TPI-Abuse
2025-06-15 16:16:08
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2a02:168:882a:0:8ca8:e39f:2612:59df (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a02:168:882a:0:8ca8:e39f:2612:59df (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 15 12:16:02.210442 2025] [security2:error] [pid 1022599:tid 1022599] [client 2a02:168:882a:0:8ca8:e39f:2612:59df:59200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "realclean.net"] [uri "/.git/HEAD"] [unique_id "aE7xwu4bVP99x7I9IPHvdgAAABI"] show less
Brute-Force
Bad Web Bot
Web App Attack
TPI-Abuse
2025-06-15 09:32:28
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2a02:168:882a:0:8ca8:e39f:2612:59df (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a02:168:882a:0:8ca8:e39f:2612:59df (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 15 05:32:21.912879 2025] [security2:error] [pid 1117144:tid 1117144] [client 2a02:168:882a:0:8ca8:e39f:2612:59df:52364] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jewersmail.com"] [uri "/.git/HEAD"] [unique_id "aE6TJTjDfltgpXRD5aoiAAAAAAA"] show less
Brute-Force
Bad Web Bot
Web App Attack
TPI-Abuse
2025-06-15 08:15:14
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2a02:168:882a:0:8ca8:e39f:2612:59df (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a02:168:882a:0:8ca8:e39f:2612:59df (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 15 04:15:08.639422 2025] [security2:error] [pid 3057774:tid 3057774] [client 2a02:168:882a:0:8ca8:e39f:2612:59df:65529] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kildarafarms.com"] [uri "/.git/HEAD"] [unique_id "aE6BDFvAgO1l5BTi4JOtEwAAAAA"] show less
Brute-Force
Bad Web Bot
Web App Attack
TPI-Abuse
2025-06-15 04:52:35
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2a02:168:882a:0:8ca8:e39f:2612:59df (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a02:168:882a:0:8ca8:e39f:2612:59df (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 15 00:52:31.721876 2025] [security2:error] [pid 1965962:tid 1965962] [client 2a02:168:882a:0:8ca8:e39f:2612:59df:56330] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "independentmusicconference.com"] [uri "/.git/HEAD"] [unique_id "aE5Rj9gwyI8H-XANq3ccAwAAAAE"] show less
Brute-Force
Bad Web Bot
Web App Attack
sefinek.net
2025-06-15 00:06:20
(3 weeks ago)
Triggered Cloudflare WAF (firewallCustom) from CH.
Action taken: BLOCK
Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from CH.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /.git/HEAD
UA: curl/8.7.1
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less
Bad Web Bot
TPI-Abuse
2025-06-14 22:05:46
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2a02:168:882a:0:8ca8:e39f:2612:59df (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a02:168:882a:0:8ca8:e39f:2612:59df (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 14 18:05:41.142548 2025] [security2:error] [pid 1243254:tid 1243277] [client 2a02:168:882a:0:8ca8:e39f:2612:59df:53472] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "honorac.com"] [uri "/.git/HEAD"] [unique_id "aE3yNQfWKvBtvcbTzD1qzwAAANU"] show less
Brute-Force
Bad Web Bot
Web App Attack
TPI-Abuse
2025-06-14 20:34:33
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2a02:168:882a:0:8ca8:e39f:2612:59df (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a02:168:882a:0:8ca8:e39f:2612:59df (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 14 16:34:27.558129 2025] [security2:error] [pid 2335291:tid 2335291] [client 2a02:168:882a:0:8ca8:e39f:2612:59df:59554] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "psikeep.com"] [uri "/.git/HEAD"] [unique_id "aE3c08Swaewr04EezNC91AAAACk"] show less
Brute-Force
Bad Web Bot
Web App Attack
TPI-Abuse
2025-06-14 19:44:14
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2a02:168:882a:0:8ca8:e39f:2612:59df (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a02:168:882a:0:8ca8:e39f:2612:59df (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 14 15:44:07.844077 2025] [security2:error] [pid 874976:tid 874976] [client 2a02:168:882a:0:8ca8:e39f:2612:59df:54292] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "taafe.net"] [uri "/.git/HEAD"] [unique_id "aE3RB2oZfWIzuZFjq4LChQAAAAo"] show less
Brute-Force
Bad Web Bot
Web App Attack
TPI-Abuse
2025-06-14 19:19:23
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2a02:168:882a:0:8ca8:e39f:2612:59df (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a02:168:882a:0:8ca8:e39f:2612:59df (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 14 15:19:15.681287 2025] [security2:error] [pid 1174358:tid 1174358] [client 2a02:168:882a:0:8ca8:e39f:2612:59df:59550] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "johnprimerano.com"] [uri "/.git/HEAD"] [unique_id "aE3LM1B55TiRreFRNbhAyQAAAAU"] show less
Brute-Force
Bad Web Bot
Web App Attack
TPI-Abuse
2025-06-14 18:11:52
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2a02:168:882a:0:8ca8:e39f:2612:59df (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a02:168:882a:0:8ca8:e39f:2612:59df (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 14 14:11:49.011085 2025] [security2:error] [pid 2533261:tid 2533261] [client 2a02:168:882a:0:8ca8:e39f:2612:59df:62786] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "alphazeta.net"] [uri "/.git/HEAD"] [unique_id "aE27Zcw6hFUUhkXSdmnvrQAAAAY"] show less
Brute-Force
Bad Web Bot
Web App Attack
TPI-Abuse
2025-06-14 16:46:39
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2a02:168:882a:0:8ca8:e39f:2612:59df (Unknown): ... show more (mod_security) mod_security (id:210492) triggered by 2a02:168:882a:0:8ca8:e39f:2612:59df (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 14 12:46:31.988311 2025] [security2:error] [pid 1185472:tid 1185472] [client 2a02:168:882a:0:8ca8:e39f:2612:59df:56955] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bosdkbook.com"] [uri "/.git/HEAD"] [unique_id "aE2nZ1OPmxWYA8JieT_wwgAAAAw"] show less
Brute-Force
Bad Web Bot
Web App Attack