🇩🇪
iNetWorker
2026-06-25 05:42:36
(6 hours ago)
trolling for resource vulnerabilities
Web App Attack
🇺🇸
TPI-Abuse
2026-06-25 05:32:04
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.203.179.65 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.203.179.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 01:31:59.318938 2026] [security2:error] [pid 9939:tid 9983] [client 172.203.179.65:59730] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "halescreations.com"] [uri "/.git/config"] [unique_id "ajy9T_nCZGjO4JwO9iUTzwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-24 19:15:34
(17 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.203.179.65 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.203.179.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 15:15:27.095259 2026] [security2:error] [pid 6816:tid 6816] [client 172.203.179.65:37522] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "joshseipel.com"] [uri "/.git/config"] [unique_id "ajwszxdlfjTMpO3KbFBG1gAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇹
René Hickersberger
2026-06-23 17:37:57
(1 day ago)
malicious bot detected: violations="hit-honeypot"; user_agent="Mozilla/5.0 (X11; Ubuntu; Linux x86_6 ...
show more
malicious bot detected: violations="hit-honeypot"; user_agent="Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0"
show less
Web App Attack
🇩🇪
big-cloud.nl
2026-06-22 14:02:53
(2 days ago)
Try to access /.git/config
Web App Attack
🇩🇪
FeG Deutschland
2026-06-22 10:12:03
(3 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇺🇸
oralunal
2026-06-21 04:47:33
(4 days ago)
IP banned by Fail2Ban in jail suss access.log ah-app-1
...
Bad Web Bot
Web App Attack
🇬🇧
Axel
2026-06-21 03:18:02
(4 days ago)
Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /.git/config ...
show more
Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /.git/config Server: UK-01
show less
Web App Attack
Hacking
SQL Injection
🇺🇸
TPI-Abuse
2026-06-18 15:06:58
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 172.203.179.65 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.203.179.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 11:06:54.284564 2026] [security2:error] [pid 17952:tid 17952] [client 172.203.179.65:53954] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rockymtnfire.com"] [uri "/.git/config"] [unique_id "ajQJjkX8w4kszjATPyej2gAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇹
Erpelstolz
2026-06-18 02:01:29
(1 week ago)
portscan on internal host: 443
Port Scan
🇺🇸
TPI-Abuse
2026-06-17 17:24:31
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 172.203.179.65 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.203.179.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 13:24:24.829944 2026] [security2:error] [pid 18291:tid 18291] [client 172.203.179.65:33492] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "alknetso.name"] [uri "/.git/config"] [unique_id "ajLYSO7TrZE1cvXpKqoIeAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-17 10:00:52
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 172.203.179.65 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.203.179.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 06:00:48.058761 2026] [security2:error] [pid 32551:tid 32551] [client 172.203.179.65:42018] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "borgeschiro.southtahoechurchofchrist.com"] [uri "/.git/config"] [unique_id "ajJwUKLrEUhRq1a_FlkSpgAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
pinguin
2026-06-17 03:18:44
(1 week ago)
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: LOG
Protocol: HTTP/1.1 (GET method ...
show more
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: LOG
Protocol: HTTP/1.1 (GET method)
Endpoint: /.git/config
UA: GuzzleHttp/7.6.0 curl/7.88.1 PHP/8.2.7
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-06-14 16:02:12
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 172.203.179.65 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.203.179.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 12:02:05.662271 2026] [security2:error] [pid 26102:tid 26119] [client 172.203.179.65:37650] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "munatseng.org"] [uri "/.git/config"] [unique_id "ai7Qfa-hX1EcDkSxI6Qs4gAAAQ8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-11 21:45:29
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 172.203.179.65 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.203.179.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 17:45:22.716793 2026] [security2:error] [pid 29059:tid 29065] [client 172.203.179.65:45188] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emmaryan.net"] [uri "/.git/config"] [unique_id "aissct3lGcW3JOqSiy3TQAAAAIM"]
show less
Brute-Force
Bad Web Bot
Web App Attack