๐บ๐ธ
xmission.com
2026-05-19 00:54:39
UTC ยท
(5 months ago)
Blocked by UFW (TCP on 7000)
Source port: 52069
TTL: 251
Packet length: 40
TOS: 0x00
This report (for 34.159.149.110) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
๐ฉ๐ช
Blexyel
2026-05-15 16:22:58
UTC ยท
(5 months ago)
34.159.149.110 - - [15/May/2026:06:20:31 +0200] "GET /.git/config HTTP/1.1" 200 265 "-" "Mozilla/5.0 (OS/2; Warp 4.5; rv:31.0) Gecko/20100101 Firefox/31.0"
...
Brute-Force
Web App Attack
๐ต๐ฑ
sefinek.net
2026-05-15 08:29:52
UTC ยท
(5 months ago)
Triggered Cloudflare WAF (firewallCustom) from DE.
Action: BLOCK | Protocol: HTTP/1.1 (GET) | Endpoint: /.git/config | UA: Mozilla/5.0 (Linux; Android 6.0; Le X620 Build/MRA58K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Mobile Safari ...
show more
Triggered Cloudflare WAF (firewallCustom) from DE.
Action: BLOCK | Protocol: HTTP/1.1 (GET) | Endpoint: /.git/config | UA: Mozilla/5.0 (Linux; Android 6.0; Le X620 Build/MRA58K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Mobile Safari/537.36 โข Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐ง๐ช
madeit
2026-05-15 08:29:05
UTC ยท
(5 months ago)
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-05-15 07:59:38
UTC ยท
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 34.159.149.110 (110.149.159.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 03:59:34.334234 2026] [security2:error] [pid 8099:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.159.149.110 (110.149.159.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 03:59:34.334234 2026] [security2:error] [pid 8099:tid 8099] [client 34.159.149.110:55486] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ttlatl.dragoldio.com"] [uri "/.git/config"] [unique_id "agbSZgo8DWQHDAwk0sPSNwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
Ba-Yu
2026-05-15 07:59:32
UTC ยท
(5 months ago)
General hacking/exploits/scanning
Web Spam
Hacking
Brute-Force
Exploited Host
Web App Attack
๐ซ๐ฎ
6kilowatti
2026-05-15 06:58:13
UTC ยท
(5 months ago)
34.159.149.110 - - [15/May/2026:09:58:13 +0300] "GET /.git/config HTTP/1.1" 404 14986 "-" "Mozilla/5.0 (Linux; Android 7.1.1; Moto G Play) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.143 Mobile Safari/537.36"
...
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-05-15 04:43:34
UTC ยท
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 34.159.149.110 (110.149.159.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 00:43:26.444596 2026] [security2:error] [pid 27283:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 34.159.149.110 (110.149.159.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 00:43:26.444596 2026] [security2:error] [pid 27283:tid 27283] [client 34.159.149.110:41884] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.footshufflerz.com"] [uri "/.git/config"] [unique_id "agakbllIDq0DwJIlR7OY2QAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-05-15 04:10:15
UTC ยท
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 34.159.149.110 (110.149.159.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 00:10:08.349955 2026] [security2:error] [pid 10626:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 34.159.149.110 (110.149.159.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 00:10:08.349955 2026] [security2:error] [pid 10626:tid 10626] [client 34.159.149.110:37614] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jdmicons.com"] [uri "/.git/config"] [unique_id "agacoITcIF7-QZCGRrxvcQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-05-15 03:37:51
UTC ยท
(5 months ago)
Banned by Fail2Ban on server
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-05-15 02:51:09
UTC ยท
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 34.159.149.110 (110.149.159.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 14 22:51:02.952951 2026] [security2:error] [pid 23867:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 34.159.149.110 (110.149.159.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 14 22:51:02.952951 2026] [security2:error] [pid 23867:tid 23867] [client 34.159.149.110:49212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jennlaurenphotography.com"] [uri "/.git/config"] [unique_id "agaKFjfCI1t5JVsZiQMGKwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-05-15 02:14:07
UTC ยท
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 34.159.149.110 (110.149.159.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 14 22:14:01.800571 2026] [security2:error] [pid 29369:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 34.159.149.110 (110.149.159.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 14 22:14:01.800571 2026] [security2:error] [pid 29369:tid 29369] [client 34.159.149.110:50874] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "suffolksystems.com"] [uri "/.git/config"] [unique_id "agaBaX4-cIi6PNsFFyF1wwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-05-15 02:04:05
UTC ยท
(5 months ago)
Bot / scanning and/or hacking attempts: GET /.git/config HTTP/1.1
Hacking
Web App Attack
Anonymous
2026-05-15 02:03:16
UTC ยท
(5 months ago)
(caddyscan) Scanner path probe from 34.159.149.110 (DE/Germany/110.149.159.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.159.149.110 - - [15/May/2026:01:29:4 ...
show more
(caddyscan) Scanner path probe from 34.159.149.110 (DE/Germany/110.149.159.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.159.149.110 - - [15/May/2026:01:29:44 +0000] "GET /.git/config HTTP/1.1"
[REDACTED] 200 2627 34.159.149.110 - - [15/May/2026:01:39:55 +0000] "GET /.git/config HTTP/1.1"
[REDACTED] 200 2627 34.159.149.110 - - [15/May/2026:01:40:44 +0000] "GET /.git/config HTTP/1.1"
[REDACTED] 200 2627 34.159.149.110 - - [15/May/2026:01:41:15 +0000] "GET /.git/config HTTP/1.1"
[REDACTED] 200 2627 34.159.149.110 - - [15/May/2026:02:03:14 +0000] "GET /.git/config HTTP/1.1"
show less
Port Scan
๐ฌ๐ง
Axel
2026-05-15 01:13:34
UTC ยท
(5 months ago)
Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /.git/config Server: UK-01
Web App Attack
Hacking
SQL Injection