🇺🇸
TPI-Abuse
2025-12-28 02:50:22
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.250.247 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.250.247 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 27 21:50:14.224755 2025] [security2:error] [pid 32131:tid 32131] [client 216.26.250.247:12469] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sawted.com"] [uri "/.svn/wc.db"] [unique_id "aVCa5t3CBzIIJ0sAlSkQ-AAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-27 23:16:32
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.250.247 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.250.247 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 27 18:16:26.126263 2025] [security2:error] [pid 15246:tid 15273] [client 216.26.250.247:40029] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tomskrodzki.com"] [uri "/.env"] [unique_id "aVBoyswPQ19KgmKe6JqFAQAAARY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-27 21:53:54
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.250.247 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.250.247 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 27 16:53:50.052165 2025] [security2:error] [pid 30688:tid 30688] [client 216.26.250.247:9077] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "austingrammer.com"] [uri "/.git/HEAD"] [unique_id "aVBVbnuUKMtCcw4lH8tUwgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-27 20:42:29
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.250.247 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.250.247 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 27 15:42:23.909114 2025] [security2:error] [pid 2187:tid 2187] [client 216.26.250.247:30979] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mhext.com"] [uri "/.svn/wc.db"] [unique_id "aVBEr_lVIVC9qFdLlrtdowAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-12-26 20:12:22
(6 months ago)
"GET /.svn/wc.db HTTP/1.1"
Hacking
Web App Attack
🇺🇸
octageeks.com
2025-11-28 05:09:57
(6 months ago)
Wordpress malicious attack:[octablocked]
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 11:10:04
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.250.247 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.250.247 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 06:10:00.559618 2025] [security2:error] [pid 9541:tid 9581] [client 216.26.250.247:37759] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.fevini.com"] [uri "/.git/HEAD"] [unique_id "aSbgCGMy3HNq1n2SMluDAQAAAQg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 08:30:36
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.250.247 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.250.247 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 03:30:29.515326 2025] [security2:error] [pid 26938:tid 26938] [client 216.26.250.247:30315] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.crosspexotics.dance4ovations.com"] [uri "/.svn/wc.db"] [unique_id "aSa6pVFQaIA8o3JlA_ZYNwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇱🇻
garmtech.com
2025-11-26 06:04:55
(7 months ago)
Attempted access to sensitive endpoint (/.git/HEAD) detected. Automated scan or unauthorized probing ...
show more
Attempted access to sensitive endpoint (/.git/HEAD) detected. Automated scan or unauthorized probing.
show less
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 01:13:00
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.250.247 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.250.247 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 20:12:56.409892 2025] [security2:error] [pid 8889:tid 8889] [client 216.26.250.247:53737] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.iceofparadise.com"] [uri "/.env"] [unique_id "aSZUGC4cGqgK0LoT4FAiYQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
sid3windr
2025-11-25 02:47:37
(7 months ago)
GET /.env (Tarpitted for 2m10s, wasted 7.73kB)
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 08:30:43
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.250.247 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.250.247 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:30:26.511276 2025] [security2:error] [pid 7259:tid 7259] [client 216.26.250.247:54031] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.thebumans.com"] [uri "/.svn/wc.db"] [unique_id "aSQXonEMkpq2VtgHwMIcuQAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 05:46:34
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.250.247 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.250.247 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:46:29.043579 2025] [security2:error] [pid 19692:tid 19692] [client 216.26.250.247:34395] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.armorcorp.com"] [uri "/.git/HEAD"] [unique_id "aSPxNRQKt52bKZ9namN8oQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 00:36:17
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.250.247 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.250.247 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 19:36:13.085229 2025] [security2:error] [pid 28818:tid 28818] [client 216.26.250.247:10709] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "miele.pamplonaserviciotecnico.com"] [uri "/.svn/wc.db"] [unique_id "aSOofVEiN1HO0ESORY8beAAAACw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-09 15:18:49
(7 months ago)
(mod_security) mod_security (id:210730) triggered by 216.26.250.247 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 216.26.250.247 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 09 10:18:44.077295 2025] [security2:error] [pid 2597:tid 2597] [client 216.26.250.247:10221] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.bigblogcast3.tunabay.com|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.bigblogcast3.tunabay.com"] [uri "/s3cmd.ini"] [unique_id "aRCw1N_SgVrHYtvek4I6ZQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack