🇨🇭
4server
2026-10-15 03:51:18
(4 days ago)
[ThuOct1505:51:13.0618322026][security2:error][pid2368571:tid2368654][client2400:cb00:470:1000:88a5: ...
show more
[ThuOct1505:51:13.0618322026][security2:error][pid2368571:tid2368654][client2400:cb00:470:1000:88a5:d8a1:a5eb:bd0:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Stringmatchwithin\".asa/.asax/.ascx/.backup/.bak/.bat/.cdx/.cer/.cfg/.cmd/.com/.config/.conf/.cs/.csproj/.csr/.dat/.db/.dbf/.dll/.dos/.htr/.htw/.ida/.idc/.idq/.inc/.ini/.key/.licx/.lnk/.log/.mdb/.old/.pass/.pdb/.pol/.printer/.pwd/.rdb/.resources/.resx/.sql/.swp/.sys/.vb/.vbs/.vbproj/.vsdisco/.webinfo/.xsx/\"atTX:extension.[file\"/etc/apache2/conf.d/modsec_rules/00_asl_zz_strict.conf\"][line\"91\"][id\"390716\"][rev\"2\"][msg\"Atomicorp.comWAFRules:URLfileextensionisrestrictedbypolicy\"][data\".bak\"][severity\"ERROR\"][hostname\"hosting-domini.ch\"][uri\"/admin/config.php.bak\"][unique_id\"atBNscSXxbbI28vNS4cz7AAAAQE\"]
show less
Hacking
Web App Attack
🇷🇴
DamonOne
2026-10-03 05:51:00
(2 weeks ago)
Blocked by OPNsense; 5 hits, proto=tcp, ports=8443
Port Scan
Hacking
🇺🇸
TPI-Abuse
2026-04-04 01:24:38
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:470:1000:88a5:d8a1:a5eb:bd0 (Unknown) ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:470:1000:88a5:d8a1:a5eb:bd0 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 21:24:30.584551 2026] [security2:error] [pid 27256:tid 27256] [client 2400:cb00:470:1000:88a5:d8a1:a5eb:bd0:13566] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.missevelyn.com"] [uri "/var/www/html/.env"] [unique_id "adBoTvCcTlszUJHbC1CFlwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-03 21:48:55
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:470:1000:88a5:d8a1:a5eb:bd0 (Unknown) ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:470:1000:88a5:d8a1:a5eb:bd0 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 17:48:50.809154 2026] [security2:error] [pid 4936:tid 4936] [client 2400:cb00:470:1000:88a5:d8a1:a5eb:bd0:13591] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.72blues.com"] [uri "/.env_settings"] [unique_id "adA1wm5cAu9oRxtiwAJm8AAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-03 12:27:40
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:470:1000:88a5:d8a1:a5eb:bd0 (Unknown) ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:470:1000:88a5:d8a1:a5eb:bd0 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 08:27:33.578993 2026] [security2:error] [pid 6490:tid 6490] [client 2400:cb00:470:1000:88a5:d8a1:a5eb:bd0:11879] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.ladymcollection.com"] [uri "/.env.dev"] [unique_id "ac-yNVKCgZeDIdRWDTg_hwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-03 04:36:28
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:470:1000:88a5:d8a1:a5eb:bd0 (Unknown) ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:470:1000:88a5:d8a1:a5eb:bd0 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 00:36:20.940863 2026] [security2:error] [pid 15189:tid 15189] [client 2400:cb00:470:1000:88a5:d8a1:a5eb:bd0:9906] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "og.gmacguffin.com"] [uri "/.git/HEAD"] [unique_id "ac9DxD1NmBsDMU-B-DLexQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-03 03:01:26
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:470:1000:88a5:d8a1:a5eb:bd0 (Unknown) ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:470:1000:88a5:d8a1:a5eb:bd0 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 02 23:01:21.867093 2026] [security2:error] [pid 13094:tid 13144] [client 2400:cb00:470:1000:88a5:d8a1:a5eb:bd0:14213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.ingeconsultcr.com"] [uri "/admin/.env"] [unique_id "ac8tgXzMxGX9TETZf_s_kwAAAdA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-31 12:37:11
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:470:1000:88a5:d8a1:a5eb:bd0 (Unknown) ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:470:1000:88a5:d8a1:a5eb:bd0 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 31 08:37:06.511852 2026] [security2:error] [pid 27652:tid 27652] [client 2400:cb00:470:1000:88a5:d8a1:a5eb:bd0:13473] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.kylight.net"] [uri "/.env.php"] [unique_id "acu_8jDjk7XsH6ta9_bWOAAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-31 08:58:33
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:470:1000:88a5:d8a1:a5eb:bd0 (Unknown) ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:470:1000:88a5:d8a1:a5eb:bd0 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 31 04:58:29.583450 2026] [security2:error] [pid 1251086:tid 1251086] [client 2400:cb00:470:1000:88a5:d8a1:a5eb:bd0:11927] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.polar-design.com"] [uri "/.env.development.local"] [unique_id "acuMtRZCGJPQnUILdzarkQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-31 05:30:40
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:470:1000:88a5:d8a1:a5eb:bd0 (Unknown) ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:470:1000:88a5:d8a1:a5eb:bd0 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 31 01:30:31.628433 2026] [security2:error] [pid 3564:tid 3564] [client 2400:cb00:470:1000:88a5:d8a1:a5eb:bd0:13064] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.psdinnersready.needtoorder.us"] [uri "/.env.production"] [unique_id "actb91uAC6MY44n8PzjjYQAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-31 05:05:59
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:470:1000:88a5:d8a1:a5eb:bd0 (Unknown) ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:470:1000:88a5:d8a1:a5eb:bd0 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 31 01:05:53.483011 2026] [security2:error] [pid 1855:tid 1855] [client 2400:cb00:470:1000:88a5:d8a1:a5eb:bd0:11674] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.livinghomegrown.com"] [uri "/.env_backup"] [unique_id "actWMQyB1M-P-x8OqZI9ewAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-31 04:07:37
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:470:1000:88a5:d8a1:a5eb:bd0 (Unknown) ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:470:1000:88a5:d8a1:a5eb:bd0 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 31 00:07:32.863031 2026] [security2:error] [pid 22277:tid 22322] [client 2400:cb00:470:1000:88a5:d8a1:a5eb:bd0:9935] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.philacentric.com"] [uri "/.env_config"] [unique_id "actIhKoQDcgE15O_qd72-wAAAZA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 15:14:23
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:470:1000:88a5:d8a1:a5eb:bd0 (Unknown) ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:470:1000:88a5:d8a1:a5eb:bd0 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 11:14:19.084956 2026] [security2:error] [pid 27992:tid 27992] [client 2400:cb00:470:1000:88a5:d8a1:a5eb:bd0:12686] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.lemontreefoods.com"] [uri "/.env.production"] [unique_id "acqTS2i0I3_Cq4ohUe0ulAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-26 05:48:49
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:470:1000:88a5:d8a1:a5eb:bd0 (Unknown) ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:470:1000:88a5:d8a1:a5eb:bd0 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 26 01:48:43.021988 2026] [security2:error] [pid 22318:tid 22318] [client 2400:cb00:470:1000:88a5:d8a1:a5eb:bd0:12225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.firewoodart.com"] [uri "/.env.docker"] [unique_id "acTIu6wCWzP-nnQBob8w2AAAACQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-25 23:15:53
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:470:1000:88a5:d8a1:a5eb:bd0 (Unknown) ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:470:1000:88a5:d8a1:a5eb:bd0 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 25 19:15:46.528087 2026] [security2:error] [pid 5162:tid 5162] [client 2400:cb00:470:1000:88a5:d8a1:a5eb:bd0:11423] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.northwestarbor-culture.com"] [uri "/.git/config"] [unique_id "acRsotR8e0nEJVxjRkTGKAAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
