๐บ๐ธ
TPI-Abuse
2026-10-15 00:01:45
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:65cf:e1fa:6f68:495c (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:65cf:e1fa:6f68:495c (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 20:01:36.684512 2026] [security2:error] [pid 30275:tid 30275] [client 2400:cb00:555:1000:65cf:e1fa:6f68:495c:11203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "uklanor.com"] [uri "/.env.old"] [unique_id "atAX4I_z7zqyy-VGb8QBZwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-14 16:48:32
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:65cf:e1fa:6f68:495c (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:65cf:e1fa:6f68:495c (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 12:48:22.442559 2026] [security2:error] [pid 25841:tid 25841] [client 2400:cb00:555:1000:65cf:e1fa:6f68:495c:14215] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dishoneggs.com"] [uri "/.env.dev"] [unique_id "as-yVkGi2UME271DmKDyxgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-14 00:11:56
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:65cf:e1fa:6f68:495c (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:65cf:e1fa:6f68:495c (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 20:11:46.470639 2026] [security2:error] [pid 16442:tid 16442] [client 2400:cb00:555:1000:65cf:e1fa:6f68:495c:13527] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nflelectronics.com"] [uri "/wp-config.php.save"] [unique_id "as7Iwkuf7RuqnohP44x1ZwAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-13 23:20:39
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:65cf:e1fa:6f68:495c (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:65cf:e1fa:6f68:495c (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 19:20:29.793923 2026] [security2:error] [pid 23570:tid 23570] [client 2400:cb00:555:1000:65cf:e1fa:6f68:495c:10006] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "inwriting.buzz"] [uri "/.svn/entries"] [unique_id "as68vTHaTBQCinDEWMXhtgAAACM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-13 05:35:42
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:65cf:e1fa:6f68:495c (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:65cf:e1fa:6f68:495c (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 01:35:30.218032 2026] [security2:error] [pid 15274:tid 15274] [client 2400:cb00:555:1000:65cf:e1fa:6f68:495c:11398] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rocknwalktours.com"] [uri "/.git/config"] [unique_id "as3DIpChGzkhcwpXMhLarwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-12 23:58:11
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:65cf:e1fa:6f68:495c (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:65cf:e1fa:6f68:495c (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 19:58:07.783736 2026] [security2:error] [pid 3672:tid 3672] [client 2400:cb00:555:1000:65cf:e1fa:6f68:495c:13235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ankitoner.com"] [uri "/.env.dev"] [unique_id "as10D2AfCTHfBzE8s3CbcgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-11 22:32:27
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:65cf:e1fa:6f68:495c (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:65cf:e1fa:6f68:495c (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 18:32:22.704325 2026] [security2:error] [pid 18689:tid 18689] [client 2400:cb00:555:1000:65cf:e1fa:6f68:495c:11194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tntserv.com"] [uri "/.env.save"] [unique_id "aswOdhAPborVR5on0Ee7pgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
technojoe99
2026-10-11 00:56:02
(1 week ago)
Exploit scan from 2400:cb00:555:1000:65cf:e1fa:6f68:495c. GET /%252eenv HTTP/1.1.
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-09 14:05:01
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:65cf:e1fa:6f68:495c (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:65cf:e1fa:6f68:495c (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 09 10:04:53.470745 2026] [security2:error] [pid 13224:tid 13224] [client 2400:cb00:555:1000:65cf:e1fa:6f68:495c:11931] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "michaelsabbey.com"] [uri "/wp-config.php.bak"] [unique_id "asj0hcTfQjrRb5gXHaEVQwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-08 07:38:29
(2 weeks ago)
Web probing (1 hits in 24h) on default-vhost: sensitive-path scans and/or 404 bursts. Reported by CR ...
show more
Web probing (1 hits in 24h) on default-vhost: sensitive-path scans and/or 404 bursts. Reported by CRMON.
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-08 05:42:31
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:65cf:e1fa:6f68:495c (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:65cf:e1fa:6f68:495c (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 01:42:26.473590 2026] [security2:error] [pid 1559:tid 1559] [client 2400:cb00:555:1000:65cf:e1fa:6f68:495c:13865] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jpwatters.com"] [uri "/.svn/entries"] [unique_id "asctQsYIEBeb9RHmoVRcIwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-08 04:14:04
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:65cf:e1fa:6f68:495c (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:65cf:e1fa:6f68:495c (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 00:13:59.515012 2026] [security2:error] [pid 32667:tid 32667] [client 2400:cb00:555:1000:65cf:e1fa:6f68:495c:13039] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "captechtraining.com"] [uri "/.git/HEAD"] [unique_id "ascYhykzZQ0VwYBXkUk3MwAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-08 03:01:19
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:65cf:e1fa:6f68:495c (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:65cf:e1fa:6f68:495c (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 23:01:11.215246 2026] [security2:error] [pid 15804:tid 15804] [client 2400:cb00:555:1000:65cf:e1fa:6f68:495c:12239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fluff3.instagenii.com"] [uri "/.env.bak"] [unique_id "ascHd6J_wFGKosih06mmgAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-08 00:51:23
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:65cf:e1fa:6f68:495c (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:65cf:e1fa:6f68:495c (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 20:51:16.012862 2026] [security2:error] [pid 12741:tid 12766] [client 2400:cb00:555:1000:65cf:e1fa:6f68:495c:12188] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sailcleaner.com"] [uri "/wp-config.php.save"] [unique_id "asbpBC1rnGYqPmSuxj-4hgAAAVM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-08 00:04:10
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:65cf:e1fa:6f68:495c (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:65cf:e1fa:6f68:495c (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 20:03:56.379215 2026] [security2:error] [pid 13220:tid 13220] [client 2400:cb00:555:1000:65cf:e1fa:6f68:495c:10529] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "frame-sa.com"] [uri "/.env.old"] [unique_id "asbd7CIRSDiIK7Vx7c0f2QAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack