🇺🇸
TPI-Abuse
2026-11-12 16:03:49
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:923:1000:c3bb:792b:88be:e077 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 11:03:41.974864 2026] [security2:error] [pid 1313:tid 1313] [ ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:923:1000:c3bb:792b:88be:e077 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 11:03:41.974864 2026] [security2:error] [pid 1313:tid 1313] [client 2400:cb00:923:1000:c3bb:792b:88be:e077:12106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.rykizuckerman.com"] [uri "/.git/config"] [unique_id "avXjXVJKjBnYp7lJUOWLkAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 06:39:16
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:923:1000:c3bb:792b:88be:e077 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 01:39:10.099232 2026] [security2:error] [pid 25683:tid 25683] ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:923:1000:c3bb:792b:88be:e077 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 01:39:10.099232 2026] [security2:error] [pid 25683:tid 25683] [client 2400:cb00:923:1000:c3bb:792b:88be:e077:10554] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.sunshinenv.com"] [uri "/.git/config"] [unique_id "avVfDoA_MA-NeZIlfA5A-AAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 01:43:21
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:923:1000:c3bb:792b:88be:e077 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 20:43:15.985709 2026] [security2:error] [pid 11884:tid 11884] ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:923:1000:c3bb:792b:88be:e077 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 20:43:15.985709 2026] [security2:error] [pid 11884:tid 11884] [client 2400:cb00:923:1000:c3bb:792b:88be:e077:10520] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "summit1000.group"] [uri "/.git/HEAD"] [unique_id "avUZs2L1booibueUIIPdeAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 22:23:16
UTC ·
(1 day ago)
(mod_security) mod_security (id:949110) triggered by 2400:cb00:923:1000:c3bb:792b:88be:e077 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 17:23:10.112654 2026] [security2:error] [pid 2423:tid 2423] [ ...
show more
(mod_security) mod_security (id:949110) triggered by 2400:cb00:923:1000:c3bb:792b:88be:e077 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 17:23:10.112654 2026] [security2:error] [pid 2423:tid 2423] [client 2400:cb00:923:1000:c3bb:792b:88be:e077:10686] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "21oaksfarm.com"] [uri "/.git/config"] [unique_id "avTqzrhgSa4iKpsW1pAmNwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 21:39:02
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:923:1000:c3bb:792b:88be:e077 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 16:38:56.921221 2026] [security2:error] [pid 13068:tid 13068] ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:923:1000:c3bb:792b:88be:e077 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 16:38:56.921221 2026] [security2:error] [pid 13068:tid 13068] [client 2400:cb00:923:1000:c3bb:792b:88be:e077:11145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.perthdps.com"] [uri "/.git/config"] [unique_id "avTgcDVpT3JdlYMv_yBxLAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 21:23:24
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:923:1000:c3bb:792b:88be:e077 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 16:23:16.884773 2026] [security2:error] [pid 27307:tid 27307] ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:923:1000:c3bb:792b:88be:e077 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 16:23:16.884773 2026] [security2:error] [pid 27307:tid 27307] [client 2400:cb00:923:1000:c3bb:792b:88be:e077:10122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.rallentarecg.com"] [uri "/.git/config"] [unique_id "avTcxPhWMPV7pJibJN2ToAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 03:33:54
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:923:1000:c3bb:792b:88be:e077 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 22:33:49.976866 2026] [security2:error] [pid 8783:tid 8783] [ ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:923:1000:c3bb:792b:88be:e077 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 22:33:49.976866 2026] [security2:error] [pid 8783:tid 8783] [client 2400:cb00:923:1000:c3bb:792b:88be:e077:9827] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "chateau-saleza-bruges.com"] [uri "/.git/config"] [unique_id "avKQnT9e4SGFKrj5KvT2awAAAEM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 02:50:37
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:923:1000:c3bb:792b:88be:e077 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 21:50:31.253841 2026] [security2:error] [pid 32271:tid 32271] ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:923:1000:c3bb:792b:88be:e077 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 21:50:31.253841 2026] [security2:error] [pid 32271:tid 32271] [client 2400:cb00:923:1000:c3bb:792b:88be:e077:13696] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "veneye.com"] [uri "/.git/config"] [unique_id "avKGdxcMBWHemWubZFi_gAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 02:19:18
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:923:1000:c3bb:792b:88be:e077 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 21:19:15.734980 2026] [security2:error] [pid 21674:tid 21674] ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:923:1000:c3bb:792b:88be:e077 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 21:19:15.734980 2026] [security2:error] [pid 21674:tid 21674] [client 2400:cb00:923:1000:c3bb:792b:88be:e077:11937] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bigartifacts.com"] [uri "/.git/config"] [unique_id "avJ_I8RfBitNgQ4bAIe3_QAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 01:47:38
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:923:1000:c3bb:792b:88be:e077 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 20:47:27.262434 2026] [security2:error] [pid 8401:tid 8401] [ ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:923:1000:c3bb:792b:88be:e077 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 20:47:27.262434 2026] [security2:error] [pid 8401:tid 8401] [client 2400:cb00:923:1000:c3bb:792b:88be:e077:11955] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "geriterry.com"] [uri "/.git/HEAD"] [unique_id "avJ3r7SV-C1SkSpb-nnuywAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-11-10 00:57:38
UTC ·
(3 days ago)
[cb-01vi] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 2400:cb00:923:1000:c3bb:792b:88be:e077 - - [10/Nov/2026:01:57:22 +0100] "GET /.git/HEAD HTTP/2.0" 301 347 "-" "Mozilla/5.0 (Windows NT 10.0; Win6 ...
show more
[cb-01vi] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 2400:cb00:923:1000:c3bb:792b:88be:e077 - - [10/Nov/2026:01:57:22 +0100] "GET /.git/HEAD HTTP/2.0" 301 347 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-11-09 23:00:39
UTC ·
(3 days ago)
Auto-ban: >3000 req/min op 2026-11-09
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-11-09 13:41:27
UTC ·
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:923:1000:c3bb:792b:88be:e077 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 08:41:21.294214 2026] [security2:error] [pid 25842:tid 25842] ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:923:1000:c3bb:792b:88be:e077 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 08:41:21.294214 2026] [security2:error] [pid 25842:tid 25842] [client 2400:cb00:923:1000:c3bb:792b:88be:e077:10775] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.halblog.com"] [uri "/.git/config"] [unique_id "avHNgRMK8-xYnOr6pD5W3gAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 12:13:32
UTC ·
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:923:1000:c3bb:792b:88be:e077 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 07:13:26.676317 2026] [security2:error] [pid 12009:tid 12009] ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:923:1000:c3bb:792b:88be:e077 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 07:13:26.676317 2026] [security2:error] [pid 12009:tid 12009] [client 2400:cb00:923:1000:c3bb:792b:88be:e077:13866] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.countertop.mooseled.com"] [uri "/.git/config"] [unique_id "avG45hNnEYQwXb28svtsBwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 10:23:00
UTC ·
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:923:1000:c3bb:792b:88be:e077 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 05:22:57.297344 2026] [security2:error] [pid 30673:tid 30673] ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:923:1000:c3bb:792b:88be:e077 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 05:22:57.297344 2026] [security2:error] [pid 30673:tid 30673] [client 2400:cb00:923:1000:c3bb:792b:88be:e077:14046] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.rooksfamily.com"] [uri "/.git/HEAD"] [unique_id "avGfASMRBcbgKyDYl4MPFgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
