🇩🇪
rh24
2026-11-14 22:40:08
UTC ·
(8 minutes ago)
(secretscan) Secret-Scanner (env/git/ssh/credentials) from 136.67.94.50 (US/United States/50.94.67.136.bc.googleusercontent.com)
Hacking
🇺🇸
TPI-Abuse
2026-11-14 22:38:00
UTC ·
(10 minutes ago)
(mod_security) mod_security (id:210492) triggered by 136.67.94.50 (50.94.67.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 17:37:57.017206 2026] [security2:error] [pid 2722:tid 272 ...
show more
(mod_security) mod_security (id:210492) triggered by 136.67.94.50 (50.94.67.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 17:37:57.017206 2026] [security2:error] [pid 2722:tid 2722] [client 136.67.94.50:55764] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paleopathologist.com"] [uri "/.git/config"] [unique_id "avjixdjGexlCyz0mglkrvwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-11-14 22:35:32
UTC ·
(13 minutes ago)
Web attack/malicious scanning detected
Web App Attack
Anonymous
2026-11-14 22:27:18
UTC ·
(21 minutes ago)
GET /.git/config HTTP/1.1
...
Web App Attack
🇩🇪
paissangroup
2026-11-14 22:17:43
UTC ·
(30 minutes ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 22:09:16
UTC ·
(39 minutes ago)
(mod_security) mod_security (id:210492) triggered by 136.67.94.50 (50.94.67.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 17:09:08.760117 2026] [security2:error] [pid 27479:tid 27 ...
show more
(mod_security) mod_security (id:210492) triggered by 136.67.94.50 (50.94.67.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 17:09:08.760117 2026] [security2:error] [pid 27479:tid 27479] [client 136.67.94.50:50766] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paintedoverwhite.com"] [uri "/.git/config"] [unique_id "avjcBAFiwlbpj96ZXUL80wAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Aetherweb Ark
2026-11-14 21:56:54
UTC ·
(51 minutes ago)
(mod_security) mod_security (id:949110) triggered by 136.67.94.50 (US/United States/50.94.67.136.bc.googleusercontent.com): N in the last X secs
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 21:46:12
UTC ·
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 136.67.94.50 (50.94.67.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 16:46:08.379358 2026] [security2:error] [pid 20524:tid 20 ...
show more
(mod_security) mod_security (id:210492) triggered by 136.67.94.50 (50.94.67.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 16:46:08.379358 2026] [security2:error] [pid 20524:tid 20524] [client 136.67.94.50:43798] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "page-wide.com"] [uri "/.git/config"] [unique_id "avjWoKbPWXyMXtNvjvPqDQAAACM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
pinguin
2026-11-14 21:43:39
UTC ·
(1 hour ago)
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: LOG
Protocol: HTTP/1.1 (GET method)
Endpoint: /.git/config
UA: Empty string
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
Bad Web Bot
🇩🇪
FeG Deutschland
2026-11-14 21:21:55
UTC ·
(1 hour ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 14
Exploited Host
Web App Attack
🇧🇷
diego
2026-11-14 21:08:43
UTC ·
(1 hour ago)
[probe-smbits-19-34] 2026-11-14 20:52:12, Client: 136.67.94.50, Protocol: 6, Unauthorized activity to HTTP: GET /.git/config
Web App Attack
🇫🇷
zUnlegit
2026-11-14 21:07:52
UTC ·
(1 hour ago)
Automated web scanner requested sensitive path: /.git/config
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 21:07:26
UTC ·
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 136.67.94.50 (50.94.67.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 16:07:21.241404 2026] [security2:error] [pid 18166:tid 18 ...
show more
(mod_security) mod_security (id:210492) triggered by 136.67.94.50 (50.94.67.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 16:07:21.241404 2026] [security2:error] [pid 18166:tid 18166] [client 136.67.94.50:40638] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "packersandribsbbq.blackjobsnetwork.com"] [uri "/.git/config"] [unique_id "avjNiTd1H8s5W8Q9_5OS2gAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
tdamg
2026-11-14 20:58:16
UTC ·
(1 hour ago)
Automated probing for secret and config files (.env, cloud credential files): 1 refused requests to 1 distinct paths (HTTP 403/404), 2026-11-14 20:58 to 20:58 UTC. Blocked at firewall.
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-11-14 20:46:19
UTC ·
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 136.67.94.50 (50.94.67.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 15:46:11.144811 2026] [security2:error] [pid 22911:tid 22 ...
show more
(mod_security) mod_security (id:210492) triggered by 136.67.94.50 (50.94.67.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 15:46:11.144811 2026] [security2:error] [pid 22911:tid 22911] [client 136.67.94.50:53864] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paardekooper.info"] [uri "/.git/config"] [unique_id "avjIk0sk9hiGM_dS14fX9QAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack