Total reports
6 from
2 distinct
reporters
First reported
March 24th 2026
Most recent report
1 hour ago
Last 60 days
Top reporter locations
🇺🇸
United States of America
4
🇷🇴
Romania
1
Most common categories
Bad Web Bot
4
Brute-Force
4
Web App Attack
4
Port Scan
1
Hacking
1
Recent reports
We have received reports of abusive activity from this IP address within the last week.
This IP is on our whitelist as Cloudflare Reverse Proxy .
Shared services like this are often reported for traffic that is not abuse, so review the reports
before blocking.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-11-12 07:02:17
UTC ·
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:650:1000:37fb:d58d:f829:f72a (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 02:02:12.172583 2026] [security2:error] [pid 11851:tid 11851] ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:650:1000:37fb:d58d:f829:f72a (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 02:02:12.172583 2026] [security2:error] [pid 11851:tid 11851] [client 2400:cb00:650:1000:37fb:d58d:f829:f72a:13837] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.rums-of-the-world.com"] [uri "/.git/HEAD"] [unique_id "avVkdGs3-BRkzHU-N-X-IQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 06:41:24
UTC ·
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:650:1000:37fb:d58d:f829:f72a (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 01:41:20.730993 2026] [security2:error] [pid 26705:tid 26705] ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:650:1000:37fb:d58d:f829:f72a (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 01:41:20.730993 2026] [security2:error] [pid 26705:tid 26705] [client 2400:cb00:650:1000:37fb:d58d:f829:f72a:11454] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.3wf.com"] [uri "/.git/HEAD"] [unique_id "avVfkLjOEVSYCKvXGXY1ngAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 04:20:41
UTC ·
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:650:1000:37fb:d58d:f829:f72a (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 23:20:37.159327 2026] [security2:error] [pid 29684:tid 29684] ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:650:1000:37fb:d58d:f829:f72a (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 23:20:37.159327 2026] [security2:error] [pid 29684:tid 29684] [client 2400:cb00:650:1000:37fb:d58d:f829:f72a:12239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.bodiehistory.com"] [uri "/.git/HEAD"] [unique_id "avU-lY4MVBZSpRdjlrBIagAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 01:35:41
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:650:1000:37fb:d58d:f829:f72a (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 20:35:33.837858 2026] [security2:error] [pid 381:tid 381] [cl ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:650:1000:37fb:d58d:f829:f72a (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 20:35:33.837858 2026] [security2:error] [pid 381:tid 381] [client 2400:cb00:650:1000:37fb:d58d:f829:f72a:11867] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "robkraven.com"] [uri "/.git/HEAD"] [unique_id "avJ05bzaDlaiZ6Pc1K5zwQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇷🇴
DamonOne
2026-10-03 05:41:46
UTC ·
(1 month ago)
Blocked by OPNsense; 5 hits, proto=tcp, ports=8443
Port Scan
Hacking
🇺🇸
TPI-Abuse
2026-03-24 17:14:35
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:650:1000:37fb:d58d:f829:f72a (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 24 13:13:30.422787 2026] [security2:error] [pid 2692:tid 2692] [ ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:650:1000:37fb:d58d:f829:f72a (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 24 13:13:30.422787 2026] [security2:error] [pid 2692:tid 2692] [client 2400:cb00:650:1000:37fb:d58d:f829:f72a:11617] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.baird.net"] [uri "/.env.development"] [unique_id "acLGOg8RxoftrBwwiNRJIgAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
