🇺🇸
TPI-Abuse
2026-10-13 08:15:20
(28 minutes ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:679:ec2a:973c:ce0c (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:679:ec2a:973c:ce0c (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 04:15:12.303576 2026] [security2:error] [pid 10494:tid 10494] [client 2400:cb00:21:1000:679:ec2a:973c:ce0c:9572] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.wildlifetaxidermy.com"] [uri "/wp-config.php"] [unique_id "as3okJiaXA-YMoZ_TYjCCQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-10-13 05:45:55
(2 hours ago)
[TueOct1307:45:50.2306542026][security2:error][pid633210:tid633234][client2400:cb00:21:1000:679:ec2a ...
show more
[TueOct1307:45:50.2306542026][security2:error][pid633210:tid633234][client2400:cb00:21:1000:679:ec2a:973c:ce0c:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"hopitalprovidence.org\"][uri\"/.aws/credentials\"][unique_id\"as3Fjk0CDeAbIjDAQBB00QAAAAE\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 04:39:40
(4 hours ago)
(mod_security) mod_security (id:210730) triggered by 2400:cb00:21:1000:679:ec2a:973c:ce0c (Unknown): ...
show more
(mod_security) mod_security (id:210730) triggered by 2400:cb00:21:1000:679:ec2a:973c:ce0c (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 00:39:34.579703 2026] [security2:error] [pid 27044:tid 27044] [client 2400:cb00:21:1000:679:ec2a:973c:ce0c:9863] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||fredlandia.com|F|2"] [data ".tfstate.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "fredlandia.com"] [uri "/.terraform/terraform.tfstate.backup"] [unique_id "as22BreIzoFQRVTr6eS_igAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-12 21:23:46
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:679:ec2a:973c:ce0c (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:679:ec2a:973c:ce0c (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 17:23:41.037630 2026] [security2:error] [pid 29361:tid 29361] [client 2400:cb00:21:1000:679:ec2a:973c:ce0c:12224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.prostar.industries"] [uri "/.git/config"] [unique_id "as1P3SqPELRjxI8kbaU-6AAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-12 14:04:00
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:679:ec2a:973c:ce0c (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:679:ec2a:973c:ce0c (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 10:03:53.578610 2026] [security2:error] [pid 2853:tid 2853] [client 2400:cb00:21:1000:679:ec2a:973c:ce0c:10233] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agupgrade.net"] [uri "/.env.dev"] [unique_id "aszoybSvUsulH7QrQplXvQAAADA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-12 06:23:08
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:679:ec2a:973c:ce0c (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:679:ec2a:973c:ce0c (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 02:23:00.979235 2026] [security2:error] [pid 390:tid 390] [client 2400:cb00:21:1000:679:ec2a:973c:ce0c:12198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paulsingdahlsen.com"] [uri "/wp-config.php.bak"] [unique_id "asx8xB5sv-ck-ctQ0LIIIwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-11 22:48:17
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:679:ec2a:973c:ce0c (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:679:ec2a:973c:ce0c (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 18:48:12.465139 2026] [security2:error] [pid 959:tid 959] [client 2400:cb00:21:1000:679:ec2a:973c:ce0c:10005] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "coolwebsites.org"] [uri "/.env.production"] [unique_id "aswSLGlZJ-FFJ4Mz9ajqKwAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
BlueWire Hosting
2026-10-10 19:15:54
(2 days ago)
High-confidence malicious configuration/VCS probe
Web App Attack
🇺🇸
TPI-Abuse
2026-10-10 13:41:53
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:679:ec2a:973c:ce0c (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:679:ec2a:973c:ce0c (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 09:41:46.547294 2026] [security2:error] [pid 13477:tid 13477] [client 2400:cb00:21:1000:679:ec2a:973c:ce0c:12645] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ourdailybroad.com"] [uri "/.git/HEAD"] [unique_id "aspAmqT5Mlvbog4TFyfl2gAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-10 08:55:33
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:679:ec2a:973c:ce0c (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:679:ec2a:973c:ce0c (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 04:55:22.725190 2026] [security2:error] [pid 19108:tid 19108] [client 2400:cb00:21:1000:679:ec2a:973c:ce0c:12081] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lovechicks.com"] [uri "/.env.staging"] [unique_id "asn9elB5sHZeLpp3T-pLVwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-10 04:43:06
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:679:ec2a:973c:ce0c (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:679:ec2a:973c:ce0c (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 00:42:56.230596 2026] [security2:error] [pid 19714:tid 19714] [client 2400:cb00:21:1000:679:ec2a:973c:ce0c:10846] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "babylontravelone.com"] [uri "/.env"] [unique_id "asnCUCnxyJGv9w31XNvsDAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-09 21:56:18
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:679:ec2a:973c:ce0c (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:679:ec2a:973c:ce0c (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 09 17:56:13.435565 2026] [security2:error] [pid 2760:tid 2760] [client 2400:cb00:21:1000:679:ec2a:973c:ce0c:12376] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.beirutbazar.com"] [uri "/.htaccess"] [unique_id "asli_WJ1B3NqOZH1SLjtigAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 16:58:06
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:679:ec2a:973c:ce0c (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:679:ec2a:973c:ce0c (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 12:57:57.937838 2026] [security2:error] [pid 7943:tid 7943] [client 2400:cb00:21:1000:679:ec2a:973c:ce0c:10207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ppcspetsitting.com"] [uri "/.env.backup"] [unique_id "asfLlbhnyNk_vjPK1uG5MQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 16:05:23
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:679:ec2a:973c:ce0c (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:679:ec2a:973c:ce0c (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 12:05:00.467112 2026] [security2:error] [pid 29158:tid 29158] [client 2400:cb00:21:1000:679:ec2a:973c:ce0c:10452] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.kontikimotorcycles.com"] [uri "/.htaccess"] [unique_id "ase_LPEI6eExMlBP0ewNFAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 14:00:31
(4 days ago)
(mod_security) mod_security (id:949110) triggered by 2400:cb00:21:1000:679:ec2a:973c:ce0c (Unknown): ...
show more
(mod_security) mod_security (id:949110) triggered by 2400:cb00:21:1000:679:ec2a:973c:ce0c (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 10:00:24.174716 2026] [security2:error] [pid 22340:tid 22340] [client 2400:cb00:21:1000:679:ec2a:973c:ce0c:12276] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sunstrongmetal.com"] [uri "/.svn/entries"] [unique_id "aseh-EPTlHCobPMx1YyRoAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
