🇷🇴
iulianh
2026-10-15 19:09:42
(8 hours ago)
80,443
Brute-Force
SSH
🇺🇸
TPI-Abuse
2026-10-15 18:57:28
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 31.59.105.180 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 31.59.105.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 14:57:24.202212 2026] [security2:error] [pid 20212:tid 20212] [client 31.59.105.180:46374] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dmasoftlab.com"] [uri "/.git/HEAD"] [unique_id "atEiFL9mRVfv831MIIDC6gAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
dzpk
2026-10-15 18:56:42
(8 hours ago)
[15/Oct/2026:20:51:10 +0200] 179209027061.337044 31.59.105.180 38028 HOST 443 [15/Oct/2026:20:53:14 ...
show more
[15/Oct/2026:20:51:10 +0200] 179209027061.337044 31.59.105.180 38028 HOST 443 [15/Oct/2026:20:53:14 +0200] 179209039490.089049 31.59.105.180 43660 HOST 80 [15/Oct/2026:20:56:41 +0200] 17920906012.152193 31.59.105.180 34630 HOST 443
show less
Web App Attack
2026-10-15 18:38:10
(8 hours ago)
Bot / scanning and/or hacking attempts: GET /.env HTTP/1.1
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 17:24:52
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 31.59.105.180 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 31.59.105.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 13:24:44.304887 2026] [security2:error] [pid 11285:tid 11285] [client 31.59.105.180:43410] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mavikalem.org"] [uri "/.git/HEAD"] [unique_id "atEMXHFNr0fqixyU5fH48QAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 17:02:29
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 31.59.105.180 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 31.59.105.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 13:02:23.740324 2026] [security2:error] [pid 19274:tid 19274] [client 31.59.105.180:60960] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "notepromd.com"] [uri "/.git/HEAD"] [unique_id "atEHH2RaonNIk0pyy-zEwgAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Rayulcifer
2026-10-15 11:59:56
(15 hours ago)
31.59.105.180 - - [15/Oct/2026:06:59:52 -0500] "GET /.env HTTP/1.1" 403 6735 "-" "Mozilla/5.0 (CentO ...
show more
31.59.105.180 - - [15/Oct/2026:06:59:52 -0500] "GET /.env HTTP/1.1" 403 6735 "-" "Mozilla/5.0 (CentOS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
...
show less
Open Proxy
Port Scan
Hacking
Web App Attack
SSH
🇺🇸
TPI-Abuse
2026-10-15 11:34:21
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 31.59.105.180 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 31.59.105.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 07:34:18.501186 2026] [security2:error] [pid 27255:tid 27255] [client 31.59.105.180:41116] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tomweston.net"] [uri "/.git/logs/HEAD"] [unique_id "atC6OpqlU-mOI1JFtBLMCwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 10:07:17
(17 hours ago)
(mod_security) mod_security (id:210492) triggered by 31.59.105.180 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 31.59.105.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 06:07:13.489514 2026] [security2:error] [pid 32667:tid 32695] [client 31.59.105.180:44822] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aapmglobal.com"] [uri "/.git/HEAD"] [unique_id "atCl0Soe4CXK_qcaZ9G1XwAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇦
URAN Publishing Service
2026-10-15 09:52:02
(17 hours ago)
[15/Oct/2026:12:52:02 +0300] -- 31.59.105.180 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.git ...
show more
[15/Oct/2026:12:52:02 +0300] -- 31.59.105.180 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.git/HEAD HTTP/1.1
show less
Bad Web Bot
Web App Attack
🇫🇷
regishoussin
2026-10-15 09:31:53
(17 hours ago)
Automated web scanning detected by Wazuh (rule 100241): repeated 400/404 errors from mass probing of ...
show more
Automated web scanning detected by Wazuh (rule 100241): repeated 400/404 errors from mass probing of admin/backdoor paths (e.g. wp-login.php, known CMS shell filenames) on an Apache web server, on 2026-10-15 09:31 UTC.
show less
Bad Web Bot
Web App Attack
🇫🇮
as211431.net
2026-10-15 09:17:43
(18 hours ago)
Triggered Cloudflare WAF (firewallCustom) from FR.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET metho ...
show more
Triggered Cloudflare WAF (firewallCustom) from FR.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /.git/logs/HEAD
UA: Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
2026-10-15 09:10:01
(18 hours ago)
suspicious request in access.log
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 08:47:23
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 31.59.105.180 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 31.59.105.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 04:47:17.604809 2026] [security2:error] [pid 14891:tid 14891] [client 31.59.105.180:49204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arklatexds.com"] [uri "/.git/HEAD"] [unique_id "atCTFZlWqGzdvNpxGAG2iQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 07:28:25
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 31.59.105.180 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 31.59.105.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 03:28:18.505946 2026] [security2:error] [pid 3157:tid 3157] [client 31.59.105.180:41722] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "blockadegc.com"] [uri "/.git/config"] [unique_id "atCAkjCAJX-C8ViB5AHlkAAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
