🇺🇸
TPI-Abuse
2026-10-19 22:58:48
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:81:235 (infong201.client ...
show more
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:81:235 (infong201.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 18:58:41.129833 2026] [security2:error] [pid 7083:tid 7083] [client 2001:8d8:5ff:5f:82:165:81:235:33068] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "deweysearch.com"] [uri "/.env"] [unique_id "atagoZmuU6rLpxpU8_V_GgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-19 17:36:30
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:81:235 (infong201.client ...
show more
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:81:235 (infong201.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 13:36:24.392553 2026] [security2:error] [pid 18074:tid 18074] [client 2001:8d8:5ff:5f:82:165:81:235:37518] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "abu-dhabi-boat-registration.com"] [uri "/.env"] [unique_id "atZVGPYVRqxVwrmloYDDgAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-19 17:16:08
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:81:235 (infong201.client ...
show more
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:81:235 (infong201.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 13:16:03.127599 2026] [security2:error] [pid 17930:tid 17930] [client 2001:8d8:5ff:5f:82:165:81:235:41712] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "butterflygolem.com"] [uri "/.env"] [unique_id "atZQU8oqqgJ9seWv--e_2wAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-19 16:49:12
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:81:235 (infong201.client ...
show more
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:81:235 (infong201.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 12:49:07.146549 2026] [security2:error] [pid 22443:tid 22443] [client 2001:8d8:5ff:5f:82:165:81:235:36640] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sundollsforever.org"] [uri "/.env"] [unique_id "atZKA17foxwy3aSukNlVKQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-19 12:22:38
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:81:235 (infong201.client ...
show more
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:81:235 (infong201.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 08:22:31.041226 2026] [security2:error] [pid 14905:tid 14905] [client 2001:8d8:5ff:5f:82:165:81:235:51538] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "frelsburg.com"] [uri "/.env"] [unique_id "atYLh2bW-V9FQ96FX-NZnwAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-19 09:22:37
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:81:235 (infong201.client ...
show more
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:81:235 (infong201.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 05:22:31.177764 2026] [security2:error] [pid 4422:tid 4422] [client 2001:8d8:5ff:5f:82:165:81:235:59850] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "danafrostick.com"] [uri "/.env"] [unique_id "atXhV-hzrRdcJ2zJR0sObgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-19 08:14:14
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:81:235 (infong201.client ...
show more
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:81:235 (infong201.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 04:14:10.239733 2026] [security2:error] [pid 18734:tid 18734] [client 2001:8d8:5ff:5f:82:165:81:235:46314] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "scr-publications.com"] [uri "/.env"] [unique_id "atXRUvw6r_IrwXH0rkX3XgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-19 07:16:12
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:81:235 (infong201.client ...
show more
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:81:235 (infong201.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 03:16:05.995205 2026] [security2:error] [pid 11239:tid 11239] [client 2001:8d8:5ff:5f:82:165:81:235:55986] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "drumez.com"] [uri "/.env"] [unique_id "atXDtXybJVokV9odVKvwDAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-19 04:24:16
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:81:235 (infong201.client ...
show more
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:81:235 (infong201.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 00:24:11.654919 2026] [security2:error] [pid 31484:tid 31484] [client 2001:8d8:5ff:5f:82:165:81:235:40046] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lahaciendaolivia.com"] [uri "/.env"] [unique_id "atWbay3MElstubB_47CS2wAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-19 04:18:46
(1 week ago)
Probing for exposed secret / credential files
Hacking
Web App Attack
🇳🇱
homeshowdomain.nl
2026-09-26 22:00:50
(1 month ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-25.
show less
Web App Attack
SSH
Hacking
🇩🇪
0x44
2026-09-25 08:48:57
(1 month ago)
Web probing - backdoors/webshells with missing User-Agent
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 22:53:11
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:81:235 (infong201.client ...
show more
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:81:235 (infong201.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 18:53:04.596697 2026] [security2:error] [pid 14022:tid 14022] [client 2001:8d8:5ff:5f:82:165:81:235:54436] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "horsesaw.com"] [uri "/wp-config.php.bak"] [unique_id "arMG0GRfmXS06LuYIU9ssQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 21:30:17
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:81:235 (infong201.client ...
show more
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:81:235 (infong201.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 17:30:10.042352 2026] [security2:error] [pid 30515:tid 30515] [client 2001:8d8:5ff:5f:82:165:81:235:54656] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.spectorworld.com"] [uri "/wp-config.php.bak"] [unique_id "arLzYu7ytRUsQJ7HKN3u0QAAADQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 19:27:38
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:81:235 (infong201.client ...
show more
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:81:235 (infong201.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 15:27:32.836380 2026] [security2:error] [pid 27546:tid 27546] [client 2001:8d8:5ff:5f:82:165:81:235:40078] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "plumpen.com"] [uri "/wp-config.php.bak"] [unique_id "arLWpJdcUZQ57FzGSawv9wAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack