🇺🇸
octageeks.com
2025-06-05 04:07:04
UTC ·
(1 year ago)
Wordpress malicious attack:[octablocked]
Web App Attack
🇺🇸
TPI-Abuse
2025-06-05 02:15:21
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 35.196.135.124 (124.135.196.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 04 22:15:16.054268 2025] [security2:error] [pid 2661530: ...
show more
(mod_security) mod_security (id:210492) triggered by 35.196.135.124 (124.135.196.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 04 22:15:16.054268 2025] [security2:error] [pid 2661530:tid 2661530] [client 35.196.135.124:36090] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "myemail.navy"] [uri "/.git/config"] [unique_id "aED9tDNoTOVVr4Bi2UR8XwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-06-05 01:56:00
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 35.196.135.124 (124.135.196.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 04 21:55:54.333448 2025] [security2:error] [pid 1563129: ...
show more
(mod_security) mod_security (id:210492) triggered by 35.196.135.124 (124.135.196.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 04 21:55:54.333448 2025] [security2:error] [pid 1563129:tid 1563129] [client 35.196.135.124:56406] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mycherishedteddies.com"] [uri "/.git/config"] [unique_id "aED5KsrH6nM6bIBa9bJ2GgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2025-06-05 01:40:00
UTC ·
(1 year ago)
Multiple unauthorized attempt to access to non-existent path
Web App Attack
🇺🇸
sabrinagoom
2025-06-05 01:18:36
UTC ·
(1 year ago)
Triggered WAF (firewallCustom) from US
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /.git/config
UA: Empty string
Bad Web Bot
🇺🇸
TPI-Abuse
2025-06-05 01:03:26
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 35.196.135.124 (124.135.196.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 04 21:03:22.368431 2025] [security2:error] [pid 1254003: ...
show more
(mod_security) mod_security (id:210492) triggered by 35.196.135.124 (124.135.196.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 04 21:03:22.368431 2025] [security2:error] [pid 1254003:tid 1254003] [client 35.196.135.124:56396] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "my-pitch.org"] [uri "/.git/config"] [unique_id "aEDs2pxDwLUzG1iK8hjA7gAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2025-06-05 00:24:59
UTC ·
(1 year ago)
35.196.135.124 - - [05/Jun/2025:02:24:58 +0200] "GET /.git/config HTTP/1.1" 403 4962 "-" "-"
...
Web App Attack
🇺🇸
TPI-Abuse
2025-06-04 23:47:53
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 35.196.135.124 (124.135.196.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 04 19:47:46.656086 2025] [security2:error] [pid 1379835: ...
show more
(mod_security) mod_security (id:210492) triggered by 35.196.135.124 (124.135.196.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 04 19:47:46.656086 2025] [security2:error] [pid 1379835:tid 1379835] [client 35.196.135.124:48976] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mx1.scc1.us"] [uri "/.git/config"] [unique_id "aEDbIoh9z_97AlZIbyW2wwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Major Hostility
2025-06-04 23:44:04
UTC ·
(1 year ago)
"GET /.git/config HTTP/1.1" 404
"GET /.git/config HTTP/1.1" 404
Web App Attack
🇧🇬
Filipe Dávila
2025-06-04 21:25:50
UTC ·
(1 year ago)
[Wed Jun 04 17:25:49.653911 2025] [:error] [pid 632733:tid 140130371180288] [client 35.196.135.124:55126] [client 35.196.135.124] [redacted]: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "[r ...
show more
[Wed Jun 04 17:25:49.653911 2025] [:error] [pid 632733:tid 140130371180288] [client 35.196.135.124:55126] [client 35.196.135.124] [redacted]: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "[redacted][redacted]"] [[redacted] "233"] [id "[redacted]"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "[redacted]/4.7.0-dev"] [tag "[redacted]"] [tag "[redacted]"] [hostname "[redacted]"] [uri "/.git/config"] [unique_id "aEC53W24lNjhaSLssUa3VAAAAQ8"]
show less
Web App Attack
🇺🇸
TPI-Abuse
2025-06-04 21:24:55
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 35.196.135.124 (124.135.196.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 04 17:24:51.638755 2025] [security2:error] [pid 1915610: ...
show more
(mod_security) mod_security (id:210492) triggered by 35.196.135.124 (124.135.196.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 04 17:24:51.638755 2025] [security2:error] [pid 1915610:tid 1915610] [client 35.196.135.124:44582] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pngtravel.com"] [uri "/.git/config"] [unique_id "aEC5o3JeOSN9hUq4hGJQ5gAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇩
Burayot
2025-06-04 21:12:43
UTC ·
(1 year ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 35.196.135.124 (US/United States/124.135.196.35.bc.googleusercontent.com): 1 in the last 3600 secs
Web App Attack
Anonymous
2025-06-04 21:06:05
UTC ·
(1 year ago)
Trying to access config files
Web App Attack
🇫🇮
as211431.net
2025-06-04 20:43:05
UTC ·
(1 year ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /.git/config
UA: Empty string
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
Bad Web Bot
🇺🇸
Rip
2025-06-04 20:30:21
UTC ·
(1 year ago)
Automated reconnaissance attempt targeting restricted or sensitive paths.
...
Brute-Force
Web App Attack