🇺🇸
TPI-Abuse
2026-10-14 20:18:39
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:9a5b:f9b:4e3f:b33d (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:9a5b:f9b:4e3f:b33d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 16:18:33.322028 2026] [security2:error] [pid 32558:tid 32558] [client 2400:cb00:21:1000:9a5b:f9b:4e3f:b33d:12047] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.laboquimia.es"] [uri "/.env.production"] [unique_id "as_jmZXu06SdTcRSEPadZwAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 11:28:34
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:9a5b:f9b:4e3f:b33d (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:9a5b:f9b:4e3f:b33d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 07:28:27.292363 2026] [security2:error] [pid 31562:tid 31562] [client 2400:cb00:21:1000:9a5b:f9b:4e3f:b33d:14240] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "xplustchad.com"] [uri "/.env.production"] [unique_id "as9nW4bDGU1y206I-uinnAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 18:59:30
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:9a5b:f9b:4e3f:b33d (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:9a5b:f9b:4e3f:b33d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 14:59:19.837799 2026] [security2:error] [pid 16324:tid 16324] [client 2400:cb00:21:1000:9a5b:f9b:4e3f:b33d:10092] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tbnkardesler.com"] [uri "/.env"] [unique_id "as5_h6JerU9h18a0-sOlHQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-11 03:34:52
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:9a5b:f9b:4e3f:b33d (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:9a5b:f9b:4e3f:b33d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 23:34:47.268812 2026] [security2:error] [pid 32234:tid 32244] [client 2400:cb00:21:1000:9a5b:f9b:4e3f:b33d:12329] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pflagabq.org"] [uri "/wp-config.php.save"] [unique_id "assD12EVbYztxOpTqij5vQAAAIE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 17:40:08
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:9a5b:f9b:4e3f:b33d (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:9a5b:f9b:4e3f:b33d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 13:40:03.873620 2026] [security2:error] [pid 12341:tid 12341] [client 2400:cb00:21:1000:9a5b:f9b:4e3f:b33d:13801] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jwilder.com"] [uri "/.env.staging"] [unique_id "asfVcy2YZFTnLDnG6yGRsgAAACM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 17:24:28
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:9a5b:f9b:4e3f:b33d (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:9a5b:f9b:4e3f:b33d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 13:24:19.306240 2026] [security2:error] [pid 8611:tid 8611] [client 2400:cb00:21:1000:9a5b:f9b:4e3f:b33d:11245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "danharrisphotoart.com"] [uri "/.env"] [unique_id "asfRw5gEMK_bZZu0y6TWAAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 15:22:42
(1 week ago)
(mod_security) mod_security (id:949110) triggered by 2400:cb00:21:1000:9a5b:f9b:4e3f:b33d (Unknown): ...
show more
(mod_security) mod_security (id:949110) triggered by 2400:cb00:21:1000:9a5b:f9b:4e3f:b33d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 11:22:36.064256 2026] [security2:error] [pid 4956:tid 4956] [client 2400:cb00:21:1000:9a5b:f9b:4e3f:b33d:12566] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "toxicnation.com"] [uri "/.env.production"] [unique_id "ase1PJwfeY2O1vQs0AvOmwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
4server
2026-10-08 10:18:54
(1 week ago)
[ThuOct0812:18:47.2372582026][security2:error][pid961700:tid961815][client2400:cb00:21:1000:9a5b:f9b ...
show more
[ThuOct0812:18:47.2372582026][security2:error][pid961700:tid961815][client2400:cb00:21:1000:9a5b:f9b:4e3f:b33d:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"[a-z0-9]~\$\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"1158\"][id\"390581\"][rev\"1\"][msg\"Atomicorp.comWAFRules:AttackBlocked-DataLeakage-attempttoaccessbackupfile\(disablethisruleifyourequireaccesstofilesthatendwithatilde\)\"][severity\"CRITICAL\"][hostname\"swisservers.com\"][uri\"/index.php~\"][unique_id\"asduB0mDbAazMbWP7xkoOAAAAU4\"]
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 07:45:40
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:9a5b:f9b:4e3f:b33d (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:9a5b:f9b:4e3f:b33d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 03:45:33.411240 2026] [security2:error] [pid 32269:tid 32269] [client 2400:cb00:21:1000:9a5b:f9b:4e3f:b33d:9820] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gdijoe.com"] [uri "/.env.bak"] [unique_id "asdKHTbH5v0aQTpkP8zq9gAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-10-08 05:52:29
(1 week ago)
[ThuOct0807:52:23.1321682026][security2:error][pid1909339:tid1909420][client2400:cb00:21:1000:9a5b:f ...
show more
[ThuOct0807:52:23.1321682026][security2:error][pid1909339:tid1909420][client2400:cb00:21:1000:9a5b:f9b:4e3f:b33d:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"martinairsagl.ch\"][uri\"/.aws/credentials\"][unique_id\"ascvl18QCjvMWQT-fTjlkAAAAFQ\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 04:14:07
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:9a5b:f9b:4e3f:b33d (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:9a5b:f9b:4e3f:b33d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 00:14:01.892203 2026] [security2:error] [pid 32493:tid 32493] [client 2400:cb00:21:1000:9a5b:f9b:4e3f:b33d:12610] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tremulant.com"] [uri "/.git/HEAD"] [unique_id "ascYiZCWbOvZvyC_MDBTHAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 00:59:59
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:9a5b:f9b:4e3f:b33d (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:9a5b:f9b:4e3f:b33d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 20:59:48.557905 2026] [security2:error] [pid 20108:tid 20108] [client 2400:cb00:21:1000:9a5b:f9b:4e3f:b33d:12285] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "indigo17.com"] [uri "/.svn/entries"] [unique_id "asbrBHm_h4cSQsTTYdSFzQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-07 22:35:17
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:9a5b:f9b:4e3f:b33d (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:9a5b:f9b:4e3f:b33d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 18:34:57.566622 2026] [security2:error] [pid 8236:tid 8236] [client 2400:cb00:21:1000:9a5b:f9b:4e3f:b33d:12515] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wellingtonrossi.com"] [uri "/.env.staging"] [unique_id "asbJEXDb_VPCJhRTHS1lnwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-07 01:24:58
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:9a5b:f9b:4e3f:b33d (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:9a5b:f9b:4e3f:b33d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 21:24:50.976534 2026] [security2:error] [pid 23734:tid 23734] [client 2400:cb00:21:1000:9a5b:f9b:4e3f:b33d:12068] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dragonflytunes.com"] [uri "/wp-config.php.old"] [unique_id "asWfYuRFF1Nn23Alc2LTqwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-07 00:53:54
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:9a5b:f9b:4e3f:b33d (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:9a5b:f9b:4e3f:b33d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 20:53:46.267636 2026] [security2:error] [pid 19738:tid 19738] [client 2400:cb00:21:1000:9a5b:f9b:4e3f:b33d:9606] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "belgiophar.com"] [uri "/.git/config"] [unique_id "asWYGh0BICu01Wu0cvlq4QAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
