacted] 34.118.148.113 (CA/Canada/113.148.118.34.bc.googleusercontent.com)
SQL Injection
2026-11-08 15:20:07
UTC ·
(2 days ago)
| Multiple common web attacks from same source ip. (multiple servers)
Web App Attack
Hacking
SQL Injection
