🇺🇸
TPI-Abuse
2026-10-08 14:32:46
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:cd84:3339:a92e:607e (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:cd84:3339:a92e:607e (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 10:32:44.161639 2026] [security2:error] [pid 13408:tid 13408] [client 2400:cb00:555:1000:cd84:3339:a92e:607e:13125] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.marxistphilosophy.org"] [uri "/.svn/entries"] [unique_id "asepjAI4PV7RE4y4C8otuQAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 13:30:59
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:cd84:3339:a92e:607e (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:cd84:3339:a92e:607e (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 09:30:54.207743 2026] [security2:error] [pid 29532:tid 29532] [client 2400:cb00:555:1000:cd84:3339:a92e:607e:14034] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "auguststoten.com"] [uri "/.env.backup"] [unique_id "asebDhj2Y4L5a9fD3Yb2LQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 11:06:45
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:cd84:3339:a92e:607e (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:cd84:3339:a92e:607e (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 07:06:40.312410 2026] [security2:error] [pid 31135:tid 31135] [client 2400:cb00:555:1000:cd84:3339:a92e:607e:11571] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "periodthreads.com"] [uri "/.htaccess"] [unique_id "asd5QNSckmM1mi652QH53gAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-10-08 09:50:09
(1 day ago)
[ThuOct0811:50:04.5259112026][security2:error][pid2191839:tid2191852][client2400:cb00:555:1000:cd84: ...
show more
[ThuOct0811:50:04.5259112026][security2:error][pid2191839:tid2191852][client2400:cb00:555:1000:cd84:3339:a92e:607e:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"danielasilvia.ch\"][uri\"/.env.bak\"][unique_id\"asdnTCXJA8kN69BDE6EkZQAAAQE\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 06:39:19
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:cd84:3339:a92e:607e (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:cd84:3339:a92e:607e (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 02:39:09.184064 2026] [security2:error] [pid 7009:tid 7009] [client 2400:cb00:555:1000:cd84:3339:a92e:607e:12777] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "knoxvillelimos.com"] [uri "/.env"] [unique_id "asc6jU0xiYDSlV6AH1rwcgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 04:27:48
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:cd84:3339:a92e:607e (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:cd84:3339:a92e:607e (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 00:27:40.286849 2026] [security2:error] [pid 10496:tid 10496] [client 2400:cb00:555:1000:cd84:3339:a92e:607e:9259] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kletzer.com"] [uri "/.env.staging"] [unique_id "ascbvE-O2wGn-A9m2GRDKAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 01:46:52
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:cd84:3339:a92e:607e (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:cd84:3339:a92e:607e (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 21:46:44.914394 2026] [security2:error] [pid 23587:tid 23601] [client 2400:cb00:555:1000:cd84:3339:a92e:607e:12667] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arthansl.com"] [uri "/.svn/entries"] [unique_id "asb2BGBA89UEkXv5itSBTgAAAMw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-07 21:22:13
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:cd84:3339:a92e:607e (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:cd84:3339:a92e:607e (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 17:22:05.316038 2026] [security2:error] [pid 5294:tid 5294] [client 2400:cb00:555:1000:cd84:3339:a92e:607e:11646] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cathrynn.com"] [uri "/.env"] [unique_id "asa3_U_UvqWKMjrThgwoFwAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-07 08:26:57
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:cd84:3339:a92e:607e (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:cd84:3339:a92e:607e (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 04:26:53.626083 2026] [security2:error] [pid 18280:tid 18280] [client 2400:cb00:555:1000:cd84:3339:a92e:607e:13309] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cdromline.com"] [uri "/wp-config.php.save"] [unique_id "asYCTeI0XqBVmlSbJ9A-TgAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-07 04:13:55
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:cd84:3339:a92e:607e (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:cd84:3339:a92e:607e (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 00:13:27.299059 2026] [security2:error] [pid 16980:tid 16980] [client 2400:cb00:555:1000:cd84:3339:a92e:607e:10157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mountainjaytherapy.com"] [uri "/.env.bak"] [unique_id "asXG59W0K-Dl48IlKaM_yQAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-06 23:06:21
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:cd84:3339:a92e:607e (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:cd84:3339:a92e:607e (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 19:06:13.923112 2026] [security2:error] [pid 902:tid 905] [client 2400:cb00:555:1000:cd84:3339:a92e:607e:12965] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lasertagmetairie.com"] [uri "/.env.old"] [unique_id "asV-5WYfXIrdVmgwRJSXAAAAAEE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-06 14:42:04
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:cd84:3339:a92e:607e (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:cd84:3339:a92e:607e (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 10:41:59.329846 2026] [security2:error] [pid 11386:tid 11386] [client 2400:cb00:555:1000:cd84:3339:a92e:607e:14229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pjbruner.com"] [uri "/.htaccess"] [unique_id "asUIt2cFT5K4_LGDNGsx7QAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-06 13:09:12
(3 days ago)
(mod_security) mod_security (id:210730) triggered by 2400:cb00:555:1000:cd84:3339:a92e:607e (Unknown ...
show more
(mod_security) mod_security (id:210730) triggered by 2400:cb00:555:1000:cd84:3339:a92e:607e (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 09:09:07.238684 2026] [security2:error] [pid 31153:tid 31176] [client 2400:cb00:555:1000:cd84:3339:a92e:607e:13581] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||opticaldesignconcepts.com|F|2"] [data ".tfstate.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "opticaldesignconcepts.com"] [uri "/.terraform/terraform.tfstate.backup"] [unique_id "asTy8wC_WKzZ4hKmweJJYgAAAIY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-06 06:11:51
(3 days ago)
(mod_security) mod_security (id:210730) triggered by 2400:cb00:555:1000:cd84:3339:a92e:607e (Unknown ...
show more
(mod_security) mod_security (id:210730) triggered by 2400:cb00:555:1000:cd84:3339:a92e:607e (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 02:11:46.787888 2026] [security2:error] [pid 1558793:tid 1558796] [client 2400:cb00:555:1000:cd84:3339:a92e:607e:13313] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||isoceansl.com|F|2"] [data ".tfstate.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "isoceansl.com"] [uri "/.terraform/terraform.tfstate.backup"] [unique_id "asSRIuMrK4nx57W6i1zMqQAAAEE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-06 00:42:34
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:cd84:3339:a92e:607e (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:555:1000:cd84:3339:a92e:607e (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 05 20:42:27.240258 2026] [security2:error] [pid 8719:tid 8719] [client 2400:cb00:555:1000:cd84:3339:a92e:607e:12099] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "saramics.net"] [uri "/.env.old"] [unique_id "asRD82x2d_WD2HY0Eo_S1gAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
