🇳🇱
e.fierstra
2026-08-25 14:54:32
(2 hours ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
2026-08-25 14:47:04
(2 hours ago)
Bot / scanning and/or hacking attempts: GET /.git/config HTTP/1.1
Hacking
Web App Attack
🇬🇧
pinguin
2026-08-25 14:00:55
(3 hours ago)
Triggered Cloudflare WAF (firewallManaged) from DE.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET meth ...
show more
Triggered Cloudflare WAF (firewallManaged) from DE.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /.git/config
UA: Go-http-client/1.1
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇳🇱
ipoac.nl
2026-08-25 13:59:58
(3 hours ago)
ipoac.nl:80 185.193.167.9 - - [25/Aug/2026:15:59:57 +0200] - "GET /.git/config HTTP/1.1" 403 1661 "- ...
show more
ipoac.nl:80 185.193.167.9 - - [25/Aug/2026:15:59:57 +0200] - "GET /.git/config HTTP/1.1" 403 1661 "-" "Go-http-client/1.1"
show less
Bad Web Bot
🇫🇮
paissangroup
2026-08-25 13:43:28
(3 hours ago)
Multiple WAF Violations
Web App Attack
2026-08-25 12:57:43
(4 hours ago)
GET /.git/config HTTP/1.1
...
Web App Attack
🇺🇸
TPI-Abuse
2026-08-25 12:13:40
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 185.193.167.9 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 185.193.167.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 08:13:35.654992 2026] [security2:error] [pid 14937:tid 14937] [client 185.193.167.9:61709] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "laboquimia.es"] [uri "/.git/config"] [unique_id "ao2G7x_TXgbS8LYhr7CX6wAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
voormedia
2026-08-25 11:28:43
(5 hours ago)
Accessed trap at '/.git/config'
Web App Attack
🇩🇪
Bedios GmbH
2026-08-25 11:10:33
(6 hours ago)
Login credentials theft attempt
Hacking
🇺🇸
TPI-Abuse
2026-08-25 09:50:19
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 185.193.167.9 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 185.193.167.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 05:50:11.053056 2026] [security2:error] [pid 1410591:tid 1410610] [client 185.193.167.9:26035] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "socialanxietywebsite.com"] [uri "/.git/config"] [unique_id "ao1lU0BYEnuBPmzIFOo9DQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-25 09:32:49
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 185.193.167.9 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 185.193.167.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 05:32:41.690750 2026] [security2:error] [pid 4227:tid 4227] [client 185.193.167.9:50127] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "riser-astrology.com"] [uri "/.git/config"] [unique_id "ao1hOQCwNz6ByUpOLuVc6AAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-25 09:17:33
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 185.193.167.9 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 185.193.167.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 05:17:29.456376 2026] [security2:error] [pid 21478:tid 21478] [client 185.193.167.9:41649] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "partybusdet.com"] [uri "/.git/config"] [unique_id "ao1dqQVREtydrK3Oj24lcQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-25 08:34:11
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 185.193.167.9 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 185.193.167.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 04:34:06.432816 2026] [security2:error] [pid 2117:tid 2117] [client 185.193.167.9:42465] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kingscruff.com"] [uri "/.git/config"] [unique_id "ao1TfvD2QPo82fPcIaYM-gAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-25 08:08:04
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 185.193.167.9 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 185.193.167.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 04:07:56.083713 2026] [security2:error] [pid 4180:tid 4180] [client 185.193.167.9:58777] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kelvinlouie.com"] [uri "/.git/config"] [unique_id "ao1NXN7eXm_atdlZLcCC9gAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-25 07:30:02
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 185.193.167.9 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 185.193.167.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 03:29:56.512928 2026] [security2:error] [pid 22674:tid 22674] [client 185.193.167.9:27795] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ginaotto.com"] [uri "/.git/config"] [unique_id "ao1EdFb1gTpbH68RTkQqvgAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack