🇺🇸
TPI-Abuse
2026-11-12 15:30:38
UTC ·
(17 minutes ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:906:1000:43f5:753:bdc4:ca28 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 10:30:34.298829 2026] [security2:error] [pid 5919:tid 5919] [c ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:906:1000:43f5:753:bdc4:ca28 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 10:30:34.298829 2026] [security2:error] [pid 5919:tid 5919] [client 2400:cb00:906:1000:43f5:753:bdc4:ca28:9422] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.blueskyfederal.com"] [uri "/.git/config"] [unique_id "avXbmn4OkWtykPUT58-eYAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 05:22:18
UTC ·
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:906:1000:43f5:753:bdc4:ca28 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 00:22:12.287190 2026] [security2:error] [pid 13837:tid 13837] ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:906:1000:43f5:753:bdc4:ca28 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 00:22:12.287190 2026] [security2:error] [pid 13837:tid 13837] [client 2400:cb00:906:1000:43f5:753:bdc4:ca28:13104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cayman-islands-real-estate.com"] [uri "/.git/HEAD"] [unique_id "avVNBNpjwQm_Wdfg7lBQ5QAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 20:58:57
UTC ·
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:906:1000:43f5:753:bdc4:ca28 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 15:58:49.913747 2026] [security2:error] [pid 13638:tid 13638] ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:906:1000:43f5:753:bdc4:ca28 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 15:58:49.913747 2026] [security2:error] [pid 13638:tid 13638] [client 2400:cb00:906:1000:43f5:753:bdc4:ca28:9459] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.grabnerconsulting.com"] [uri "/.git/HEAD"] [unique_id "avTXCVUAouvPoYvpcMjv5gAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 20:07:01
UTC ·
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:906:1000:43f5:753:bdc4:ca28 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 15:06:56.950355 2026] [security2:error] [pid 8065:tid 8065] [c ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:906:1000:43f5:753:bdc4:ca28 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 15:06:56.950355 2026] [security2:error] [pid 8065:tid 8065] [client 2400:cb00:906:1000:43f5:753:bdc4:ca28:13763] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "artbycorinnedodge.com"] [uri "/.git/HEAD"] [unique_id "avTK4LO6Cgz7W0iKpiD2sgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-11-11 06:28:48
UTC ·
(1 day ago)
2400:cb00:906:1000:43f5:753:bdc4:ca28 - - [11/Nov/2026:03:28:47 -0300] "GET /.git/HEAD HTTP/2.0" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
...
Port Scan
Hacking
SQL Injection
Brute-Force
Bad Web Bot
Exploited Host
🇺🇸
TPI-Abuse
2026-11-10 12:14:58
UTC ·
(2 days ago)
(mod_security) mod_security (id:949110) triggered by 2400:cb00:906:1000:43f5:753:bdc4:ca28 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 07:14:52.094897 2026] [security2:error] [pid 31983:tid 31983] ...
