๐ณ๐ฑ
Site.eu
2026-09-24 06:58:39
(27 minutes ago)
Excessive multi-domain requests
Brute-Force
๐ฎ๐ณ
evicky2002
2026-09-24 06:00:03
(1 hour ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
๐บ๐ธ
TPI-Abuse
2026-09-24 03:23:42
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.106.26.7 (7.26.106.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.106.26.7 (7.26.106.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 23:23:35.143962 2026] [security2:error] [pid 19414:tid 19414] [client 34.106.26.7:38284] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.globalpackets.net"] [uri "/backend/.git/config"] [unique_id "arSXtzqgK81PXoacI3cIqQAAACg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-24 02:57:08
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.106.26.7 (7.26.106.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.106.26.7 (7.26.106.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 22:57:01.607143 2026] [security2:error] [pid 5277:tid 5277] [client 34.106.26.7:36920] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.advantstudio.com"] [uri "/var/www/.git/config"] [unique_id "arSRfdtv_KMu_R-8Io8qegAAAC0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-24 01:14:05
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.106.26.7 (7.26.106.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.106.26.7 (7.26.106.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 21:14:01.713081 2026] [security2:error] [pid 3270949:tid 3270949] [client 34.106.26.7:51654] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.slampools.com"] [uri "/site/.git/config"] [unique_id "arR5WczICjK7ZtQZP4iFJQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ง๐ช
Saec
2026-09-23 23:16:01
(8 hours ago)
Jarvis auto-ban: CF top attacker on saec.ovh (24 hits, US)
Port Scan
Web App Attack
๐ซ๐ฎ
paissangroup
2026-09-23 23:10:34
(8 hours ago)
Multiple WAF Violations
Web App Attack
๐ฉ๐ช
Petros Stefanakis
2026-09-23 23:09:09
(8 hours ago)
(mod_security) mod_security triggered on hostname [redacted] 34.106.26.7 (US/United States/7.26.106. ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.106.26.7 (US/United States/7.26.106.34.bc.googleusercontent.com)
show less
SQL Injection
๐บ๐ธ
TPI-Abuse
2026-09-23 20:12:07
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.106.26.7 (7.26.106.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.106.26.7 (7.26.106.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 16:11:59.829973 2026] [security2:error] [pid 21187:tid 21187] [client 34.106.26.7:45416] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "circlehealthcaregroup.com"] [uri "/var/www/.git/config"] [unique_id "arQyj6bba1K-oRVuzdVMewAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-23 20:02:02
(11 hours ago)
34.106.26.7 - - [23/Sep/2026:22:02:01 +0200] "GET /htdocs/.git/config HTTP/1.1" 403 164 "-" "crusade ...
show more
34.106.26.7 - - [23/Sep/2026:22:02:01 +0200] "GET /htdocs/.git/config HTTP/1.1" 403 164 "-" "crusader-worker/1.0"
34.106.26.7 - - [23/Sep/2026:22:02:01 +0200] "GET /api/.git/config HTTP/1.1" 403 164 "-" "crusader-worker/1.0"
34.106.26.7 - - [23/Sep/2026:22:02:01 +0200] "GET /src/.git/config HTTP/1.1" 403 164 "-" "crusader-worker/1.0"
34.106.26.7 - - [23/Sep/2026:22:02:01 +0200] "GET /app/.git/config HTTP/1.1" 403 164 "-" "crusader-worker/1.0"
34.106.26.7 - - [23/Sep/2026:22:02:01 +0200] "GET /html/.git/config HTTP/1.1" 403 164 "-" "crusader-worker/1.0"
34.106.26.7 - - [23/Sep/2026:22:02:01 +0200] "GET /var/www/.git/config HTTP/1.1" 403 164 "-" "crusader-worker/1.0"
34.106.26.7 - - [23/Sep/2026:22:02:01 +0200] "GET /wordpress/.git/config HTTP/1.1" 403 164 "-" "crusader-worker/1.0"
34.106.26.7 - - [23/Sep/2026:22:02:01 +0200] "GET /site/.git/config HTTP/1.1" 403 164 "-" "crusader-worker/1.0"
34.106.26.7 - - [23/Sep/2026:22:02:01 +0200] "GET /backend/.git/config HTTP/1.1" 403 164 "-" "cru
...
show less
Bad Web Bot
Web App Attack
๐ฆ๐บ
CalmBrain
2026-09-23 16:45:03
(14 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
๐บ๐ธ
TPI-Abuse
2026-09-23 13:21:43
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.106.26.7 (7.26.106.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.106.26.7 (7.26.106.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 09:21:37.961286 2026] [security2:error] [pid 28167:tid 28167] [client 34.106.26.7:59008] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "berlatinc.com"] [uri "/.git/config"] [unique_id "arPSYcx5WPxjVCwi-_0hxQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
Copious7283
2026-09-23 12:40:15
(18 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
๐บ๐ธ
TPI-Abuse
2026-09-23 12:11:50
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.106.26.7 (7.26.106.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.106.26.7 (7.26.106.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 08:11:45.276126 2026] [security2:error] [pid 31760:tid 31760] [client 34.106.26.7:39698] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bienvista.com"] [uri "/.git/config"] [unique_id "arPCAWyAMjzdcgBdJ3bKNwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
dynamix
2026-09-23 12:11:26
(19 hours ago)
Multiple WAF Violations
Web App Attack