Total reports
5 from
1 distinct
reporter
First reported
October 9th 2026
Most recent report
2 weeks ago
Last 60 days
Top reporter locations
🇺🇸
United States of America
5
Most common categories
Bad Web Bot
5
Web App Attack
5
Brute-Force
5
Old reports
The most recent abuse report for this IP address is from
2 weeks ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-10-13 07:37:19
(2 weeks ago)
(mod_security) mod_security (id:210730) triggered by 2400:cb00:49:1000:f810:9cad:4c6b:fccf (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 03:37:14.905871 2026] [security2:error] [pid 16829:tid 16829] ...
show more
(mod_security) mod_security (id:210730) triggered by 2400:cb00:49:1000:f810:9cad:4c6b:fccf (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 03:37:14.905871 2026] [security2:error] [pid 16829:tid 16829] [client 2400:cb00:49:1000:f810:9cad:4c6b:fccf:10477] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||newmooncafe.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "newmooncafe.com"] [uri "/index.php.bak"] [unique_id "as3fqmqMD3hdx56bRr_9bwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-11 06:33:09
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:49:1000:f810:9cad:4c6b:fccf (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 02:33:00.567926 2026] [security2:error] [pid 2525:tid 2525] [c ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:49:1000:f810:9cad:4c6b:fccf (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 02:33:00.567926 2026] [security2:error] [pid 2525:tid 2525] [client 2400:cb00:49:1000:f810:9cad:4c6b:fccf:14008] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jcommonsenseeconomics.com"] [uri "/.env.old"] [unique_id "asstnDhK8CXEksE-N9YnBwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-11 04:45:37
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:49:1000:f810:9cad:4c6b:fccf (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 00:45:18.216906 2026] [security2:error] [pid 29684:tid 29684] ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:49:1000:f810:9cad:4c6b:fccf (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 00:45:18.216906 2026] [security2:error] [pid 29684:tid 29684] [client 2400:cb00:49:1000:f810:9cad:4c6b:fccf:10495] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ciptaconindotara.com"] [uri "/.env.production"] [unique_id "assUXgwgttN14IDiVZJxxAAAAEc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-09 10:45:00
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:49:1000:f810:9cad:4c6b:fccf (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 09 06:44:55.921180 2026] [security2:error] [pid 14237:tid 14237] ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:49:1000:f810:9cad:4c6b:fccf (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 09 06:44:55.921180 2026] [security2:error] [pid 14237:tid 14237] [client 2400:cb00:49:1000:f810:9cad:4c6b:fccf:12950] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emilybrass.com"] [uri "/.env"] [unique_id "asjFp3d-CNCvlpqntt3k0gAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-09 00:51:41
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:49:1000:f810:9cad:4c6b:fccf (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 20:51:35.447435 2026] [security2:error] [pid 18281:tid 18281] ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:49:1000:f810:9cad:4c6b:fccf (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 20:51:35.447435 2026] [security2:error] [pid 18281:tid 18281] [client 2400:cb00:49:1000:f810:9cad:4c6b:fccf:9935] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.robhoward.me"] [uri "/.git/HEAD"] [unique_id "asg6l2inJz7gEPbGcVjSrQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
