🇬🇧
Aetherweb Ark
2026-07-27 16:03:20
UTC ·
(3 months ago)
(mod_security) mod_security (id:949110) triggered by 2a04:4e40:e000:0:cbb:12fc:d409:f575 (Unknown): N in the last X secs
Web App Attack
🇳🇱
e.fierstra
2026-07-26 14:11:28
UTC ·
(3 months ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-26 02:24:28
UTC ·
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:cbb:12fc:d409:f575 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 22:24:23.601484 2026] [security2:error] [pid 2285510:tid 2285510 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:cbb:12fc:d409:f575 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 22:24:23.601484 2026] [security2:error] [pid 2285510:tid 2285510] [client 2a04:4e40:e000:0:cbb:12fc:d409:f575:40716] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "redwingboot.com"] [uri "/.git/HEAD"] [unique_id "amVv17WvCjSkRsqmJ-yYYgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
4server
2026-07-21 04:54:04
UTC ·
(3 months ago)
[TueJul2106:53:58.8967562026][security2:error][pid523896:tid524134][client2a04:4e40:e000:0:cbb:12fc:d409:f575:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][li ...
show more
[TueJul2106:53:58.8967562026][security2:error][pid523896:tid524134][client2a04:4e40:e000:0:cbb:12fc:d409:f575:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"365\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"server-privato.com\"][uri\"/.git/HEAD\"][unique_id\"al77Zhgs3Vr8CNcFeVQbYAAAAVQ\"]
show less
Hacking
Web App Attack
🇩🇪
4server
2026-07-21 03:26:30
UTC ·
(3 months ago)
[TueJul2105:26:25.0703632026][security2:error][pid2304333:tid2304344][client2a04:4e40:e000:0:cbb:12fc:d409:f575:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWAS ...
show more
[TueJul2105:26:25.0703632026][security2:error][pid2304333:tid2304344][client2a04:4e40:e000:0:cbb:12fc:d409:f575:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"nuovacooperazione.maxay.ch\"][uri\"/.git/HEAD\"][unique_id\"al7m4WeeoGb9H9caRZCZTgAAAEg\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-07-19 20:36:07
UTC ·
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:cbb:12fc:d409:f575 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 16:36:02.234306 2026] [security2:error] [pid 1996145:tid 1996145 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:cbb:12fc:d409:f575 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 16:36:02.234306 2026] [security2:error] [pid 1996145:tid 1996145] [client 2a04:4e40:e000:0:cbb:12fc:d409:f575:21464] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.shannonraevocalstudio.com"] [uri "/.git/config"] [unique_id "al01MhYGbsxsPon4AdOgsgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-19 13:19:28
UTC ·
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:cbb:12fc:d409:f575 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 09:19:22.070634 2026] [security2:error] [pid 24698:tid 24705] [c ...
show more
(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:cbb:12fc:d409:f575 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 09:19:22.070634 2026] [security2:error] [pid 24698:tid 24705] [client 2a04:4e40:e000:0:cbb:12fc:d409:f575:34790] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kellenlee.com"] [uri "/.git/config"] [unique_id "alzO2pXhqO0bjpNvhtqpqAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-19 10:03:38
UTC ·
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:cbb:12fc:d409:f575 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 06:03:31.359213 2026] [security2:error] [pid 26888:tid 26888] [c ...
show more
(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:cbb:12fc:d409:f575 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 06:03:31.359213 2026] [security2:error] [pid 26888:tid 26888] [client 2a04:4e40:e000:0:cbb:12fc:d409:f575:58164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.elpais.mx"] [uri "/.git/config"] [unique_id "alyg83PxZwHzwdsz2BQAHAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-19 05:11:26
UTC ·
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:cbb:12fc:d409:f575 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 01:11:19.716799 2026] [security2:error] [pid 10340:tid 10340] [c ...
show more
(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:cbb:12fc:d409:f575 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 01:11:19.716799 2026] [security2:error] [pid 10340:tid 10340] [client 2a04:4e40:e000:0:cbb:12fc:d409:f575:10388] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.theyoungstrategist.com"] [uri "/.git/config"] [unique_id "alxcd-E3wOI9S7WxsnGAuAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-18 13:12:06
UTC ·
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:cbb:12fc:d409:f575 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 09:12:01.745662 2026] [security2:error] [pid 26066:tid 26066] [c ...
show more
(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:cbb:12fc:d409:f575 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 09:12:01.745662 2026] [security2:error] [pid 26066:tid 26066] [client 2a04:4e40:e000:0:cbb:12fc:d409:f575:62434] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.krassa.net"] [uri "/.git/config"] [unique_id "alt7oTD2JBRoOvstguCRIAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-17 10:43:48
UTC ·
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:cbb:12fc:d409:f575 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 06:43:42.088813 2026] [security2:error] [pid 649606:tid 649606] ...
show more
(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:cbb:12fc:d409:f575 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 06:43:42.088813 2026] [security2:error] [pid 649606:tid 649606] [client 2a04:4e40:e000:0:cbb:12fc:d409:f575:33032] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.itecsis.com"] [uri "/.git/config"] [unique_id "aloHXm7oCPCF-zSloFsO0QAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-16 05:10:32
UTC ·
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:cbb:12fc:d409:f575 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 01:10:29.003384 2026] [security2:error] [pid 24042:tid 24042] [c ...
show more
(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:cbb:12fc:d409:f575 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 01:10:29.003384 2026] [security2:error] [pid 24042:tid 24042] [client 2a04:4e40:e000:0:cbb:12fc:d409:f575:15698] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.pondplain.org"] [uri "/.git/config"] [unique_id "alhnxQXquVC1gaRGZJRm4QAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-16 04:15:22
UTC ·
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:cbb:12fc:d409:f575 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 00:15:17.180674 2026] [security2:error] [pid 19979:tid 19979] [c ...
show more
(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:cbb:12fc:d409:f575 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 00:15:17.180674 2026] [security2:error] [pid 19979:tid 19979] [client 2a04:4e40:e000:0:cbb:12fc:d409:f575:9472] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.coolingsprings.org"] [uri "/.git/config"] [unique_id "alha1XDiKNptF3ez1kEx3gAAAC4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-16 03:10:52
UTC ·
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:cbb:12fc:d409:f575 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 23:10:47.816120 2026] [security2:error] [pid 13861:tid 13871] [c ...
show more
(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:cbb:12fc:d409:f575 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 23:10:47.816120 2026] [security2:error] [pid 13861:tid 13871] [client 2a04:4e40:e000:0:cbb:12fc:d409:f575:45434] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "buyused-jomega.jomega.org"] [uri "/.git/config"] [unique_id "alhLtwtiNs6tLDuvcFbf3wAAAQY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-16 02:19:28
UTC ·
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:cbb:12fc:d409:f575 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 22:19:20.997283 2026] [security2:error] [pid 1661:tid 1661] [cli ...
show more
(mod_security) mod_security (id:210492) triggered by 2a04:4e40:e000:0:cbb:12fc:d409:f575 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 22:19:20.997283 2026] [security2:error] [pid 1661:tid 1661] [client 2a04:4e40:e000:0:cbb:12fc:d409:f575:46718] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.goldcountrygermanamericanclub.org"] [uri "/.git/config"] [unique_id "alg_qNzJdrhQzqbxYdQBhgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack