🇺🇸
TPI-Abuse
2026-06-26 11:41:48
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 105.156.121.229 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 105.156.121.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 07:41:44.579775 2026] [security2:error] [pid 5678:tid 5678] [client 105.156.121.229:55168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cloggersunlimited.com"] [uri "/.env"] [unique_id "aj5leGllYcn6AHLZ7fjLSgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-26 11:17:48
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 105.156.121.229 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 105.156.121.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 07:17:41.724448 2026] [security2:error] [pid 8681:tid 8681] [client 105.156.121.229:58482] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "climasyequipos.com"] [uri "/.env"] [unique_id "aj5f1TFse8ZjxoFxxhJIfgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-26 10:34:48
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 105.156.121.229 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 105.156.121.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 06:34:44.473487 2026] [security2:error] [pid 21099:tid 21099] [client 105.156.121.229:55551] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "clayrivers.com"] [uri "/.env"] [unique_id "aj5VxN9QW0D0LrDejrdS0gAAADM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-26 10:28:47
(4 days ago)
Malicious activity detected
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-26 09:43:38
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 105.156.121.229 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 105.156.121.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 05:43:34.563641 2026] [security2:error] [pid 20306:tid 20306] [client 105.156.121.229:55825] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "civilwarzone.com"] [uri "/.env"] [unique_id "aj5JxhB0QlUQNKIWuukcMQAAACU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-26 08:59:54
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 105.156.121.229 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 105.156.121.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 04:59:51.439851 2026] [security2:error] [pid 11352:tid 11352] [client 105.156.121.229:52378] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cintiaparral.com"] [uri "/.env"] [unique_id "aj4_hzqZqwFwyUpaIn-D4QAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-26 07:47:00
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 105.156.121.229 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 105.156.121.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 03:46:54.979534 2026] [security2:error] [pid 2682:tid 2682] [client 105.156.121.229:59351] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "christinastoddard.com"] [uri "/.env"] [unique_id "aj4ubrrUdkq1XOlprVH3dwAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-26 07:29:31
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 105.156.121.229 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 105.156.121.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 03:29:28.801183 2026] [security2:error] [pid 29336:tid 29336] [client 105.156.121.229:55025] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "chrisbilder.com"] [uri "/.env"] [unique_id "aj4qWMM08e-e1bd3xz7PfwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-06-26 07:21:07
(4 days ago)
SQL Injection
🇺🇸
nyt
2026-06-26 06:04:14
(4 days ago)
404 flood (16/60s), 404 flood (17/60s)
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-26 05:47:16
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 105.156.121.229 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 105.156.121.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 01:47:08.501416 2026] [security2:error] [pid 4189:tid 4189] [client 105.156.121.229:61535] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "chicagowca.com"] [uri "/.env"] [unique_id "aj4SXE2imjEjWl1ifTLCFQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
4server
2026-06-26 05:36:45
(4 days ago)
[FriJun2607:36:38.1314112026][security2:error][pid3217634:tid3217830][client105.156.121.229:0]ModSec ...
show more
[FriJun2607:36:38.1314112026][security2:error][pid3217634:tid3217830][client105.156.121.229:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?i\)[\\\\\\\\s\\\\\"\'\`\;\\\\\\\\/0-9=\\\\\\\\x0B\\\\\\\\x09\\\\\\\\x0C\\\\\\\\x3B\\\\\\\\x2C\\\\\\\\x28\\\\\\\\x3B] on[a-zA-Z] [\\\\\\\\s\\\\\\\\x0B\\\\\\\\x09\\\\\\\\x0C\\\\\\\\x3B\\\\\\\\x2C\\\\\\\\x28\\\\\\\\x3B]\*\?=\"atARGS:oceanwp_library.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"916\"][id\"333141\"][rev\"22\"][msg\"Atomicorp.comWAFRules:PotentialXSSAttackdetected\"][data\"MatchedData:onError=foundwithinARGS:oceanwp_library:\</script\>\'\\\\x22\>\<imgsrc=xonError=prompt\(1\)\>\"][severity\"CRITICAL\"][hostname\"edomustech.ch\"][uri\"/\"][unique_id\"aj4P5v-GRwPKlyoqhmTAKQAAAIo\"]
show less
Hacking
Web App Attack
2026-06-26 05:05:06
(4 days ago)
Blocked: Reason='Suspicious traffic score=70 (review-based detection)'; Requests=8
Hacking
🇺🇸
TPI-Abuse
2026-06-26 05:03:03
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 105.156.121.229 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 105.156.121.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 01:02:55.525606 2026] [security2:error] [pid 4737:tid 4737] [client 105.156.121.229:62171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "chelseafootballprogrammes.com"] [uri "/.env"] [unique_id "aj4H_6m-8VYwFOu_7zc-ugAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
zynex
2026-06-26 04:29:15
(4 days ago)
URL Probing: /phpinfo.php
Web App Attack