🇨🇭
4server
2026-10-15 22:40:38
UTC ·
(3 weeks ago)
[FriOct1600:40:31.0067872026][security2:error][pid3515938:tid3516000][client2400:cb00:20:1000:a714:3e70:94f6:1a58:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OW ...
show more
[FriOct1600:40:31.0067872026][security2:error][pid3515938:tid3516000][client2400:cb00:20:1000:a714:3e70:94f6:1a58:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"4hosts.net\"][uri\"//.aws/credentials\"][unique_id\"atFWXru0KoaEJTA8Ie0QDwAAAII\"]
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 11:07:09
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:a714:3e70:94f6:1a58 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 07:07:02.877823 2026] [security2:error] [pid 2930:tid 2930] [c ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:a714:3e70:94f6:1a58 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 07:07:02.877823 2026] [security2:error] [pid 2930:tid 2930] [client 2400:cb00:20:1000:a714:3e70:94f6:1a58:10257] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "coast22.net"] [uri "/.env.old"] [unique_id "atCz1jrdUC72MVWqCXa0YwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 22:58:43
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:a714:3e70:94f6:1a58 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 18:58:36.137187 2026] [security2:error] [pid 1247:tid 1247] [c ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:a714:3e70:94f6:1a58 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 18:58:36.137187 2026] [security2:error] [pid 1247:tid 1247] [client 2400:cb00:20:1000:a714:3e70:94f6:1a58:9419] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "carbonless.net"] [uri "/wp-config.php.old"] [unique_id "atAJHNW0IAolf5ypUaA5zgAAADE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 02:15:27
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:a714:3e70:94f6:1a58 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 22:15:02.441304 2026] [security2:error] [pid 1499:tid 1499] [c ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:a714:3e70:94f6:1a58 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 22:15:02.441304 2026] [security2:error] [pid 1499:tid 1499] [client 2400:cb00:20:1000:a714:3e70:94f6:1a58:10144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bigskyprints.com"] [uri "/.env.bak"] [unique_id "as7lprsSE1efjQLXayTkNwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 18:22:29
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:a714:3e70:94f6:1a58 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 14:22:25.245555 2026] [security2:error] [pid 17915:tid 17915] ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:a714:3e70:94f6:1a58 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 14:22:25.245555 2026] [security2:error] [pid 17915:tid 17915] [client 2400:cb00:20:1000:a714:3e70:94f6:1a58:11808] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "clinchspurs.com"] [uri "/.env.staging"] [unique_id "as524SLwfdnPgrFd9Jv-rAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 15:51:15
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:949110) triggered by 2400:cb00:20:1000:a714:3e70:94f6:1a58 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 11:51:12.683300 2026] [security2:error] [pid 14682:tid 14682] ...
show more
(mod_security) mod_security (id:949110) triggered by 2400:cb00:20:1000:a714:3e70:94f6:1a58 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 11:51:12.683300 2026] [security2:error] [pid 14682:tid 14682] [client 2400:cb00:20:1000:a714:3e70:94f6:1a58:10230] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "faimrepsonline.com"] [uri "/.env.old"] [unique_id "as5TcK48L8y19rnWDLQK-AAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-10-13 00:11:09
UTC ·
(3 weeks ago)
[TueOct1302:11:00.6551242026][security2:error][pid297997:tid298096][client2400:cb00:20:1000:a714:3e70:94f6:1a58:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWAS ...
show more
[TueOct1302:11:00.6551242026][security2:error][pid297997:tid298096][client2400:cb00:20:1000:a714:3e70:94f6:1a58:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"rvengineering.ch\"][uri\"/.kube/config\"][unique_id\"as13FLxBiGXkQoYqe89I4QAAAMw\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-12 16:09:57
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:a714:3e70:94f6:1a58 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 12:09:51.917930 2026] [security2:error] [pid 862:tid 862] [cli ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:a714:3e70:94f6:1a58 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 12:09:51.917930 2026] [security2:error] [pid 862:tid 862] [client 2400:cb00:20:1000:a714:3e70:94f6:1a58:12405] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "garyandthegroove.com"] [uri "/.env.bak"] [unique_id "as0GTwgib3uG5PMDvVC7nwAAACU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-12 06:54:35
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:a714:3e70:94f6:1a58 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 02:54:28.394346 2026] [security2:error] [pid 12095:tid 12095] ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:a714:3e70:94f6:1a58 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 02:54:28.394346 2026] [security2:error] [pid 12095:tid 12095] [client 2400:cb00:20:1000:a714:3e70:94f6:1a58:13949] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arcadiapropertiesllc.com"] [uri "/.env.staging"] [unique_id "asyEJKiI4XR7o_I9B5w71wAAADc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-12 02:12:36
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:a714:3e70:94f6:1a58 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 22:12:28.765245 2026] [security2:error] [pid 30162:tid 30162] ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:a714:3e70:94f6:1a58 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 22:12:28.765245 2026] [security2:error] [pid 30162:tid 30162] [client 2400:cb00:20:1000:a714:3e70:94f6:1a58:12483] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "1954topresent.com"] [uri "/wp-config.php.bak"] [unique_id "asxCDI8ks4p_XHk0_m_o3QAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-11 20:26:03
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:a714:3e70:94f6:1a58 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 16:25:56.453940 2026] [security2:error] [pid 13955:tid 13955] ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:a714:3e70:94f6:1a58 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 16:25:56.453940 2026] [security2:error] [pid 13955:tid 13955] [client 2400:cb00:20:1000:a714:3e70:94f6:1a58:9565] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "donutlocations.com"] [uri "/.env.dev"] [unique_id "asvw1EPF0U1f21RjlrTN_AAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-10 07:46:38
UTC ·
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:a714:3e70:94f6:1a58 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 03:46:29.547004 2026] [security2:error] [pid 2044:tid 2044] [c ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:a714:3e70:94f6:1a58 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 03:46:29.547004 2026] [security2:error] [pid 2044:tid 2044] [client 2400:cb00:20:1000:a714:3e70:94f6:1a58:11638] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.michaelandkatie.us"] [uri "/.env.production"] [unique_id "asntVZLqOZu_wffiDJW3dwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 21:43:12
UTC ·
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:a714:3e70:94f6:1a58 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 17:43:06.544420 2026] [security2:error] [pid 24944:tid 24944] ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:a714:3e70:94f6:1a58 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 17:43:06.544420 2026] [security2:error] [pid 24944:tid 24944] [client 2400:cb00:20:1000:a714:3e70:94f6:1a58:9578] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bkspeck.com"] [uri "/.env.staging"] [unique_id "asgOakEyLxdlaZ1HGArU7gAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 13:26:54
UTC ·
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:a714:3e70:94f6:1a58 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 09:26:43.421504 2026] [security2:error] [pid 2140:tid 2157] [c ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:a714:3e70:94f6:1a58 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 09:26:43.421504 2026] [security2:error] [pid 2140:tid 2157] [client 2400:cb00:20:1000:a714:3e70:94f6:1a58:9608] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mateo-abogados.com"] [uri "/.env.staging"] [unique_id "aseaEwX-5RHV2x0uCWXJagAAAQ8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 09:51:43
UTC ·
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:a714:3e70:94f6:1a58 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 05:51:35.984883 2026] [security2:error] [pid 8873:tid 8873] [c ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:a714:3e70:94f6:1a58 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 05:51:35.984883 2026] [security2:error] [pid 8873:tid 8873] [client 2400:cb00:20:1000:a714:3e70:94f6:1a58:10308] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vrmapping.net"] [uri "/.env.backup"] [unique_id "asdnpz58na91g0OyUgqzeAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
