{"level":"info","ts":1786601953.314476,"logger":"http.log.access.log0","msg":"handled request","requ ...
show more{"level":"info","ts":1786601953.314476,"logger":"http.log.access.log0","msg":"handled request","request":{"remote_ip":"34.180.75.132","remote_port":"40876","client_ip":"34.180.75.132","proto":"HTTP/1.1","method":"GET","host":"eq93.status.updown.io","uri":"/media../.env","headers":{"Accept-Language":["en-US,en;q=0.9"],"Accept-Encoding":["gzip"],"User-Agent":["Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"","server_name":"eq93.status.updown.io","ech":false}},"bytes_read":0,"user_id":"","duration":0.00016758,"size":0,"status":429,"resp_headers":{"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"],"Server":["Caddy"]}}
{"level":"info","ts":1786601953.3163984,"logger":"http.log.access.log0","msg":"handled request","request":{"remote_ip":"34.180.75.132","remote_port":"40912","client_ip":
...
show less
133 attacks on PHP URLs, site downloads, config grabbing URLs (type 2), env grabbing URLs, deploymen ...
show more133 attacks on PHP URLs, site downloads, config grabbing URLs (type 2), env grabbing URLs, deployment descriptor URLs, password grabbing URLs:
GET /info.php HTTP/1.1
GET /db.sql HTTP/1.1
GET /vault.yml HTTP/1.1
GET /aws/.env.production HTTP/1.1
GET /WEB-INF/web.xml HTTP/1.1
GET /admin/config?cmd=cat+/root/.aws/credentials HTTP/1.1
show less
(mod_security) mod_security triggered on hostname [redacted] 34.180.75.132 (JP/Japan/132.75.180.34.b ...
show more(mod_security) mod_security triggered on hostname [redacted] 34.180.75.132 (JP/Japan/132.75.180.34.bc.googleusercontent.com)
show less
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: JP, Attack patterns: Word ...
show moreBlocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: JP, Attack patterns: WordPress scanning, Backup file probing, Cloud secrets probing
show less
Bad Web Bot
Web App Attack
Showing 1 to
15
of 63 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