🇺🇸
TPI-Abuse
2026-11-01 09:46:11
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:636:1000:fdb6:ed4e:f3d8:3129 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 04:46:05.748788 2026] [security2:error] [pid 5213:tid 5213] [ ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:636:1000:fdb6:ed4e:f3d8:3129 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 04:46:05.748788 2026] [security2:error] [pid 5213:tid 5213] [client 2400:cb00:636:1000:fdb6:ed4e:f3d8:3129:10589] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.lighthousechristmascards.com"] [uri "/.htaccess"] [unique_id "aucKXYsk6TgJx_6haZbCHQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-08-11 17:14:52
UTC ·
(2 months ago)
[TueAug1119:14:47.3483332026][security2:error][pid2379400:tid2379408][client2400:cb00:636:1000:fdb6:ed4e:f3d8:3129:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\\\\\\\\.vscode/\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_ru ...
show more
[TueAug1119:14:47.3483332026][security2:error][pid2379400:tid2379408][client2400:cb00:636:1000:fdb6:ed4e:f3d8:3129:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\\\\\\\\.vscode/\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"1189\"][id\"350593\"][rev\"1\"][msg\"Atomicorp.comWAFRules:AttackBlocked-Dataleakage-attempttoaccessstoredvscodepasswords\"][severity\"CRITICAL\"][hostname\"hosting-royal.ch\"][uri\"/.vscode/settings.json\"][unique_id\"antYh5jy_mbvnA9E25kfEwAAAEU\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-02 20:31:54
UTC ·
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:636:1000:fdb6:ed4e:f3d8:3129 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 16:31:47.470548 2026] [security2:error] [pid 17433:tid 17433] ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:636:1000:fdb6:ed4e:f3d8:3129 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 16:31:47.470548 2026] [security2:error] [pid 17433:tid 17433] [client 2400:cb00:636:1000:fdb6:ed4e:f3d8:3129:12422] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "veracurnow.com"] [uri "/.git/config"] [unique_id "ah89s45sMrCV2pLtK4fxcgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-29 11:13:47
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:636:1000:fdb6:ed4e:f3d8:3129 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 29 07:13:41.979925 2026] [security2:error] [pid 25792:tid 25806] ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:636:1000:fdb6:ed4e:f3d8:3129 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 29 07:13:41.979925 2026] [security2:error] [pid 25792:tid 25806] [client 2400:cb00:636:1000:fdb6:ed4e:f3d8:3129:9339] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.accutar.com"] [uri "/.git/config"] [unique_id "afHn5ZzLpoXAc23o-AQ_hwAAAEo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-09 02:21:08
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:636:1000:fdb6:ed4e:f3d8:3129 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 22:21:01.605692 2026] [security2:error] [pid 2746792:tid 2746 ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:636:1000:fdb6:ed4e:f3d8:3129 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 22:21:01.605692 2026] [security2:error] [pid 2746792:tid 2746792] [client 2400:cb00:636:1000:fdb6:ed4e:f3d8:3129:11838] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.amazingthailand.net"] [uri "/.git/config"] [unique_id "adcNDQfRleBirh6OycyZ2QAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-06 15:33:24
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:636:1000:fdb6:ed4e:f3d8:3129 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 11:33:15.588840 2026] [security2:error] [pid 632721:tid 63272 ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:636:1000:fdb6:ed4e:f3d8:3129 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 11:33:15.588840 2026] [security2:error] [pid 632721:tid 632721] [client 2400:cb00:636:1000:fdb6:ed4e:f3d8:3129:13467] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.donzie.com"] [uri "/.git/HEAD"] [unique_id "adPSO2L_dHE8r6wdy0vrpAAAACM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-05 00:11:51
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:636:1000:fdb6:ed4e:f3d8:3129 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 20:11:45.831689 2026] [security2:error] [pid 25533:tid 25533] ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:636:1000:fdb6:ed4e:f3d8:3129 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 20:11:45.831689 2026] [security2:error] [pid 25533:tid 25533] [client 2400:cb00:636:1000:fdb6:ed4e:f3d8:3129:13386] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.balmedia.com"] [uri "/.git/refs/heads/master"] [unique_id "adGowU_hpCTFqewZwzEnSwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-04 17:52:45
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:636:1000:fdb6:ed4e:f3d8:3129 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 13:52:37.161456 2026] [security2:error] [pid 382:tid 382] [cl ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:636:1000:fdb6:ed4e:f3d8:3129 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 13:52:37.161456 2026] [security2:error] [pid 382:tid 382] [client 2400:cb00:636:1000:fdb6:ed4e:f3d8:3129:12480] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.starcrestsales.com"] [uri "/.git/refs/heads/main"] [unique_id "adFP5fVvDxOMgxKJgmoctwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-04 09:15:29
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:636:1000:fdb6:ed4e:f3d8:3129 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 05:15:20.742154 2026] [security2:error] [pid 14765:tid 14765] ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:636:1000:fdb6:ed4e:f3d8:3129 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 05:15:20.742154 2026] [security2:error] [pid 14765:tid 14765] [client 2400:cb00:636:1000:fdb6:ed4e:f3d8:3129:10534] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.landjudging.com"] [uri "/site/.env"] [unique_id "adDWqMYpae4qa4NrDgoKsAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-04 07:17:48
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:636:1000:fdb6:ed4e:f3d8:3129 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 03:17:42.307224 2026] [security2:error] [pid 4412:tid 4412] [ ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:636:1000:fdb6:ed4e:f3d8:3129 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 03:17:42.307224 2026] [security2:error] [pid 4412:tid 4412] [client 2400:cb00:636:1000:fdb6:ed4e:f3d8:3129:11983] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.seoanalyticslocal.kevinfranz.com"] [uri "/.env.dev"] [unique_id "adC7FshxrltTrAOSylWTcQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-03 06:57:53
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:636:1000:fdb6:ed4e:f3d8:3129 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 02:57:46.276788 2026] [security2:error] [pid 13093:tid 13110] ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:636:1000:fdb6:ed4e:f3d8:3129 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 02:57:46.276788 2026] [security2:error] [pid 13093:tid 13110] [client 2400:cb00:636:1000:fdb6:ed4e:f3d8:3129:9559] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.planillas.net"] [uri "/.env.local"] [unique_id "ac9k6l_HWORKuEAfoc1XEAAAAYk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-02 06:32:59
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:636:1000:fdb6:ed4e:f3d8:3129 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 02 02:32:51.237510 2026] [security2:error] [pid 10909:tid 10909] ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:636:1000:fdb6:ed4e:f3d8:3129 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 02 02:32:51.237510 2026] [security2:error] [pid 10909:tid 10909] [client 2400:cb00:636:1000:fdb6:ed4e:f3d8:3129:11422] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pixelsbeach.smogsandiego.com"] [uri "/.env.bak"] [unique_id "ac4NkwaZrmbG6B5JFvdRjQAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-31 07:04:00
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:636:1000:fdb6:ed4e:f3d8:3129 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 31 03:03:54.915809 2026] [security2:error] [pid 30272:tid 30272] ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:636:1000:fdb6:ed4e:f3d8:3129 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 31 03:03:54.915809 2026] [security2:error] [pid 30272:tid 30272] [client 2400:cb00:636:1000:fdb6:ed4e:f3d8:3129:13639] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.jamisongreen.com"] [uri "/.env.production"] [unique_id "actx2vce_If2_6GzWxF1yAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Mangelot Hosting
2026-03-31 02:43:06
UTC ·
(7 months ago)
(modsecurity) srv104 ModSecurity 2400:cb00:636:1000:fdb6:ed4e:f3d8:3129 (DE/Germany/-): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 18:25:39
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:636:1000:fdb6:ed4e:f3d8:3129 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 14:25:35.014836 2026] [security2:error] [pid 2836:tid 2836] [ ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:636:1000:fdb6:ed4e:f3d8:3129 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 14:25:35.014836 2026] [security2:error] [pid 2836:tid 2836] [client 2400:cb00:636:1000:fdb6:ed4e:f3d8:3129:13107] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.digifonics.com"] [uri "/.git/refs/heads/main"] [unique_id "acrAH8I4q86B4DzIOjbGRAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
