🇺🇸
TPI-Abuse
2026-10-09 17:13:40
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:d4f:e74f:2caa:ccb4 (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:d4f:e74f:2caa:ccb4 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 09 13:13:34.346957 2026] [security2:error] [pid 3853:tid 3853] [client 2400:cb00:21:1000:d4f:e74f:2caa:ccb4:11142] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "doorofhopechurch.org"] [uri "/.env.save"] [unique_id "askgvgjc2ucyeKtq-UZs5gAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-09 05:39:40
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:d4f:e74f:2caa:ccb4 (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:d4f:e74f:2caa:ccb4 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 09 01:39:36.970881 2026] [security2:error] [pid 25271:tid 25271] [client 2400:cb00:21:1000:d4f:e74f:2caa:ccb4:10794] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "leolion.net"] [uri "/.env.staging"] [unique_id "ash-GArb9DgISuFuZZtDLAAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 21:05:26
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:d4f:e74f:2caa:ccb4 (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:d4f:e74f:2caa:ccb4 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 17:05:21.290720 2026] [security2:error] [pid 32419:tid 32419] [client 2400:cb00:21:1000:d4f:e74f:2caa:ccb4:9726] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.loriarsenault.com"] [uri "/.env.old"] [unique_id "asgFkWrcuXgJH0ybMGUMhwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 17:17:31
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:d4f:e74f:2caa:ccb4 (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:d4f:e74f:2caa:ccb4 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 13:17:25.185680 2026] [security2:error] [pid 26747:tid 26747] [client 2400:cb00:21:1000:d4f:e74f:2caa:ccb4:10086] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bencramer.org"] [uri "/wp-config.php.save"] [unique_id "asfQJRQ7i_Pag8Vo4YNQIAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 15:57:07
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:d4f:e74f:2caa:ccb4 (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:d4f:e74f:2caa:ccb4 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 11:56:57.540743 2026] [security2:error] [pid 9355:tid 9355] [client 2400:cb00:21:1000:d4f:e74f:2caa:ccb4:9994] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lizlemos.org"] [uri "/wp-config.php.bak"] [unique_id "ase9Sc-sc7U4_PkViRJM2AAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 15:06:33
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:d4f:e74f:2caa:ccb4 (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:d4f:e74f:2caa:ccb4 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 11:06:29.570766 2026] [security2:error] [pid 19012:tid 19012] [client 2400:cb00:21:1000:d4f:e74f:2caa:ccb4:9695] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "images4themind.com"] [uri "/.htaccess"] [unique_id "asexdSBexJRBMJp4v1OLCQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 13:44:26
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:d4f:e74f:2caa:ccb4 (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:d4f:e74f:2caa:ccb4 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 09:44:17.982645 2026] [security2:error] [pid 29877:tid 29907] [client 2400:cb00:21:1000:d4f:e74f:2caa:ccb4:10723] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ainavelas.com"] [uri "/.env"] [unique_id "aseeMfoD078kA6Gu-tkowQAAAFI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 13:12:59
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 2400:cb00:21:1000:d4f:e74f:2caa:ccb4 (Unknown): ...
show more
(mod_security) mod_security (id:210730) triggered by 2400:cb00:21:1000:d4f:e74f:2caa:ccb4 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 09:12:48.782841 2026] [security2:error] [pid 8164:tid 8164] [client 2400:cb00:21:1000:d4f:e74f:2caa:ccb4:10931] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gracebaptisthartsville.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gracebaptisthartsville.com"] [uri "/index.php.bak"] [unique_id "aseW0D8iCXrmKF1jXjQmNwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 11:09:54
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:d4f:e74f:2caa:ccb4 (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:d4f:e74f:2caa:ccb4 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 07:09:47.274689 2026] [security2:error] [pid 3241:tid 3241] [client 2400:cb00:21:1000:d4f:e74f:2caa:ccb4:11746] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "johnberk.com"] [uri "/.htaccess"] [unique_id "asd5-7D5Cs-Ej9XjsuDxZAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Lino Project
2026-10-08 09:46:37
(2 days ago)
2400:cb00:21:1000:d4f:e74f:2caa:ccb4 - - [08/Oct/2026:11:46:36 +0200] "GET /.env.backup HTTP/1.1" 30 ...
show more
2400:cb00:21:1000:d4f:e74f:2caa:ccb4 - - [08/Oct/2026:11:46:36 +0200] "GET /.env.backup HTTP/1.1" 302 467 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3 Safari/605.1.15"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 08:11:19
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:d4f:e74f:2caa:ccb4 (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:d4f:e74f:2caa:ccb4 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 04:11:10.093276 2026] [security2:error] [pid 11224:tid 11224] [client 2400:cb00:21:1000:d4f:e74f:2caa:ccb4:9418] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mainescentsecrets.com"] [uri "/.env.backup"] [unique_id "asdQHpuZ6phKyoSDec8oWwAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-10-08 07:31:51
(2 days ago)
[ThuOct0809:31:46.0768402026][security2:error][pid2049837:tid2049941][client2400:cb00:21:1000:d4f:e7 ...
show more
[ThuOct0809:31:46.0768402026][security2:error][pid2049837:tid2049941][client2400:cb00:21:1000:d4f:e74f:2caa:ccb4:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"noleggi.ch\"][uri\"/wp-config.php.bak\"][unique_id\"asdG4jDxPbn37gG0OtpXqgAAAM8\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 03:48:52
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:d4f:e74f:2caa:ccb4 (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:d4f:e74f:2caa:ccb4 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 23:48:44.042711 2026] [security2:error] [pid 31145:tid 31145] [client 2400:cb00:21:1000:d4f:e74f:2caa:ccb4:9465] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "damonmarks.com"] [uri "/wp-config.php.old"] [unique_id "ascSnCx6vKcBO73P-UhBowAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-07 22:11:00
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:d4f:e74f:2caa:ccb4 (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:d4f:e74f:2caa:ccb4 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 18:10:49.284156 2026] [security2:error] [pid 17624:tid 17624] [client 2400:cb00:21:1000:d4f:e74f:2caa:ccb4:12081] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "deafinitely.com"] [uri "/.git/HEAD"] [unique_id "asbDaaT2FaZLWyEwyekP-wAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-07 20:59:08
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:d4f:e74f:2caa:ccb4 (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:d4f:e74f:2caa:ccb4 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 16:59:00.873172 2026] [security2:error] [pid 4764:tid 4764] [client 2400:cb00:21:1000:d4f:e74f:2caa:ccb4:12428] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "primemanagementmn.com"] [uri "/.env.old"] [unique_id "asaylB3Jx5faYrYVEzFtyAAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
