🇩🇪
4server
2026-10-06 12:32:55
(44 minutes ago)
[TueOct0614:32:51.2498532026][security2:error][pid3681023:tid3681103][client2400:cb00:994:1000:de0:4 ...
show more
[TueOct0614:32:51.2498532026][security2:error][pid3681023:tid3681103][client2400:cb00:994:1000:de0:472d:5e9:afbe:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"hosting-royal.ch\"][uri\"/wp-config.php.bak\"][unique_id\"asTqc60WzXEDXzEON1QbIAAAAJI\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-06 12:27:53
(49 minutes ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:de0:472d:5e9:afbe (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:de0:472d:5e9:afbe (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 08:27:48.716308 2026] [security2:error] [pid 21091:tid 21091] [client 2400:cb00:994:1000:de0:472d:5e9:afbe:12360] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "surveyiowa.com"] [uri "/.env.old"] [unique_id "asTpRL5X6MZ4LAb1oa810wAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-06 10:56:16
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:de0:472d:5e9:afbe (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:de0:472d:5e9:afbe (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 06:56:13.417048 2026] [security2:error] [pid 24717:tid 24717] [client 2400:cb00:994:1000:de0:472d:5e9:afbe:12914] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "contrarianadvisors.com"] [uri "/.env.production"] [unique_id "asTTzdxFm6zZ_yhO7SS-NwAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-06 10:24:52
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:de0:472d:5e9:afbe (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:de0:472d:5e9:afbe (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 06:24:42.682883 2026] [security2:error] [pid 1899061:tid 1899083] [client 2400:cb00:994:1000:de0:472d:5e9:afbe:13487] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "condobudget.com"] [uri "/.env.old"] [unique_id "asTMavgGKxa1KL6FTqOHcAAAARA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-06 09:17:30
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:de0:472d:5e9:afbe (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:de0:472d:5e9:afbe (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 05:17:12.685544 2026] [security2:error] [pid 29499:tid 29499] [client 2400:cb00:994:1000:de0:472d:5e9:afbe:10023] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "oceandrivebeach.net"] [uri "/wp-config.php.save"] [unique_id "asS8mEP1qGY86MmUcBNwiQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-06 05:30:05
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:de0:472d:5e9:afbe (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:de0:472d:5e9:afbe (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 01:29:57.185360 2026] [security2:error] [pid 18632:tid 18632] [client 2400:cb00:994:1000:de0:472d:5e9:afbe:9779] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "foundintranslation.net"] [uri "/.env.dev"] [unique_id "asSHVaVUvutetbVY_dFBhAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-06 03:50:22
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:de0:472d:5e9:afbe (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:de0:472d:5e9:afbe (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 05 23:50:14.458224 2026] [security2:error] [pid 3335:tid 3335] [client 2400:cb00:994:1000:de0:472d:5e9:afbe:13104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.kaleidoscope-glass.com"] [uri "/.svn/entries"] [unique_id "asRv9jijLqtwL-9LfkSu0QAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-06 01:12:29
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:de0:472d:5e9:afbe (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:de0:472d:5e9:afbe (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 05 21:12:24.633002 2026] [security2:error] [pid 28607:tid 28607] [client 2400:cb00:994:1000:de0:472d:5e9:afbe:10320] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "slartibartfast.com"] [uri "/.git/config"] [unique_id "asRK-Da7cljVCSHGmkepRQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-06 00:53:08
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:de0:472d:5e9:afbe (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:de0:472d:5e9:afbe (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 05 20:52:54.573920 2026] [security2:error] [pid 26550:tid 26550] [client 2400:cb00:994:1000:de0:472d:5e9:afbe:12643] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "new-bethel-baptist-church.com"] [uri "/.svn/entries"] [unique_id "asRGZqVmA9k5UvkiEBIj0QAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-05 22:40:51
(14 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:de0:472d:5e9:afbe (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:de0:472d:5e9:afbe (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 05 18:40:17.003782 2026] [security2:error] [pid 23687:tid 23687] [client 2400:cb00:994:1000:de0:472d:5e9:afbe:11417] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "landjudging.com"] [uri "/.env.production"] [unique_id "asQnUYLC0f7bA8BbWPcOpAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-01 16:31:16
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:de0:472d:5e9:afbe (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:de0:472d:5e9:afbe (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 12:31:10.560500 2026] [security2:error] [pid 4488:tid 4488] [client 2400:cb00:994:1000:de0:472d:5e9:afbe:13494] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.rimworld.com"] [uri "/.git/config"] [unique_id "ar6KzuykG0D8PLgVduqSvAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇱🇹
NotACaptcha
2026-10-01 02:08:04
(5 days ago)
webserver:443 [01/Oct/2026] "GET /.env.backup HTTP/1.1" 404 5725 "-" "Mozilla/5.0 (Macintosh; Intel ...
show more
webserver:443 [01/Oct/2026] "GET /.env.backup HTTP/1.1" 404 5725 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3 Safari/605.1.15"
webserver:443 [01/Oct/2026] "GET /.env HTTP/1.1" 404 5725 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Edg/122.0.0.0"
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 15:53:24
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:de0:472d:5e9:afbe (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:de0:472d:5e9:afbe (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 11:53:18.819033 2026] [security2:error] [pid 24888:tid 24888] [client 2400:cb00:994:1000:de0:472d:5e9:afbe:10261] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "twogocamping.com"] [uri "/.env.backup"] [unique_id "ar0wbpHKITX2VhMQ71W9OQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 13:10:51
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:de0:472d:5e9:afbe (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:de0:472d:5e9:afbe (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 09:10:46.754851 2026] [security2:error] [pid 2386:tid 2511] [client 2400:cb00:994:1000:de0:472d:5e9:afbe:13998] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bortec-corp.com"] [uri "/.svn/entries"] [unique_id "ar0KVnz5zw5Z8UrhJKQPsgAAAI0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 07:49:01
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:de0:472d:5e9:afbe (Unknown): ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:994:1000:de0:472d:5e9:afbe (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 03:48:55.134732 2026] [security2:error] [pid 5035:tid 5035] [client 2400:cb00:994:1000:de0:472d:5e9:afbe:11769] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whoore.com"] [uri "/.svn/entries"] [unique_id "ary-50kPGyLaBA4c_FhFagAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
