๐ณ๐ฑ
homeshowdomain.nl
2026-06-09 22:04:44
(1 week ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-08.
show less
Web App Attack
SSH
Hacking
๐ฉ๐ช
big-cloud.nl
2026-06-09 15:57:25
(1 week ago)
Try to access /.git/config
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 15:25:17
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 35.220.236.245 (245.236.220.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.220.236.245 (245.236.220.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 11:25:09.796956 2026] [security2:error] [pid 790:tid 790] [client 35.220.236.245:54298] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.longbowhunter.gnquivers.com"] [uri "/.git/config"] [unique_id "aigwVer7yqpd0-4gBpOYpAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 14:21:09
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 35.220.236.245 (245.236.220.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.220.236.245 (245.236.220.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 10:21:05.602155 2026] [security2:error] [pid 32291:tid 32291] [client 35.220.236.245:53126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bodybuildbid.com"] [uri "/.git/config"] [unique_id "aighUQMioDBVu3-y5h7GpAAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ฎ
as211431.net
2026-06-09 12:43:27
(1 week ago)
Triggered Cloudflare WAF (firewallCustom) from HK.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET metho ...
show more
Triggered Cloudflare WAF (firewallCustom) from HK.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /.git/config
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.103 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-06-09 11:02:53
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 35.220.236.245 (245.236.220.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.220.236.245 (245.236.220.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 07:02:48.939923 2026] [security2:error] [pid 9094:tid 9094] [client 35.220.236.245:55458] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "deborbon.me"] [uri "/.git/config"] [unique_id "aify2AQ1dyiCqSUfQS3BpQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 10:24:47
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 35.220.236.245 (245.236.220.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.220.236.245 (245.236.220.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 06:24:41.174303 2026] [security2:error] [pid 15253:tid 15253] [client 35.220.236.245:32864] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.johnberk.sabri.es"] [uri "/.git/config"] [unique_id "aifp6cyJt0GhTl3Oj4UifwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
4server
2026-06-09 09:44:53
(1 week ago)
[TueJun0911:44:50.4434292026][security2:error][pid2713734:tid2713868][client35.220.236.245:0]ModSecu ...
show more
[TueJun0911:44:50.4434292026][security2:error][pid2713734:tid2713868][client35.220.236.245:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:10\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"buletti-panettoni.ch\"][uri\"/.git/config\"][unique_id\"aifgksQaCDRpVKJkCBiXqQAAAJc\"]
show less
Port Scan
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 08:34:18
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 35.220.236.245 (245.236.220.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.220.236.245 (245.236.220.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 04:34:14.029929 2026] [security2:error] [pid 5987:tid 5987] [client 35.220.236.245:39984] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "srippy.com"] [uri "/.git/config"] [unique_id "aifQBpOLkTxkBj8ce7W8AAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 07:38:15
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 35.220.236.245 (245.236.220.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.220.236.245 (245.236.220.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 03:38:11.993687 2026] [security2:error] [pid 27699:tid 27699] [client 35.220.236.245:48756] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "davidrayskinner.com"] [uri "/.git/config"] [unique_id "aifC4z3OTc4s4EbhSnwUtQAAACU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 07:13:49
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 35.220.236.245 (245.236.220.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.220.236.245 (245.236.220.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 03:13:45.937728 2026] [security2:error] [pid 26128:tid 26128] [client 35.220.236.245:50628] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.crearcuestionarios.com.creartest.com"] [uri "/.git/config"] [unique_id "aie9KR6H2kdRrlF48vWS-gAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 05:00:52
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 35.220.236.245 (245.236.220.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.220.236.245 (245.236.220.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 01:00:48.616708 2026] [security2:error] [pid 30309:tid 30309] [client 35.220.236.245:43092] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mylesmitchell.lilachost.net"] [uri "/.git/config"] [unique_id "aieeALpTsfbr9MpNA6HllQAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
Mundo Bueno
2026-06-09 04:52:38
(1 week ago)
[ISILIA Protection v2.1] Tentative d'accรจs: /.git/config | Pays: HK | UA: Mozilla/5.0 (Windows NT 6. ...
show more
[ISILIA Protection v2.1] Tentative d'accรจs: /.git/config | Pays: HK | UA: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.86
show less
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 03:56:44
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 35.220.236.245 (245.236.220.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.220.236.245 (245.236.220.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 23:56:38.343405 2026] [security2:error] [pid 24244:tid 24244] [client 35.220.236.245:55660] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "krukgpt.com"] [uri "/.git/config"] [unique_id "aieO9kku4wObIT9tEqqetgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 03:01:15
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 35.220.236.245 (245.236.220.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.220.236.245 (245.236.220.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 23:01:11.779551 2026] [security2:error] [pid 17010:tid 17010] [client 35.220.236.245:43614] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lyndon.stamford.org"] [uri "/.git/config"] [unique_id "aieB9_PyNsz9oKJ-r2aCaAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack