🇺🇸
TPI-Abuse
2026-08-03 11:34:29
UTC ·
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 2a04:4e40:1700:0:269:2776:5dd9:5521 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 03 07:34:26.007008 2026] [security2:error] [pid 323055:tid 323055] ...
show more
(mod_security) mod_security (id:210492) triggered by 2a04:4e40:1700:0:269:2776:5dd9:5521 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 03 07:34:26.007008 2026] [security2:error] [pid 323055:tid 323055] [client 2a04:4e40:1700:0:269:2776:5dd9:5521:30954] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.revision.ws"] [uri "/.git/HEAD"] [unique_id "anB8wpJQP-aTHj9ZnEJVtwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-22 09:50:56
UTC ·
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 2a04:4e40:1700:0:269:2776:5dd9:5521 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 05:50:50.155417 2026] [security2:error] [pid 699520:tid 699520] ...
show more
(mod_security) mod_security (id:210492) triggered by 2a04:4e40:1700:0:269:2776:5dd9:5521 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 05:50:50.155417 2026] [security2:error] [pid 699520:tid 699520] [client 2a04:4e40:1700:0:269:2776:5dd9:5521:11582] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.georgetownca.com"] [uri "/.git/HEAD"] [unique_id "amCSequz16J9CCOTeUfgoQAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-21 15:33:42
UTC ·
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 2a04:4e40:1700:0:269:2776:5dd9:5521 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 11:33:37.195176 2026] [security2:error] [pid 28266:tid 28266] [c ...
show more
(mod_security) mod_security (id:210492) triggered by 2a04:4e40:1700:0:269:2776:5dd9:5521 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 11:33:37.195176 2026] [security2:error] [pid 28266:tid 28266] [client 2a04:4e40:1700:0:269:2776:5dd9:5521:19294] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sieder.com.ar.sieder.com"] [uri "/.git/HEAD"] [unique_id "al-RUVzS6EYlKMXgvWMnUwAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-21 09:24:01
UTC ·
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 2a04:4e40:1700:0:269:2776:5dd9:5521 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 05:23:57.903032 2026] [security2:error] [pid 2403547:tid 2403547 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a04:4e40:1700:0:269:2776:5dd9:5521 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 05:23:57.903032 2026] [security2:error] [pid 2403547:tid 2403547] [client 2a04:4e40:1700:0:269:2776:5dd9:5521:59918] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.studiopilates.net"] [uri "/.git/HEAD"] [unique_id "al86rWXM6VaVtOE07_-3VgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-21 08:36:50
UTC ·
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 2a04:4e40:1700:0:269:2776:5dd9:5521 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 04:36:43.980202 2026] [security2:error] [pid 18214:tid 18214] [c ...
show more
(mod_security) mod_security (id:210492) triggered by 2a04:4e40:1700:0:269:2776:5dd9:5521 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 04:36:43.980202 2026] [security2:error] [pid 18214:tid 18214] [client 2a04:4e40:1700:0:269:2776:5dd9:5521:51266] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.firebelly.org"] [uri "/.git/HEAD"] [unique_id "al8vm7b-FH9QwNrO4YtGQgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-20 23:27:52
UTC ·
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 2a04:4e40:1700:0:269:2776:5dd9:5521 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 19:27:47.241492 2026] [security2:error] [pid 26767:tid 26767] [c ...
show more
(mod_security) mod_security (id:210492) triggered by 2a04:4e40:1700:0:269:2776:5dd9:5521 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 19:27:47.241492 2026] [security2:error] [pid 26767:tid 26767] [client 2a04:4e40:1700:0:269:2776:5dd9:5521:45888] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.almudenastrust.com"] [uri "/.git/HEAD"] [unique_id "al6u8_BeWDBY52MJl9Fc8gAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-20 21:23:31
UTC ·
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 2a04:4e40:1700:0:269:2776:5dd9:5521 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 17:23:26.632667 2026] [security2:error] [pid 3147:tid 3147] [cli ...
