🇧🇷
Caue Henrique
2026-05-13 18:03:00
UTC ·
(5 months ago)
Web Spam
Web App Attack
SSH
Anonymous
2026-05-04 03:11:48
UTC ·
(6 months ago)
Portscan: TCP/6379, TCP/8009, TCP/8089, TCP/9042, TCP/6380, TCP/9100, TCP/10911, TCP/9876, TCP/8013, TCP/7900, TCP/4244, TCP/27017, TCP/5555, TCP/2375, TCP/4786, TCP/2181, TCP/20880, TCP/5432, TCP/9000, TCP/9999, TCP/3310, TCP/3299, TCP/4000, TCP/100 ...
show more
Portscan: TCP/6379, TCP/8009, TCP/8089, TCP/9042, TCP/6380, TCP/9100, TCP/10911, TCP/9876, TCP/8013, TCP/7900, TCP/4244, TCP/27017, TCP/5555, TCP/2375, TCP/4786, TCP/2181, TCP/20880, TCP/5432, TCP/9000, TCP/9999, TCP/3310, TCP/3299, TCP/4000, TCP/1001, TCP/11211, TCP/22, TCP/8825, TCP/7001, TCP/6432, TCP/25, TCP/1433, TCP/5900, TCP/3306, TCP/1883, TCP/6000
show less
Port Scan
🇳🇱
homeshowdomain.nl
2026-05-03 22:02:05
UTC ·
(6 months ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-05-02.
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-05-02 20:50:12
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 34.93.19.250 (250.19.93.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 02 16:50:06.272038 2026] [security2:error] [pid 27983:tid 27 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.93.19.250 (250.19.93.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 02 16:50:06.272038 2026] [security2:error] [pid 27983:tid 27983] [client 34.93.19.250:35526] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lajoze.com"] [uri "/.git/config"] [unique_id "afZjfpqmypUvSGaEQkhMWAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
jcbriar
2026-05-02 20:26:44
UTC ·
(6 months ago)
Searching for vulnerable scripts
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-05-02 20:26:02
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 34.93.19.250 (250.19.93.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 02 16:25:55.179939 2026] [security2:error] [pid 28512:tid 28 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.93.19.250 (250.19.93.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 02 16:25:55.179939 2026] [security2:error] [pid 28512:tid 28512] [client 34.93.19.250:59944] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "805.productions"] [uri "/.git/config"] [unique_id "afZd0094Sd6SOi1kWrMYEAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-02 19:56:19
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 34.93.19.250 (250.19.93.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 02 15:56:14.507911 2026] [security2:error] [pid 2674:tid 267 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.93.19.250 (250.19.93.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 02 15:56:14.507911 2026] [security2:error] [pid 2674:tid 2674] [client 34.93.19.250:56350] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "carepage.pro"] [uri "/.git/config"] [unique_id "afZW3pqwuQlbTRbWan6gAgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-05-02 19:38:49
UTC ·
(6 months ago)
[SatMay0221:38:43.3051772026][security2:error][pid1739397:tid1739540][client34.93.19.250:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BL ...
show more
[SatMay0221:38:43.3051772026][security2:error][pid1739397:tid1739540][client34.93.19.250:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:10\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"pytag.ch\"][uri\"/.git/config\"][unique_id\"afZSw84Q_7ZOwrkX-Pv9QgAAAAE\"]
show less
Port Scan
Brute-Force
Web App Attack
🇫🇷
masterguru
2026-05-02 19:38:43
UTC ·
(6 months ago)
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.93.19.250 (IN/India/250.19.93.34.bc.googleusercontent.com): 1 in the last 3600 secs (0-195)
Hacking
🇮🇩
Burayot
2026-05-02 19:28:14
UTC ·
(6 months ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 34.93.19.250 (IN/India/250.19.93.34.bc.googleusercontent.com): 1 in the last 3600 secs
Web App Attack
🇬🇧
pinguin
2026-05-02 19:27:55
UTC ·
(6 months ago)
Triggered Cloudflare WAF (firewallManaged) from IN.
Action taken: LOG
Protocol: HTTP/1.1 (GET method)
Endpoint: /.git/config
UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.117 Safari/537.36
This report wa ...
show more
Triggered Cloudflare WAF (firewallManaged) from IN.
Action taken: LOG
Protocol: HTTP/1.1 (GET method)
Endpoint: /.git/config
UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.117 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-05-02 19:27:26
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 34.93.19.250 (250.19.93.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 02 15:27:22.264064 2026] [security2:error] [pid 25067:tid 25 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.93.19.250 (250.19.93.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 02 15:27:22.264064 2026] [security2:error] [pid 25067:tid 25067] [client 34.93.19.250:60850] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mykidsdaycare.net"] [uri "/.git/config"] [unique_id "afZQGkm0ysnbF3tsi0WDMgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-02 19:08:34
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 34.93.19.250 (250.19.93.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 02 15:08:30.409032 2026] [security2:error] [pid 18234:tid 18 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.93.19.250 (250.19.93.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 02 15:08:30.409032 2026] [security2:error] [pid 18234:tid 18234] [client 34.93.19.250:52530] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mousseron.com"] [uri "/.git/config"] [unique_id "afZLrjwzE4DH7BrymmE_eQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-02 18:43:02
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 34.93.19.250 (250.19.93.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 02 14:42:57.452121 2026] [security2:error] [pid 919:tid 982] ...
show more
(mod_security) mod_security (id:210492) triggered by 34.93.19.250 (250.19.93.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 02 14:42:57.452121 2026] [security2:error] [pid 919:tid 982] [client 34.93.19.250:59306] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.absurdotron.com"] [uri "/.git/config"] [unique_id "afZFsWkcEOh5m6n0D1Q_5QAAAEQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2026-05-02 03:32:25
UTC ·
(6 months ago)
150 requests with url.path *config.json
22 requests with url.path */wp-content/plugins/litespeed-cache/readme.txt
Brute-Force
Bad Web Bot