🇺🇸
TPI-Abuse
2026-11-15 05:47:37
UTC ·
(39 minutes ago)
(mod_security) mod_security (id:210492) triggered by 34.92.231.170 (170.231.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 00:47:32.023170 2026] [security2:error] [pid 19689:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.92.231.170 (170.231.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 00:47:32.023170 2026] [security2:error] [pid 19689:tid 19689] [client 34.92.231.170:35822] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "survivorassistance.com"] [uri "/.git/config"] [unique_id "avlHdPu4eFlhYDljf2tmzgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-15 01:27:12
UTC ·
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.92.231.170 (170.231.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 20:27:04.955883 2026] [security2:error] [pid 13380:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.92.231.170 (170.231.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 20:27:04.955883 2026] [security2:error] [pid 13380:tid 13380] [client 34.92.231.170:40250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "survey.joebankx.com"] [uri "/.git/config"] [unique_id "avkKaGuLRLENq1xjlLpwMgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
Anytech
2026-11-14 21:24:33
UTC ·
(9 hours ago)
Blocked by ConnMonitor
Web App Attack
🇧🇪
cmbplf
2026-11-14 11:32:59
UTC ·
(18 hours ago)
103 requests with url.path *phpinfo.php
Brute-Force
Bad Web Bot
🇫🇷
mrcrassi
2026-11-14 11:20:38
UTC ·
(19 hours ago)
Triggered Cloudflare WAF (firewallManaged) from HK.
Action taken: BLOCK
Protocol: HTTP/1.1 (POST method)
Endpoint: /
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
This repor ...
show more
Triggered Cloudflare WAF (firewallManaged) from HK.
Action taken: BLOCK
Protocol: HTTP/1.1 (POST method)
Endpoint: /
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇳🇱
Site.eu
2026-11-14 09:53:05
UTC ·
(20 hours ago)
Scanning for secret files (.env, .git, credentials, config backups)
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-11-13 23:01:42
UTC ·
(1 day ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-11-12.
Web App Attack
SSH
Hacking
🇧🇷
ICS Labs
2026-11-13 16:48:44
UTC ·
(1 day ago)
ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-11-13 UTC.
Brute-Force
🇺🇸
TPI-Abuse
2026-11-13 16:23:08
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.92.231.170 (170.231.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 11:23:04.538873 2026] [security2:error] [pid 6610:tid 6 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.92.231.170 (170.231.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 11:23:04.538873 2026] [security2:error] [pid 6610:tid 6610] [client 34.92.231.170:55054] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thenutritionfixhollysprings.com"] [uri "/.git/config"] [unique_id "avc5aDgJu_Kn5U6qyQFJXAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ghostwarriors
2026-11-13 11:20:04
UTC ·
(1 day ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 17:35:27
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.92.231.170 (170.231.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 12:35:22.795017 2026] [security2:error] [pid 12184:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.92.231.170 (170.231.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 12:35:22.795017 2026] [security2:error] [pid 12184:tid 12184] [client 34.92.231.170:55210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "theoriginclinickc.com"] [uri "/.git/config"] [unique_id "avX42sufAWoqkkkz2gBYMwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 12:43:52
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.92.231.170 (170.231.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 07:43:45.242690 2026] [security2:error] [pid 7018:tid 7 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.92.231.170 (170.231.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 07:43:45.242690 2026] [security2:error] [pid 7018:tid 7018] [client 34.92.231.170:48240] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thugdoggsrecords.com"] [uri "/.git/config"] [unique_id "avW0gf40l2ObWxM-WdFCHQAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
