🇺🇸
TPI-Abuse
2026-10-05 23:15:28
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:b3aa:c554:6c1c:ee11 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:b3aa:c554:6c1c:ee11 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 05 19:15:24.794158 2026] [security2:error] [pid 19001:tid 19001] [client 2400:cb00:994:1000:b3aa:c554:6c1c:ee11:11151] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.achildsspace.com"] [uri "/.env"] [unique_id "asQvjDZc4R5H6ytg86UatwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-01 10:56:07
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:b3aa:c554:6c1c:ee11 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:b3aa:c554:6c1c:ee11 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 06:56:02.115300 2026] [security2:error] [pid 14878:tid 14878] [client 2400:cb00:994:1000:b3aa:c554:6c1c:ee11:11328] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "summithost.com"] [uri "/.env.staging"] [unique_id "ar48Qjrb1xHU7nbw2K4pEgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 06:02:50
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:b3aa:c554:6c1c:ee11 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:b3aa:c554:6c1c:ee11 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 02:02:44.683477 2026] [security2:error] [pid 7688:tid 7711] [client 2400:cb00:994:1000:b3aa:c554:6c1c:ee11:12465] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "livingalegacybulldogges.com"] [uri "/.env.backup"] [unique_id "arymBLelAtFaQpwdQ62zcwAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-29 10:58:58
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:b3aa:c554:6c1c:ee11 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:b3aa:c554:6c1c:ee11 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 06:58:53.268778 2026] [security2:error] [pid 28484:tid 28484] [client 2400:cb00:994:1000:b3aa:c554:6c1c:ee11:14251] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gatheringsattheschool.com"] [uri "/.env"] [unique_id "aruZ7SabwdtUGDTWJXtt8QAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-29 05:37:20
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:b3aa:c554:6c1c:ee11 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:b3aa:c554:6c1c:ee11 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 01:37:14.450189 2026] [security2:error] [pid 18799:tid 18799] [client 2400:cb00:994:1000:b3aa:c554:6c1c:ee11:14042] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ilanknapp.com"] [uri "/.htaccess"] [unique_id "artOimc4Ev7xJF8soYpezAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-29 00:13:59
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:b3aa:c554:6c1c:ee11 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:b3aa:c554:6c1c:ee11 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 20:13:52.211993 2026] [security2:error] [pid 8181:tid 8181] [client 2400:cb00:994:1000:b3aa:c554:6c1c:ee11:13359] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.scoutinsignia.com"] [uri "/.git/HEAD"] [unique_id "arsCwNlfRglF24KLyn1-AwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-28 21:42:26
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:b3aa:c554:6c1c:ee11 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:b3aa:c554:6c1c:ee11 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 17:42:22.164273 2026] [security2:error] [pid 18891:tid 18891] [client 2400:cb00:994:1000:b3aa:c554:6c1c:ee11:11509] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "foxmm.com"] [uri "/wp-config.php.bak"] [unique_id "arrfPvd3brxRodvMqUXJugAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-28 18:19:26
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:b3aa:c554:6c1c:ee11 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:b3aa:c554:6c1c:ee11 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 14:19:22.628223 2026] [security2:error] [pid 16401:tid 16401] [client 2400:cb00:994:1000:b3aa:c554:6c1c:ee11:9532] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.michaelandkatie.us"] [uri "/.env.local"] [unique_id "arqvqqDuLaBgK2p-RUIFbgAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-28 15:02:47
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:b3aa:c554:6c1c:ee11 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:b3aa:c554:6c1c:ee11 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 11:02:44.180161 2026] [security2:error] [pid 24547:tid 24547] [client 2400:cb00:994:1000:b3aa:c554:6c1c:ee11:11354] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "asbechiro.com"] [uri "/wp-config.php.bak"] [unique_id "arqBlEQ5J6gHpOI9PUHmRQAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-28 09:18:52
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:b3aa:c554:6c1c:ee11 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:b3aa:c554:6c1c:ee11 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 05:18:45.462261 2026] [security2:error] [pid 14820:tid 14820] [client 2400:cb00:994:1000:b3aa:c554:6c1c:ee11:11258] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "carlosmol.com"] [uri "/wp-config.php.bak"] [unique_id "arow9ab2O7zO-2UuqmoUMAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-26 11:37:54
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:b3aa:c554:6c1c:ee11 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:b3aa:c554:6c1c:ee11 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 07:37:49.011908 2026] [security2:error] [pid 5292:tid 5292] [client 2400:cb00:994:1000:b3aa:c554:6c1c:ee11:9493] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.paleopathologist.com"] [uri "/wp-config.php"] [unique_id "areujS8tw_DuaVAVRmU3YgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-26 11:08:18
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:b3aa:c554:6c1c:ee11 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:b3aa:c554:6c1c:ee11 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 07:08:12.883339 2026] [security2:error] [pid 28228:tid 28287] [client 2400:cb00:994:1000:b3aa:c554:6c1c:ee11:10339] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "power51.com"] [uri "/wp-config.php"] [unique_id "arennIi9rOR5efgslzB4xgAAAVg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-06-13 22:00:16
(3 months ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-12.
show less
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2025-04-16 11:07:32
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:b3aa:c554:6c1c:ee11 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:b3aa:c554:6c1c:ee11 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 16 07:07:26.486091 2025] [security2:error] [pid 1303833:tid 1303833] [client 2400:cb00:994:1000:b3aa:c554:6c1c:ee11:64750] [client 2400:cb00:994:1000:b3aa:c554:6c1c:ee11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.kcdusa.com"] [uri "/.git/config"] [unique_id "Z_-Pbi14EgPjXC-D5R-dewAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
