|
🇩🇪
updown.io
|
|
{"level":"info","ts":1793994849.8277225,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.153.218.58","remote_port":"56660","client_ip":"34.153.218.58","proto":"HTTP/2.0","method":"GET","host":"status.ceredigion.gov.u ...
show more
{"level":"info","ts":1793994849.8277225,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.153.218.58","remote_port":"56660","client_ip":"34.153.218.58","proto":"HTTP/2.0","method":"GET","host":"status.ceredigion.gov.uk","uri":"/internal","headers":{"Sec-Fetch-Dest":["document"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"Sec-Ch-Ua":["\"Chromium\";v=\"153\", \"Google Chrome\";v=\"153\", \"Not_A Brand\";v=\"8\""],"Sec-Fetch-Mode":["navigate"],"Sec-Ch-Ua-Mobile":["?1"],"User-Agent":["Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36"],"X-Nextjs-Data":["1"],"Priority":["u=0, i"],"Accept-Encoding":["gzip, deflate, br, zstd"],"Sec-Fetch-User":["?1"],"Accept-Language":["en-US,en;q=0.9"],"Upgrade-Insecure-Requests":["1"],"Sec-Fetch-Site":["none"],"Sec-Ch-U
...
show less
|
DDoS Attack
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.153.218.58 (58.218.153.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 14:14:31.433213 2026] [security2:error] [pid 23942:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.153.218.58 (58.218.153.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 14:14:31.433213 2026] [security2:error] [pid 23942:tid 23942] [client 34.153.218.58:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.cloudex.click"] [uri "/staging/.env"] [unique_id "au4nF_RFEDALe8Hb0WiXuAAAACI"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇨🇦
SSH-Admin
|
|
Probing for Exploits on ns200
|
Exploited Host
Web App Attack
|
|
Anonymous
|
|
(mod_security) mod_security triggered on hostname [redacted])
|
SQL Injection
|
|
🇬🇧
NotCool
|
|
[7200] (DOTENVPROBE,CRAWLDELAY) Login failure/trigger from 34.153.218.58 (JP/Japan/58.218.153.34.bc.googleusercontent.com): 50 in the last 3600 secs
|
Brute-Force
|
|
🇲🇾
Rizzy
|
|
Multiple WAF Violations
|
Brute-Force
Web App Attack
|
|
🇨🇦
SSH-Admin
|
|
Probing for Exploits on ns56
|
Exploited Host
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.153.218.58 (58.218.153.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 12:49:07.677172 2026] [security2:error] [pid 25797:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.153.218.58 (58.218.153.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 12:49:07.677172 2026] [security2:error] [pid 25797:tid 25797] [client 34.153.218.58:35626] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whm.bringkittyhome.com"] [uri "/api/system/fileView"] [unique_id "au4TE5I3EiPjQLu5ZkPO3gAAAAI"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
Anonymous
|
|
Web App Attack
|
Brute-Force
Exploited Host
Web App Attack
|
|
Anonymous
|
|
Aggressive web scan
|
Web App Attack
|
|
🇿🇦
conure.sh
|
|
csagent: score 21.0: 404 noise floor x4, secrets grab x2; 1 domain(s) in 6s
|
Web App Attack
|
|
🇬🇧
Aetherweb Ark
|
|
(mod_security) mod_security (id:949110) triggered by 34.153.218.58 (JP/Japan/58.218.153.34.bc.googleusercontent.com): N in the last X secs
|
Web App Attack
|
|
🇨🇭
backslash
|
|
block ruleset 3D3AFA921A373ECE19B6BA285C2D722163304638
|
Bad Web Bot
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.153.218.58 (58.218.153.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 11:05:27.963218 2026] [security2:error] [pid 31528:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.153.218.58 (58.218.153.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 11:05:27.963218 2026] [security2:error] [pid 31528:tid 31528] [client 34.153.218.58:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.bvnboysbasketball.com"] [uri "/.env.production.bak"] [unique_id "au36x9BXVjIbZY2t-JI1SwAAAAw"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇷🇴
clauss
|
|
34.153.218.58 - - [06/Nov/2026:17:56:07 +0200] "GET /.changeset/config.json HTTP/2.0" 403 146 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected])"
34.153.218.58 - - [06/Nov/2026:17:56:07 +0200] ...
show more
34.153.218.58 - - [06/Nov/2026:17:56:07 +0200] "GET /.changeset/config.json HTTP/2.0" 403 146 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected])"
34.153.218.58 - - [06/Nov/2026:17:56:07 +0200] "GET /.env.supabase HTTP/2.0" 403 146 "-" "Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
...
show less
|
Web App Attack
|
