|
๐ฉ๐ช
FD-IX
|
|
Fail2Ban: ModSecurity detected a web application attack.
|
Bad Web Bot
Web App Attack
|
|
๐ณ๐ฑ
Site.eu
|
|
Excessive multi-domain requests
|
Brute-Force
|
|
๐ช๐ธ
robotstxt
|
|
34.162.173.78 - - [16/Oct/2026:09:33:49 +0000] "GET /.env HTTP/1.1" 403 208 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.162.173.78 - - [16/Oct/2026:09:33:49 +0000] "GET /.env.local HT ...
show more
34.162.173.78 - - [16/Oct/2026:09:33:49 +0000] "GET /.env HTTP/1.1" 403 208 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.162.173.78 - - [16/Oct/2026:09:33:49 +0000] "GET /.env.local HTTP/1.1" 403 208 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.162.173.78 - - [16/Oct/2026:09:33:50 +0000] "GET /.env.production HTTP/1.1" 403 208 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.162.173.78 - - [16/Oct/2026:09:33:50 +0000] "GET /.env.staging HTTP/1.1" 403 208 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.162.173.78 - - [16/Oct/2026:09:33:50 +0000] "GET /.env.development HTTP/1.1" 403 208 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
|
Web App Attack
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.162.173.78 (78.173.162.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 05:04:50.948912 2026] [security2:error] [pid 11210:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.162.173.78 (78.173.162.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 05:04:50.948912 2026] [security2:error] [pid 11210:tid 11306] [client 34.162.173.78:34824] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "certificationwiki.com"] [uri "/.git/config"] [unique_id "atHostqWLmNBaGiiKhtpegAAAlg"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
๐ซ๐ท
Thibault Millant
|
|
2026/10/16 11:03:42 [error] 1099603#1099603: *681010 access forbidden by rule, client: 34.162.173.78, server: certifications.millant.ovh, request: "GET /.git/config HTTP/1.1", host: "certifications.millant.ovh"
2026/10/16 11:03:43 [error] 1099603#109 ...
show more
2026/10/16 11:03:42 [error] 1099603#1099603: *681010 access forbidden by rule, client: 34.162.173.78, server: certifications.millant.ovh, request: "GET /.git/config HTTP/1.1", host: "certifications.millant.ovh"
2026/10/16 11:03:43 [error] 1099603#1099603: *681010 access forbidden by rule, client: 34.162.173.78, server: certifications.millant.ovh, request: "GET /.env HTTP/1.1", host: "certifications.millant.ovh"
2026/10/16 11:03:43 [error] 1099603#1099603: *681010 access forbidden by rule, client: 34.162.173.78, server: certifications.millant.ovh, request: "GET /.env.local HTTP/1.1", host: "certifications.millant.ovh"
2026/10/16 11:03:43 [error] 1099603#1099603: *681010 access forbidden by rule, client: 34.162.173.78, server: certifications.millant.ovh, request: "GET /.env.production HTTP/1.1", host: "certifications.millant.ovh"
2026/10/16 11:03:43 [error] 1099603#1099603: *681010 access forbidden by rule, client: 34.162.173.78, server: certifications.millant.ovh, request: "GET /.env.st
...
show less
|
Brute-Force
Exploited Host
Web App Attack
|
|
๐ฌ๐ง
consul.to
|
|
Web attack/malicious scanning detected
|
Web App Attack
|
|
Anonymous
|
|
by Attack Lagwatch(gw)
|
DDoS Attack
Web Spam
Hacking
Bad Web Bot
Web App Attack
|
|
Anonymous
|
|
34.162.173.78 - - [16/Oct/2026:09:36:58 +0200] "GET /.git/config HTTP/1.1" 200 3264 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
|
Port Scan
Hacking
Brute-Force
Bad Web Bot
Web App Attack
SSH
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.162.173.78 (78.173.162.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 03:02:15.887108 2026] [security2:error] [pid 29699:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.162.173.78 (78.173.162.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 03:02:15.887108 2026] [security2:error] [pid 29699:tid 29699] [client 34.162.173.78:39510] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cerrovictoria.com"] [uri "/.git/config"] [unique_id "atHL900Aew4earWjqq-MRgAAAAI"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
๐ซ๐ท
masterguru
|
|
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)
|
Hacking
Web App Attack
|
|
๐ฉ๐ช
grassau.com
|
|
(mod_security) mod_security triggered on hostname [redacted] 34.162.173.78 (US/United States/Ohio/Columbus/78.173.162.34.bc.googleusercontent.com)
|
SQL Injection
|
|
๐ณ๐ฑ
Savvii
|
|
15 attempts against mh-modsecurity-ban on ceres
|
Brute-Force
Web App Attack
|
|
๐ซ๐ท
masterguru
|
|
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-201)
|
Hacking
Web App Attack
|
|
Anonymous
|
|
suspicious request in access.log
|
Web App Attack
|
|
Anonymous
|
|
Bloqueado automaticamente por CrowdSec escenario crowdsecurity/http-sensitive-files
|
Brute-Force
|