πΊπΈ
TPI-Abuse
2026-10-15 14:03:11
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 196.247.16.124 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 196.247.16.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 10:02:42.031946 2026] [security2:error] [pid 4106:tid 4106] [client 196.247.16.124:45749] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "news.aguasolar.com"] [uri "/.git/HEAD"] [unique_id "atDdAkCuFLGKUB3OTXZA4AAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-10-14 11:19:41
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 196.247.16.124 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 196.247.16.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 07:19:32.134166 2026] [security2:error] [pid 18428:tid 18428] [client 196.247.16.124:40836] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.tnthandy.com"] [uri "/.git/HEAD"] [unique_id "as9lRPlBFeZN9PoVzyEfyQAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-10-14 07:00:14
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 196.247.16.124 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 196.247.16.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 03:00:06.194627 2026] [security2:error] [pid 4679:tid 4752] [client 196.247.16.124:37609] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gelatoconsapevole.theyogicat.com"] [uri "/.git/HEAD"] [unique_id "as8odndYJSILnglKMVQYDAAAAE8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-10-14 04:40:27
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 196.247.16.124 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 196.247.16.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 00:40:19.799886 2026] [security2:error] [pid 28220:tid 28220] [client 196.247.16.124:37692] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.thebestac.com"] [uri "/.git/HEAD"] [unique_id "as8Hswazn7tGSndGrh3quAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π¬π§
AvonleaConsulting
2026-10-13 18:49:52
(1 day ago)
Scanning unused Default website or suspicious access to valid sites from IP marked as abusive
Bad Web Bot
Web App Attack
π³π±
e.fierstra
2026-10-13 08:23:38
(2 days ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-10-11 21:44:34
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 196.247.16.124 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 196.247.16.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 17:44:23.725424 2026] [security2:error] [pid 31134:tid 31134] [client 196.247.16.124:41796] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.personalized-holiday-cards.com"] [uri "/.git/HEAD"] [unique_id "aswDNx_EOUq6Wvbmwc4HvQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-10-11 19:35:56
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 196.247.16.124 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 196.247.16.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 15:35:51.000741 2026] [security2:error] [pid 21838:tid 21838] [client 196.247.16.124:44779] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.travel-pix.com"] [uri "/.git/HEAD"] [unique_id "asvlF9GuV6ljJuoOpYtEWAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-10-11 07:51:21
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 196.247.16.124 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 196.247.16.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 03:50:54.750513 2026] [security2:error] [pid 20982:tid 20982] [client 196.247.16.124:51542] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.greentirerecycling.mapleleaf-marketing.com"] [uri "/.git/HEAD"] [unique_id "ass_3oQTU5QQdt5UxeJSGgAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π¬π§
pinguin
2026-10-09 07:15:16
(6 days ago)
Triggered Cloudflare WAF (bic) from US.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint ...
show more
Triggered Cloudflare WAF (bic) from US.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /.git/HEAD
UA: Python-urllib/3.10
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
π¨πΏ
akac
2026-10-09 05:06:25
(6 days ago)
Web vulnerability scanning: HTTP/1.1 GET /.git/HEAD
Hacking
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-10-09 01:51:14
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 196.247.16.124 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 196.247.16.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 21:51:02.247809 2026] [security2:error] [pid 14960:tid 14960] [client 196.247.16.124:56346] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.bwill.dev"] [uri "/.git/HEAD"] [unique_id "ashIhlq2vX8y22NnP9buugAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-10-07 22:45:04
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 196.247.16.124 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 196.247.16.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 18:44:55.006110 2026] [security2:error] [pid 18653:tid 18653] [client 196.247.16.124:42997] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.aarentes.com"] [uri "/.git/HEAD"] [unique_id "asbLZ-7TmrJtfsda2Unt5AAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π³π±
homeshowdomain.nl
2026-10-05 21:59:16
(1 week ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-10-04.
show less
Web App Attack
SSH
Hacking
πΊπΈ
TPI-Abuse
2026-10-04 03:49:09
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 196.247.16.124 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 196.247.16.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 03 23:49:02.321663 2026] [security2:error] [pid 4686:tid 4686] [client 196.247.16.124:49323] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "1954topresent.com"] [uri "/.git/HEAD"] [unique_id "asHMrtDWld6sXAC3uWYy5AAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack