π¬π§
Aetherweb Ark
2026-09-19 14:55:03
(4 hours ago)
(mod_security) mod_security (id:949110) triggered by 34.176.225.128 (CL/Chile/128.225.176.34.bc.goog ...
show more
(mod_security) mod_security (id:949110) triggered by 34.176.225.128 (CL/Chile/128.225.176.34.bc.googleusercontent.com): N in the last X secs
show less
Web App Attack
π¬π§
Apache
2026-09-19 11:55:02
(7 hours ago)
(mod_security) mod_security (id:920500) triggered by 34.176.225.128 (CL/Chile/128.225.176.34.bc.goog ...
show more
(mod_security) mod_security (id:920500) triggered by 34.176.225.128 (CL/Chile/128.225.176.34.bc.googleusercontent.com): 5 in the last 300 secs (CF_ENABLE)
show less
Brute-Force
Web App Attack
π³π±
e.fierstra
2026-09-19 11:26:42
(7 hours ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
π©πͺ
netclix.gr
2026-09-19 10:17:50
(8 hours ago)
(mod_security) mod_security triggered on hostname [redacted] 34.176.225.128 (CL/Chile/128.225.176.34 ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.176.225.128 (CL/Chile/128.225.176.34.bc.googleusercontent.com): (CF_ENABLE)
show less
SQL Injection
Anonymous
2026-09-19 09:08:52
(10 hours ago)
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: CL, Attack patterns: Word ...
show more
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: CL, Attack patterns: WordPress scanning, Backup file probing, Cloud secrets probing
show less
Bad Web Bot
Web App Attack
π©πͺ
Nevermind
2026-09-19 03:59:57
(15 hours ago)
34.176.225.128 - - [19/Sep/2026:05:59:55 +0200] "GET /.git/config HTTP/1.1" 403 6272 "-" "Mozilla/5. ...
show more
34.176.225.128 - - [19/Sep/2026:05:59:55 +0200] "GET /.git/config HTTP/1.1" 403 6272 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.176.225.128 - - [19/Sep/2026:05:59:56 +0200] "GET /.env HTTP/1.1" 403 6272 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.176.225.128 - - [19/Sep/2026:05:59:56 +0200] "GET /.env.local HTTP/1.1" 403 6272 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.176.225.128 - - [19/Sep/2026:05:59:56 +0200] "GET /.env.production HTTP/1.1" 403 6272 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Web App Attack
π©πͺ
Nevermind
2026-09-19 02:57:47
(16 hours ago)
34.176.225.128 - - [19/Sep/2026:04:57:46 +0200] "GET /.git/config HTTP/1.1" 403 6272 "-" "Mozilla/5. ...
show more
34.176.225.128 - - [19/Sep/2026:04:57:46 +0200] "GET /.git/config HTTP/1.1" 403 6272 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.176.225.128 - - [19/Sep/2026:04:57:46 +0200] "GET /.env HTTP/1.1" 403 6272 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.176.225.128 - - [19/Sep/2026:04:57:46 +0200] "GET /.env.local HTTP/1.1" 403 6272 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.176.225.128 - - [19/Sep/2026:04:57:47 +0200] "GET /.env.production HTTP/1.1" 403 6272 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Web App Attack
π©πͺ
gadix
2026-09-19 02:36:29
(16 hours ago)
[19/Sep/2026:04:36:28.813609 +0200] aq31LE0ZgLv_LyPlQudkCQAAAEE 34.176.225.128 32772 127.0.0.1 7081
...
show more
[19/Sep/2026:04:36:28.813609 +0200] aq31LE0ZgLv_LyPlQudkCQAAAEE 34.176.225.128 32772 127.0.0.1 7081
[19/Sep/2026:04:36:29.064918 +0200] aq31LU0ZgLv_LyPlQudkCgAAAE4 34.176.225.128 32780 127.0.0.1 7081
...
show less
Web App Attack
π³π±
Alt255
2026-09-18 19:02:37
(1 day ago)
[cb-08al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[cb-08al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.176.225.128 - - [18/Sep/2026:21:02:35 +0200] "GET /.env.txt HTTP/1.0" 401 970 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
π«π·
masterguru
2026-09-18 16:31:36
(1 day ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-201)
Hacking
Web App Attack
π©πͺ
LRob
2026-09-18 16:27:47
(1 day ago)
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: ...
show more
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: /.env (+6 more) | 2026-09-18 16:27 UTC
show less
Hacking
Web App Attack
π«π·
masterguru
2026-09-18 15:55:43
(1 day ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-196)
Hacking
Web App Attack
π³π±
Site.eu
2026-09-18 15:27:28
(1 day ago)
Excessive multi-domain requests
Brute-Force
π¦πΉ
penguin-solutions.at
2026-09-18 14:32:07
(1 day ago)
Excessive 403/404 errors
...
Brute-Force
Web App Attack
πΊπΈ
TPI-Abuse
2026-09-18 13:00:52
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.176.225.128 (128.225.176.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.176.225.128 (128.225.176.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 09:00:48.809160 2026] [security2:error] [pid 10781:tid 10781] [client 34.176.225.128:37166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gabbyspetnanny.com"] [uri "/.git/config"] [unique_id "aq02AGuQDSg-qqdJ1MVf6wAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack