🇺🇸
TPI-Abuse
2026-10-13 05:57:28
(7 minutes ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:7f79:b70a:73ca:1b44 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:7f79:b70a:73ca:1b44 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 01:57:24.929396 2026] [security2:error] [pid 7694:tid 7694] [client 2400:cb00:555:1000:7f79:b70a:73ca:1b44:13835] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "koswerks.net"] [uri "/.env.bak"] [unique_id "as3IRK4J5rXGdGc8TuiszgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-12 12:29:14
(17 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:7f79:b70a:73ca:1b44 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:7f79:b70a:73ca:1b44 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 08:28:47.294255 2026] [security2:error] [pid 4131:tid 4131] [client 2400:cb00:555:1000:7f79:b70a:73ca:1b44:9891] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "engedal.net"] [uri "/.env.local"] [unique_id "aszSf_-Guad5t2YujkETdgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-12 02:00:57
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:7f79:b70a:73ca:1b44 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:7f79:b70a:73ca:1b44 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 22:00:48.780830 2026] [security2:error] [pid 11044:tid 11044] [client 2400:cb00:555:1000:7f79:b70a:73ca:1b44:14319] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "petesplaza.com"] [uri "/.env.backup"] [unique_id "asw_UKFIJE4U3XxHJp78IgAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-11 15:47:32
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:7f79:b70a:73ca:1b44 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:7f79:b70a:73ca:1b44 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 11:47:22.563353 2026] [security2:error] [pid 25346:tid 25346] [client 2400:cb00:555:1000:7f79:b70a:73ca:1b44:14024] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "limocorpuschristi.com"] [uri "/.env.local"] [unique_id "asuviqHdVna0cJYjJ0_s6QAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-11 03:05:16
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:7f79:b70a:73ca:1b44 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:7f79:b70a:73ca:1b44 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 23:05:10.287331 2026] [security2:error] [pid 20949:tid 20949] [client 2400:cb00:555:1000:7f79:b70a:73ca:1b44:13460] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "modestosoftwater.com"] [uri "/.git/HEAD"] [unique_id "asr85nZ6IjUstXYPMXCaSgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-10-10 17:32:05
(2 days ago)
[SatOct1019:32:02.6307252026][security2:error][pid1346583:tid1346711][client2400:cb00:555:1000:7f79: ...
show more
[SatOct1019:32:02.6307252026][security2:error][pid1346583:tid1346711][client2400:cb00:555:1000:7f79:b70a:73ca:1b44:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\b\(\?:\\\\\\\\.\(\?:ht\(\?:access\|passwd\|group\)\|www_\?acl\)\|global\\\\\\\\.asa\|httpd\\\\\\\\.conf\|boot\\\\\\\\.ini\|web.config\)\\\\\\\\b\|\(\|\^\|\\\\\\\\.\\\\\\\\.\)/etc/\|/\\\\\\\\.\(\?:history\|bash_history\|sh_history\|env\)\$\)\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"204\"][id\"390709\"][rev\"30\"][msg\"Atomicorp.comWAFRules:Attempttoaccessprotectedfileremotely\"][data\"/.env\"][severity\"CRITICAL\"][hostname\"alessandrolucchini.ch\"][uri\"/.env\"][unique_id\"asp2knAto8jmpClubyey8AAAAlY\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-10 02:10:42
(3 days ago)
(mod_security) mod_security (id:210730) triggered by 2400:cb00:555:1000:7f79:b70a:73ca:1b44 (Unknown ...
show more
(mod_security) mod_security (id:210730) triggered by 2400:cb00:555:1000:7f79:b70a:73ca:1b44 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 09 22:10:37.587160 2026] [security2:error] [pid 28392:tid 28392] [client 2400:cb00:555:1000:7f79:b70a:73ca:1b44:10961] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||literarylights.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "literarylights.com"] [uri "/index.php.bak"] [unique_id "asmenXzjyrm41Zs9Lq6wYwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-09 09:28:04
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:7f79:b70a:73ca:1b44 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:7f79:b70a:73ca:1b44 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 09 05:27:56.045956 2026] [security2:error] [pid 15198:tid 15198] [client 2400:cb00:555:1000:7f79:b70a:73ca:1b44:11388] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cynthiabaxter.com"] [uri "/.env.local"] [unique_id "asiznC9iIxrm_XPcjIu9rQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 13:46:25
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:7f79:b70a:73ca:1b44 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:7f79:b70a:73ca:1b44 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 09:46:17.796738 2026] [security2:error] [pid 29878:tid 29946] [client 2400:cb00:555:1000:7f79:b70a:73ca:1b44:10070] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ainavelas.com"] [uri "/.env.production"] [unique_id "aseeqc6Bzf_BH9JOyG7s-QAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 10:56:35
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:7f79:b70a:73ca:1b44 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:7f79:b70a:73ca:1b44 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 06:56:28.483728 2026] [security2:error] [pid 23616:tid 23643] [client 2400:cb00:555:1000:7f79:b70a:73ca:1b44:14307] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "accutar.com"] [uri "/.env.bak"] [unique_id "asd23IavVcxhB_Tz5T1aNgAAAVY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 06:59:24
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:7f79:b70a:73ca:1b44 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:7f79:b70a:73ca:1b44 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 02:59:01.569282 2026] [security2:error] [pid 30844:tid 30844] [client 2400:cb00:555:1000:7f79:b70a:73ca:1b44:13942] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "no504.com"] [uri "/.env.bak"] [unique_id "asc_NRgAAx5hEUOzxgqixAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 06:34:16
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:7f79:b70a:73ca:1b44 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:7f79:b70a:73ca:1b44 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 02:34:07.633447 2026] [security2:error] [pid 17574:tid 17574] [client 2400:cb00:555:1000:7f79:b70a:73ca:1b44:14052] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "reciprodyne.com"] [uri "/.env.bak"] [unique_id "asc5X4C_EErwMENFyXZtugAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 04:56:03
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:7f79:b70a:73ca:1b44 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:7f79:b70a:73ca:1b44 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 00:55:58.094522 2026] [security2:error] [pid 28191:tid 28191] [client 2400:cb00:555:1000:7f79:b70a:73ca:1b44:12513] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "alameeran.net"] [uri "/.env.staging"] [unique_id "asciXiPA9CDfv5RXAFsE3gAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 02:57:11
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:7f79:b70a:73ca:1b44 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:7f79:b70a:73ca:1b44 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 22:57:02.786058 2026] [security2:error] [pid 12669:tid 12669] [client 2400:cb00:555:1000:7f79:b70a:73ca:1b44:11502] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vrbsroma.com"] [uri "/.env.save"] [unique_id "ascGfpyp4bliauAZOdXhOQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 01:06:58
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:7f79:b70a:73ca:1b44 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:7f79:b70a:73ca:1b44 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 21:06:53.455605 2026] [security2:error] [pid 13532:tid 13532] [client 2400:cb00:555:1000:7f79:b70a:73ca:1b44:11353] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rocketcityhotwheelers.com"] [uri "/.git/config"] [unique_id "asbsrcSa2WruxyxzHsbb4gAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
