๐ฉ๐ช
4server
2026-06-04 01:39:12
(1 hour ago)
[ThuJun0403:39:05.7650432026][security2:error][pid2590669:tid2590797][client2400:cb00:933:1000:204f: ...
show more
[ThuJun0403:39:05.7650432026][security2:error][pid2590669:tid2590797][client2400:cb00:933:1000:204f:45bc:34e6:c388:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"agilityrossoblu.ch\"][uri\"/.git/config\"][unique_id\"aiDXOUWmocaTPgvVpNl24gAAARE\"]
show less
Port Scan
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-05 11:34:21
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:933:1000:204f:45bc:34e6:c388 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:933:1000:204f:45bc:34e6:c388 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 07:34:16.625443 2026] [security2:error] [pid 13162:tid 13162] [client 2400:cb00:933:1000:204f:45bc:34e6:c388:10902] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.konstantiasofokleous.com"] [uri "/.git/index"] [unique_id "adJIuC-Blzm6oCslMhMaNwAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-01 11:50:20
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:933:1000:204f:45bc:34e6:c388 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:933:1000:204f:45bc:34e6:c388 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 01 07:50:15.083921 2026] [security2:error] [pid 8109:tid 8109] [client 2400:cb00:933:1000:204f:45bc:34e6:c388:14141] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.williams-rodriguez.org"] [uri "/public/.env"] [unique_id "ac0Gd_ZCTw3bSznAVAfa0wAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-01 08:31:14
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:933:1000:204f:45bc:34e6:c388 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:933:1000:204f:45bc:34e6:c388 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 01 04:31:07.055100 2026] [security2:error] [pid 7515:tid 7515] [client 2400:cb00:933:1000:204f:45bc:34e6:c388:10839] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.ridgerunners.biz"] [uri "/.env.staging"] [unique_id "aczXyzG2HEGEBp3DRian5gAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-01 07:12:15
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:933:1000:204f:45bc:34e6:c388 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:933:1000:204f:45bc:34e6:c388 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 01 03:12:07.552055 2026] [security2:error] [pid 16482:tid 16482] [client 2400:cb00:933:1000:204f:45bc:34e6:c388:9647] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.dunbartonucc.org"] [uri "/.env.example"] [unique_id "aczFR597VLUHgm45P1GSvgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-30 17:03:57
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:933:1000:204f:45bc:34e6:c388 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:933:1000:204f:45bc:34e6:c388 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 13:03:47.073433 2026] [security2:error] [pid 20850:tid 20850] [client 2400:cb00:933:1000:204f:45bc:34e6:c388:10220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.janicestewart.net"] [uri "/.env.dev"] [unique_id "acqs8_yBpsxTF9DT99YSlwAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
ger-stg-sifi1
2026-03-30 04:58:41
(2 months ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-26 23:16:09
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:933:1000:204f:45bc:34e6:c388 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:933:1000:204f:45bc:34e6:c388 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 26 19:16:03.075450 2026] [security2:error] [pid 17733:tid 17744] [client 2400:cb00:933:1000:204f:45bc:34e6:c388:13675] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.lesleyhcampbell.com"] [uri "/.git/config"] [unique_id "acW-M4eVA8W7PlOcdbOIFgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-25 19:25:05
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:933:1000:204f:45bc:34e6:c388 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:933:1000:204f:45bc:34e6:c388 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 25 15:24:57.601391 2026] [security2:error] [pid 8299:tid 8299] [client 2400:cb00:933:1000:204f:45bc:34e6:c388:14080] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.tex-fun.com"] [uri "/.git/config"] [unique_id "acQ2if9RZxvyDGl7D35hqgAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-25 03:35:32
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:933:1000:204f:45bc:34e6:c388 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:933:1000:204f:45bc:34e6:c388 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 24 23:35:25.826964 2026] [security2:error] [pid 9873:tid 9897] [client 2400:cb00:933:1000:204f:45bc:34e6:c388:10717] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.fernfield.com"] [uri "/.git/config"] [unique_id "acNX_f7C0muj532qh1GtIAAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-21 05:08:00
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:933:1000:204f:45bc:34e6:c388 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:933:1000:204f:45bc:34e6:c388 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 21 01:07:55.394307 2026] [security2:error] [pid 32614:tid 32614] [client 2400:cb00:933:1000:204f:45bc:34e6:c388:12211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.929.hongkonger.org"] [uri "/.git/logs/HEAD"] [unique_id "ab4nq0yxvS1ZcvH4fyVJ1QAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ฎ
stinpriza
2026-03-20 07:41:49
(2 months ago)
Web App Attack
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-20 05:35:17
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:933:1000:204f:45bc:34e6:c388 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:933:1000:204f:45bc:34e6:c388 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 01:35:11.742515 2026] [security2:error] [pid 25386:tid 25386] [client 2400:cb00:933:1000:204f:45bc:34e6:c388:10204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.punctuminteractive.com"] [uri "/backend/.env"] [unique_id "abzcj8hxa5yYQIIs5SQhrAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-20 05:07:32
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:933:1000:204f:45bc:34e6:c388 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:933:1000:204f:45bc:34e6:c388 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 01:07:28.256264 2026] [security2:error] [pid 24448:tid 24448] [client 2400:cb00:933:1000:204f:45bc:34e6:c388:9332] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.nebraskaadaptivesports.org"] [uri "/.env.dev"] [unique_id "abzWEBeKbfR8RDeYy5Z52gAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-19 11:30:14
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:933:1000:204f:45bc:34e6:c388 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:933:1000:204f:45bc:34e6:c388 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 07:30:09.923501 2026] [security2:error] [pid 3203:tid 3203] [client 2400:cb00:933:1000:204f:45bc:34e6:c388:13915] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.buanamegah.com"] [uri "/var/www/.env"] [unique_id "abveQYAhVOSCUUINoYxQbAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack