๐ณ๐ฑ
Site.eu
2026-09-27 15:58:21
(59 minutes ago)
Excessive multi-domain requests
Brute-Force
๐ธ๐ช
vaia.cloud
2026-09-25 06:10:02
(2 days ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-24 21:26:26
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.93.85.207 (207.85.93.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.93.85.207 (207.85.93.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 17:26:23.727198 2026] [security2:error] [pid 19024:tid 19024] [client 34.93.85.207:40998] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.ursell.org"] [uri "/.git/config"] [unique_id "arWVf3LLL63YMhKLrH7BRAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-24 19:53:10
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.93.85.207 (207.85.93.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.93.85.207 (207.85.93.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 15:53:05.423605 2026] [security2:error] [pid 8418:tid 8418] [client 34.93.85.207:46380] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.untraceable.org"] [uri "/.git/config"] [unique_id "arV_oeDjOkr_EiEFoqELPwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-24 18:51:12
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.93.85.207 (207.85.93.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.93.85.207 (207.85.93.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 14:51:04.666194 2026] [security2:error] [pid 4962:tid 4962] [client 34.93.85.207:35670] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.unitymaine.org"] [uri "/.git/config"] [unique_id "arVxGFLdt91XglIsVyPAggAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-24 17:53:39
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.93.85.207 (207.85.93.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.93.85.207 (207.85.93.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 13:53:31.978486 2026] [security2:error] [pid 3715:tid 3715] [client 34.93.85.207:59686] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.uniquelimo.org"] [uri "/.git/config"] [unique_id "arVjm_tBmEZwyp4euHyWAAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
Hazzard
2026-09-24 14:36:02
(3 days ago)
(mod_security) mod_security triggered on hostname [redacted]): (CF_ENABLE)
SQL Injection
๐ณ๐ฑ
Site.eu
2026-09-24 01:14:06
(3 days ago)
Excessive multi-domain requests
Brute-Force
๐บ๐ฆ
URAN Publishing Service
2026-09-24 01:05:03
(3 days ago)
[24/Sep/2026:04:05:03 +0300] -- 34.93.85.207 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.git/ ...
show more
[24/Sep/2026:04:05:03 +0300] -- 34.93.85.207 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.git/config HTTP/1.1
show less
Bad Web Bot
Web App Attack
๐ณ๐ฑ
homeshowdomain.nl
2026-09-23 22:00:47
(3 days ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-22.
show less
Web App Attack
SSH
Hacking
๐ณ๐ด
Abuse Buster
2026-09-23 09:31:23
(4 days ago)
34.93.85.207 - - [23/Sep/2026:11:31:20 +0200] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X1 ...
show more
34.93.85.207 - - [23/Sep/2026:11:31:20 +0200] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.93.85.207 - - [23/Sep/2026:11:31:22 +0200] "GET /.env HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Web App Attack
๐ซ๐ท
dynamix
2026-09-22 08:28:50
(5 days ago)
Multiple WAF Violations
Web App Attack
๐ซ๐ท
Catalin Negru
2026-09-22 08:05:19
(5 days ago)
Recidive ban by fail2ban on server.blackbit.ro
Brute-Force
๐ฎ๐น
CoreTech srl
2026-09-22 06:43:12
(5 days ago)
CloudLinux/Plesk alert - host=cloudlinux dominio=mitan.it ip=34.93.85.207 richieste=147 rischio=ALTO ...
show more
CloudLinux/Plesk alert - host=cloudlinux dominio=mitan.it ip=34.93.85.207 richieste=147 rischio=ALTO score=15 motivi=molte_richieste,diverse_uri_uniche,molti_404,path_sospetti,api,poco_statico,dinamico cat_id=21,19 periodo=10min
show less
Web App Attack
Bad Web Bot
๐บ๐ธ
gamabe
2026-09-21 15:34:31
(6 days ago)
Detected crowdsecurity/http-sensitive-files attack pattern. Reported by CrowdSec IDS.
Hacking