🇩🇪
4server
2026-10-15 17:42:52
(4 days ago)
[ThuOct1519:42:45.5235562026][security2:error][pid93215:tid93308][client2400:cb00:21:1000:e7f:f0cf:e ...
show more
[ThuOct1519:42:45.5235562026][security2:error][pid93215:tid93308][client2400:cb00:21:1000:e7f:f0cf:e4d0:5c8d:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"gpwealth.ch\"][uri\"/wp-config.php.old\"][unique_id\"atEQlQciO9zjEKfFLqQ6rAAAAQI\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 05:26:12
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:e7f:f0cf:e4d0:5c8d (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:e7f:f0cf:e4d0:5c8d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 01:26:04.547724 2026] [security2:error] [pid 2666:tid 2666] [client 2400:cb00:21:1000:e7f:f0cf:e4d0:5c8d:11622] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "handcraftedparquet.com"] [uri "/.git/HEAD"] [unique_id "atBj7JrdrcyX46AsOtrOVAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 04:33:11
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:e7f:f0cf:e4d0:5c8d (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:e7f:f0cf:e4d0:5c8d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 00:33:05.102937 2026] [security2:error] [pid 12780:tid 12780] [client 2400:cb00:21:1000:e7f:f0cf:e4d0:5c8d:10983] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.darkalleyproductions.com"] [uri "/.git/HEAD"] [unique_id "atBXgaaKEiNNODCqGpIF7wAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 01:58:18
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:e7f:f0cf:e4d0:5c8d (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:e7f:f0cf:e4d0:5c8d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 21:58:12.741596 2026] [security2:error] [pid 17610:tid 17610] [client 2400:cb00:21:1000:e7f:f0cf:e4d0:5c8d:10093] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "animecelgallery.com"] [uri "/.htaccess"] [unique_id "atAzNEMrLciElTKdZ3M38AAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 14:46:40
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:e7f:f0cf:e4d0:5c8d (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:e7f:f0cf:e4d0:5c8d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 10:46:32.580468 2026] [security2:error] [pid 3879:tid 3879] [client 2400:cb00:21:1000:e7f:f0cf:e4d0:5c8d:10186] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "torahorah.com"] [uri "/.env.bak"] [unique_id "as-VyMMwn-PYx_kz1-DuDwAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 12:50:12
(5 days ago)
(mod_security) mod_security (id:210730) triggered by 2400:cb00:21:1000:e7f:f0cf:e4d0:5c8d (Unknown): ...
show more
(mod_security) mod_security (id:210730) triggered by 2400:cb00:21:1000:e7f:f0cf:e4d0:5c8d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 08:50:04.290628 2026] [security2:error] [pid 8772:tid 8772] [client 2400:cb00:21:1000:e7f:f0cf:e4d0:5c8d:13312] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||fatjesus.com|F|2"] [data ".tfstate.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "fatjesus.com"] [uri "/.terraform/terraform.tfstate.backup"] [unique_id "as96fJfoXq3vLYpcJbyHEQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 10:44:13
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:e7f:f0cf:e4d0:5c8d (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:e7f:f0cf:e4d0:5c8d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 06:44:06.658244 2026] [security2:error] [pid 22092:tid 22092] [client 2400:cb00:21:1000:e7f:f0cf:e4d0:5c8d:13843] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "earthatpeace.org"] [uri "/.env"] [unique_id "as9c9q-o3eRmxKnq3RkyywAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 07:00:22
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:e7f:f0cf:e4d0:5c8d (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:e7f:f0cf:e4d0:5c8d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 03:00:13.895192 2026] [security2:error] [pid 14302:tid 14302] [client 2400:cb00:21:1000:e7f:f0cf:e4d0:5c8d:11139] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agrizel.com"] [uri "/.git/HEAD"] [unique_id "as8ofY_Auwg5Oj_Kq9YdKQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 04:35:39
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:e7f:f0cf:e4d0:5c8d (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:e7f:f0cf:e4d0:5c8d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 00:35:33.444555 2026] [security2:error] [pid 32456:tid 32456] [client 2400:cb00:21:1000:e7f:f0cf:e4d0:5c8d:13886] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stormstrips.info"] [uri "/.env.production"] [unique_id "as8Glcr6lgvQXvkLw74bKQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
4server
2026-10-14 00:17:42
(5 days ago)
[WedOct1402:17:36.1165252026][security2:error][pid567879:tid568016][client2400:cb00:21:1000:e7f:f0cf ...
show more
[WedOct1402:17:36.1165252026][security2:error][pid567879:tid568016][client2400:cb00:21:1000:e7f:f0cf:e4d0:5c8d:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\"wp-config\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"710\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"benvenutialfood.org\"][uri\"/wp-config.php.save\"][unique_id\"as7KIJA6CAVpbAbbRQjlFAAAAQc\"]
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 00:09:52
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:e7f:f0cf:e4d0:5c8d (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:e7f:f0cf:e4d0:5c8d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 20:09:43.620490 2026] [security2:error] [pid 28531:tid 28531] [client 2400:cb00:21:1000:e7f:f0cf:e4d0:5c8d:10368] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aivosminerals.com"] [uri "/.git/HEAD"] [unique_id "as12x26rmWis-4ve0fAWEQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-12 09:54:57
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:e7f:f0cf:e4d0:5c8d (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:e7f:f0cf:e4d0:5c8d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 05:54:53.506535 2026] [security2:error] [pid 30784:tid 30897] [client 2400:cb00:21:1000:e7f:f0cf:e4d0:5c8d:9961] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "duplexgoldmine.com"] [uri "/.git/HEAD"] [unique_id "asyubedgj_KOh2VgwKpQHQAAAQw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-11 16:42:33
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:e7f:f0cf:e4d0:5c8d (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:e7f:f0cf:e4d0:5c8d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 12:42:29.195853 2026] [security2:error] [pid 30078:tid 30078] [client 2400:cb00:21:1000:e7f:f0cf:e4d0:5c8d:12363] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vfflag.info"] [uri "/.env"] [unique_id "asu8ddDXFMcxWj2bakBWywAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-11 10:59:14
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:e7f:f0cf:e4d0:5c8d (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:e7f:f0cf:e4d0:5c8d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 06:59:08.291102 2026] [security2:error] [pid 4159:tid 4159] [client 2400:cb00:21:1000:e7f:f0cf:e4d0:5c8d:13067] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "omahareact.org"] [uri "/.svn/entries"] [unique_id "astr_IHMUY9UvuTVQQEKVQAAADI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-11 01:23:51
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:e7f:f0cf:e4d0:5c8d (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:e7f:f0cf:e4d0:5c8d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 21:23:44.198353 2026] [security2:error] [pid 4624:tid 4640] [client 2400:cb00:21:1000:e7f:f0cf:e4d0:5c8d:11216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "danfriel.com"] [uri "/.svn/entries"] [unique_id "asrlIB9icQQMSNcEL09ilwAAAIw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
