🇺🇸
TPI-Abuse
2026-11-09 14:57:17
UTC ·
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:1056:1000:5d08:61e1:c282:36ca (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 09:57:10.402600 2026] [security2:error] [pid 3692:tid 3692] ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:1056:1000:5d08:61e1:c282:36ca (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 09:57:10.402600 2026] [security2:error] [pid 3692:tid 3692] [client 2400:cb00:1056:1000:5d08:61e1:c282:36ca:14324] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pandalearningcenters.com.stlouisdave.com"] [uri "/.git/HEAD"] [unique_id "avHfRnsnuuyeIVfCp8AC1gAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 12:46:27
UTC ·
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:1056:1000:5d08:61e1:c282:36ca (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 07:46:21.450131 2026] [security2:error] [pid 26372:tid 26372 ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:1056:1000:5d08:61e1:c282:36ca (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 07:46:21.450131 2026] [security2:error] [pid 26372:tid 26372] [client 2400:cb00:1056:1000:5d08:61e1:c282:36ca:10767] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.willowriver3.com"] [uri "/.git/HEAD"] [unique_id "avHAnTaGmT6K7tB8AUDgvwAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 10:13:51
UTC ·
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:1056:1000:5d08:61e1:c282:36ca (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 05:13:48.417219 2026] [security2:error] [pid 26880:tid 26880 ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:1056:1000:5d08:61e1:c282:36ca (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 05:13:48.417219 2026] [security2:error] [pid 26880:tid 26880] [client 2400:cb00:1056:1000:5d08:61e1:c282:36ca:14180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.weroinc.com"] [uri "/.git/HEAD"] [unique_id "avGc3CDKs1Tz34avJwZawAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 09:27:33
UTC ·
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:1056:1000:5d08:61e1:c282:36ca (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 04:27:27.237761 2026] [security2:error] [pid 2352:tid 2352] ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:1056:1000:5d08:61e1:c282:36ca (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 04:27:27.237761 2026] [security2:error] [pid 2352:tid 2352] [client 2400:cb00:1056:1000:5d08:61e1:c282:36ca:10419] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.title13.com"] [uri "/.git/config"] [unique_id "avGR_61w0nJrZM6weK5EkAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 07:38:28
UTC ·
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:1056:1000:5d08:61e1:c282:36ca (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 02:38:24.384429 2026] [security2:error] [pid 29500:tid 29500 ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:1056:1000:5d08:61e1:c282:36ca (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 02:38:24.384429 2026] [security2:error] [pid 29500:tid 29500] [client 2400:cb00:1056:1000:5d08:61e1:c282:36ca:10532] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kimmimorikawa.com"] [uri "/.git/HEAD"] [unique_id "avF4cEHtH1Abdk_FNMsEDgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 05:44:35
UTC ·
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:1056:1000:5d08:61e1:c282:36ca (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 00:44:29.185467 2026] [security2:error] [pid 19252:tid 19252 ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:1056:1000:5d08:61e1:c282:36ca (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 00:44:29.185467 2026] [security2:error] [pid 19252:tid 19252] [client 2400:cb00:1056:1000:5d08:61e1:c282:36ca:10331] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.photospecialties.net"] [uri "/.git/config"] [unique_id "avFdvcrx--hu83VmLDFcFgAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 04:23:00
UTC ·
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:1056:1000:5d08:61e1:c282:36ca (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 23:22:54.468583 2026] [security2:error] [pid 6543:tid 6543] ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:1056:1000:5d08:61e1:c282:36ca (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 23:22:54.468583 2026] [security2:error] [pid 6543:tid 6543] [client 2400:cb00:1056:1000:5d08:61e1:c282:36ca:12585] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.toybud.com"] [uri "/.git/config"] [unique_id "avFKnsmS0kJbispxQwfPUAAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
BlueWire Hosting
2026-11-09 04:03:04
UTC ·
(18 hours ago)
High-confidence malicious configuration/VCS probe
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 03:55:14
UTC ·
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:1056:1000:5d08:61e1:c282:36ca (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 22:55:09.444621 2026] [security2:error] [pid 10760:tid 10760 ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:1056:1000:5d08:61e1:c282:36ca (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 22:55:09.444621 2026] [security2:error] [pid 10760:tid 10760] [client 2400:cb00:1056:1000:5d08:61e1:c282:36ca:10595] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.nowell.net"] [uri "/.git/config"] [unique_id "avFEHRZ-SGLpOas5QqrTngAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 03:26:10
UTC ·
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:1056:1000:5d08:61e1:c282:36ca (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 22:26:04.544854 2026] [security2:error] [pid 31118:tid 31118 ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:1056:1000:5d08:61e1:c282:36ca (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 22:26:04.544854 2026] [security2:error] [pid 31118:tid 31118] [client 2400:cb00:1056:1000:5d08:61e1:c282:36ca:11895] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.cspminc.com"] [uri "/.git/config"] [unique_id "avE9TKjNgOc_PNVTXBz9XAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 01:01:09
UTC ·
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:1056:1000:5d08:61e1:c282:36ca (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 20:01:03.618071 2026] [security2:error] [pid 8848:tid 8848] ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:1056:1000:5d08:61e1:c282:36ca (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 20:01:03.618071 2026] [security2:error] [pid 8848:tid 8848] [client 2400:cb00:1056:1000:5d08:61e1:c282:36ca:14211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bigbandrockparty.com"] [uri "/.git/config"] [unique_id "avEbT4pti1dXMuxJdbfMsAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 00:27:25
UTC ·
(22 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:1056:1000:5d08:61e1:c282:36ca (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 19:27:19.174612 2026] [security2:error] [pid 10682:tid 10682 ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:1056:1000:5d08:61e1:c282:36ca (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 19:27:19.174612 2026] [security2:error] [pid 10682:tid 10682] [client 2400:cb00:1056:1000:5d08:61e1:c282:36ca:13451] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.realitytourist.com"] [uri "/.git/HEAD"] [unique_id "avETZ24NgXSJATNLvB4LvwAAAEA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 00:09:21
UTC ·
(22 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:1056:1000:5d08:61e1:c282:36ca (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 19:09:16.292290 2026] [security2:error] [pid 30711:tid 30711 ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:1056:1000:5d08:61e1:c282:36ca (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 19:09:16.292290 2026] [security2:error] [pid 30711:tid 30711] [client 2400:cb00:1056:1000:5d08:61e1:c282:36ca:13094] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.agingworkforcenews.com"] [uri "/.git/config"] [unique_id "avEPLAAMvvclLV1gBiyWxwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-11-06 23:01:57
UTC ·
(2 days ago)
Auto-ban: >3000 req/min op 2026-11-06
Web App Attack
SSH
Hacking
🇳🇱
homeshowdomain.nl
2026-06-12 22:02:00
UTC ·
(4 months ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-11.
Web App Attack
SSH
Hacking
