🇯🇵
S.O.B.A. Dev.
2026-10-04 00:34:38
(5 days ago)
Persistent port scanning or vulnerability scanning
Port Scan
🇺🇸
TPI-Abuse
2026-04-07 23:44:56
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:636:1000:984f:a293:7bf4:22ac (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:636:1000:984f:a293:7bf4:22ac (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 07 19:44:51.995701 2026] [security2:error] [pid 1663810:tid 1663810] [client 2400:cb00:636:1000:984f:a293:7bf4:22ac:9649] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.rjdyckarchitect.com"] [uri "/.git/config"] [unique_id "adWW83JqJbbFMBIUWr8QAwAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-07 04:03:04
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:636:1000:984f:a293:7bf4:22ac (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:636:1000:984f:a293:7bf4:22ac (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 07 00:02:59.900645 2026] [security2:error] [pid 884775:tid 884775] [client 2400:cb00:636:1000:984f:a293:7bf4:22ac:13977] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.lexvaz.com"] [uri "/.git/refs/heads/master"] [unique_id "adSB841euks-ekoZU8iD2wAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-06 22:44:07
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:636:1000:984f:a293:7bf4:22ac (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:636:1000:984f:a293:7bf4:22ac (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 18:44:00.407901 2026] [security2:error] [pid 697119:tid 697119] [client 2400:cb00:636:1000:984f:a293:7bf4:22ac:12371] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.newmooncafe.com"] [uri "/.env.old"] [unique_id "adQ3MML3K4mu3LhUJAbqEAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-06 01:29:36
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:636:1000:984f:a293:7bf4:22ac (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:636:1000:984f:a293:7bf4:22ac (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 21:29:31.154619 2026] [security2:error] [pid 14787:tid 14787] [client 2400:cb00:636:1000:984f:a293:7bf4:22ac:9638] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.cabanaconstructionandpaving.com"] [uri "/.env.backup"] [unique_id "adMMe3Deva43l21DGRM90QAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-04-05 06:46:53
(6 months ago)
[SunApr0508:46:49.1908092026][security2:error][pid1869979:tid1869983][client2400:cb00:636:1000:984f: ...
show more
[SunApr0508:46:49.1908092026][security2:error][pid1869979:tid1869983][client2400:cb00:636:1000:984f:a293:7bf4:22ac:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"98\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"webmail.danielasilvia.ch\"][uri\"/.env.bak\"][unique_id\"adIFWXc8hZnLfI0eRCgQEAAAAAE\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-04-04 15:23:19
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:636:1000:984f:a293:7bf4:22ac (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:636:1000:984f:a293:7bf4:22ac (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 11:23:14.578887 2026] [security2:error] [pid 19302:tid 19302] [client 2400:cb00:636:1000:984f:a293:7bf4:22ac:12643] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.snapdragonworkshops.com"] [uri "/core/.env"] [unique_id "adEs4pAEvU7TpLAAIfIw8gAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-03 21:11:49
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:636:1000:984f:a293:7bf4:22ac (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:636:1000:984f:a293:7bf4:22ac (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 17:11:44.660674 2026] [security2:error] [pid 20527:tid 20595] [client 2400:cb00:636:1000:984f:a293:7bf4:22ac:12679] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.joeandlane.com"] [uri "/public/.env"] [unique_id "adAtEJIxtNBdftEiCH76jAAAAQo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-03 10:29:57
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:636:1000:984f:a293:7bf4:22ac (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:636:1000:984f:a293:7bf4:22ac (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 06:29:51.935162 2026] [security2:error] [pid 24498:tid 24498] [client 2400:cb00:636:1000:984f:a293:7bf4:22ac:11529] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.thelundbergs.us"] [uri "/.env.old"] [unique_id "ac-Wn0EC-UxI0pZfxk7kUQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-01 10:34:53
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:636:1000:984f:a293:7bf4:22ac (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:636:1000:984f:a293:7bf4:22ac (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 01 06:34:47.440793 2026] [security2:error] [pid 8199:tid 8199] [client 2400:cb00:636:1000:984f:a293:7bf4:22ac:12754] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.wfowisdom.com"] [uri "/server/.env"] [unique_id "acz0x5WGl2SlggiuQmvBxQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-01 04:19:12
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:636:1000:984f:a293:7bf4:22ac (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:636:1000:984f:a293:7bf4:22ac (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 01 00:19:02.555078 2026] [security2:error] [pid 18953:tid 18953] [client 2400:cb00:636:1000:984f:a293:7bf4:22ac:14169] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.talleyappraisalservices.taltonfamily.com"] [uri "/.env.dev"] [unique_id "acyctp49JoS_po6aTfIJIgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-31 07:42:51
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:636:1000:984f:a293:7bf4:22ac (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:636:1000:984f:a293:7bf4:22ac (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 31 03:42:46.964437 2026] [security2:error] [pid 3574:tid 3574] [client 2400:cb00:636:1000:984f:a293:7bf4:22ac:11762] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aktkaro.com"] [uri "/config/.env.local"] [unique_id "act69i7OvjJ-q_VCabrU0gAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-31 00:59:20
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:636:1000:984f:a293:7bf4:22ac (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:636:1000:984f:a293:7bf4:22ac (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 20:59:11.928701 2026] [security2:error] [pid 15560:tid 15576] [client 2400:cb00:636:1000:984f:a293:7bf4:22ac:12871] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.andestravel.net"] [uri "/.git/index"] [unique_id "acscXxUar2nE72M3Zh960QAAAQM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 14:17:21
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:636:1000:984f:a293:7bf4:22ac (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:636:1000:984f:a293:7bf4:22ac (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 10:17:14.687576 2026] [security2:error] [pid 30073:tid 30073] [client 2400:cb00:636:1000:984f:a293:7bf4:22ac:9821] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.aboutagingparents.com"] [uri "/backend/.env"] [unique_id "acqF6ph98TaE7L4FAXNWbQAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 10:50:44
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:636:1000:984f:a293:7bf4:22ac (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:636:1000:984f:a293:7bf4:22ac (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 06:50:40.273915 2026] [security2:error] [pid 14964:tid 14964] [client 2400:cb00:636:1000:984f:a293:7bf4:22ac:13779] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.obfetal.com"] [uri "/.env.production.bak"] [unique_id "acpVgPXJ6kljJDgq4BEuJgAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
