🇺🇸
TPI-Abuse
2026-10-06 12:19:45
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:343c:cdee:a213:7bf5 (Unknown) ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:343c:cdee:a213:7bf5 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 08:19:38.267874 2026] [security2:error] [pid 5468:tid 5468] [client 2400:cb00:21:1000:343c:cdee:a213:7bf5:12118] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sigiweb.net"] [uri "/wp-config.php.save"] [unique_id "asTnWrefjgcqEb8PHjcWSQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-06 12:04:05
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:343c:cdee:a213:7bf5 (Unknown) ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:343c:cdee:a213:7bf5 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 08:03:58.677192 2026] [security2:error] [pid 29261:tid 29261] [client 2400:cb00:21:1000:343c:cdee:a213:7bf5:13960] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jkg1.com"] [uri "/.htaccess"] [unique_id "asTjrjFvQnuIzTccOIlveAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-06 11:17:00
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:343c:cdee:a213:7bf5 (Unknown) ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:343c:cdee:a213:7bf5 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 07:16:56.532111 2026] [security2:error] [pid 31216:tid 31309] [client 2400:cb00:21:1000:343c:cdee:a213:7bf5:12084] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jedelectric.com"] [uri "/.env.old"] [unique_id "asTYqGYK1RaQMxz2DrVkyQAAAVU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-06 10:30:31
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:343c:cdee:a213:7bf5 (Unknown) ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:343c:cdee:a213:7bf5 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 06:30:20.495838 2026] [security2:error] [pid 9192:tid 9192] [client 2400:cb00:21:1000:343c:cdee:a213:7bf5:9544] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "starsmogsandiego.com"] [uri "/.env.save"] [unique_id "asTNvOo8hEj1_5qvvD4QIAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-06 09:30:40
(5 hours ago)
(mod_security) mod_security (id:210730) triggered by 2400:cb00:21:1000:343c:cdee:a213:7bf5 (Unknown) ...
show more
(mod_security) mod_security (id:210730) triggered by 2400:cb00:21:1000:343c:cdee:a213:7bf5 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 05:30:34.527936 2026] [security2:error] [pid 7362:tid 7362] [client 2400:cb00:21:1000:343c:cdee:a213:7bf5:10046] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||drayvian.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "drayvian.com"] [uri "/index.php.bak"] [unique_id "asS_ul7GsTXM5fpnZW8gRwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-05 22:55:09
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:343c:cdee:a213:7bf5 (Unknown) ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:343c:cdee:a213:7bf5 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 05 18:54:58.719240 2026] [security2:error] [pid 21053:tid 21053] [client 2400:cb00:21:1000:343c:cdee:a213:7bf5:13975] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rangerroma.com"] [uri "/wp-config.php.save"] [unique_id "asQqwkmTAJHNxVNTHwo-2gAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-05 02:04:12
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:343c:cdee:a213:7bf5 (Unknown) ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:343c:cdee:a213:7bf5 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 22:04:04.852012 2026] [security2:error] [pid 29551:tid 29551] [client 2400:cb00:21:1000:343c:cdee:a213:7bf5:13069] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cbrtome.cl"] [uri "/.env.local"] [unique_id "asMFlGn6NxQKOROi6_F2twAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-05 00:01:10
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:343c:cdee:a213:7bf5 (Unknown) ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:343c:cdee:a213:7bf5 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 20:01:04.947170 2026] [security2:error] [pid 32490:tid 32490] [client 2400:cb00:21:1000:343c:cdee:a213:7bf5:12099] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fingercult.com"] [uri "/.env.bak"] [unique_id "asLowAp0ybQnxIlC5uonxwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-04 11:30:01
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:343c:cdee:a213:7bf5 (Unknown) ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:343c:cdee:a213:7bf5 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 07:29:56.153950 2026] [security2:error] [pid 7080:tid 7080] [client 2400:cb00:21:1000:343c:cdee:a213:7bf5:12253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jamestaylorart.com"] [uri "/.git/HEAD"] [unique_id "asI4tK_kgdvbwuFyf-KyGAAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-10-01 17:03:35
(4 days ago)
[ThuOct0119:03:29.2164492026][security2:error][pid1222693:tid1222720][client2400:cb00:21:1000:343c:c ...
show more
[ThuOct0119:03:29.2164492026][security2:error][pid1222693:tid1222720][client2400:cb00:21:1000:343c:cdee:a213:7bf5:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"www.eimeko.ch\"][uri\"/wp-config.php\"][unique_id\"ar6SYcSr0hrWT93qk9at-gAAAA0\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 06:52:28
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:343c:cdee:a213:7bf5 (Unknown) ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:343c:cdee:a213:7bf5 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 02:52:21.189972 2026] [security2:error] [pid 31528:tid 31528] [client 2400:cb00:21:1000:343c:cdee:a213:7bf5:9900] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quakeprediction.com"] [uri "/.git/config"] [unique_id "aryxpQ1ZufyGhWgPHDDkTwAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 03:42:18
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:343c:cdee:a213:7bf5 (Unknown) ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:343c:cdee:a213:7bf5 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 23:42:12.917969 2026] [security2:error] [pid 5348:tid 5348] [client 2400:cb00:21:1000:343c:cdee:a213:7bf5:10251] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "desertvacationvillas.com"] [uri "/.git/config"] [unique_id "aryFFK3QcIbzuqtTetbkpgAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-29 04:59:30
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:343c:cdee:a213:7bf5 (Unknown) ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:343c:cdee:a213:7bf5 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 00:59:22.933817 2026] [security2:error] [pid 20469:tid 20570] [client 2400:cb00:21:1000:343c:cdee:a213:7bf5:12905] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "love-spells-magic.com"] [uri "/wp-config.php.bak"] [unique_id "artFqmJfdbLHCwMx9ffHnAAAAM8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-28 12:07:49
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:343c:cdee:a213:7bf5 (Unknown) ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:343c:cdee:a213:7bf5 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 08:07:44.307838 2026] [security2:error] [pid 9591:tid 9591] [client 2400:cb00:21:1000:343c:cdee:a213:7bf5:12457] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.painting-with-numbers.com"] [uri "/.env"] [unique_id "arpYkFAMPx9KQEaQfEwirQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
