🇺🇸
TPI-Abuse
2026-11-13 09:16:50
UTC ·
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.23.47.17 (17.47.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 04:16:42.995679 2026] [security2:error] [pid 21496:tid 2149 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.23.47.17 (17.47.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 04:16:42.995679 2026] [security2:error] [pid 21496:tid 21496] [client 34.23.47.17:35202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kritaka.ai"] [uri "/.git/config"] [unique_id "avbVejKKKf9WwVbBMCGTagAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 06:48:32
UTC ·
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.23.47.17 (17.47.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 01:48:27.539948 2026] [security2:error] [pid 2648:tid 2648] ...
show more
(mod_security) mod_security (id:210492) triggered by 34.23.47.17 (17.47.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 01:48:27.539948 2026] [security2:error] [pid 2648:tid 2648] [client 34.23.47.17:58946] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kristasrecoverycoaching.com.kildarafarms.com"] [uri "/.git/config"] [unique_id "avayuyXzM8Du0lGsUCSITgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 05:51:32
UTC ·
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.23.47.17 (17.47.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 00:51:27.805808 2026] [security2:error] [pid 16874:tid 1687 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.23.47.17 (17.47.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 00:51:27.805808 2026] [security2:error] [pid 16874:tid 16874] [client 34.23.47.17:42042] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kriske.com"] [uri "/.git/config"] [unique_id "avalXz1WbojRRfL7IwU-VAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2026-11-13 05:23:38
UTC ·
(6 hours ago)
4.374 requests with url.path *.env
690 requests with url.path *phpinfo.php
113 requests with url.path *credentials.json
Brute-Force
Bad Web Bot
🇨🇦
1gz
2026-11-13 04:29:08
UTC ·
(6 hours ago)
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: BLOCK
Protocol: HTTP/1.1 (POST method)
Endpoint: /
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
This repor ...
show more
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: BLOCK
Protocol: HTTP/1.1 (POST method)
Endpoint: /
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇳🇱
middelkoopcc
2026-11-13 04:01:01
UTC ·
(7 hours ago)
2026-11-13 04:58:57 GET /.git/config [301] && 2026-11-13 04:58:57 GET /.env [301] && 2026-11-13 04:58:58 GET /.env.bak [301] && 239 more within 20 minutes
Web App Attack
🇳🇱
e.fierstra
2026-11-13 03:50:03
UTC ·
(7 hours ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇿🇦
Megasurf
2026-11-13 03:24:32
UTC ·
(8 hours ago)
web application attack (blocked by the web application firewall). Blocked automatically by our firewall (LF_MODSEC).
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 02:30:42
UTC ·
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.23.47.17 (17.47.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 21:30:35.270863 2026] [security2:error] [pid 18687:tid 1868 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.23.47.17 (17.47.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 21:30:35.270863 2026] [security2:error] [pid 18687:tid 18687] [client 34.23.47.17:41610] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kreweofhyatt.com"] [uri "/.git/config"] [unique_id "avZ2S-ljS7WYT9hefUgU3wAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Roderic
2026-11-13 02:09:44
UTC ·
(9 hours ago)
Insights: 12 probe requests within 24 hours on 1 site, e.g. /.git/config (no normal page views)
Web App Attack
🇸🇪
vaia.cloud
2026-11-13 02:05:02
UTC ·
(9 hours ago)
crowdsecurity/http-probing
Brute-Force
Web App Attack
🇳🇱
debestelapp
2026-11-13 02:00:07
UTC ·
(9 hours ago)
Web App Attack
🇩🇪
Bedios GmbH
2026-11-13 01:14:28
UTC ·
(10 hours ago)
Scanning for exposed credentials and private keys.
Hacking
🇱🇻
GooddayGroup
2026-11-13 00:09:04
UTC ·
(11 hours ago)
Automated probing for sensitive configuration files and environment leaks.
Hacking
Brute-Force
🇺🇸
masterguru
2026-11-12 23:26:23
UTC ·
(12 hours ago)
Remote Command Execution: Unix Shell Expression Found. Pattern match "(?:\\\\$(?:\\\\((?:\\\\(.*\\\\)|.*)\\\\)|\\\\{.*\\\\})| (932130-169)
Hacking
