🇦🇺
rubixstudios
2026-11-05 23:11:02
UTC ·
(8 hours ago)
Excessive HTTP requests consistent with automated attack behaviour detected by Imunify360
DDoS Attack
Brute-Force
Web App Attack
🇩🇪
Petros Stefanakis
2026-11-05 22:59:41
UTC ·
(8 hours ago)
(mod_security) mod_security triggered on hostname [redacted] 34.97.167.85 (JP/Japan/85.167.97.34.bc.googleusercontent.com)
SQL Injection
🇺🇸
iwle
2026-11-05 22:46:33
UTC ·
(9 hours ago)
[Thu Nov 05 17:46:30.930078 2026] [:error] [pid 909222:tid 909314] [client 34.97.167.85:0] [client 34.97.167.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(?:\\\\.env(?:\\\\.[^/]*)?|\\\\.git(?:/|$)|phpinfo(?:\\\\.p ...
show more
[Thu Nov 05 17:46:30.930078 2026] [:error] [pid 909222:tid 909314] [client 34.97.167.85:0] [client 34.97.167.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(?:\\\\.env(?:\\\\.[^/]*)?|\\\\.git(?:/|$)|phpinfo(?:\\\\.php)?(?:\\\\.(?:bak|old|save|tmp|swp|~))?|php-info\\\\.php|phpversion\\\\.php|info\\\\.php|debug\\\\.php|pinfo\\\\.php|pi\\\\.php|php\\\\.php|i\\\\.php|application_default_credentials\\\\.json|(?:firebase|google ..." at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/local_rules/100-site-policy.conf"] [line "146"] [id "100113"] [msg "Local Policy: Sensitive file or diagnostic endpoint probe"] [severity "WARNING"] [tag "local/sensitive-file-probe"] [hostname "webmail.justuptowngames.com"] [uri "/info.php"] [unique_id "au0HRi0cNuZBPaP5Eq3NMwAAAYs"]
[Thu Nov 05 17:46:31.555804 2026] [:error] [pid 910823:tid 910865] [client 34.97.167.85:0] [client 34.97.167.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(?:\\
...
show less
Bad Web Bot
Web App Attack
🇩🇪
akasolutions.de
2026-11-05 22:40:04
UTC ·
(9 hours ago)
(mod_security) mod_security triggered on hostname [redacted] 34.97.167.85 (JP/Japan/85.167.97.34.bc.googleusercontent.com)
SQL Injection
Anonymous
2026-11-05 22:33:42
UTC ·
(9 hours ago)
(mod_security) mod_security triggered on hostname [redacted] 34.97.167.85 (JP/Japan/85.167.97.34.bc.googleusercontent.com)
SQL Injection
🇮🇹
VHosting
2026-11-05 21:20:05
UTC ·
(10 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇮🇹
itsvic.dev
2026-11-05 20:57:53
UTC ·
(10 hours ago)
34.97.167.85 - - [05/Nov/2026:20:57:51 +0000] "webmail.itsvic.dev" "GET /.git/config HTTP/1.1" 404 382 345 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.97.167.85 - - [05/Nov/2026:20:57 ...
show more
34.97.167.85 - - [05/Nov/2026:20:57:51 +0000] "webmail.itsvic.dev" "GET /.git/config HTTP/1.1" 404 382 345 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.97.167.85 - - [05/Nov/2026:20:57:52 +0000] "webmail.itsvic.dev" "GET /.env HTTP/1.1" 404 382 338 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.97.167.85 - - [05/Nov/2026:20:57:52 +0000] "webmail.itsvic.dev" "GET /.env.local HTTP/1.1" 404 382 344 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Brute-Force
Web App Attack
🇷🇴
gtheo99
2026-11-05 18:12:50
UTC ·
(13 hours ago)
(mod_security) mod_security (id:900006) triggered by 34.97.167.85 (JP/Japan/85.167.97.34.bc.googleusercontent.com): 3 in the last 900 secs (CF_ENABLE)
Port Scan
🇺🇸
TPI-Abuse
2026-11-05 17:45:38
UTC ·
(14 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.97.167.85 (85.167.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 12:45:33.163362 2026] [security2:error] [pid 14554:tid 14 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.97.167.85 (85.167.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 12:45:33.163362 2026] [security2:error] [pid 14554:tid 14557] [client 34.97.167.85:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.humanet.io"] [uri "/.git/config"] [unique_id "auzAvZOlL9geteCx5rYOEQAAAMA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Aetherweb Ark
2026-11-05 15:30:35
UTC ·
(16 hours ago)
(mod_security) mod_security (id:949110) triggered by 34.97.167.85 (JP/Japan/85.167.97.34.bc.googleusercontent.com): N in the last X secs
Web App Attack
Anonymous
2026-11-05 14:33:18
UTC ·
(17 hours ago)
Banned by Fail2Ban on server
Web App Attack
🇺🇸
francelink.fr
2026-11-05 12:55:27
UTC ·
(18 hours ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-05T12:53:43.000Z.
Web App Attack
Anonymous
2026-11-05 11:46:48
UTC ·
(20 hours ago)
34.97.167.85 - - [05/Nov/2026:05:46:46 -0600] "GET /.env HTTP/1.1" 302 238 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 162.159.110.38
34.97.167.85 - - [05/Nov/2026:05:46: ...
show more
34.97.167.85 - - [05/Nov/2026:05:46:46 -0600] "GET /.env HTTP/1.1" 302 238 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 162.159.110.38
34.97.167.85 - - [05/Nov/2026:05:46:46 -0600] "GET /.env.local HTTP/1.1" 302 244 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 162.159.110.38
34.97.167.85 - - [05/Nov/2026:05:46:46 -0600] "GET /.env.production HTTP/1.1" 302 249 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 162.159.110.38
34.97.167.85 - - [05/Nov/2026:05:46:46 -0600] "GET /.env.staging HTTP/1.1" 302 246 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 162.159.110.38
34.97.167.85 - - [05/Nov/2026:05:46:47 -0600] "GET /.env.development HTTP/1.1" 302 250 "-" "Mozilla/5.0 (Macintosh; Int
...
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
big-cloud.nl
2026-11-05 11:44:58
UTC ·
(20 hours ago)
Try to access /.git/config
Web App Attack
🇳🇱
Roderic
2026-11-05 08:20:00
UTC ·
(23 hours ago)
Insights: 12 probe requests within 24 hours on 1 site, e.g. /.git/config (no normal page views)
Web App Attack