🇺🇸
TPI-Abuse
2026-11-11 22:35:47
UTC ·
(14 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:73:1000:ac02:a3ea:24fb:dec9 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 17:35:44.033678 2026] [security2:error] [pid 29430:tid 29430] ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:73:1000:ac02:a3ea:24fb:dec9 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 17:35:44.033678 2026] [security2:error] [pid 29430:tid 29430] [client 2400:cb00:73:1000:ac02:a3ea:24fb:dec9:9771] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "growingupcarny.com"] [uri "/.git/config"] [unique_id "avTtwLYaWtPP3PWeYJXNYAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 22:09:42
UTC ·
(14 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:73:1000:ac02:a3ea:24fb:dec9 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 17:09:38.846667 2026] [security2:error] [pid 29037:tid 29037] ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:73:1000:ac02:a3ea:24fb:dec9 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 17:09:38.846667 2026] [security2:error] [pid 29037:tid 29037] [client 2400:cb00:73:1000:ac02:a3ea:24fb:dec9:13292] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jayjbakes.com"] [uri "/.git/HEAD"] [unique_id "avTnotB8Fv-O3zfToTZIPgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 20:50:00
UTC ·
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:73:1000:ac02:a3ea:24fb:dec9 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 15:49:52.162434 2026] [security2:error] [pid 14427:tid 14427] ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:73:1000:ac02:a3ea:24fb:dec9 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 15:49:52.162434 2026] [security2:error] [pid 14427:tid 14427] [client 2400:cb00:73:1000:ac02:a3ea:24fb:dec9:12372] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "meltonspace.com"] [uri "/.git/HEAD"] [unique_id "avTU8NxUaIbcCyHUqo0cWgAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 13:40:54
UTC ·
(23 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:73:1000:ac02:a3ea:24fb:dec9 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 08:40:51.364177 2026] [security2:error] [pid 7372:tid 7372] [c ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:73:1000:ac02:a3ea:24fb:dec9 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 08:40:51.364177 2026] [security2:error] [pid 7372:tid 7372] [client 2400:cb00:73:1000:ac02:a3ea:24fb:dec9:10958] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "victorvictor.biz"] [uri "/.git/config"] [unique_id "avRwY4gz1Hbww7yvbfqGtQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 10:07:13
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:73:1000:ac02:a3ea:24fb:dec9 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 05:07:07.806970 2026] [security2:error] [pid 12002:tid 12002] ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:73:1000:ac02:a3ea:24fb:dec9 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 05:07:07.806970 2026] [security2:error] [pid 12002:tid 12002] [client 2400:cb00:73:1000:ac02:a3ea:24fb:dec9:9427] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.wgs.cc"] [uri "/.git/HEAD"] [unique_id "avQ-SzfTv5EO662yw4HJQQAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-11-10 00:37:28
UTC ·
(2 days ago)
Web probing (1 hits in 24h) on default-vhost: sensitive-path scans and/or 404 bursts. Reported by CRMON.
Web App Attack
🇳🇱
homeshowdomain.nl
2026-11-09 23:00:25
UTC ·
(2 days ago)
Auto-ban: >3000 req/min op 2026-11-09
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-11-09 15:22:20
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:73:1000:ac02:a3ea:24fb:dec9 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 10:22:15.459663 2026] [security2:error] [pid 15674:tid 15674] ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:73:1000:ac02:a3ea:24fb:dec9 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 10:22:15.459663 2026] [security2:error] [pid 15674:tid 15674] [client 2400:cb00:73:1000:ac02:a3ea:24fb:dec9:12502] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cancersquared.com"] [uri "/.git/HEAD"] [unique_id "avHlJ9wYRs7I8iVYcB0P8AAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 13:39:45
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:73:1000:ac02:a3ea:24fb:dec9 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 08:39:41.729001 2026] [security2:error] [pid 22671:tid 22671] ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:73:1000:ac02:a3ea:24fb:dec9 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 08:39:41.729001 2026] [security2:error] [pid 22671:tid 22671] [client 2400:cb00:73:1000:ac02:a3ea:24fb:dec9:11109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.matrixpercussiontrio.com"] [uri "/.git/HEAD"] [unique_id "avHNHd63ld6A6mobt844ggAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 12:11:05
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:73:1000:ac02:a3ea:24fb:dec9 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 07:10:59.998697 2026] [security2:error] [pid 17942:tid 17942] ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:73:1000:ac02:a3ea:24fb:dec9 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 07:10:59.998697 2026] [security2:error] [pid 17942:tid 17942] [client 2400:cb00:73:1000:ac02:a3ea:24fb:dec9:9690] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.developerdove.com"] [uri "/.git/config"] [unique_id "avG4UwrTbbn30M5gneMbDAAAACk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 11:18:09
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:73:1000:ac02:a3ea:24fb:dec9 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 06:18:07.139421 2026] [security2:error] [pid 25456:tid 25456] ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:73:1000:ac02:a3ea:24fb:dec9 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 06:18:07.139421 2026] [security2:error] [pid 25456:tid 25456] [client 2400:cb00:73:1000:ac02:a3ea:24fb:dec9:12760] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "urrguide.com.coolingsprings.org"] [uri "/.git/config"] [unique_id "avGr7zScttM1eeogQ6AmQAAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 10:15:38
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:73:1000:ac02:a3ea:24fb:dec9 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 05:15:31.616439 2026] [security2:error] [pid 7554:tid 7554] [c ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:73:1000:ac02:a3ea:24fb:dec9 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 05:15:31.616439 2026] [security2:error] [pid 7554:tid 7554] [client 2400:cb00:73:1000:ac02:a3ea:24fb:dec9:9922] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.travelto.info"] [uri "/.git/config"] [unique_id "avGdQ0JhioD1NloiYRY9ugAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 17:15:05
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:73:1000:ac02:a3ea:24fb:dec9 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 12:14:55.900196 2026] [security2:error] [pid 26194:tid 26194] ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:73:1000:ac02:a3ea:24fb:dec9 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 12:14:55.900196 2026] [security2:error] [pid 26194:tid 26194] [client 2400:cb00:73:1000:ac02:a3ea:24fb:dec9:10285] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bluestarplumberseasttexas.com.jbcllcnet.com"] [uri "/.git/HEAD"] [unique_id "avCuD82dc7fhv4ag3MQ45wAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-09-10 22:04:25
UTC ·
(2 months ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-09.
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2025-01-18 04:52:01
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:73:1000:ac02:a3ea:24fb:dec9 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 17 23:51:57.566883 2025] [security2:error] [pid 8622:tid 8622] [c ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:73:1000:ac02:a3ea:24fb:dec9 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 17 23:51:57.566883 2025] [security2:error] [pid 8622:tid 8622] [client 2400:cb00:73:1000:ac02:a3ea:24fb:dec9:51232] [client 2400:cb00:73:1000:ac02:a3ea:24fb:dec9] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pixacast.com"] [uri "/.env.production"] [unique_id "Z4szbfCOKFQB1Fg18flOngAAAF8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
