Automated Nginx block. Attack type: Scan for config files. Total malicious requests: 64 across multi ...
show moreAutomated Nginx block. Attack type: Scan for config files. Total malicious requests: 64 across multiple servers.
show less
Attempted access to sensitive endpoint (/config/aws.json) detected. Automated scan or unauthorized p ...
show moreAttempted access to sensitive endpoint (/config/aws.json) detected. Automated scan or unauthorized probing.
show less
(CT) IP 8.230.112.40 (US/United States/40.112.230.8.bc.googleusercontent.com) found to have 639 conn ...
show more(CT) IP 8.230.112.40 (US/United States/40.112.230.8.bc.googleusercontent.com) found to have 639 connections
show less
{"ClientAddr":"8.230.112.40:59664","ClientHost":"8.230.112.40","ClientPort":"59664","ClientUsername" ...
show more{"ClientAddr":"8.230.112.40:59664","ClientHost":"8.230.112.40","ClientPort":"59664","ClientUsername":"-","DownstreamContentSize":19,"DownstreamStatus":404,"Duration":28626,"GzipRatio":0,"OriginContentSize":0,"OriginDuration":0,"OriginStatus":0,"Overhead":28626,"RequestAddr":"148.253.213.233:80","RequestContentSize":0,"RequestCount":41259,"RequestHost":"148.253.213.233","RequestMethod":"GET","RequestPath":"/.config/gcloud/credentials.db","RequestPort":"80","RequestProtocol":"HTTP/1.1","RequestScheme":"https","RetryAttempts":0,"StartLocal":"2026-05-30T01:19:11.16849003Z","StartUTC":"2026-05-30T01:19:11.16849003Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"web","level":"info","msg":"","time":"2026-05-30T01:19:11Z"}
{"ClientAddr":"8.230.112.40:59762","ClientHost":"8.230.112.40","ClientPort":"59762","ClientUsername":"-","DownstreamContentSize":19,"DownstreamStatus":404,"Duration":31221,"GzipRatio":0,"OriginContentSize":0,"OriginDuration":0,"OriginStatus":0,"Ov
...
show less
*Port Scan* detected from 8.230.112.40 (US/United States/Texas/Dallas/40.112.230.8.bc.googleusercont ...
show more*Port Scan* detected from 8.230.112.40 (US/United States/Texas/Dallas/40.112.230.8.bc.googleusercontent.com).
show less
Port Scan
Anonymous
8.230.112.40 - - [29/May/2026:02:22:31 +0200] "GET /actuator/configprops HTTP/1.1" 403 4986 "-" "Moz ...
show more8.230.112.40 - - [29/May/2026:02:22:31 +0200] "GET /actuator/configprops HTTP/1.1" 403 4986 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/535.2 (KHTML, like Gecko) Chrome/18.6.872.0 Safari/535.2 UNTRUSTED/1.0 3gpp-gba UNTRUSTED/1.0"
8.230.112.40 - - [29/May/2026:02:22:31 +0200] "GET /configprops HTTP/1.1" 403 4986 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.100 Safari/537.36"
...
show less