🇺🇸
TPI-Abuse
2026-10-06 14:51:01
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:cc9c:8bba:cc7f:b652 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:cc9c:8bba:cc7f:b652 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 10:50:54.164150 2026] [security2:error] [pid 7419:tid 7419] [client 2400:cb00:994:1000:cc9c:8bba:cc7f:b652:10700] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thehomemailbox.com"] [uri "/.env.dev"] [unique_id "asUKzlbeLc8CDrtHM9LOkwAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-06 01:04:41
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:cc9c:8bba:cc7f:b652 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:cc9c:8bba:cc7f:b652 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 05 21:04:07.575984 2026] [security2:error] [pid 9295:tid 9295] [client 2400:cb00:994:1000:cc9c:8bba:cc7f:b652:12611] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "radiointernational.net"] [uri "/.env.old"] [unique_id "asRJB4C3NX33btN8gOMkYQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-06 00:39:42
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:cc9c:8bba:cc7f:b652 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:cc9c:8bba:cc7f:b652 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 05 20:39:39.161633 2026] [security2:error] [pid 25649:tid 25649] [client 2400:cb00:994:1000:cc9c:8bba:cc7f:b652:10517] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "versahealthcare.com"] [uri "/.env.save"] [unique_id "asRDS2ZUWtlzeBixc2WP2gAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-05 21:28:36
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:cc9c:8bba:cc7f:b652 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:cc9c:8bba:cc7f:b652 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 05 17:28:31.306412 2026] [security2:error] [pid 6249:tid 6249] [client 2400:cb00:994:1000:cc9c:8bba:cc7f:b652:10201] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mute-swan.com"] [uri "/.svn/entries"] [unique_id "asQWf6ixwg59GoNr4rfh1QAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-01 10:29:02
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:cc9c:8bba:cc7f:b652 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:cc9c:8bba:cc7f:b652 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 06:28:55.313060 2026] [security2:error] [pid 29658:tid 29658] [client 2400:cb00:994:1000:cc9c:8bba:cc7f:b652:11504] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "styxwetworld.com"] [uri "/wp-config.php.bak"] [unique_id "ar415yD1bpJ90VfA7coTwwAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-01 02:27:02
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:cc9c:8bba:cc7f:b652 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:cc9c:8bba:cc7f:b652 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 22:26:56.534372 2026] [security2:error] [pid 10608:tid 10608] [client 2400:cb00:994:1000:cc9c:8bba:cc7f:b652:11528] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "qualtacon.com"] [uri "/.svn/entries"] [unique_id "ar3E8C4hzQ5xXzyHOhXtUgAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-30 18:21:01
(5 days ago)
Web probing (7 hits in 24h) on default-vhost: sensitive-path scans and/or 404 bursts. Reported by CR ...
show more
Web probing (7 hits in 24h) on default-vhost: sensitive-path scans and/or 404 bursts. Reported by CRMON.
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 10:52:19
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:cc9c:8bba:cc7f:b652 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:cc9c:8bba:cc7f:b652 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 06:52:14.106332 2026] [security2:error] [pid 9633:tid 9728] [client 2400:cb00:994:1000:cc9c:8bba:cc7f:b652:11508] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.executiveconsultingpr.com"] [uri "/wp-config.php"] [unique_id "arzp3oKk19yhlk99HapsHAAAAck"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 07:24:21
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:cc9c:8bba:cc7f:b652 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:cc9c:8bba:cc7f:b652 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 03:24:14.107373 2026] [security2:error] [pid 15438:tid 15438] [client 2400:cb00:994:1000:cc9c:8bba:cc7f:b652:10589] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.fgrotary.org"] [uri "/.git/config"] [unique_id "ary5HnLESUZLLOI12Ei7ogAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-29 23:02:57
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:cc9c:8bba:cc7f:b652 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:cc9c:8bba:cc7f:b652 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 19:02:53.096474 2026] [security2:error] [pid 18179:tid 18179] [client 2400:cb00:994:1000:cc9c:8bba:cc7f:b652:11314] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "linuxforpoets.com"] [uri "/wp-config.php"] [unique_id "arxDnXKq2jAQBPM9M5DRNwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-29 20:24:54
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:cc9c:8bba:cc7f:b652 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:cc9c:8bba:cc7f:b652 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 16:24:48.793351 2026] [security2:error] [pid 15923:tid 15923] [client 2400:cb00:994:1000:cc9c:8bba:cc7f:b652:13846] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "staging.lindenwoodpark.org"] [uri "/.svn/entries"] [unique_id "arwekLKB34P5HEXorQrZpwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-29 16:48:54
(6 days ago)
(mod_security) mod_security (id:210730) triggered by 2400:cb00:994:1000:cc9c:8bba:cc7f:b652 (Unknown ...
show more
(mod_security) mod_security (id:210730) triggered by 2400:cb00:994:1000:cc9c:8bba:cc7f:b652 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 12:48:49.052736 2026] [security2:error] [pid 6777:tid 6777] [client 2400:cb00:994:1000:cc9c:8bba:cc7f:b652:13258] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||www.acmyles.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.acmyles.com"] [uri "/index.php.bak"] [unique_id "arvr8akeWjiP-YUs_85a-AAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-29 15:09:06
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:cc9c:8bba:cc7f:b652 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:cc9c:8bba:cc7f:b652 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 11:09:00.698007 2026] [security2:error] [pid 32140:tid 32140] [client 2400:cb00:994:1000:cc9c:8bba:cc7f:b652:10556] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "elianabeam.com"] [uri "/wp-config.php.bak"] [unique_id "arvUjPB_6l7umIG24n6LYAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-29 12:08:36
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:cc9c:8bba:cc7f:b652 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:cc9c:8bba:cc7f:b652 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 08:08:29.257989 2026] [security2:error] [pid 21364:tid 21364] [client 2400:cb00:994:1000:cc9c:8bba:cc7f:b652:10308] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kayelynn.com"] [uri "/.env"] [unique_id "aruqPX6iT09KDKNdZO2OngAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-29 07:14:41
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:cc9c:8bba:cc7f:b652 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:cc9c:8bba:cc7f:b652 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 03:14:33.808101 2026] [security2:error] [pid 25141:tid 25141] [client 2400:cb00:994:1000:cc9c:8bba:cc7f:b652:12674] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ralphharris.org"] [uri "/.env.local"] [unique_id "artlWSBjggUlqtbQVv_lKAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
