🇺🇸
TPI-Abuse
2026-10-16 00:11:55
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 104.22.23.65 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 104.22.23.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 20:11:48.933312 2026] [security2:error] [pid 13623:tid 13623] [client 104.22.23.65:11746] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fxztrader.com"] [uri "/.git/HEAD"] [unique_id "atFrxKfqtTJV9858gGvK8AAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 23:08:31
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 104.22.23.65 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 104.22.23.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 19:08:24.571326 2026] [security2:error] [pid 5055:tid 5118] [client 104.22.23.65:10740] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ewoolsey.com"] [uri "/.env.dev"] [unique_id "atFc6B8m6Mjw78uJj-msTQAAAgY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 22:51:09
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 104.22.23.65 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 104.22.23.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 18:51:04.498365 2026] [security2:error] [pid 26870:tid 26870] [client 104.22.23.65:11383] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.loriarsenault.com"] [uri "/.env.local"] [unique_id "atFY2BBqY6qCJOIcN-95IQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 18:39:12
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 104.22.23.65 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 104.22.23.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 14:38:59.006055 2026] [security2:error] [pid 26163:tid 26163] [client 104.22.23.65:11986] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pakistanvision.com"] [uri "/.env.production"] [unique_id "atEdw3-8R8IVVNny5AxePQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-15 16:35:02
(8 hours ago)
Sensitive Configuration File Disclosure.
Hacking
🇺🇸
TPI-Abuse
2026-10-15 16:19:26
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 104.22.23.65 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 104.22.23.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 12:19:22.620485 2026] [security2:error] [pid 18928:tid 18928] [client 104.22.23.65:12837] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "boatmoldremover.com"] [uri "/wp-config.php.old"] [unique_id "atD9CuiimR36vEPKazeG7gAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 13:20:09
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 104.22.23.65 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 104.22.23.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 09:20:06.105268 2026] [security2:error] [pid 14353:tid 14353] [client 104.22.23.65:11528] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jeremymetzger.com"] [uri "/.env.local"] [unique_id "atDTBj-IA6eQQyB2KnOH8wAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 10:50:28
(14 hours ago)
(mod_security) mod_security (id:210492) triggered by 104.22.23.65 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 104.22.23.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 06:50:06.948586 2026] [security2:error] [pid 31554:tid 31554] [client 104.22.23.65:11382] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webersource.com"] [uri "/.env.save"] [unique_id "atCv3o8V9zBH_zs7GvSXYwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-15 09:30:01
(15 hours ago)
suspicious request in access.log
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 08:15:36
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 104.22.23.65 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 104.22.23.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 04:15:30.183351 2026] [security2:error] [pid 15564:tid 15564] [client 104.22.23.65:13091] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hometechllc.com"] [uri "/.htaccess"] [unique_id "atCLojcYaoprLawkWYH_JQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 07:59:23
(17 hours ago)
(mod_security) mod_security (id:210492) triggered by 104.22.23.65 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 104.22.23.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 03:59:00.028528 2026] [security2:error] [pid 27535:tid 27535] [client 104.22.23.65:11146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "canebrakes.com"] [uri "/.env.dev"] [unique_id "atCHxKPj3Tc5-v7nSlku6QAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-10-15 07:56:15
(17 hours ago)
[ThuOct1509:56:11.4159332026][security2:error][pid3683160:tid3683196][client104.22.23.65:0]ModSecuri ...
show more
[ThuOct1509:56:11.4159332026][security2:error][pid3683160:tid3683196][client104.22.23.65:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Stringmatchwithin\".asa/.asax/.ascx/.backup/.bak/.bat/.cdx/.cer/.cfg/.cmd/.com/.config/.conf/.cs/.csproj/.csr/.dat/.db/.dbf/.dll/.dos/.htr/.htw/.ida/.idc/.idq/.inc/.ini/.key/.licx/.lnk/.log/.mdb/.old/.pass/.pdb/.pol/.printer/.pwd/.rdb/.resources/.resx/.sql/.swp/.sys/.vb/.vbs/.vbproj/.vsdisco/.webinfo/.xsx/\"atTX:extension.[file\"/etc/apache2/conf.d/modsec_rules/00_asl_zz_strict.conf\"][line\"91\"][id\"390716\"][rev\"2\"][msg\"Atomicorp.comWAFRules:URLfileextensionisrestrictedbypolicy\"][data\".backup\"][severity\"ERROR\"][hostname\"domoticaswiss.ch\"][uri\"/.terraform/terraform.tfstate.backup\"][unique_id\"atCHGwZuFbdrHmkWDfhObQAAAII\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 07:21:06
(17 hours ago)
(mod_security) mod_security (id:210492) triggered by 104.22.23.65 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 104.22.23.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 03:20:52.892901 2026] [security2:error] [pid 19969:tid 20005] [client 104.22.23.65:9553] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "petrovicimagery.com"] [uri "/.env.local"] [unique_id "atB-1OFCPYb8bMVXL5_fRwAAAQc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-10-15 06:50:27
(18 hours ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 03:42:53
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 104.22.23.65 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 104.22.23.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 23:42:45.514075 2026] [security2:error] [pid 895:tid 895] [client 104.22.23.65:9523] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.general.graphics"] [uri "/.env.save"] [unique_id "atBLtXkMKgJhUS35DZ3TsgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
