🇩🇪
4server
2026-10-16 03:47:02
(7 hours ago)
[FriOct1605:46:55.1003582026][security2:error][pid661131:tid661193][client2400:cb00:20:1000:b6e5:6a9 ...
show more
[FriOct1605:46:55.1003582026][security2:error][pid661131:tid661193][client2400:cb00:20:1000:b6e5:6a9d:c1ea:cda8:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"www.globalhorizon.ch\"][uri\"/wp-config.php\"][unique_id\"atGeL15-c7OOPwPEh-qJcgAAAEk\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 18:09:21
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:b6e5:6a9d:c1ea:cda8 (Unknown) ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:b6e5:6a9d:c1ea:cda8 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 14:09:13.697905 2026] [security2:error] [pid 10521:tid 10620] [client 2400:cb00:20:1000:b6e5:6a9d:c1ea:cda8:10157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.econpage.com"] [uri "/.env.dev"] [unique_id "atEWyZxa5DzJLX1KQ4AGBgAAAIk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 17:24:04
(17 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:b6e5:6a9d:c1ea:cda8 (Unknown) ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:b6e5:6a9d:c1ea:cda8 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 13:23:55.999414 2026] [security2:error] [pid 29207:tid 29207] [client 2400:cb00:20:1000:b6e5:6a9d:c1ea:cda8:12161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.michaelmoorefield.com"] [uri "/.env.local"] [unique_id "atEMK2c0IBSLBLtUSRjdZAAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 04:38:22
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:b6e5:6a9d:c1ea:cda8 (Unknown) ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:b6e5:6a9d:c1ea:cda8 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 00:38:15.263101 2026] [security2:error] [pid 14360:tid 14360] [client 2400:cb00:20:1000:b6e5:6a9d:c1ea:cda8:14123] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rogerbrooks.com"] [uri "/wp-config.php"] [unique_id "atBYt-xf2IgAM7LTTIk8wwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 04:08:15
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:b6e5:6a9d:c1ea:cda8 (Unknown) ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:b6e5:6a9d:c1ea:cda8 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 00:08:10.976179 2026] [security2:error] [pid 23163:tid 23163] [client 2400:cb00:20:1000:b6e5:6a9d:c1ea:cda8:12922] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ameliaschaaf.lawyer"] [uri "/.git/config"] [unique_id "atBRqpoQkEqnsTBcnS632AAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 12:23:37
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:b6e5:6a9d:c1ea:cda8 (Unknown) ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:b6e5:6a9d:c1ea:cda8 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 08:23:33.589494 2026] [security2:error] [pid 3527:tid 3527] [client 2400:cb00:20:1000:b6e5:6a9d:c1ea:cda8:12469] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.homebuilt.michaelsabbey.org"] [uri "/.env.dev"] [unique_id "as90RW554iHlZdK5pfMEeQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 06:26:03
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:b6e5:6a9d:c1ea:cda8 (Unknown) ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:b6e5:6a9d:c1ea:cda8 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 02:25:57.286426 2026] [security2:error] [pid 3248:tid 3248] [client 2400:cb00:20:1000:b6e5:6a9d:c1ea:cda8:10085] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "barecreationsaz.com"] [uri "/.env.dev"] [unique_id "as8gda_6yvaP28KmmGhWAgAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 22:56:16
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:b6e5:6a9d:c1ea:cda8 (Unknown) ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:b6e5:6a9d:c1ea:cda8 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 18:56:12.753103 2026] [security2:error] [pid 17670:tid 17670] [client 2400:cb00:20:1000:b6e5:6a9d:c1ea:cda8:10195] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thomasgardner.com"] [uri "/.git/config"] [unique_id "as63DAMeyXppQyTXZkiNXgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 22:01:59
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:b6e5:6a9d:c1ea:cda8 (Unknown) ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:b6e5:6a9d:c1ea:cda8 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 18:01:51.319562 2026] [security2:error] [pid 21961:tid 21961] [client 2400:cb00:20:1000:b6e5:6a9d:c1ea:cda8:12924] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lolycarrillo.com"] [uri "/.git/HEAD"] [unique_id "as6qT8kP_qD6X9aZ7RriIAAAADM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 18:17:33
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:b6e5:6a9d:c1ea:cda8 (Unknown) ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:b6e5:6a9d:c1ea:cda8 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 14:17:29.390521 2026] [security2:error] [pid 6149:tid 6149] [client 2400:cb00:20:1000:b6e5:6a9d:c1ea:cda8:11986] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "restaurantehaowey.com"] [uri "/.env.old"] [unique_id "as51ueTvuHGJ0-3DOALBFAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 17:26:59
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:b6e5:6a9d:c1ea:cda8 (Unknown) ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:b6e5:6a9d:c1ea:cda8 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 13:26:52.194929 2026] [security2:error] [pid 15927:tid 15927] [client 2400:cb00:20:1000:b6e5:6a9d:c1ea:cda8:10355] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stonehill.myomni.us"] [uri "/.env.old"] [unique_id "as5p3E0K8bZV2bsBcOXYbwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-12 04:07:45
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:b6e5:6a9d:c1ea:cda8 (Unknown) ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:b6e5:6a9d:c1ea:cda8 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 00:07:38.277126 2026] [security2:error] [pid 4373:tid 4373] [client 2400:cb00:20:1000:b6e5:6a9d:c1ea:cda8:11143] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "meganmurph.com"] [uri "/.env.staging"] [unique_id "asxdCru5EoENd9mTcDK7EgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-11 15:40:15
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:b6e5:6a9d:c1ea:cda8 (Unknown) ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:b6e5:6a9d:c1ea:cda8 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 11:40:11.167171 2026] [security2:error] [pid 18445:tid 18445] [client 2400:cb00:20:1000:b6e5:6a9d:c1ea:cda8:12247] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "justiart.com"] [uri "/.env.staging"] [unique_id "asut27aiJ9xsuoRtP4ScQgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-10 14:15:07
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:b6e5:6a9d:c1ea:cda8 (Unknown) ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:b6e5:6a9d:c1ea:cda8 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 10:15:00.391481 2026] [security2:error] [pid 18926:tid 19111] [client 2400:cb00:20:1000:b6e5:6a9d:c1ea:cda8:13356] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pecanvalleyestates.net"] [uri "/.git/config"] [unique_id "aspIZC9ZDGWH9O5ZRjorvgAAAMk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-10 12:30:26
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:b6e5:6a9d:c1ea:cda8 (Unknown) ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:20:1000:b6e5:6a9d:c1ea:cda8 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 08:30:19.176585 2026] [security2:error] [pid 31574:tid 31574] [client 2400:cb00:20:1000:b6e5:6a9d:c1ea:cda8:10225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.jerusalem-temple-today.com"] [uri "/.env.dev"] [unique_id "asov20AYLcheRFwZmOE5XAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
