Anonymous
2026-10-20 11:14:27
(1 hour ago)
34.176.61.97 - - [20/Oct/2026:13:14:23 +0200] "POST / HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Macintosh; ...
show more
34.176.61.97 - - [20/Oct/2026:13:14:23 +0200] "POST / HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.176.61.97 - - [20/Oct/2026:13:14:24 +0200] "POST / HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.176.61.97 - - [20/Oct/2026:13:14:24 +0200] "POST / HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.176.61.97 - - [20/Oct/2026:13:14:24 +0200] "GET /.git/config HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.176.61.97 - - [20/Oct/2026:13:14:24 +0200] "GET /.env HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.176.
...
show less
Bad Web Bot
Web App Attack
๐ง๐ท
Gertec
2026-10-20 11:12:12
(2 hours ago)
This IP address 34.176.61.97 has been carrying out attacks on our website. Reason: Blocked IP addres ...
show more
This IP address 34.176.61.97 has been carrying out attacks on our website. Reason: Blocked IP address | Method: GET | Path: /.
show less
Hacking
DDoS Attack
๐บ๐ธ
EmilGH
2026-10-20 09:55:20
(3 hours ago)
34.176.61.97 - - [20/Oct/2026:09:55:15 +0000] "GET /.git/config HTTP/1.1" 403 598 "-" "Mozilla/5.0 ( ...
show more
34.176.61.97 - - [20/Oct/2026:09:55:15 +0000] "GET /.git/config HTTP/1.1" 403 598 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.176.61.97 - - [20/Oct/2026:09:55:15 +0000] "GET /.env HTTP/1.1" 403 598 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.176.61.97 - - [20/Oct/2026:09:55:15 +0000] "GET /.env.local HTTP/1.1" 403 598 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.176.61.97 - - [20/Oct/2026:09:55:15 +0000] "GET /.env.production HTTP/1.1" 403 598 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.176.61.97 - - [20/Oct/2026:09:55:16 +0000] "GET /.env.staging HTTP/1.1" 403 598 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.
...
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-20 09:43:37
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.176.61.97 (97.61.176.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.176.61.97 (97.61.176.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 05:43:31.207291 2026] [security2:error] [pid 25946:tid 25946] [client 34.176.61.97:55232] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "iconbizpromo.com"] [uri "/.git/config"] [unique_id "atc3w-gawKYt5u6dhJ3icQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ฎ
paissangroup
2026-10-20 09:32:18
(3 hours ago)
Multiple WAF Violations
Web App Attack
๐ซ๐ท
Cuteminded
2026-10-20 09:30:11
(3 hours ago)
Blocked for web application attacks
Web App Attack
๐ซ๐ท
dynamix
2026-10-20 09:07:13
(4 hours ago)
Multiple WAF Violations
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-20 08:49:03
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.176.61.97 (97.61.176.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.176.61.97 (97.61.176.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 04:48:56.191904 2026] [security2:error] [pid 11323:tid 11323] [client 34.176.61.97:34660] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "icoinedthewordironesty.artocratic.com"] [uri "/.git/config"] [unique_id "atcq-KeRmPhY9oRRPQH_nwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Site.eu
2026-10-20 08:45:41
(4 hours ago)
Excessive multi-domain requests
Brute-Force
๐บ๐ธ
1gz
2026-10-20 07:51:14
(5 hours ago)
Triggered Cloudflare WAF (firewallManaged) from CL.
Action taken: BLOCK
Protocol: HTTP/1.1 (POST met ...
show more
Triggered Cloudflare WAF (firewallManaged) from CL.
Action taken: BLOCK
Protocol: HTTP/1.1 (POST method)
Endpoint: /
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐ซ๐ท
masterguru
2026-10-20 07:38:00
(5 hours ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-201)
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-20 06:55:16
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.176.61.97 (97.61.176.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.176.61.97 (97.61.176.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 02:55:09.016319 2026] [security2:error] [pid 7828:tid 7828] [client 34.176.61.97:46582] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "iclog.us"] [uri "/.git/config"] [unique_id "atcQTfpF9J_W_yLCYCnamQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฏ๐ต
HeliJP
2026-10-19 23:45:08
(13 hours ago)
2026-10-19T23:11:04Z - Recognized attacks\bad behavior from IP address 34.176.61.97 on port 443\80 ( ...
show more
2026-10-19T23:11:04Z - Recognized attacks\bad behavior from IP address 34.176.61.97 on port 443\80 (274 daily hits): client denied by server configuration
show less
Port Scan
Hacking
SQL Injection
Brute-Force
Web App Attack
๐ฎ๐ฉ
YoursMan
2026-10-19 23:41:39
(13 hours ago)
[Security-Sentinel-WAF] Automated exploit probe (phpinfo.php) detected and neutralized. IP blacklist ...
show more
[Security-Sentinel-WAF] Automated exploit probe (phpinfo.php) detected and neutralized. IP blacklisted.
show less
Hacking
Bad Web Bot
Web App Attack
๐ง๐ท
Gertec
2026-10-19 11:09:48
(1 day ago)
This IP address 34.176.61.97 has been carrying out attacks on our website. Reason: Blocked IP addres ...
show more
This IP address 34.176.61.97 has been carrying out attacks on our website. Reason: Blocked IP address | Method: GET | Path: /.
show less
Hacking
DDoS Attack