🇺🇸
TPI-Abuse
2026-10-19 17:23:49
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:82:1 (infongwp-eu38.clie ...
show more
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:82:1 (infongwp-eu38.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 13:23:43.682453 2026] [security2:error] [pid 2907:tid 2907] [client 2001:8d8:5ff:5f:82:165:82:1:40016] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "texaspamman.com"] [uri "/.env"] [unique_id "atZSH6qfgj5HCkE23GTSTwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-19 15:21:34
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:82:1 (infongwp-eu38.clie ...
show more
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:82:1 (infongwp-eu38.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 11:21:28.356462 2026] [security2:error] [pid 21006:tid 21006] [client 2001:8d8:5ff:5f:82:165:82:1:47078] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lisarlee.com"] [uri "/.env"] [unique_id "atY1eOTa6kUagecs4bdV3wAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-19 14:04:19
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:82:1 (infongwp-eu38.clie ...
show more
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:82:1 (infongwp-eu38.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 10:04:11.385081 2026] [security2:error] [pid 32205:tid 32205] [client 2001:8d8:5ff:5f:82:165:82:1:35262] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "muebleriamac.com"] [uri "/.env"] [unique_id "atYjW8hmyGZOITBW6N_XvAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-19 13:37:31
(6 hours ago)
Probing for exposed secret / credential files
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-10-19 12:13:38
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:82:1 (infongwp-eu38.clie ...
show more
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:82:1 (infongwp-eu38.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 08:13:33.302229 2026] [security2:error] [pid 11166:tid 11166] [client 2001:8d8:5ff:5f:82:165:82:1:51058] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "teamsterslmcc.com"] [uri "/.env"] [unique_id "atYJbUntmZvZyJcFirnyoQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-19 08:58:59
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:82:1 (infongwp-eu38.clie ...
show more
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:82:1 (infongwp-eu38.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 04:58:53.042217 2026] [security2:error] [pid 25056:tid 25056] [client 2001:8d8:5ff:5f:82:165:82:1:54330] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ambarsolar.com"] [uri "/.env"] [unique_id "atXbzTzBSZFkNI-fm9MWhwAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-19 03:01:29
(17 hours ago)
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:82:1 (infongwp-eu38.clie ...
show more
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:82:1 (infongwp-eu38.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 23:01:24.404786 2026] [security2:error] [pid 8606:tid 8719] [client 2001:8d8:5ff:5f:82:165:82:1:48402] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rthomasjr.com"] [uri "/.env"] [unique_id "atWIBFmd4MJBJEJIqDMVBgAAAE8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
ParaBug
2026-10-16 13:41:46
(3 days ago)
2001:8d8:5ff:5f:82:165:82:1 - - [16/Oct/2026:15:41:45 +0200] "GET /antik-wagon.net.zip HTTP/1.1" 301 ...
show more
2001:8d8:5ff:5f:82:165:82:1 - - [16/Oct/2026:15:41:45 +0200] "GET /antik-wagon.net.zip HTTP/1.1" 301 507 "-" "-"
...
show less
Phishing
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-25 11:52:49
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:82:1 (infongwp-eu38.clie ...
show more
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:82:1 (infongwp-eu38.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 07:52:42.388351 2026] [security2:error] [pid 7695:tid 7695] [client 2001:8d8:5ff:5f:82:165:82:1:60556] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "astariafilms.com"] [uri "/.env"] [unique_id "arZgijvslR86qdHNq5L7EwAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-25 10:31:17
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:82:1 (infongwp-eu38.clie ...
show more
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:82:1 (infongwp-eu38.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 06:31:13.786981 2026] [security2:error] [pid 15609:tid 15609] [client 2001:8d8:5ff:5f:82:165:82:1:42516] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "adults-biz.com"] [uri "/.env"] [unique_id "arZNcY7dQSiRjz2k8MspngAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-25 09:11:55
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:82:1 (infongwp-eu38.clie ...
show more
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:82:1 (infongwp-eu38.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 05:11:51.108154 2026] [security2:error] [pid 32277:tid 32277] [client 2001:8d8:5ff:5f:82:165:82:1:36500] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "grayhost.net"] [uri "/.env"] [unique_id "arY614_YLDC5AJhWdGlVZQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-25 08:28:10
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:82:1 (infongwp-eu38.clie ...
show more
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:82:1 (infongwp-eu38.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 04:28:04.400935 2026] [security2:error] [pid 30948:tid 31017] [client 2001:8d8:5ff:5f:82:165:82:1:52624] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thebiglies.org"] [uri "/.env"] [unique_id "arYwlIaZTkOHBTyjCQas7wAAAQE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 22:52:17
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:82:1 (infongwp-eu38.clie ...
show more
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:82:1 (infongwp-eu38.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 18:52:14.181784 2026] [security2:error] [pid 13756:tid 13756] [client 2001:8d8:5ff:5f:82:165:82:1:36822] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "michaelwakim.com"] [uri "/wp-config.php.bak"] [unique_id "arMGnrFj90jA0LR_gbp9zAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 20:32:40
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:82:1 (infongwp-eu38.clie ...
show more
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:82:1 (infongwp-eu38.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 16:32:35.722785 2026] [security2:error] [pid 22620:tid 22620] [client 2001:8d8:5ff:5f:82:165:82:1:34956] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arnoldwell.com"] [uri "/wp-config.php.bak"] [unique_id "arLl43fnRffxJ5WBU2NBJAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 20:01:07
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:82:1 (infongwp-eu38.clie ...
show more
(mod_security) mod_security (id:210492) triggered by 2001:8d8:5ff:5f:82:165:82:1 (infongwp-eu38.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 16:01:03.998046 2026] [security2:error] [pid 25117:tid 25117] [client 2001:8d8:5ff:5f:82:165:82:1:50832] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "1cdn.com"] [uri "/wp-config.php.bak"] [unique_id "arLef91InPg3Kf2K1OVNxQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
