JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 140.248.75.111

140.248.75.111 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 0%: ?

ISP	Fastly, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS54113
Domain Name	fastly.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Important Note: 140.248.75.111 is an IP address from within our whitelist belonging to the subnet 140.248.64.0/18, which we identify as: "Fastly CDN".

Whitelisted netblocks are typically owned by trusted entities, such as Google or Microsoft who may use them for search engine spiders. However, these same entities sometimes also provide cloud servers and mail services which are easily abused. Pay special attention when trusting or distrusting these IPs.

Report 140.248.75.111

Whois 140.248.75.111

IP Abuse Reports for 140.248.75.111:

This IP address has been reported a total of 24 times from 10 distinct sources. 140.248.75.111 was first reported on February 1st 2026, and the most recent report was 13 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 jcbriar	2026-07-08 12:30:14 (13 hours ago)	Searching for vulnerable scripts	Hacking Web App Attack
🇺🇸 Epimetheus	2026-07-08 10:36:23 (15 hours ago)	Unauthorized access attempts: [GET] /.git/HEAD [GET] /.git/config UA: git/2.39.2	Web App Attack
🇺🇸 TPI-Abuse	2026-07-08 06:02:07 (19 hours ago)	(mod_security) mod_security (id:210492) triggered by 140.248.75.111 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 140.248.75.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 02:01:59.544313 2026] [security2:error] [pid 15286:tid 15320] [client 140.248.75.111:61454] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "digitaltalkingbible.jd-web-designs.com"] [uri "/.git/config"] [unique_id "ak3n13ykvRP6731dyseC1gAAAFU"] show less	Brute-Force Bad Web Bot Web App Attack
🇱🇻 garmtech.com	2026-07-08 03:10:43 (22 hours ago)	Attempted access to sensitive endpoint (/.git/config) detected. Automated scan or unauthorized probi ... show more Attempted access to sensitive endpoint (/.git/config) detected. Automated scan or unauthorized probing. show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-07 23:06:56 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 140.248.75.111 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 140.248.75.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 07 19:06:49.626592 2026] [security2:error] [pid 14882:tid 14882] [client 140.248.75.111:43174] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arkansasbest.com"] [uri "/.git/HEAD"] [unique_id "ak2GiXOSDHpoX2hIBCmbMQAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-07 10:12:46 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 140.248.75.111 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 140.248.75.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 07 06:12:38.920471 2026] [security2:error] [pid 15596:tid 15596] [client 140.248.75.111:51880] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "accu-tuner.com"] [uri "/.git/HEAD"] [unique_id "akzRFpMdKnzAYE8TIbvYYwAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 CBJ	2026-07-07 01:28:31 (2 days ago)	fail2ban: apache-filepath-recon ...	Web App Attack
🇺🇸 TPI-Abuse	2026-07-06 07:19:26 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 140.248.75.111 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 140.248.75.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 03:19:19.895863 2026] [security2:error] [pid 9772:tid 9772] [client 140.248.75.111:35608] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "415test.com"] [uri "/.git/config"] [unique_id "aktW9588T2YkABjiIW2GMAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-06 05:43:47 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 140.248.75.111 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 140.248.75.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 01:43:42.479848 2026] [security2:error] [pid 16394:tid 16394] [client 140.248.75.111:9200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.chl.digitalsolutions.help"] [uri "/.git/config"] [unique_id "aktAjluhizTFFQTGmJOrLwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇩 David Koswari	2026-07-06 05:26:00 (2 days ago)	REQ_BLOCKED_ACL	DDoS Attack FTP Brute-Force Ping of Death Port Scan Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Exploited Host Web App Attack SSH IoT Targeted
🇺🇸 TPI-Abuse	2026-07-06 04:23:36 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 140.248.75.111 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 140.248.75.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 00:23:30.354688 2026] [security2:error] [pid 16400:tid 16400] [client 140.248.75.111:19060] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.alknetso.name"] [uri "/.git/HEAD"] [unique_id "akstwk8-XWSqdMPSQvBZpQAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 wlt-blocker	2026-07-06 01:05:03 (3 days ago)	Unauthorized access to webpage admin	Web App Attack
🇩🇪 pltcldvlpr	2026-07-05 22:56:13 (3 days ago)	CMS/framework probe: 140.248.75.111 - - [06/Jul/2026:00:56:12 +0200] "GET /.git/HEAD HTTP/1.1" 404 9 ... show more CMS/framework probe: 140.248.75.111 - - [06/Jul/2026:00:56:12 +0200] "GET /.git/HEAD HTTP/1.1" 404 94539 "-" "git/2.39.2" asn=54113 org="Fastly, Inc." country=GB ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-05 21:34:24 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 140.248.75.111 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 140.248.75.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 17:34:18.212363 2026] [security2:error] [pid 626:tid 626] [client 140.248.75.111:61712] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fundaciondamashcc.org.ec"] [uri "/.git/config"] [unique_id "akrN2j0GmVsFBE7Z5sXQrAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-05 20:53:19 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 140.248.75.111 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 140.248.75.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 16:53:13.373481 2026] [security2:error] [pid 10452:tid 10452] [client 140.248.75.111:28708] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.candlecrawler.trade"] [uri "/.git/HEAD"] [unique_id "akrEOcT0DnGIzQz7fy8qAwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.71

🇨🇳 123.14.157.115

🇦🇺 54.252.191.67

🇲🇾 47.250.128.73

🇧🇷 45.70.164.151

🇺🇸 20.168.121.252

🇧🇷 200.123.226.168

🇳🇱 164.92.221.44

🇫🇮 147.185.133.169

🇩🇪 130.12.180.153

🇩🇪 89.144.30.67

🇮🇱 85.250.61.49

🇫🇷 85.217.140.31

🇸🇳 41.208.147.131

🇬🇧 5.226.140.39

🇫🇷 5.189.131.104

🇷🇺 5.129.247.215

🇬🇧 2.57.17.76

🇬🇧 185.216.145.163

🇺🇸 172.104.210.105