🇯🇵
S.O.B.A. Dev.
2026-10-04 00:34:37
(1 week ago)
Persistent port scanning or vulnerability scanning
Port Scan
🇺🇸
TPI-Abuse
2026-04-07 08:00:51
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:696:1000:b90:9d5d:e82:ab2f (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:696:1000:b90:9d5d:e82:ab2f (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 07 04:00:46.478963 2026] [security2:error] [pid 846087:tid 846087] [client 2400:cb00:696:1000:b90:9d5d:e82:ab2f:11350] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.painting-with-numbers.com"] [uri "/home/.env"] [unique_id "adS5rvMeoGgp4b-tYG50agAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-06 18:35:18
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:696:1000:b90:9d5d:e82:ab2f (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:696:1000:b90:9d5d:e82:ab2f (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 14:35:13.079812 2026] [security2:error] [pid 256490:tid 256490] [client 2400:cb00:696:1000:b90:9d5d:e82:ab2f:10764] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "xirination.com"] [uri "/.env.docker"] [unique_id "adP84VeodZ4vYPbhl6gQ6AAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-06 11:09:20
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:696:1000:b90:9d5d:e82:ab2f (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:696:1000:b90:9d5d:e82:ab2f (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 07:09:15.963817 2026] [security2:error] [pid 2636:tid 2636] [client 2400:cb00:696:1000:b90:9d5d:e82:ab2f:9753] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.haroparquet.com"] [uri "/.git/index"] [unique_id "adOUWwc_uJmEbTq7GDt6TgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-06 03:57:13
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:696:1000:b90:9d5d:e82:ab2f (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:696:1000:b90:9d5d:e82:ab2f (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 23:57:06.843736 2026] [security2:error] [pid 8768:tid 8768] [client 2400:cb00:696:1000:b90:9d5d:e82:ab2f:9754] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.crescentcitycafe.net.crescentcitycafe.com"] [uri "/.env.development"] [unique_id "adMvEs__BU1QxjZ-0GczfgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-06 01:06:55
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:696:1000:b90:9d5d:e82:ab2f (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:696:1000:b90:9d5d:e82:ab2f (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 21:06:50.809364 2026] [security2:error] [pid 9640:tid 9640] [client 2400:cb00:696:1000:b90:9d5d:e82:ab2f:14021] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.boardingatthewedge.com"] [uri "/.env.local.backup"] [unique_id "adMHKp2pkaTVjhrTNNU_UgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-04 21:45:37
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:696:1000:b90:9d5d:e82:ab2f (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:696:1000:b90:9d5d:e82:ab2f (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 17:45:31.195041 2026] [security2:error] [pid 8885:tid 8885] [client 2400:cb00:696:1000:b90:9d5d:e82:ab2f:11249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stenbot.com"] [uri "/config/.env.local"] [unique_id "adGGe_jnYbQAyQPK55GnLgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-01 16:40:40
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:696:1000:b90:9d5d:e82:ab2f (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:696:1000:b90:9d5d:e82:ab2f (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 01 12:40:31.889400 2026] [security2:error] [pid 13364:tid 13385] [client 2400:cb00:696:1000:b90:9d5d:e82:ab2f:11918] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ianajewellery.iancaird.com"] [uri "/.env.old"] [unique_id "ac1Kfxw_d654e3vpXubGhwAAAVA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-01 13:29:33
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:696:1000:b90:9d5d:e82:ab2f (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:696:1000:b90:9d5d:e82:ab2f (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 01 09:29:22.070096 2026] [security2:error] [pid 19375:tid 19375] [client 2400:cb00:696:1000:b90:9d5d:e82:ab2f:10798] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.lordhari.com"] [uri "/app/.env"] [unique_id "ac0dsq8bK1yKkDawXxHKtgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 11:23:16
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:696:1000:b90:9d5d:e82:ab2f (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:696:1000:b90:9d5d:e82:ab2f (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 07:23:09.586225 2026] [security2:error] [pid 32033:tid 32033] [client 2400:cb00:696:1000:b90:9d5d:e82:ab2f:13359] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.thebumans.com"] [uri "/.git/refs/heads/master"] [unique_id "acpdHd3gbr97AywIsLLODAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 03:13:13
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:696:1000:b90:9d5d:e82:ab2f (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:696:1000:b90:9d5d:e82:ab2f (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 29 23:13:06.447495 2026] [security2:error] [pid 3040:tid 3040] [client 2400:cb00:696:1000:b90:9d5d:e82:ab2f:10153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.chasingtequila.com"] [uri "/.env.bak"] [unique_id "acnqQmhTA8mGgPcTBwgyUQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-29 20:26:51
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:696:1000:b90:9d5d:e82:ab2f (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:696:1000:b90:9d5d:e82:ab2f (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 29 16:26:42.962059 2026] [security2:error] [pid 3137:tid 3137] [client 2400:cb00:696:1000:b90:9d5d:e82:ab2f:9864] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.tatethegreat.com"] [uri "/.env.backup"] [unique_id "acmLAg0EKE8NTObnMxmkqAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-21 12:53:51
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:696:1000:b90:9d5d:e82:ab2f (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:696:1000:b90:9d5d:e82:ab2f (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 21 08:53:45.439912 2026] [security2:error] [pid 620414:tid 620414] [client 2400:cb00:696:1000:b90:9d5d:e82:ab2f:10306] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.robertlundquist.com"] [uri "/backend/.env"] [unique_id "ab6U2S-_Dk6eEEXkTn7VJQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-21 02:41:31
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:696:1000:b90:9d5d:e82:ab2f (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:696:1000:b90:9d5d:e82:ab2f (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 22:41:25.351054 2026] [security2:error] [pid 12361:tid 12361] [client 2400:cb00:696:1000:b90:9d5d:e82:ab2f:12040] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.writebetweenthelines.com"] [uri "/.env.development.local"] [unique_id "ab4FVZCrOqdcrxy58obWngAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Mangelot Hosting
2026-03-20 17:02:01
(6 months ago)
(modsecurity) srv103 ModSecurity 2400:cb00:696:1000:b90:9d5d:e82:ab2f (DE/Germany/-): 10 in the last ...
show more
(modsecurity) srv103 ModSecurity 2400:cb00:696:1000:b90:9d5d:e82:ab2f (DE/Germany/-): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
