Automated Nginx block. Attack type: Scan for config files. Total malicious requests: 63 across multi ...
show moreAutomated Nginx block. Attack type: Scan for config files. Total malicious requests: 63 across multiple servers.
show less
(CT) IP 34.156.234.40 (BE/Belgium/40.234.156.34.bc.googleusercontent.com) found to have 763 connecti ...
show more(CT) IP 34.156.234.40 (BE/Belgium/40.234.156.34.bc.googleusercontent.com) found to have 763 connections
show less
{"ClientAddr":"34.156.234.40:53140","ClientHost":"34.156.234.40","ClientPort":"53140","ClientUsernam ...
show more{"ClientAddr":"34.156.234.40:53140","ClientHost":"34.156.234.40","ClientPort":"53140","ClientUsername":"-","DownstreamContentSize":19,"DownstreamStatus":404,"Duration":69608,"GzipRatio":0,"OriginContentSize":0,"OriginDuration":0,"OriginStatus":0,"Overhead":69608,"RequestAddr":"148.253.213.233","RequestContentSize":0,"RequestCount":37455,"RequestHost":"148.253.213.233","RequestMethod":"GET","RequestPath":"/.config/gcloud/credentials.db","RequestPort":"-","RequestProtocol":"HTTP/1.1","RequestScheme":"https","RetryAttempts":0,"StartLocal":"2026-05-29T23:21:51.847429379Z","StartUTC":"2026-05-29T23:21:51.847429379Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"websecure","level":"info","msg":"","time":"2026-05-29T23:21:51Z"}
{"ClientAddr":"34.156.234.40:53252","ClientHost":"34.156.234.40","ClientPort":"53252","ClientUsername":"-","DownstreamContentSize":19,"DownstreamStatus":404,"Duration":38013,"GzipRatio":0,"OriginContentSize":0,"OriginDuration":0,"OriginStatu
...
show less
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 34.156.234.40 (BE/Belgium/40.234.156 ...
show moreLF_MODSEC: (mod_security) mod_security (id:949110) triggered by 34.156.234.40 (BE/Belgium/40.234.156.34.bc.googleusercontent.com): 2 in the last 3600 secs
show less