🇳🇱
homeshowdomain.nl
2026-11-08 23:00:44
UTC ·
(19 hours ago)
Auto-ban: >3000 req/min op 2026-11-08
Web App Attack
SSH
Hacking
Anonymous
2026-11-08 22:21:30
UTC ·
(19 hours ago)
Fail2Ban: request for a known-malicious path (.env, .git, wp-login, actuator, ...) on a public web server; honeypot hit, banned on first attempt.
Web App Attack
Bad Web Bot
🇧🇪
cmbplf
2026-11-08 20:35:59
UTC ·
(21 hours ago)
574 requests with url.path */.git/config
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2026-11-08 19:13:01
UTC ·
(23 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.26.45.195 (195.45.26.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 14:12:58.476894 2026] [security2:error] [pid 24125:tid 24 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.26.45.195 (195.45.26.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 14:12:58.476894 2026] [security2:error] [pid 24125:tid 24125] [client 34.26.45.195:43680] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "macro-astrology.com"] [uri "/.git/config"] [unique_id "avDJugTUR_rJUursZPMZTAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Mangelot Hosting
2026-11-08 19:05:57
UTC ·
(23 hours ago)
(web_sensitive_file) srv101 Sensitive file probe (.env/.git/backup) 34.26.45.195 (US/United States/195.45.26.34.bc.googleusercontent.com): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
Web App Attack
🇩🇪
mxbl
2026-11-08 19:05:04
UTC ·
(23 hours ago)
Scanning for CMS vulnerabilities on a non-CMS system: /.git/config
Web App Attack
🇬🇧
Aetherweb Ark
2026-11-08 18:57:47
UTC ·
(23 hours ago)
(mod_security) mod_security (id:949110) triggered by 34.26.45.195 (US/United States/195.45.26.34.bc.googleusercontent.com): N in the last X secs
Web App Attack
🇫🇮
as211431.net
2026-11-08 18:53:30
UTC ·
(23 hours ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /.git/config
UA: Empty string
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
Bad Web Bot
🇺🇸
TPI-Abuse
2026-11-08 18:51:36
UTC ·
(23 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.26.45.195 (195.45.26.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 13:51:33.819689 2026] [security2:error] [pid 1364:tid 136 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.26.45.195 (195.45.26.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 13:51:33.819689 2026] [security2:error] [pid 1364:tid 1364] [client 34.26.45.195:59710] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mac136.org"] [uri "/.git/config"] [unique_id "avDEtf4Hy-rMyhZO1IM3HQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
big-cloud.nl
2026-11-08 18:43:47
UTC ·
(23 hours ago)
Try to access /.git/config
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 18:36:29
UTC ·
(23 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.26.45.195 (195.45.26.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 13:36:25.316583 2026] [security2:error] [pid 12151:tid 12 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.26.45.195 (195.45.26.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 13:36:25.316583 2026] [security2:error] [pid 12151:tid 12151] [client 34.26.45.195:55728] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "m.97201.com"] [uri "/.git/config"] [unique_id "avDBKRpd4BHooxq63znvHAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 17:21:56
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.26.45.195 (195.45.26.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 12:21:48.912209 2026] [security2:error] [pid 26657:tid 26 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.26.45.195 (195.45.26.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 12:21:48.912209 2026] [security2:error] [pid 26657:tid 26673] [client 34.26.45.195:38780] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "m3sxa.com"] [uri "/.git/config"] [unique_id "avCvrMphWvVUVhZX2wrdNwAAAEw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-11-08 16:55:48
UTC ·
(1 day ago)
[cb-13al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.26.45.195 - - [08/Nov/2026:17:55:36 +0100] "GET /.git/config HTTP/1.1" 404 7398 "-" "-"
...
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 16:54:56
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.26.45.195 (195.45.26.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 11:54:51.943221 2026] [security2:error] [pid 5841:tid 584 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.26.45.195 (195.45.26.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 11:54:51.943221 2026] [security2:error] [pid 5841:tid 5841] [client 34.26.45.195:53984] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "m2oblivion.talkingmess.com"] [uri "/.git/config"] [unique_id "avCpW0zMvFkgZYNXqD_towAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 16:37:48
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.26.45.195 (195.45.26.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 11:37:43.969047 2026] [security2:error] [pid 29114:tid 29 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.26.45.195 (195.45.26.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 11:37:43.969047 2026] [security2:error] [pid 29114:tid 29114] [client 34.26.45.195:47278] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "m1graphics.com"] [uri "/.git/config"] [unique_id "avClV1rSu1Y7AtBawiUUewAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack