🇳🇱
WeCloudit-Anti-Abuse
2026-07-15 21:06:18
(1 month ago)
HTTP flood against /retreat-corp on Apache webserver
Brute-Force
🇺🇸
TPI-Abuse
2026-07-05 19:40:38
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 188.253.127.225 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 188.253.127.225 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 15:40:33.801366 2026] [security2:error] [pid 13018:tid 13018] [client 188.253.127.225:52130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "greenroomonline.org"] [uri "/.env.example"] [unique_id "akqzMaov4cVbuXEyquhV-QAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-05 17:59:22
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 188.253.127.225 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 188.253.127.225 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 13:59:15.550308 2026] [security2:error] [pid 32399:tid 32399] [client 188.253.127.225:36110] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "giveorcas.org"] [uri "/.env.production"] [unique_id "akqbc1CAQJJuuZezWPku1gAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-04 23:30:55
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 188.253.127.225 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 188.253.127.225 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 19:30:49.902608 2026] [security2:error] [pid 12064:tid 12064] [client 188.253.127.225:46342] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "forerunnersjazz.org"] [uri "/.env.development"] [unique_id "akmXqc6N1wFDJy7n6TiVdAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-03 11:49:59
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 188.253.127.225 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 188.253.127.225 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 07:49:55.054034 2026] [security2:error] [pid 26882:tid 26882] [client 188.253.127.225:49354] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "davidtempleofdeliverance.org"] [uri "/wp-config.php.old"] [unique_id "akeh443-NJUcbGWDuq2SgAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-02 09:14:12
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 188.253.127.225 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 188.253.127.225 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 05:14:04.786718 2026] [security2:error] [pid 30379:tid 30379] [client 188.253.127.225:28582] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cipcug.org"] [uri "/.env"] [unique_id "akYr3GsguoqS533-XsyVuQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-02 02:46:25
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 188.253.127.225 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 188.253.127.225 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 22:46:19.610548 2026] [security2:error] [pid 6565:tid 6580] [client 188.253.127.225:28620] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "certifiedfinancialanalyst.org"] [uri "/.env"] [unique_id "akXQ-2DIDj1RqMByhRtv1AAAAQw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-01 22:02:36
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 188.253.127.225 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 188.253.127.225 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 18:02:28.496953 2026] [security2:error] [pid 9471:tid 9471] [client 188.253.127.225:9136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "carpentersbattery.org"] [uri "/.env.development"] [unique_id "akWOdC0MMP4BKFZflmhuAgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
