Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show moreAuto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-05-17.
show less
{"level":"info","ts":1779023676.7348106,"logger":"http.log.access.log1","msg":"handled request","req ...
show more{"level":"info","ts":1779023676.7348106,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.89.69.59","remote_port":"51914","client_ip":"34.89.69.59","proto":"HTTP/1.1","method":"GET","host":"services.monitoring.quadient.digital","uri":"/.env.development","headers":{"X-Nextjs-Request-Id":["a98d57da"],"User-Agent":["Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"],"Accept-Encoding":["gzip, deflate"],"Accept":["*/*"],"Connection":["keep-alive"],"Next-Action":["x"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"http/1.1","server_name":"services.monitoring.quadient.digital"}},"bytes_read":0,"user_id":"","duration":0.000402786,"size":0,"status":429,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"]}}
{"level":"info","ts":1779023676.7527812,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.89.69.59","remote_port":
...
show less
DDoS Attack
Web App Attack
Anonymous
(caddyscan) Scanner path probe from 34.89.69.59 (59.69.89.34.bc.googleusercontent.com): 5 in the las ...
show more(caddyscan) Scanner path probe from 34.89.69.59 (59.69.89.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.89.69.59 - - [17/May/2026:12:36:55 +0000] "GET /.git/config HTTP/1.1"
[REDACTED] 200 2627 34.89.69.59 - - [17/May/2026:12:36:56 +0000] "GET /.env HTTP/1.1"
[REDACTED] 200 2627 34.89.69.59 - - [17/May/2026:12:36:56 +0000] "GET /.env.local HTTP/1.1"
[REDACTED] 200 2627 34.89.69.59 - - [17/May/2026:12:36:56 +0000] "GET /.env.production HTTP/1.1"
[REDACTED] 200 2627 34.89.69.59 - - [17/May/2026:12:36:56 +0000] "GET /.env.staging HTTP/1.1"
show less
[Sun May 17 10:02:58.506667 2026] [php:error] [pid 1755638] [client 34.89.69.59:37760] script '/var/ ...
show more[Sun May 17 10:02:58.506667 2026] [php:error] [pid 1755638] [client 34.89.69.59:37760] script '/var/www/html/phpinfo.php' not found or unable to stat
[Sun May 17 10:02:58.548175 2026] [php:error] [pid 1755638] [client 34.89.69.59:37760] script '/var/www/html/info.php' not found or unable to stat
[Sun May 17 10:02:58.581367 2026] [php:error] [pid 1755638] [client 34.89.69.59:37760] script '/var/www/html/php.php' not found or unable to stat
...
show less
(modsecurity) srv104 ModSecurity 34.89.69.59 (59.69.89.34.bc.googleusercontent.com): 10 in the last ...
show more(modsecurity) srv104 ModSecurity 34.89.69.59 (59.69.89.34.bc.googleusercontent.com): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less