🇺🇸
TPI-Abuse
2026-10-07 10:20:58
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:778b:75ec:2985:257e (Unknown) ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:778b:75ec:2985:257e (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 06:20:51.485336 2026] [security2:error] [pid 3810:tid 3810] [client 2400:cb00:20:1000:778b:75ec:2985:257e:13570] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "californiabrokers.net"] [uri "/.git/HEAD"] [unique_id "asYdA4ab_-2GHvgiVjFWNQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-07 09:27:09
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:778b:75ec:2985:257e (Unknown) ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:778b:75ec:2985:257e (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 05:27:02.225457 2026] [security2:error] [pid 7112:tid 7112] [client 2400:cb00:20:1000:778b:75ec:2985:257e:9555] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bodeur.net"] [uri "/.env.dev"] [unique_id "asYQZtlm3FHUfBJwz880owAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-07 04:40:16
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:778b:75ec:2985:257e (Unknown) ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:778b:75ec:2985:257e (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 00:40:08.278222 2026] [security2:error] [pid 6493:tid 6493] [client 2400:cb00:20:1000:778b:75ec:2985:257e:11053] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.blacksheepoffroad.com"] [uri "/wp-config.php.save"] [unique_id "asXNKA7cex3Ms_OCrsgbXwAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ghostwarriors
2026-10-07 03:50:04
(9 hours ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
🇩🇪
yitzhaq
2026-10-07 03:20:36
(10 hours ago)
2400:cb00:20:1000:778b:75ec:2985:257e - - [07/Oct/2026:05:20:34 +0200] "GET /wp-config.php.old HTTP/ ...
show more
2400:cb00:20:1000:778b:75ec:2985:257e - - [07/Oct/2026:05:20:34 +0200] "GET /wp-config.php.old HTTP/1.1" 301 600 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0"
2400:cb00:20:1000:778b:75ec:2985:257e - - [07/Oct/2026:01:00:29 +0200] "GET /appsettings.json HTTP/1.1" 301 598 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0"
2400:cb00:20:1000:778b:75ec:2985:257e - - [07/Oct/2026:01:55:25 +0200] "GET /.env.local HTTP/1.1" 301 586 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3 Mobile/15E148 Safari/604.1"
2400:cb00:20:1000:778b:75ec:2985:257e - - [07/Oct/2026:01:59:37 +0200] "GET /.netrc HTTP/1.1" 301 578 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3 Mobile/15E148 Safari/604.1"
2400:cb00:20:1000:778b:75ec:2985:257e - - [07/Oct/2026:02:01:44 +0200] "GET /application.yml HTTP/1.1" 30
show less
Web App Attack
Brute-Force
🇺🇸
TPI-Abuse
2026-10-07 01:39:29
(11 hours ago)
(mod_security) mod_security (id:949110) triggered by 2400:cb00:20:1000:778b:75ec:2985:257e (Unknown) ...
show more
(mod_security) mod_security (id:949110) triggered by 2400:cb00:20:1000:778b:75ec:2985:257e (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 21:39:19.505782 2026] [security2:error] [pid 13337:tid 13337] [client 2400:cb00:20:1000:778b:75ec:2985:257e:10712] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "cpectec.com"] [uri "/.env.backup"] [unique_id "asWix8OVI1SlL6BbeShHJAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-06 15:30:57
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:778b:75ec:2985:257e (Unknown) ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:778b:75ec:2985:257e (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 11:30:50.400092 2026] [security2:error] [pid 17768:tid 17768] [client 2400:cb00:20:1000:778b:75ec:2985:257e:10046] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jessiedavison.com"] [uri "/wp-config.php.bak"] [unique_id "asUUKhI5mYYO3ja6C1OWlQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-06 15:04:15
(22 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:778b:75ec:2985:257e (Unknown) ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:778b:75ec:2985:257e (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 11:04:08.355760 2026] [security2:error] [pid 2414:tid 2414] [client 2400:cb00:20:1000:778b:75ec:2985:257e:10363] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.register-yacht-cayman.com"] [uri "/wp-config.php.bak"] [unique_id "asUN6Mx4p24Ibg2DpjmaVwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-06 14:47:46
(22 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:778b:75ec:2985:257e (Unknown) ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:778b:75ec:2985:257e (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 10:47:40.195277 2026] [security2:error] [pid 20121:tid 20121] [client 2400:cb00:20:1000:778b:75ec:2985:257e:13731] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bikiniwatersports.com"] [uri "/.env.bak"] [unique_id "asUKDBQ103P8m06KWQW-TAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-06 13:12:03
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:778b:75ec:2985:257e (Unknown) ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:778b:75ec:2985:257e (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 09:11:59.138890 2026] [security2:error] [pid 25726:tid 25726] [client 2400:cb00:20:1000:778b:75ec:2985:257e:12944] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "holdingfamily.com"] [uri "/.env.production"] [unique_id "asTznyNpM_nt4qwhqnqycQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-06 12:00:58
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:778b:75ec:2985:257e (Unknown) ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:778b:75ec:2985:257e (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 08:00:53.077356 2026] [security2:error] [pid 1829:tid 1829] [client 2400:cb00:20:1000:778b:75ec:2985:257e:10885] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sabbathschoolguide.com"] [uri "/.env.staging"] [unique_id "asTi9Scsst8AsSvvPoYuxwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-04 10:01:27
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:778b:75ec:2985:257e (Unknown) ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:778b:75ec:2985:257e (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 06:01:23.103729 2026] [security2:error] [pid 4524:tid 4570] [client 2400:cb00:20:1000:778b:75ec:2985:257e:14011] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "captainpurpleproductions.com"] [uri "/.git/config"] [unique_id "asIj8wfDvbyFfOCH8EIDTwAAARE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-01 14:27:05
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:778b:75ec:2985:257e (Unknown) ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:778b:75ec:2985:257e (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 10:26:58.084718 2026] [security2:error] [pid 14693:tid 14693] [client 2400:cb00:20:1000:778b:75ec:2985:257e:13215] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.blackoakprop.com"] [uri "/.git/HEAD"] [unique_id "ar5tsn7koewtjTjFP71JvwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-01 05:32:58
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:778b:75ec:2985:257e (Unknown) ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:778b:75ec:2985:257e (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 01:32:53.023447 2026] [security2:error] [pid 29970:tid 29970] [client 2400:cb00:20:1000:778b:75ec:2985:257e:10680] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.genesis-castle.com"] [uri "/.svn/entries"] [unique_id "ar3whS4eAqG7gEMmVNB9OAAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-01 03:37:09
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:778b:75ec:2985:257e (Unknown) ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:778b:75ec:2985:257e (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 23:37:05.694257 2026] [security2:error] [pid 16978:tid 16978] [client 2400:cb00:20:1000:778b:75ec:2985:257e:12647] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gbcwoodbine.org"] [uri "/.env.backup"] [unique_id "ar3VYb5QOmsA6-2PZZ3quQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
