๐ฏ๐ต
S.O.B.A. Dev.
2026-09-04 06:48:51
(1 week ago)
Persistent port scanning or vulnerability scanning
Port Scan
๐บ๐ธ
TPI-Abuse
2026-09-04 03:43:48
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:19:1000:e5e7:2361:a3:fbd7 (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:19:1000:e5e7:2361:a3:fbd7 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 23:43:38.140677 2026] [security2:error] [pid 26142:tid 26142] [client 2400:cb00:19:1000:e5e7:2361:a3:fbd7:11454] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "catholicshopper.com"] [uri "/.git/config"] [unique_id "apo-atPN6iq2fkI3QQYF7wAAADY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-28 14:31:30
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:19:1000:e5e7:2361:a3:fbd7 (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:19:1000:e5e7:2361:a3:fbd7 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 10:31:21.225333 2026] [security2:error] [pid 32743:tid 32743] [client 2400:cb00:19:1000:e5e7:2361:a3:fbd7:13400] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.gdrankin.com"] [uri "/.git/config"] [unique_id "apGbuXBZBSx0NpkVN1FMeQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-28 04:23:56
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:19:1000:e5e7:2361:a3:fbd7 (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:19:1000:e5e7:2361:a3:fbd7 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 00:23:52.461931 2026] [security2:error] [pid 28823:tid 28841] [client 2400:cb00:19:1000:e5e7:2361:a3:fbd7:10530] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.lightsondisplay.com"] [uri "/.git/config"] [unique_id "apENWGVtXo5kT74DHlhvowAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-26 19:55:51
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:19:1000:e5e7:2361:a3:fbd7 (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:19:1000:e5e7:2361:a3:fbd7 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 15:55:47.464914 2026] [security2:error] [pid 15246:tid 15246] [client 2400:cb00:19:1000:e5e7:2361:a3:fbd7:9397] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.craftcare.net"] [uri "/.git/HEAD"] [unique_id "ao9Ew_krTagjnxVf374hhAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-26 15:16:41
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:19:1000:e5e7:2361:a3:fbd7 (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:19:1000:e5e7:2361:a3:fbd7 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 11:16:36.364318 2026] [security2:error] [pid 3287:tid 3287] [client 2400:cb00:19:1000:e5e7:2361:a3:fbd7:10777] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.flavornet.org"] [uri "/.git/config"] [unique_id "ao8DVF7bdWwxdRSXwevyewAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-23 13:56:42
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:19:1000:e5e7:2361:a3:fbd7 (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:19:1000:e5e7:2361:a3:fbd7 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 09:56:38.408522 2026] [security2:error] [pid 32403:tid 32403] [client 2400:cb00:19:1000:e5e7:2361:a3:fbd7:10033] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.n3fjp.com"] [uri "/.git/config"] [unique_id "aor8FltYkVqIIUGAHy3I2QAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-22 19:17:45
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:19:1000:e5e7:2361:a3:fbd7 (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:19:1000:e5e7:2361:a3:fbd7 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 15:17:37.800767 2026] [security2:error] [pid 9699:tid 9699] [client 2400:cb00:19:1000:e5e7:2361:a3:fbd7:9465] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.vincetronics.com"] [uri "/.git/config"] [unique_id "aon10Quxqp3ey7t0TEgZRwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-22 14:43:40
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:19:1000:e5e7:2361:a3:fbd7 (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:19:1000:e5e7:2361:a3:fbd7 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 10:43:34.410320 2026] [security2:error] [pid 25281:tid 25281] [client 2400:cb00:19:1000:e5e7:2361:a3:fbd7:13608] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.emhelectric.com"] [uri "/.git/HEAD"] [unique_id "aom1lt1Si3eC_qE6OiRzxgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-22 09:38:20
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:19:1000:e5e7:2361:a3:fbd7 (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:19:1000:e5e7:2361:a3:fbd7 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 05:38:15.048525 2026] [security2:error] [pid 3231:tid 3231] [client 2400:cb00:19:1000:e5e7:2361:a3:fbd7:13445] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.pseudo.space"] [uri "/.git/config"] [unique_id "aoluB6e4ODD2ZYGcH_unjQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-11-11 08:10:38
(1 year ago)
(mod_security) mod_security (id:240335) triggered by 2400:cb00:19:1000:e5e7:2361:a3:fbd7 (Unknown): ...
show more
(mod_security) mod_security (id:240335) triggered by 2400:cb00:19:1000:e5e7:2361:a3:fbd7 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 11 03:10:31.838631 2024] [security2:error] [pid 23167:tid 23167] [client 2400:cb00:19:1000:e5e7:2361:a3:fbd7:58010] [client 2400:cb00:19:1000:e5e7:2361:a3:fbd7] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 91.134.248.249 (0+1 hits since last alert)|ipv6.kcdusa.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "ipv6.kcdusa.com"] [uri "/xmlrpc.php"] [unique_id "ZzG796txarLPYoqCfxMaPwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack