๐ซ๐ฎ
as211431.net
2026-06-09 14:13:30
(1 day ago)
Triggered Cloudflare WAF (firewallCustom) from AU.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET metho ...
show more
Triggered Cloudflare WAF (firewallCustom) from AU.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /.git/config
UA: HTC_Dream Mozilla/5.0 (Linux; U; Android 1.5; en-ca; Build/CUPCAKE) AppleWebKit/528.5 (KHTML, like Gecko) Version/3.1.2 Mobile Safari/525.20.1
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-06-09 14:00:24
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.244.68.226 (226.68.244.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.244.68.226 (226.68.244.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 10:00:18.363270 2026] [security2:error] [pid 3921:tid 3921] [client 35.244.68.226:55726] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "puckerbuttbikini.com"] [uri "/.git/config"] [unique_id "aigccoxD8dSy6DSZ8PI9hQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 12:49:43
(1 day ago)
(mod_security) mod_security (id:949110) triggered by 35.244.68.226 (226.68.244.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:949110) triggered by 35.244.68.226 (226.68.244.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 08:49:38.618296 2026] [security2:error] [pid 4509:tid 4509] [client 35.244.68.226:52842] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "akistech.com"] [uri "/.git/config"] [unique_id "aigL4gyY2TOMypU6_5yBlAAAAEM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
masterguru
2026-06-09 12:16:01
(1 day ago)
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 35.244.68.226 (AU/Australia/226.68.24 ...
show more
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 35.244.68.226 (AU/Australia/226.68.244.35.bc.googleusercontent.com): 1 in the last 3600 secs (0-195)
show less
Hacking
๐บ๐ธ
TPI-Abuse
2026-06-09 10:03:21
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.244.68.226 (226.68.244.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.244.68.226 (226.68.244.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 06:03:16.566173 2026] [security2:error] [pid 26148:tid 26148] [client 35.244.68.226:52238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.general.cloudex.link"] [uri "/.git/config"] [unique_id "aifk5KbzUazCE1_ayGvD9wAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 09:41:42
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.244.68.226 (226.68.244.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.244.68.226 (226.68.244.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 05:41:38.791548 2026] [security2:error] [pid 24376:tid 24376] [client 35.244.68.226:50362] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "milajarecords.com"] [uri "/.git/config"] [unique_id "aiff0ndwpUKSV8Fsnxwd-wAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ญ
4server
2026-06-09 08:45:39
(1 day ago)
[TueJun0910:45:35.8423272026][security2:error][pid275205:tid275462][client35.244.68.226:0]ModSecurit ...
show more
[TueJun0910:45:35.8423272026][security2:error][pid275205:tid275462][client35.244.68.226:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"364\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"hosting-dominio.com\"][uri\"/.git/config\"][unique_id\"aifSryfB9ZlT8nHj5ra6eAAAARg\"]
show less
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 08:29:30
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.244.68.226 (226.68.244.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.244.68.226 (226.68.244.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 04:29:22.012143 2026] [security2:error] [pid 28616:tid 28616] [client 35.244.68.226:58768] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "randomgroovemusic.com.englishmagic.us"] [uri "/.git/config"] [unique_id "aifO4nGDKzmfI8Z2fxM8uwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
ipoac.nl
2026-06-09 08:04:46
(1 day ago)
-:443 35.244.68.226 - - [09/Jun/2026:10:04:45 +0200] - "GET /.git/config HTTP/1.1" 403 6369 "-" "Moz ...
show more
-:443 35.244.68.226 - - [09/Jun/2026:10:04:45 +0200] - "GET /.git/config HTTP/1.1" 403 6369 "-" "Mozilla/5.0 (Linux; Android 8.1.0; Redmi Note 6 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.105 Mobile Safari/537.36"
show less
Bad Web Bot
๐ฉ๐ช
FeG Deutschland
2026-06-09 07:52:35
(1 day ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
๐บ๐ธ
JustMeHere
2026-06-09 05:36:37
(1 day ago)
[Tue Jun 09 01:36:33.363551 2026] [security2:error] [pid 81240:tid 81397] [client 35.244.68.226:5057 ...
show more
[Tue Jun 09 01:36:33.363551 2026] [security2:error] [pid 81240:tid 81397] [client 35.244.68.226:50578] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "toastdev.yorknation.com"] [uri "/.git/config"] [unique_id "aiemYa82p38LeV3GaOrLoAAAAFY"]
...
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 05:30:45
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.244.68.226 (226.68.244.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.244.68.226 (226.68.244.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 01:30:42.342662 2026] [security2:error] [pid 17469:tid 17469] [client 35.244.68.226:35680] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hare.digitalsolutions.help"] [uri "/.git/config"] [unique_id "aielAuO_5Dy_aCIz63zJ9gAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 04:00:57
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.244.68.226 (226.68.244.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.244.68.226 (226.68.244.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 00:00:51.455503 2026] [security2:error] [pid 10709:tid 10709] [client 35.244.68.226:33272] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dhappraisalservices.com"] [uri "/.git/config"] [unique_id "aieP8wStDFqxATjyNrjYwwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 02:51:09
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 35.244.68.226 (226.68.244.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.244.68.226 (226.68.244.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 22:51:06.142885 2026] [security2:error] [pid 14778:tid 14778] [client 35.244.68.226:53724] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.michaelwakim.teamwakimphotography.com"] [uri "/.git/config"] [unique_id "aid_mnYnm6MFt9p8k9S3YQAAAGI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 02:17:04
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 35.244.68.226 (226.68.244.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.244.68.226 (226.68.244.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 22:17:00.803310 2026] [security2:error] [pid 24636:tid 24636] [client 35.244.68.226:41354] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "albertawaterjet.com"] [uri "/.git/config"] [unique_id "aid3nA3uii9O5S87tOA_5wAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack