๐ซ๐ท
mrcrassi
2026-09-29 19:13:22
(4 days ago)
Triggered Cloudflare WAF (firewallManaged) from HK.
Action taken: BLOCK
Protocol: HTTP/1.1 (POST met ...
show more
Triggered Cloudflare WAF (firewallManaged) from HK.
Action taken: BLOCK
Protocol: HTTP/1.1 (POST method)
Endpoint: /
UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐ฌ๐ง
consul.to
2026-09-29 15:44:27
(4 days ago)
Web attack/malicious scanning detected
Web App Attack
Anonymous
2026-09-29 15:00:56
(4 days ago)
AGERADE WEBEXPLOIT 34.150.107.119 (119.107.150.34.bc.googleusercontent.com)
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-29 09:00:32
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.150.107.119 (119.107.150.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.150.107.119 (119.107.150.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 05:00:25.211260 2026] [security2:error] [pid 13515:tid 13515] [client 34.150.107.119:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.swarnar.com"] [uri "/.git/config"] [unique_id "art-Kb0VS_cG2BMXfDs8HwAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
masterguru
2026-09-28 14:32:10
(5 days ago)
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.150.107.119 (HK/Hong Kong/119.107. ...
show more
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.150.107.119 (HK/Hong Kong/119.107.150.34.bc.googleusercontent.com): 2 in the last 3600 secs (0-196)
show less
Hacking
๐ณ๐ฑ
Savvii
2026-09-28 07:34:52
(5 days ago)
20 attempts against mh-misbehave-ban on bud
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-28 06:37:33
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 34.150.107.119 (119.107.150.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.150.107.119 (119.107.150.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 02:37:25.647876 2026] [security2:error] [pid 25048:tid 25048] [client 34.150.107.119:60678] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdryer.com"] [uri "/.git/config"] [unique_id "aroLJWsjTotZtVTWAZ9I8wAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-27 18:11:30
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 34.150.107.119 (119.107.150.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.150.107.119 (119.107.150.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 27 14:11:25.696614 2026] [security2:error] [pid 2524:tid 2580] [client 34.150.107.119:47736] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.anglicancommission.aafm.us"] [uri "/.git/config"] [unique_id "arlcTR9ppDSYruGrK19XTgAAAgQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
e.fierstra
2026-09-27 16:54:11
(6 days ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
๐ฉ๐ช
Hazzard
2026-09-27 07:07:51
(6 days ago)
(mod_security) mod_security triggered on hostname [redacted]): (CF_ENABLE)
SQL Injection
๐ช๐ธ
pipeline.es
2026-09-27 01:20:58
(1 week ago)
Web scanning / probing for vulnerable paths | URL: /v1/.env | Evidence: arribatours.com 34.150.107.1 ...
show more
Web scanning / probing for vulnerable paths | URL: /v1/.env | Evidence: arribatours.com 34.150.107.119 - - [27/Sep/2026:03:20:39 +0200] \"GET /v1/.env HTTP/1.1\" 404 23078 \"-\" \"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\" GEOIP_COUNTRY_CODE=HK | ASN: GOOGLE-CLOUD-PLATFORM | Country: HK
show less
Port Scan
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-26 20:20:42
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.150.107.119 (119.107.150.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.150.107.119 (119.107.150.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 16:20:34.632620 2026] [security2:error] [pid 6082:tid 6082] [client 34.150.107.119:46398] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.bienvista.com"] [uri "/.git/config"] [unique_id "argpEjy3Y5uELueWxd4aoAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ง๐ช
madeit
2026-09-26 08:40:00
(1 week ago)
Web App Attack
๐ณ๐ฑ
debestelapp
2026-09-25 22:40:10
(1 week ago)
Web App Attack
๐ธ๐ช
vaia.cloud
2026-09-25 20:15:01
(1 week ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack