🇺🇸
TPI-Abuse
2026-10-18 06:15:47
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 2400:cb00:929:1000:4b46:43ee:bfc7:fc44 (Unknown ...
show more
(mod_security) mod_security (id:210730) triggered by 2400:cb00:929:1000:4b46:43ee:bfc7:fc44 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 02:15:41.628411 2026] [security2:error] [pid 29119:tid 29119] [client 2400:cb00:929:1000:4b46:43ee:bfc7:fc44:10380] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||specialtywebsiteservice.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "specialtywebsiteservice.com"] [uri "/specialtywebsiteservice.sql"] [unique_id "atRkDWuQG9JTenn6S3hivgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-10-17 23:18:22
(1 week ago)
[SunOct1801:18:19.8019782026][security2:error][pid3171030:tid3171165][client2400:cb00:929:1000:4b46: ...
show more
[SunOct1801:18:19.8019782026][security2:error][pid3171030:tid3171165][client2400:cb00:929:1000:4b46:43ee:bfc7:fc44:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"viveretrentino.it\"][uri\"/config.php.bak\"][unique_id\"atQCO52PbEbqpc1F9H8_GAAAAlQ\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-17 22:14:20
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 2400:cb00:929:1000:4b46:43ee:bfc7:fc44 (Unknown ...
show more
(mod_security) mod_security (id:210730) triggered by 2400:cb00:929:1000:4b46:43ee:bfc7:fc44 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 18:14:13.568226 2026] [security2:error] [pid 18617:tid 18636] [client 2400:cb00:929:1000:4b46:43ee:bfc7:fc44:11541] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.gmentz.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.gmentz.com"] [uri "/backup.sql"] [unique_id "atPzNXk4XdPOUqU9datiHQAAAY8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 05:14:52
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:929:1000:4b46:43ee:bfc7:fc44 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:929:1000:4b46:43ee:bfc7:fc44 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 01:14:47.511684 2026] [security2:error] [pid 3507:tid 3507] [client 2400:cb00:929:1000:4b46:43ee:bfc7:fc44:13513] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mofcolorado.com.mykelmilur.com"] [uri "/.env.backup"] [unique_id "ai-KRxLNKuUegO7EZ0v-7wAAABI"], referer: https://www.google.com/search?q=www.mofcolorado.com.mykelmilur.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-02 10:10:29
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:929:1000:4b46:43ee:bfc7:fc44 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:929:1000:4b46:43ee:bfc7:fc44 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 06:10:25.492859 2026] [security2:error] [pid 25827:tid 25827] [client 2400:cb00:929:1000:4b46:43ee:bfc7:fc44:10691] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "curryfirm.com"] [uri "/.git/config"] [unique_id "ah6sEZ4uC_EJUDJ34tLyvAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-06 06:24:21
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:929:1000:4b46:43ee:bfc7:fc44 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:929:1000:4b46:43ee:bfc7:fc44 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 02:24:14.049434 2026] [security2:error] [pid 7249:tid 7249] [client 2400:cb00:929:1000:4b46:43ee:bfc7:fc44:11313] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.jenricker.com"] [uri "/.env.dev"] [unique_id "adNRjrI6ZGzeNtBNmBRKLQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-05 19:02:37
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:929:1000:4b46:43ee:bfc7:fc44 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:929:1000:4b46:43ee:bfc7:fc44 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 15:02:32.933176 2026] [security2:error] [pid 387:tid 387] [client 2400:cb00:929:1000:4b46:43ee:bfc7:fc44:12743] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.alexissteinrauf.com"] [uri "/.git/HEAD"] [unique_id "adKxyGepKPc696CE1_eXrAAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-05 18:04:40
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:929:1000:4b46:43ee:bfc7:fc44 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:929:1000:4b46:43ee:bfc7:fc44 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 14:04:36.880984 2026] [security2:error] [pid 27058:tid 27058] [client 2400:cb00:929:1000:4b46:43ee:bfc7:fc44:14091] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "benkatkin.passy.us"] [uri "/app/.env"] [unique_id "adKkNE_fN7geCZEgFRsfvAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-05 14:45:43
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:929:1000:4b46:43ee:bfc7:fc44 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:929:1000:4b46:43ee:bfc7:fc44 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 10:45:37.827561 2026] [security2:error] [pid 1478:tid 1501] [client 2400:cb00:929:1000:4b46:43ee:bfc7:fc44:13903] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ptinct.pwrcoupling.com"] [uri "/.env2"] [unique_id "adJ1kfgFcKsxwRy6UYAGFQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
SCHAPPY
2026-04-05 00:31:17
(6 months ago)
Critical web app attack detected. Restricted File Access Attempt
Web App Attack
🇺🇸
TPI-Abuse
2026-04-05 00:10:24
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:929:1000:4b46:43ee:bfc7:fc44 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:929:1000:4b46:43ee:bfc7:fc44 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 20:10:18.639990 2026] [security2:error] [pid 12623:tid 12623] [client 2400:cb00:929:1000:4b46:43ee:bfc7:fc44:12660] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.alhashim.com"] [uri "/.git/refs/heads/main"] [unique_id "adGoalbPwHBY1ZeMf0g2GgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-04 22:34:53
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:929:1000:4b46:43ee:bfc7:fc44 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:929:1000:4b46:43ee:bfc7:fc44 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 18:34:45.860772 2026] [security2:error] [pid 18727:tid 18727] [client 2400:cb00:929:1000:4b46:43ee:bfc7:fc44:10103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bradsalerno.com.winwithbrad.com"] [uri "/.git/HEAD"] [unique_id "adGSBRQ0fsbp07_H1v-j-QAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-04 03:27:07
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:929:1000:4b46:43ee:bfc7:fc44 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:929:1000:4b46:43ee:bfc7:fc44 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 23:27:02.884265 2026] [security2:error] [pid 11717:tid 11717] [client 2400:cb00:929:1000:4b46:43ee:bfc7:fc44:11910] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "eandgenergy.com"] [uri "/.env.save"] [unique_id "adCFBndffUsmNfnZbk8XrAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-03 15:38:45
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:929:1000:4b46:43ee:bfc7:fc44 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:929:1000:4b46:43ee:bfc7:fc44 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 11:38:39.204018 2026] [security2:error] [pid 11289:tid 11289] [client 2400:cb00:929:1000:4b46:43ee:bfc7:fc44:14056] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.spiht.com"] [uri "/.env.example"] [unique_id "ac_e_8s6lrLTsv-LVAH9VQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-02 10:26:37
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:929:1000:4b46:43ee:bfc7:fc44 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:929:1000:4b46:43ee:bfc7:fc44 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 02 06:26:33.827503 2026] [security2:error] [pid 27023:tid 27023] [client 2400:cb00:929:1000:4b46:43ee:bfc7:fc44:9975] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.abecasis.com"] [uri "/admin/.env"] [unique_id "ac5EWfiESy_88Jew5_yJ4AAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