show more
(mod_security) mod_security (id:949110) triggered by 2400:cb00:906:1000:43f5:753:bdc4:ca28 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 07:14:52.094897 2026] [security2:error] [pid 31983:tid 31983] [client 2400:cb00:906:1000:43f5:753:bdc4:ca28:9506] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "eliterailjourneys.hamiltonbookings.com"] [uri "/.git/config"] [unique_id "avMKvE7uuf4XsACrdDbxdAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 08:56:10
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:906:1000:43f5:753:bdc4:ca28 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 03:56:05.566565 2026] [security2:error] [pid 9904:tid 9904] [c ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:906:1000:43f5:753:bdc4:ca28 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 03:56:05.566565 2026] [security2:error] [pid 9904:tid 9904] [client 2400:cb00:906:1000:43f5:753:bdc4:ca28:12447] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "everpickon.chevronparkett.com"] [uri "/.git/config"] [unique_id "avLcJX3q_FUVBL7mlH0SrAAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 03:19:03
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:906:1000:43f5:753:bdc4:ca28 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 22:19:00.039492 2026] [security2:error] [pid 9451:tid 9451] [c ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:906:1000:43f5:753:bdc4:ca28 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 22:19:00.039492 2026] [security2:error] [pid 9451:tid 9451] [client 2400:cb00:906:1000:43f5:753:bdc4:ca28:12070] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fancycleaners.com"] [uri "/.git/config"] [unique_id "avKNJAIe1_EgiV0bIVXoYgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 02:30:37
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:906:1000:43f5:753:bdc4:ca28 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 21:30:31.360486 2026] [security2:error] [pid 27349:tid 27349] ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:906:1000:43f5:753:bdc4:ca28 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 21:30:31.360486 2026] [security2:error] [pid 27349:tid 27349] [client 2400:cb00:906:1000:43f5:753:bdc4:ca28:13250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paintedoverwhite.com"] [uri "/.git/config"] [unique_id "avKBxzQrB6wzEfA2N1knEgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 02:05:22
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:906:1000:43f5:753:bdc4:ca28 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 21:05:15.202950 2026] [security2:error] [pid 4945:tid 4945] [c ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:906:1000:43f5:753:bdc4:ca28 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 21:05:15.202950 2026] [security2:error] [pid 4945:tid 4945] [client 2400:cb00:906:1000:43f5:753:bdc4:ca28:12803] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.wolfmachine.com"] [uri "/.git/config"] [unique_id "avJ729zYp9G2kiYkjNMmbAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 00:13:08
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:906:1000:43f5:753:bdc4:ca28 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 19:13:02.314513 2026] [security2:error] [pid 16835:tid 16835] ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:906:1000:43f5:753:bdc4:ca28 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 19:13:02.314513 2026] [security2:error] [pid 16835:tid 16835] [client 2400:cb00:906:1000:43f5:753:bdc4:ca28:10145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.diydivaslv.andiamocomputers.com"] [uri "/.git/HEAD"] [unique_id "avJhjqNMp-WlEUIDNuRwWgAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 15:28:25
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:906:1000:43f5:753:bdc4:ca28 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 10:28:18.614703 2026] [security2:error] [pid 18788:tid 18788] ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:906:1000:43f5:753:bdc4:ca28 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 10:28:18.614703 2026] [security2:error] [pid 18788:tid 18788] [client 2400:cb00:906:1000:43f5:753:bdc4:ca28:13077] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "training.oxfordgliding.com"] [uri "/.git/HEAD"] [unique_id "avHmklLz_Ap_FX43QNtg8gAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-11-09 14:55:52
UTC ·
(3 days ago)
[cb-01vi] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 2400:cb00:906:1000:43f5:753:bdc4:ca28 - - [09/Nov/2026:15:55:39 +0100] "GET /.git/HEAD HTTP/2.0" 404 402 "-" "Mozilla/5.0 (Windows NT 10.0; Win64 ...
show more
[cb-01vi] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 2400:cb00:906:1000:43f5:753:bdc4:ca28 - - [09/Nov/2026:15:55:39 +0100] "GET /.git/HEAD HTTP/2.0" 404 402 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 12:05:25
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:906:1000:43f5:753:bdc4:ca28 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 07:05:19.155161 2026] [security2:error] [pid 16004:tid 16004] ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:906:1000:43f5:753:bdc4:ca28 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 07:05:19.155161 2026] [security2:error] [pid 16004:tid 16004] [client 2400:cb00:906:1000:43f5:753:bdc4:ca28:14003] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbfitwell.securitymontana.com"] [uri "/.git/HEAD"] [unique_id "avG2__HB7Wcy_KRMM_6EgQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 09:43:17
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:906:1000:43f5:753:bdc4:ca28 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 04:43:14.363756 2026] [security2:error] [pid 4785:tid 4785] [c ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:906:1000:43f5:753:bdc4:ca28 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 04:43:14.363756 2026] [security2:error] [pid 4785:tid 4785] [client 2400:cb00:906:1000:43f5:753:bdc4:ca28:12316] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bairentang.org.dragoldio.com"] [uri "/.git/HEAD"] [unique_id "avGVsjA75RBii9wGLrLAKgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack