🇮🇳
evicky2002
2026-07-08 06:29:13
UTC ·
(4 months ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
🇫🇷
dusfor72
2026-05-19 00:55:10
UTC ·
(5 months ago)
aggressive portscan
...
Port Scan
🇫🇮
6kilowatti
2026-05-18 23:32:07
UTC ·
(5 months ago)
2026-05-19T02:32:06.237573+03:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00:00:5e:00:01:58:08:00 SRC=34.128.65.80 DST=83.148.240.21 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=33462 PROTO=TCP SPT=47117 DPT=4000 WINDOW=1024 RES=0x00 S ...
show more
2026-05-19T02:32:06.237573+03:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00:00:5e:00:01:58:08:00 SRC=34.128.65.80 DST=83.148.240.21 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=33462 PROTO=TCP SPT=47117 DPT=4000 WINDOW=1024 RES=0x00 SYN URGP=0
...
show less
Port Scan
🇩🇪
Blexyel
2026-05-15 16:28:16
UTC ·
(5 months ago)
34.128.65.80 - - [15/May/2026:09:36:53 +0200] "GET /.git/config HTTP/1.1" 404 548 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.81 Safari/537.36"
...
Brute-Force
Web App Attack
🇬🇧
thetomtaylor.co.uk
2026-05-15 10:06:01
UTC ·
(5 months ago)
Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [ice01,wa01,wa02]
Hacking
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-15 09:35:04
UTC ·
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 34.128.65.80 (80.65.128.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 05:34:55.454741 2026] [security2:error] [pid 22685:tid 22 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.128.65.80 (80.65.128.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 05:34:55.454741 2026] [security2:error] [pid 22685:tid 22685] [client 34.128.65.80:52072] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lacasadeterra.com"] [uri "/.git/config"] [unique_id "agbovykFyfEeTid4zgAoWQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
CBJ
2026-05-15 09:24:29
UTC ·
(5 months ago)
fail2ban: apache-filepath-recon
...
Web App Attack
🇩🇪
Marcin Stepien
2026-05-15 08:18:46
UTC ·
(5 months ago)
Hit honeypot endpoint /.git/config. Automated scanner/bot detected.
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-15 08:08:16
UTC ·
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 34.128.65.80 (80.65.128.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 04:08:13.207008 2026] [security2:error] [pid 27063:tid 27 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.128.65.80 (80.65.128.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 04:08:13.207008 2026] [security2:error] [pid 27063:tid 27063] [client 34.128.65.80:57148] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whaletailpuckerbutt.com"] [uri "/.git/config"] [unique_id "agbUbYA4Mt65tKMjwIb7UQAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
as211431.net
2026-05-15 08:07:54
UTC ·
(5 months ago)
Triggered Cloudflare WAF (firewallCustom) from ID.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /.git/config
UA: Mozilla/5.0 (Linux; Android 7.0; Alcatel_5044R) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safar ...
show more
Triggered Cloudflare WAF (firewallCustom) from ID.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /.git/config
UA: Mozilla/5.0 (Linux; Android 7.0; Alcatel_5044R) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-05-15 07:25:54
UTC ·
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 34.128.65.80 (80.65.128.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 03:25:50.516800 2026] [security2:error] [pid 17370:tid 17 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.128.65.80 (80.65.128.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 03:25:50.516800 2026] [security2:error] [pid 17370:tid 17370] [client 34.128.65.80:60998] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mininomotorfix.com"] [uri "/.git/config"] [unique_id "agbKfpqeNFwGSxld3Gjy7QAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
interbiznw.com
2026-05-15 06:01:26
UTC ·
(5 months ago)
malicious-web-requests-vulnerability-scanning
Hacking
Brute-Force
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-05-15 05:14:26
UTC ·
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 34.128.65.80 (80.65.128.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 01:14:21.603824 2026] [security2:error] [pid 23793:tid 23 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.128.65.80 (80.65.128.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 01:14:21.603824 2026] [security2:error] [pid 23793:tid 23793] [client 34.128.65.80:43294] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.179vfs.com"] [uri "/.git/config"] [unique_id "agarrZcMxGddCaqTvt5Z8AAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-05-15 04:33:41
UTC ·
(5 months ago)
34.128.65.80 - - [15/May/2026:06:33:40 +0200] "GET /.git/config HTTP/1.1" 301 169 "-" "Mozilla/5.0 (PlayBook; U; RIM Tablet OS 2.1.0; en-US) AppleWebKit/536.2+ (KHTML like Gecko) Version/7.2.1.0 Safari/536.2+"
Web App Attack
Anonymous
2026-05-15 04:32:06
UTC ·
(5 months ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host