🇺🇸
TPI-Abuse
2026-10-08 03:17:47
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:e87:dab9:9c5f:d2a5 (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:e87:dab9:9c5f:d2a5 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 23:17:40.000907 2026] [security2:error] [pid 7186:tid 7186] [client 2400:cb00:21:1000:e87:dab9:9c5f:d2a5:11517] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "netstatsolutions.com"] [uri "/.env.production"] [unique_id "ascLVEgxlNbqtV8mhV_9JAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-07 15:44:41
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:e87:dab9:9c5f:d2a5 (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:e87:dab9:9c5f:d2a5 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 11:44:31.781730 2026] [security2:error] [pid 1892:tid 1892] [client 2400:cb00:21:1000:e87:dab9:9c5f:d2a5:10555] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.blacksheepoffroad.com"] [uri "/.env.bak"] [unique_id "asZo30DkW1xzukotdxUCRwAAACc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-07 13:34:35
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:e87:dab9:9c5f:d2a5 (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:e87:dab9:9c5f:d2a5 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 09:34:30.509561 2026] [security2:error] [pid 31844:tid 31844] [client 2400:cb00:21:1000:e87:dab9:9c5f:d2a5:10095] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "konahawaii.com"] [uri "/.env.bak"] [unique_id "asZKZkHrFE6CiMeSKWgs9gAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-07 08:44:06
(20 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:e87:dab9:9c5f:d2a5 (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:e87:dab9:9c5f:d2a5 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 04:44:02.537225 2026] [security2:error] [pid 28059:tid 28059] [client 2400:cb00:21:1000:e87:dab9:9c5f:d2a5:10098] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "personalizednapkins.com"] [uri "/.env.local"] [unique_id "asYGUnDLUtRDHW-dyeiYvwAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-07 02:09:09
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:e87:dab9:9c5f:d2a5 (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:e87:dab9:9c5f:d2a5 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 22:09:01.991895 2026] [security2:error] [pid 1069:tid 1069] [client 2400:cb00:21:1000:e87:dab9:9c5f:d2a5:12788] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.register-yacht-cook-islands.com"] [uri "/wp-config.php"] [unique_id "asWpvf3JMSFXm-II2xSFCwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-07 00:22:55
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:e87:dab9:9c5f:d2a5 (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:e87:dab9:9c5f:d2a5 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 20:22:47.658679 2026] [security2:error] [pid 23951:tid 23951] [client 2400:cb00:21:1000:e87:dab9:9c5f:d2a5:13739] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "staging.lindenwoodpark.org"] [uri "/wp-config.php.save"] [unique_id "asWQ1yH2PAQ4ELv-jiSxDAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-06 22:17:06
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:e87:dab9:9c5f:d2a5 (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:e87:dab9:9c5f:d2a5 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 18:17:00.197946 2026] [security2:error] [pid 25773:tid 25773] [client 2400:cb00:21:1000:e87:dab9:9c5f:d2a5:14159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "leeu100.com"] [uri "/.env.dev"] [unique_id "asVzXONGWscUkd3py-YNfwAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-06 21:36:24
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:e87:dab9:9c5f:d2a5 (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:e87:dab9:9c5f:d2a5 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 17:36:21.611135 2026] [security2:error] [pid 11086:tid 11086] [client 2400:cb00:21:1000:e87:dab9:9c5f:d2a5:12211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.jsommer.com"] [uri "/.env"] [unique_id "asVp1Zyz0diAE1znFpi9WQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
neckaralb-admin.de
2026-10-06 21:06:31
(1 day ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇺🇸
TPI-Abuse
2026-10-06 12:53:45
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:e87:dab9:9c5f:d2a5 (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:e87:dab9:9c5f:d2a5 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 08:53:37.958676 2026] [security2:error] [pid 11223:tid 11223] [client 2400:cb00:21:1000:e87:dab9:9c5f:d2a5:12137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nomanszone.org"] [uri "/.env.local"] [unique_id "asTvUT6JV-_Crob2EHuAKwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-06 10:29:25
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:e87:dab9:9c5f:d2a5 (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:e87:dab9:9c5f:d2a5 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 06:29:22.085841 2026] [security2:error] [pid 1950799:tid 1950836] [client 2400:cb00:21:1000:e87:dab9:9c5f:d2a5:11838] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "condobudget.com"] [uri "/.env.dev"] [unique_id "asTNgnlkd0pOI7-89lMZhQAAAJY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-06 09:57:03
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:e87:dab9:9c5f:d2a5 (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:e87:dab9:9c5f:d2a5 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 05:56:54.946238 2026] [security2:error] [pid 4236:tid 4236] [client 2400:cb00:21:1000:e87:dab9:9c5f:d2a5:9791] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "majesticsolutions.co"] [uri "/.env.staging"] [unique_id "asTF5vQCd0FpLcEu7HYEiQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-06 09:27:22
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:e87:dab9:9c5f:d2a5 (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:e87:dab9:9c5f:d2a5 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 05:27:06.091003 2026] [security2:error] [pid 9460:tid 9460] [client 2400:cb00:21:1000:e87:dab9:9c5f:d2a5:12351] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "oceandrivebeach.net"] [uri "/.env.staging"] [unique_id "asS-6i0lgUyX8trcvvPX8wAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-06 05:42:50
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:e87:dab9:9c5f:d2a5 (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:e87:dab9:9c5f:d2a5 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 01:42:44.585972 2026] [security2:error] [pid 13040:tid 13040] [client 2400:cb00:21:1000:e87:dab9:9c5f:d2a5:12976] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "foundintranslation.net"] [uri "/wp-config.php.old"] [unique_id "asSKVIbWAwjN7qGSo5HgrwAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-06 02:42:42
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:e87:dab9:9c5f:d2a5 (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:21:1000:e87:dab9:9c5f:d2a5 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 05 22:42:22.884617 2026] [security2:error] [pid 30346:tid 30346] [client 2400:cb00:21:1000:e87:dab9:9c5f:d2a5:13309] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "versahealthcare.com"] [uri "/wp-config.php.bak"] [unique_id "asRgDnn-K3uQOaD98l-8LwAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
