🇺🇸
TPI-Abuse
2026-10-13 21:13:26
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:8912:1c47:d1:f7bb (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:8912:1c47:d1:f7bb (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 17:13:21.199893 2026] [security2:error] [pid 13582:tid 13582] [client 2400:cb00:555:1000:8912:1c47:d1:f7bb:10668] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gogitzit.com"] [uri "/.env.staging"] [unique_id "as6e8X_oPGxDhGorINyVEgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 20:42:34
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:8912:1c47:d1:f7bb (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:8912:1c47:d1:f7bb (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 16:42:28.863509 2026] [security2:error] [pid 28125:tid 28125] [client 2400:cb00:555:1000:8912:1c47:d1:f7bb:11396] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "reettaanttila.com"] [uri "/.git/config"] [unique_id "as6XtPfoAFWWy-JheZx6PAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 19:53:17
(22 hours ago)
(mod_security) mod_security (id:210730) triggered by 2400:cb00:555:1000:8912:1c47:d1:f7bb (Unknown): ...
show more
(mod_security) mod_security (id:210730) triggered by 2400:cb00:555:1000:8912:1c47:d1:f7bb (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 15:53:13.015635 2026] [security2:error] [pid 30805:tid 30805] [client 2400:cb00:555:1000:8912:1c47:d1:f7bb:12324] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vtmooses.us|F|2"] [data ".tfstate.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vtmooses.us"] [uri "/.terraform/terraform.tfstate.backup"] [unique_id "as6MKQb0ImofymlBaumVPQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 15:45:44
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:8912:1c47:d1:f7bb (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:8912:1c47:d1:f7bb (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 11:45:36.817151 2026] [security2:error] [pid 1293:tid 1293] [client 2400:cb00:555:1000:8912:1c47:d1:f7bb:13226] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "omnitractors.com"] [uri "/.env.backup"] [unique_id "as5SIE_dd1BIasjMwsX7sQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 13:40:35
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:8912:1c47:d1:f7bb (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:8912:1c47:d1:f7bb (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 09:40:25.341510 2026] [security2:error] [pid 24830:tid 24830] [client 2400:cb00:555:1000:8912:1c47:d1:f7bb:13072] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cs-mall.com"] [uri "/.git/config"] [unique_id "as40yZQDqBnK5FKWhdThLwAAACM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-12 08:55:21
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:8912:1c47:d1:f7bb (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:8912:1c47:d1:f7bb (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 04:55:14.816157 2026] [security2:error] [pid 2699:tid 2699] [client 2400:cb00:555:1000:8912:1c47:d1:f7bb:9938] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "zydecajun.radio.fm"] [uri "/.git/config"] [unique_id "asygclSpwdFgQHOpv3jzSwAAAFg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-12 05:19:50
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:8912:1c47:d1:f7bb (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:8912:1c47:d1:f7bb (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 01:19:45.785550 2026] [security2:error] [pid 23346:tid 23346] [client 2400:cb00:555:1000:8912:1c47:d1:f7bb:12301] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nearfieldchrist.com"] [uri "/.env.dev"] [unique_id "asxt8TrwoByXrQ0--U-QGgAAACc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-11 01:43:02
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:8912:1c47:d1:f7bb (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:8912:1c47:d1:f7bb (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 21:42:57.916653 2026] [security2:error] [pid 14725:tid 14725] [client 2400:cb00:555:1000:8912:1c47:d1:f7bb:10847] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "iconflgc.com"] [uri "/.env.production"] [unique_id "asrpodnJjXkVvwUlC1yywwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-10 15:53:28
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:8912:1c47:d1:f7bb (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:8912:1c47:d1:f7bb (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 11:53:22.815538 2026] [security2:error] [pid 21825:tid 21825] [client 2400:cb00:555:1000:8912:1c47:d1:f7bb:11117] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sparler.com"] [uri "/.env.local"] [unique_id "aspfcitpp-tZ7Os8FNzyegAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-10 08:18:19
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:8912:1c47:d1:f7bb (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:8912:1c47:d1:f7bb (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 04:18:11.711110 2026] [security2:error] [pid 9524:tid 9524] [client 2400:cb00:555:1000:8912:1c47:d1:f7bb:12435] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dennisconnellyphotography.com"] [uri "/.env.bak"] [unique_id "asn0wzLQv_nAA3TSsPtqrwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-10 06:23:17
(4 days ago)
(mod_security) mod_security (id:210730) triggered by 2400:cb00:555:1000:8912:1c47:d1:f7bb (Unknown): ...
show more
(mod_security) mod_security (id:210730) triggered by 2400:cb00:555:1000:8912:1c47:d1:f7bb (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 02:23:06.367359 2026] [security2:error] [pid 25785:tid 25785] [client 2400:cb00:555:1000:8912:1c47:d1:f7bb:13851] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||jacksonlimobus.com|F|2"] [data ".tfstate.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "jacksonlimobus.com"] [uri "/.terraform/terraform.tfstate.backup"] [unique_id "asnZynDvbJsv44ijCFHvGwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-09 21:47:12
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:8912:1c47:d1:f7bb (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:8912:1c47:d1:f7bb (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 09 17:47:08.796117 2026] [security2:error] [pid 31999:tid 32006] [client 2400:cb00:555:1000:8912:1c47:d1:f7bb:11302] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cornell61.org"] [uri "/.git/config"] [unique_id "aslg3CgsOFOKoglNq_PdjgAAAQU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-09 16:29:36
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:8912:1c47:d1:f7bb (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:8912:1c47:d1:f7bb (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 09 12:29:31.056656 2026] [security2:error] [pid 22703:tid 22730] [client 2400:cb00:555:1000:8912:1c47:d1:f7bb:11841] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "doorways.info"] [uri "/.env.old"] [unique_id "askWa_jxnQkC_yh7Mv_tSgAAAE0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 15:18:15
(6 days ago)
(mod_security) mod_security (id:949110) triggered by 2400:cb00:555:1000:8912:1c47:d1:f7bb (Unknown): ...
show more
(mod_security) mod_security (id:949110) triggered by 2400:cb00:555:1000:8912:1c47:d1:f7bb (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 11:18:10.816215 2026] [security2:error] [pid 20226:tid 20226] [client 2400:cb00:555:1000:8912:1c47:d1:f7bb:12464] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "toxicnation.com"] [uri "/.env.backup"] [unique_id "ase0MnZG5AmY6DsCEZERbAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 14:32:46
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:8912:1c47:d1:f7bb (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:8912:1c47:d1:f7bb (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 10:32:42.879239 2026] [security2:error] [pid 13584:tid 13584] [client 2400:cb00:555:1000:8912:1c47:d1:f7bb:11894] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.marxistphilosophy.org"] [uri "/.env.dev"] [unique_id "asepirqXWzk-clsPAJB82gAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
