🇮🇳
evicky2002
2026-05-20 04:30:47
UTC ·
(5 months ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
🇳🇱
homeshowdomain.nl
2026-05-08 22:04:27
UTC ·
(6 months ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-05-07.
Web App Attack
SSH
Hacking
🇬🇧
openstrike.co.uk
2026-05-08 05:13:30
UTC ·
(6 months ago)
2 attacks on VC URLs:
GET /.git/config HTTP/1.1
Hacking
🇺🇸
TPI-Abuse
2026-05-07 23:11:02
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 34.23.210.76 (76.210.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 07 19:10:59.452109 2026] [security2:error] [pid 14791:tid 14 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.23.210.76 (76.210.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 07 19:10:59.452109 2026] [security2:error] [pid 14791:tid 14791] [client 34.23.210.76:33844] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.kalosgroups.com"] [uri "/.git/config"] [unique_id "af0cA2fAx4pz1dLElpXAAgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
CBJ
2026-05-07 23:03:51
UTC ·
(6 months ago)
fail2ban: apache-filepath-recon
...
Web App Attack
🇳🇱
e.fierstra
2026-05-07 22:58:14
UTC ·
(6 months ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-07 22:51:51
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 34.23.210.76 (76.210.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 07 18:51:48.523975 2026] [security2:error] [pid 16629:tid 16 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.23.210.76 (76.210.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 07 18:51:48.523975 2026] [security2:error] [pid 16629:tid 16629] [client 34.23.210.76:50434] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.joanofartdesign.com"] [uri "/.git/config"] [unique_id "af0XhHakxwrpWa9XrprnJgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-07 22:34:00
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 34.23.210.76 (76.210.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 07 18:33:57.417639 2026] [security2:error] [pid 11315:tid 11 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.23.210.76 (76.210.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 07 18:33:57.417639 2026] [security2:error] [pid 11315:tid 11315] [client 34.23.210.76:56822] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.jacksonindetail.com"] [uri "/.git/config"] [unique_id "af0TVW7VgkfcJfK9-XBFRQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
IVski.com
2026-05-07 22:31:18
UTC ·
(6 months ago)
IVski WAF | Sensitive file probe detected - looking for .env, .git, backups or credentials
Port Scan
Brute-Force
Web App Attack
🇧🇬
Stoyko Stoykov
2026-05-07 22:30:07
UTC ·
(6 months ago)
34.23.210.76 - - [08/May/2026:01:30:06 +0300] "GET /.git/config HTTP/1.1" 404 0 "-" "-"
...
Hacking
Web App Attack
🇺🇸
itsnixk
2026-05-07 22:29:54
UTC ·
(6 months ago)
(mod_security) mod_security (id:930130) triggered by 34.23.210.76 (US/United States/76.210.23.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu May 07 18:29:49.681237 2026] [security2:e ...
show more
(mod_security) mod_security (id:930130) triggered by 34.23.210.76 (US/United States/76.210.23.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu May 07 18:29:49.681237 2026] [security2:error] [pid 945166:tid 945253] [client 34.23.210.76:43902] ModSecurity: Access denied with code 406 (phase 1). Matched phrase ".git/" at REQUEST_FILENAME. [file "/etc/modsecurity.d/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "150"] [id "930130"] [msg "Restricted File Access Attempt"] [redacted] [severity "CRITICAL"] [ver "OWASP_CRS/4.25.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/ATTACK-LFI"] [tag "capec/1000/255/153/126"] [redacted] [uri "/.git/config"] [unique_id "af0SXY5imVZ8qzmgpFp2GwAAAAQ"]
show less
Port Scan
🇺🇸
TPI-Abuse
2026-05-07 22:13:48
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 34.23.210.76 (76.210.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 07 18:13:44.925374 2026] [security2:error] [pid 29914:tid 29 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.23.210.76 (76.210.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 07 18:13:44.925374 2026] [security2:error] [pid 29914:tid 29914] [client 34.23.210.76:44226] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.international-aerospace.com"] [uri "/.git/config"] [unique_id "af0OmKQZrc-xN5cyHgIxmwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇷🇴
INTEQ
2026-05-07 22:12:31
UTC ·
(6 months ago)
Web attack from 34.23.210.76
Web App Attack
🇫🇮
as211431.net
2026-05-07 22:01:24
UTC ·
(6 months ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /.git/config
UA: Empty string
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
Bad Web Bot
🇳🇱
homeshowdomain.nl
2026-05-07 21:59:42
UTC ·
(6 months ago)
Auto-ban: >3000 req/min op 2026-05-07
Web App Attack
SSH
Hacking