🇯🇵
S.O.B.A. Dev.
2026-10-20 15:22:23
UTC ·
(2 weeks ago)
Persistent port scanning or vulnerability scanning
Port Scan
🇯🇵
S.O.B.A. Dev.
2026-10-05 17:13:30
UTC ·
(1 month ago)
Persistent port scanning or vulnerability scanning
Port Scan
🇺🇸
TPI-Abuse
2026-08-31 07:35:30
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:986:1000:3450:584a:fec0:8774 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 03:35:26.105642 2026] [security2:error] [pid 12526:tid 12591] ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:986:1000:3450:584a:fec0:8774 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 03:35:26.105642 2026] [security2:error] [pid 12526:tid 12591] [client 2400:cb00:986:1000:3450:584a:fec0:8774:13405] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mirrorsimage.com"] [uri "/.git/config"] [unique_id "apUuvr6Mk2N0-XsnMfuNXwAAAJY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-29 22:59:54
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:986:1000:3450:584a:fec0:8774 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 18:59:47.991192 2026] [security2:error] [pid 1529268:tid 1529 ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:986:1000:3450:584a:fec0:8774 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 18:59:47.991192 2026] [security2:error] [pid 1529268:tid 1529352] [client 2400:cb00:986:1000:3450:584a:fec0:8774:12912] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seattlebasketballservices.meanmouse.com"] [uri "/.git/HEAD"] [unique_id "apNkYwFoqCGR-u1V3qSUnwAAANE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-29 22:11:38
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:986:1000:3450:584a:fec0:8774 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 18:11:30.585381 2026] [security2:error] [pid 8534:tid 8548] [ ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:986:1000:3450:584a:fec0:8774 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 18:11:30.585381 2026] [security2:error] [pid 8534:tid 8548] [client 2400:cb00:986:1000:3450:584a:fec0:8774:12777] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.bullfrogsmusic.com"] [uri "/.git/HEAD"] [unique_id "apNZEg6FIqHbJlroR3NnAQAAAIw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-29 12:36:22
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:986:1000:3450:584a:fec0:8774 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 08:36:15.127311 2026] [security2:error] [pid 29281:tid 29281] ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:986:1000:3450:584a:fec0:8774 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 08:36:15.127311 2026] [security2:error] [pid 29281:tid 29281] [client 2400:cb00:986:1000:3450:584a:fec0:8774:13946] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.therhclan.com"] [uri "/.git/config"] [unique_id "apLSP0vkg7-Agn4SVx-VpgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-29 03:23:39
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:986:1000:3450:584a:fec0:8774 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 23:23:32.887360 2026] [security2:error] [pid 1750:tid 1750] [ ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:986:1000:3450:584a:fec0:8774 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 23:23:32.887360 2026] [security2:error] [pid 1750:tid 1750] [client 2400:cb00:986:1000:3450:584a:fec0:8774:12872] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.legionellaexperts.org"] [uri "/.git/HEAD"] [unique_id "apJQtPZdNQ6PdG2y7E3TjgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-28 18:07:14
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:986:1000:3450:584a:fec0:8774 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 14:07:06.393486 2026] [security2:error] [pid 9532:tid 9532] [ ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:986:1000:3450:584a:fec0:8774 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 14:07:06.393486 2026] [security2:error] [pid 9532:tid 9532] [client 2400:cb00:986:1000:3450:584a:fec0:8774:12824] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.jasonmcquain.com"] [uri "/.git/config"] [unique_id "apHOSo2bSY95eLiY6DKHNAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-28 04:13:15
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:986:1000:3450:584a:fec0:8774 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 00:13:07.096093 2026] [security2:error] [pid 9551:tid 9551] [ ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:986:1000:3450:584a:fec0:8774 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 00:13:07.096093 2026] [security2:error] [pid 9551:tid 9551] [client 2400:cb00:986:1000:3450:584a:fec0:8774:11955] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.kristywernerauthor.com"] [uri "/.git/config"] [unique_id "apEK03sVwAX32Gqa7IgFcAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-08-27 00:29:23
UTC ·
(2 months ago)
[ThuAug2702:29:18.6178522026][security2:error][pid425922:tid426003][client2400:cb00:986:1000:3450:584a:fec0:8774:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWA ...
show more
[ThuAug2702:29:18.6178522026][security2:error][pid425922:tid426003][client2400:cb00:986:1000:3450:584a:fec0:8774:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"kiteinvest.ch\"][uri\"/.git/config\"][unique_id\"ao-E3nJ-1pfKJc7749N_ZwAAAJQ\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-08-26 02:37:19
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:986:1000:3450:584a:fec0:8774 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 22:37:15.288587 2026] [security2:error] [pid 8396:tid 8396] [ ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:986:1000:3450:584a:fec0:8774 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 22:37:15.288587 2026] [security2:error] [pid 8396:tid 8396] [client 2400:cb00:986:1000:3450:584a:fec0:8774:9879] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.dwars.net"] [uri "/.git/HEAD"] [unique_id "ao5RWzdSRPcJC13ljFsq2QAAACY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-26 00:21:22
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:986:1000:3450:584a:fec0:8774 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 20:21:17.079735 2026] [security2:error] [pid 25831:tid 25831] ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:986:1000:3450:584a:fec0:8774 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 20:21:17.079735 2026] [security2:error] [pid 25831:tid 25831] [client 2400:cb00:986:1000:3450:584a:fec0:8774:9871] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rodamundo.blog"] [uri "/.git/config"] [unique_id "ao4xfWK2pJZ3PNJHwmF8WwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-25 23:13:14
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:986:1000:3450:584a:fec0:8774 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 19:13:10.808691 2026] [security2:error] [pid 3700:tid 3700] [ ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:986:1000:3450:584a:fec0:8774 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 19:13:10.808691 2026] [security2:error] [pid 3700:tid 3700] [client 2400:cb00:986:1000:3450:584a:fec0:8774:14328] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sharonmauldin.stardancertantra.com"] [uri "/.git/HEAD"] [unique_id "ao4hhstIOm6jRtvfHm02EQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-25 22:26:57
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:986:1000:3450:584a:fec0:8774 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 18:26:48.602133 2026] [security2:error] [pid 1974:tid 1974] [ ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:986:1000:3450:584a:fec0:8774 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 18:26:48.602133 2026] [security2:error] [pid 1974:tid 1974] [client 2400:cb00:986:1000:3450:584a:fec0:8774:14194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.newlife12steprecovery.org"] [uri "/.git/config"] [unique_id "ao4WqLmsMwXXTE4SoDtJqwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-25 03:20:56
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:986:1000:3450:584a:fec0:8774 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 23:20:50.583690 2026] [security2:error] [pid 19178:tid 19178] ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:986:1000:3450:584a:fec0:8774 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 23:20:50.583690 2026] [security2:error] [pid 19178:tid 19178] [client 2400:cb00:986:1000:3450:584a:fec0:8774:14223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.waxjet510.com"] [uri "/.git/config"] [unique_id "ao0KEtzqOl2mzFH38GBixgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
