🇳🇱
homeshowdomain.nl
2026-06-10 22:00:45
(1 week ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-09.
show less
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-06-09 16:04:12
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.96.248.122 (122.248.96.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.96.248.122 (122.248.96.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 12:04:05.926164 2026] [security2:error] [pid 4855:tid 4855] [client 34.96.248.122:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mep.cloudex.click"] [uri "/.git/config"] [unique_id "aig5dXJ_WcucyZy_g6T7MwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Axel
2026-06-09 13:28:01
(1 week ago)
Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /.git/config ...
show more
Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /.git/config Server: UK-01
show less
Web App Attack
Hacking
SQL Injection
🇳🇿
Antinson
2026-06-09 12:35:54
(1 week ago)
Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)
Bad Web Bot
🇫🇮
as211431.net
2026-06-09 10:35:15
(2 weeks ago)
Triggered Cloudflare WAF (firewallCustom) from HK.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET metho ...
show more
Triggered Cloudflare WAF (firewallCustom) from HK.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /.git/config
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.100 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-06-09 10:10:05
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.96.248.122 (122.248.96.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.96.248.122 (122.248.96.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 06:10:00.763508 2026] [security2:error] [pid 25986:tid 25986] [client 34.96.248.122:36102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.halblog.hal.dance"] [uri "/.git/config"] [unique_id "aifmeA9LmdH3f2AG5QK46gAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-06-09 10:10:01
(2 weeks ago)
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.96.248.122 (HK/Hong Kong/122.248.9 ...
show more
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.96.248.122 (HK/Hong Kong/122.248.96.34.bc.googleusercontent.com): 1 in the last 3600 secs (0-195)
show less
Hacking
🇺🇸
TPI-Abuse
2026-06-09 09:29:19
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.96.248.122 (122.248.96.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.96.248.122 (122.248.96.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 05:29:14.395683 2026] [security2:error] [pid 25035:tid 25035] [client 34.96.248.122:41332] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "franzcorpinc.com"] [uri "/.git/config"] [unique_id "aifc6rrUOwqDHaHF4KUqQwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 05:41:06
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.96.248.122 (122.248.96.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.96.248.122 (122.248.96.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 01:41:00.091091 2026] [security2:error] [pid 6319:tid 6319] [client 34.96.248.122:57498] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.tasteshop.l3l4.com"] [uri "/.git/config"] [unique_id "aienbF0FYpzNhcGuvN0uxAAAADo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
🇨🇭 Hosting
2026-06-09 05:10:23
(2 weeks ago)
Automated WAF report: 125-150 blocked requests from this IP detected by our WAF.
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 05:06:43
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.96.248.122 (122.248.96.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.96.248.122 (122.248.96.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 01:06:35.749271 2026] [security2:error] [pid 19476:tid 19476] [client 34.96.248.122:57290] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bigheartskitchen.net"] [uri "/.git/config"] [unique_id "aiefW3X752i63uTtLkYUcwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 03:58:00
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.96.248.122 (122.248.96.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.96.248.122 (122.248.96.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 23:57:57.027018 2026] [security2:error] [pid 14184:tid 14184] [client 34.96.248.122:44666] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pcsyportatiles.com.integratic.com.co"] [uri "/.git/config"] [unique_id "aiePRSIvMfLY1cG6QRRY7wAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 02:19:07
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.96.248.122 (122.248.96.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.96.248.122 (122.248.96.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 22:19:00.397792 2026] [security2:error] [pid 13099:tid 13099] [client 34.96.248.122:51154] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gilesvolvocarselpaso.com.acadianahero.com"] [uri "/.git/config"] [unique_id "aid4FDrBxnewgzX9A8ublAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 01:41:48
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.96.248.122 (122.248.96.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.96.248.122 (122.248.96.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 21:41:40.120637 2026] [security2:error] [pid 5177:tid 5177] [client 34.96.248.122:37020] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.karsini-services.com"] [uri "/.git/config"] [unique_id "aidvVM4d_jdEAQHHYwjvOgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
4server
2026-06-09 01:20:18
(2 weeks ago)
[TueJun0903:20:13.4371162026][security2:error][pid2772370:tid2772521][client34.96.248.122:0]ModSecur ...
show more
[TueJun0903:20:13.4371162026][security2:error][pid2772370:tid2772521][client34.96.248.122:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"364\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"www.motogiro.com.81-17-25-250.cpanel.site\"][uri\"/.git/config\"][unique_id\"aidqTVWv86AOx5ZKouy8TwAAAAA\"]
show less
Hacking
Web App Attack