🇺🇸
TPI-Abuse
2026-07-27 12:33:58
(2 minutes ago)
(mod_security) mod_security (id:210492) triggered by 196.119.25.130 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 196.119.25.130 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 08:33:51.992515 2026] [security2:error] [pid 3833669:tid 3833669] [client 196.119.25.130:63555] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "artspacecleveland.org"] [uri "/.env"] [unique_id "amdQL6OmQeGEToOZAHVcbwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-27 12:12:04
(23 minutes ago)
(mod_security) mod_security (id:210492) triggered by 196.119.25.130 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 196.119.25.130 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 08:11:59.258265 2026] [security2:error] [pid 131076:tid 131076] [client 196.119.25.130:55190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "corinthianscruise.org"] [uri "/.env"] [unique_id "amdLD3M_pZN8W2DTIxha6AAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
wlt-blocker
2026-07-27 09:37:23
(2 hours ago)
Unauthorized access to webpage admin
Web App Attack
🇺🇸
TPI-Abuse
2026-07-27 09:35:49
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 196.119.25.130 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 196.119.25.130 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 05:35:46.089651 2026] [security2:error] [pid 4041767:tid 4041767] [client 196.119.25.130:53147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "masterfulenlighteningfreestudies.org"] [uri "/.env"] [unique_id "amcmcqjGU3g5VMKd5sxxwQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-27 09:05:11
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 196.119.25.130 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 196.119.25.130 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 05:05:07.742894 2026] [security2:error] [pid 32580:tid 32580] [client 196.119.25.130:63898] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "justjunglejuice.org"] [uri "/.env"] [unique_id "amcfQwS62UMlJ1zfs5ZytgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-27 08:35:36
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 196.119.25.130 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 196.119.25.130 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 04:35:29.796412 2026] [security2:error] [pid 191319:tid 191319] [client 196.119.25.130:52240] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "deborbonfoundation.org"] [uri "/.env"] [unique_id "amcYURP54jNO9kbwys6T3AAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-27 08:18:02
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 196.119.25.130 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 196.119.25.130 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 04:17:56.792730 2026] [security2:error] [pid 25960:tid 25960] [client 196.119.25.130:51322] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bcerg.org"] [uri "/.env"] [unique_id "amcUNE_0SyBvHkl-1tJuwgAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
DRI
2026-07-27 08:14:39
(4 hours ago)
Web attack/Malicious activity detected
Web App Attack
🇺🇸
TPI-Abuse
2026-07-27 07:24:34
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 196.119.25.130 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 196.119.25.130 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 03:24:26.973367 2026] [security2:error] [pid 2847950:tid 2847950] [client 196.119.25.130:52317] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mjaaforum.org"] [uri "/.env"] [unique_id "amcHqiD4owaL53k1wvHYRwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-27 07:09:29
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 196.119.25.130 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 196.119.25.130 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 03:09:22.261126 2026] [security2:error] [pid 13831:tid 13831] [client 196.119.25.130:56527] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fgrotary.org"] [uri "/.env"] [unique_id "amcEIjbg1Yp0ci27qVq2ZwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
pltcldvlpr
2026-07-27 07:00:58
(5 hours ago)
CMS/framework probe: 196.119.25.130 - - [27/Jul/2026:09:00:58 +0200] "GET /.env HTTP/1.1" 301 178 "- ...
show more
CMS/framework probe: 196.119.25.130 - - [27/Jul/2026:09:00:58 +0200] "GET /.env HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" asn=36925 org="MEDITELECOM" country=MA
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-07-27 06:06:46
(6 hours ago)
(mod_security) mod_security (id:949110) triggered by 196.119.25.130 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:949110) triggered by 196.119.25.130 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 02:06:38.571409 2026] [security2:error] [pid 59245:tid 59245] [client 196.119.25.130:53233] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "chuckwagon.org"] [uri "/.env"] [unique_id "amb1bt9n6otrjrpLXQEaCgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-27 05:30:54
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 196.119.25.130 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 196.119.25.130 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 01:30:50.334466 2026] [security2:error] [pid 3186844:tid 3186844] [client 196.119.25.130:51363] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "livinghopehighschool.org"] [uri "/.env"] [unique_id "ambtCskHjGpMh5pDZr-e2QAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-27 04:07:51
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 196.119.25.130 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 196.119.25.130 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 00:07:44.742900 2026] [security2:error] [pid 3109586:tid 3109586] [client 196.119.25.130:52951] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fetchamreadingroom.org"] [uri "/.env"] [unique_id "ambZkG2XCMrr7SAdLuOGRAAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-27 03:51:05
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 196.119.25.130 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 196.119.25.130 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 23:51:01.449404 2026] [security2:error] [pid 1833282:tid 1833302] [client 196.119.25.130:61399] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aafim.org"] [uri "/.env"] [unique_id "ambVpYBaXBLTWMd0QgJVEAAAAVI"]
show less
Brute-Force
Bad Web Bot
Web App Attack