🇧🇷
radardatelecom
2026-10-07 22:27:03
(1 week ago)
Blocked by Radar da Telecom firewall — abuseipdb
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-10-07 21:59:23
(1 week ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-10-06.
show less
Web App Attack
SSH
Hacking
🇧🇪
sid3windr
2026-10-07 10:32:19
(1 week ago)
GET /.git/config (Tarpitted for 19h5m42s, wasted 3.93MB)
Web App Attack
🇺🇸
TPI-Abuse
2026-10-06 21:06:08
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.132.151.117 (117.151.132.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.132.151.117 (117.151.132.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 17:06:02.538659 2026] [security2:error] [pid 14340:tid 14340] [client 34.132.151.117:57518] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "testrong.com"] [uri "/.git/config"] [unique_id "asViuh9P6iIwPHOXEGk7PgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
as211431.net
2026-10-06 20:51:21
(1 week ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET metho ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /.git/config
UA: Empty string
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-06 20:51:04
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.132.151.117 (117.151.132.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.132.151.117 (117.151.132.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 16:50:57.153752 2026] [security2:error] [pid 29062:tid 29076] [client 34.132.151.117:45554] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "testproperty.pref-realestate.com"] [uri "/.git/config"] [unique_id "asVfMetK9sEL4kX-ihEUcQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
polycoda
2026-10-06 20:47:26
(1 week ago)
AutoBlock: ⚙️ Configuration File Access (Non Decay-Based)
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-10-06 20:31:21
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.132.151.117 (117.151.132.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.132.151.117 (117.151.132.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 16:31:16.782886 2026] [security2:error] [pid 6444:tid 6444] [client 34.132.151.117:54494] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "testo.bwill.dev"] [uri "/.git/config"] [unique_id "asValNp_A3h3_k1u2heuOgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-06 20:16:52
(1 week ago)
PAD: Bad_Web_Bot_D detected
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-06 20:10:46
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.132.151.117 (117.151.132.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.132.151.117 (117.151.132.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 16:10:42.595625 2026] [security2:error] [pid 31010:tid 31010] [client 34.132.151.117:56414] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "test.mathewyoung.com"] [uri "/.git/config"] [unique_id "asVVwpNEqOZ00FxQCT9VlQAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-06 20:03:42
(1 week ago)
[06/Oct/2026:20:03:42 +0000] host=test.lovelyrender.app server=*.lovelyrender.app ip=34.132.151.117 ...
show more
[06/Oct/2026:20:03:42 +0000] host=test.lovelyrender.app server=*.lovelyrender.app ip=34.132.151.117 method=GET req=/.git/config uri=/unknown-host.html status=404 bytes=1200 rt=0.001 urt=- ref="-" ua="-"
...
show less
Web App Attack
Bad Web Bot
2026-10-06 19:57:08
(1 week ago)
sensitive path probe detected by fail2ban
...
Port Scan
Web App Attack
🇸🇪
eagle
2026-10-06 19:53:49
(1 week ago)
34.132.151.117 - - [06/Oct/2026:19:53:48 +0000] "GET /.git/config HTTP/1.1" 404 146 "-" "-"
...
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-06 19:49:45
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.132.151.117 (117.151.132.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.132.151.117 (117.151.132.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 15:49:38.486049 2026] [security2:error] [pid 4548:tid 4548] [client 34.132.151.117:40426] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "test.justiart.com"] [uri "/.git/config"] [unique_id "asVQ0t7X2ZNVju0KQInvhAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-06 19:39:30
(1 week ago)
Web Server Exposed Git Repository Information Disclosure.
Hacking