🇺🇸
TPI-Abuse
2026-06-13 17:19:06
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.87.223.156 (156.223.87.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.87.223.156 (156.223.87.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 13:18:59.754988 2026] [security2:error] [pid 6367:tid 6367] [client 34.87.223.156:50844] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.samelsner.com"] [uri "/.git/config"] [unique_id "ai2RAwcRwJJ_jvfE93joAgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 16:39:09
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.87.223.156 (156.223.87.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.87.223.156 (156.223.87.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 12:39:03.434605 2026] [security2:error] [pid 31536:tid 31536] [client 34.87.223.156:35918] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "virantenn.com"] [uri "/.git/config"] [unique_id "ai2Hp9MJMq163PbkqxXEeQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
inlink.ltd
2026-06-13 15:52:50
(1 day ago)
dot file probe
Web App Attack
🇧🇷
ludarkstar99
2026-06-13 15:40:10
(1 day ago)
Blocked by os-abuseipdb; 12 hits, proto=tcp, ports=443,80
Port Scan
Hacking
🇳🇿
Antinson
2026-06-13 14:44:10
(1 day ago)
Scraping with a high error ratio and request rate
Bad Web Bot
🇮🇩
Burayot
2026-06-13 13:16:35
(1 day ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 34.87.223.156 (AU/Australia/156.223 ...
show more
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 34.87.223.156 (AU/Australia/156.223.87.34.bc.googleusercontent.com): 2 in the last 3600 secs
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 11:55:49
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.87.223.156 (156.223.87.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.87.223.156 (156.223.87.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 07:55:41.732619 2026] [security2:error] [pid 4132:tid 4132] [client 34.87.223.156:45120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.musicfreakcentral.jamworldmovements.com"] [uri "/.git/config"] [unique_id "ai1FPW4zsiMx-3Rf0T45pwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
TheCoon
2026-06-13 11:45:01
(1 day ago)
Automated: Credential theft attempt - JSON bomb served
Web App Attack
Hacking
🇺🇸
mccsoft.io
2026-06-13 10:37:57
(1 day ago)
Web application attack / vulnerability scanning against our public nginx web server (TCP 80/443). So ...
show more
Web application attack / vulnerability scanning against our public nginx web server (TCP 80/443). Source matched a blocked-path security rule (jail nginx-444); server returned HTTP 444 (connection closed without response). TCP three-way handshake completed (full HTTP request received).
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 10:06:39
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.87.223.156 (156.223.87.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.87.223.156 (156.223.87.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 06:06:33.609135 2026] [security2:error] [pid 24942:tid 24942] [client 34.87.223.156:55346] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jeffreycopeland.com"] [uri "/.git/config"] [unique_id "ai0rqYSFx93JKAdv6rkt0gAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 09:39:32
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.87.223.156 (156.223.87.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.87.223.156 (156.223.87.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 05:39:27.570495 2026] [security2:error] [pid 27266:tid 27266] [client 34.87.223.156:60546] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "astariafilms.com"] [uri "/.git/config"] [unique_id "ai0lT-QLkTLwm0DFoajwewAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
pinguin
2026-06-13 09:39:27
(1 day ago)
Triggered Cloudflare WAF (firewallManaged) from AU.
Action taken: LOG
Protocol: HTTP/1.1 (GET method ...
show more
Triggered Cloudflare WAF (firewallManaged) from AU.
Action taken: LOG
Protocol: HTTP/1.1 (GET method)
Endpoint: /.git/config
UA: Mozilla/5.0 (Linux; U; Android 3.0.1; en-us; GT-P7100 Build/HRI83) AppleWebkit/534.13 (KHTML, like Gecko) Version/4.0 Safari/534.13
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-06-13 08:22:36
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.87.223.156 (156.223.87.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.87.223.156 (156.223.87.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 04:22:29.177098 2026] [security2:error] [pid 12564:tid 12597] [client 34.87.223.156:34822] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.section64.org.wwwhst.com"] [uri "/.git/config"] [unique_id "ai0TRUnMBGXEUxuyW1tBzwAAAZM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 07:55:37
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.87.223.156 (156.223.87.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.87.223.156 (156.223.87.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 03:55:32.251703 2026] [security2:error] [pid 23872:tid 23872] [client 34.87.223.156:39746] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.iconbizpromo.com"] [uri "/.git/config"] [unique_id "ai0M9PTAgctknSoLTbKL9gAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 07:29:54
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.87.223.156 (156.223.87.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.87.223.156 (156.223.87.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 03:29:50.201976 2026] [security2:error] [pid 12418:tid 12418] [client 34.87.223.156:50532] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "datingwomen-101.onlyincanada-eh.com"] [uri "/.git/config"] [unique_id "ai0G7ij_viXX_hUOZbO7iwAAAFE"]
show less
Brute-Force
Bad Web Bot
Web App Attack