show more
(mod_security) mod_security (id:210492) triggered by 2a04:4e40:1700:0:269:2776:5dd9:5521 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 17:23:26.632667 2026] [security2:error] [pid 3147:tid 3147] [client 2a04:4e40:1700:0:269:2776:5dd9:5521:16134] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.kimmimorikawa.com"] [uri "/.git/HEAD"] [unique_id "al6RztQqrtOoJKeYoMi7SwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-20 18:45:56
UTC ·
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 2a04:4e40:1700:0:269:2776:5dd9:5521 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 14:45:49.303803 2026] [security2:error] [pid 3340902:tid 3340902 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a04:4e40:1700:0:269:2776:5dd9:5521 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 14:45:49.303803 2026] [security2:error] [pid 3340902:tid 3340902] [client 2a04:4e40:1700:0:269:2776:5dd9:5521:29916] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.slc.com.gt"] [uri "/.git/HEAD"] [unique_id "al5s3QtpQMScT-l6hvwvmAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-20 18:30:31
UTC ·
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 2a04:4e40:1700:0:269:2776:5dd9:5521 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 14:30:25.133565 2026] [security2:error] [pid 2562942:tid 2562942 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a04:4e40:1700:0:269:2776:5dd9:5521 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 14:30:25.133565 2026] [security2:error] [pid 2562942:tid 2562942] [client 2a04:4e40:1700:0:269:2776:5dd9:5521:28406] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "srosa.danged.com"] [uri "/.git/HEAD"] [unique_id "al5pQcuDjxQFdpW1vvrDaAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
as211431.net
2026-07-20 18:20:17
UTC ·
(3 months ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /.git/config
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0
This report was generated by:
https:// ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /.git/config
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-07-20 17:33:33
UTC ·
(3 months ago)
(mod_security) mod_security (id:949110) triggered by 2a04:4e40:1700:0:269:2776:5dd9:5521 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 13:33:26.970757 2026] [security2:error] [pid 3299240:tid 3299240 ...
show more
(mod_security) mod_security (id:949110) triggered by 2a04:4e40:1700:0:269:2776:5dd9:5521 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 13:33:26.970757 2026] [security2:error] [pid 3299240:tid 3299240] [client 2a04:4e40:1700:0:269:2776:5dd9:5521:63050] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.motunaonaobookings.hamiltonbookings.com"] [uri "/.git/HEAD"] [unique_id "al5b5rjCue550mDYMNDDdQAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
openstrike.co.uk
2026-07-20 05:13:46
UTC ·
(3 months ago)
2 attacks on VC URLs:
GET /.git/config HTTP/1.1
Hacking
🇺🇸
TPI-Abuse
2026-07-19 18:18:13
UTC ·
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 2a04:4e40:1700:0:269:2776:5dd9:5521 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 14:18:05.958775 2026] [security2:error] [pid 1932183:tid 1932183 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a04:4e40:1700:0:269:2776:5dd9:5521 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 14:18:05.958775 2026] [security2:error] [pid 1932183:tid 1932183] [client 2a04:4e40:1700:0:269:2776:5dd9:5521:7150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.title13.com"] [uri "/.git/HEAD"] [unique_id "al0U3S5Wfa6aXYIDLXeTpAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-19 15:02:53
UTC ·
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 2a04:4e40:1700:0:269:2776:5dd9:5521 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 11:02:45.806280 2026] [security2:error] [pid 375260:tid 375260] ...
show more
(mod_security) mod_security (id:210492) triggered by 2a04:4e40:1700:0:269:2776:5dd9:5521 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 11:02:45.806280 2026] [security2:error] [pid 375260:tid 375260] [client 2a04:4e40:1700:0:269:2776:5dd9:5521:9288] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "doodlemags.com"] [uri "/.git/HEAD"] [unique_id "alznFSkOAbz6Fn8Zk2dzKwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-19 10:50:33
UTC ·
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 2a04:4e40:1700:0:269:2776:5dd9:5521 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 06:50:26.100824 2026] [security2:error] [pid 19988:tid 19988] [c ...
show more
(mod_security) mod_security (id:210492) triggered by 2a04:4e40:1700:0:269:2776:5dd9:5521 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 06:50:26.100824 2026] [security2:error] [pid 19988:tid 19988] [client 2a04:4e40:1700:0:269:2776:5dd9:5521:4680] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.bbproductionsonline.com"] [uri "/.git/config"] [unique_id "alyr8sR8N8Dfy8YmaUcjfQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack