🇺🇸
TPI-Abuse
2026-10-15 19:34:29
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:996:1000:83f1:f75e:fd73:4133 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:996:1000:83f1:f75e:fd73:4133 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 15:34:23.898125 2026] [security2:error] [pid 1134:tid 1134] [client 2400:cb00:996:1000:83f1:f75e:fd73:4133:12872] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "primelb.com"] [uri "/.htaccess"] [unique_id "atEqvyEBeUMiygK2mvHPjwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 17:43:23
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:996:1000:83f1:f75e:fd73:4133 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:996:1000:83f1:f75e:fd73:4133 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 13:43:17.735356 2026] [security2:error] [pid 10430:tid 10430] [client 2400:cb00:996:1000:83f1:f75e:fd73:4133:13503] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.tallahasseepartybuses.com"] [uri "/wp-config.php.old"] [unique_id "atEQtaxboZDpy7B_1AZHJQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 16:41:38
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:996:1000:83f1:f75e:fd73:4133 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:996:1000:83f1:f75e:fd73:4133 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 12:41:31.291587 2026] [security2:error] [pid 16978:tid 16978] [client 2400:cb00:996:1000:83f1:f75e:fd73:4133:10509] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whitetailridgeantiques.com"] [uri "/.env.local"] [unique_id "atECO-QhIGwXHfPh757AtwAAADE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-10-15 13:59:31
(12 hours ago)
[ThuOct1515:59:25.3203032026][security2:error][pid4061825:tid4061914][client2400:cb00:996:1000:83f1: ...
show more
[ThuOct1515:59:25.3203032026][security2:error][pid4061825:tid4061914][client2400:cb00:996:1000:83f1:f75e:fd73:4133:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"restaurantgandria.ch\"][uri\"/wp-config.php\"][unique_id\"atDcPQ7RQwt8hxnOohKsiwAAAEQ\"]
show less
Port Scan
Brute-Force
Web App Attack
🇳🇱
ParaBug
2026-10-15 06:40:10
(19 hours ago)
2400:cb00:996:1000:83f1:f75e:fd73:4133 - - [15/Oct/2026:08:40:09 +0200] "GET /.aws/credentials HTTP/ ...
show more
2400:cb00:996:1000:83f1:f75e:fd73:4133 - - [15/Oct/2026:08:40:09 +0200] "GET /.aws/credentials HTTP/1.1" 301 557 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3 Safari/605.1.15"
...
show less
Phishing
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 21:34:22
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:996:1000:83f1:f75e:fd73:4133 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:996:1000:83f1:f75e:fd73:4133 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 17:34:17.070645 2026] [security2:error] [pid 5567:tid 5567] [client 2400:cb00:996:1000:83f1:f75e:fd73:4133:11216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "itony.com"] [uri "/.git/config"] [unique_id "as_1Wb4pSiYFhXf8FheMDAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 06:29:16
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:996:1000:83f1:f75e:fd73:4133 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:996:1000:83f1:f75e:fd73:4133 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 02:29:09.734489 2026] [security2:error] [pid 11880:tid 11880] [client 2400:cb00:996:1000:83f1:f75e:fd73:4133:14116] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mykidsdaycare.net"] [uri "/.git/config"] [unique_id "as8hNUuqBzfZbOkXnDKQ0AAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 02:35:11
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:996:1000:83f1:f75e:fd73:4133 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:996:1000:83f1:f75e:fd73:4133 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 22:35:04.028292 2026] [security2:error] [pid 25081:tid 25081] [client 2400:cb00:996:1000:83f1:f75e:fd73:4133:13510] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lapsychiatrist.com"] [uri "/.env.staging"] [unique_id "as7qWAuu2J7X5PWup-axgQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
todix
2026-10-13 17:03:40
(2 days ago)
"GET /.docker/config.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_3_1 like Mac ...
show more
"GET /.docker/config.json HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3 Mobile/15E148 Safari/604.1"
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 11:01:43
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:996:1000:83f1:f75e:fd73:4133 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:996:1000:83f1:f75e:fd73:4133 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 07:01:38.924533 2026] [security2:error] [pid 15017:tid 15017] [client 2400:cb00:996:1000:83f1:f75e:fd73:4133:13317] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "computerian.net"] [uri "/wp-config.php.save"] [unique_id "as4PkuheNFsfWnA0WZQkNQAAAEY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 06:04:51
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 2400:cb00:996:1000:83f1:f75e:fd73:4133 (Unknown ...
show more
(mod_security) mod_security (id:210730) triggered by 2400:cb00:996:1000:83f1:f75e:fd73:4133 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 02:04:45.417973 2026] [security2:error] [pid 29837:tid 29837] [client 2400:cb00:996:1000:83f1:f75e:fd73:4133:11053] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.emelecsrl.com|F|2"] [data ".tfstate.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.emelecsrl.com"] [uri "/.terraform/terraform.tfstate.backup"] [unique_id "as3J_eTHPbH_HsKSm-8IsAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 03:46:26
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:996:1000:83f1:f75e:fd73:4133 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:996:1000:83f1:f75e:fd73:4133 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 23:46:20.183393 2026] [security2:error] [pid 3690:tid 3690] [client 2400:cb00:996:1000:83f1:f75e:fd73:4133:11938] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.recetabook.com"] [uri "/wp-config.php"] [unique_id "as2pjL-yglUxFjtivpkPPgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-12 00:28:32
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:996:1000:83f1:f75e:fd73:4133 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:996:1000:83f1:f75e:fd73:4133 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 20:28:29.035925 2026] [security2:error] [pid 30246:tid 30246] [client 2400:cb00:996:1000:83f1:f75e:fd73:4133:10002] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "soulwolf.com"] [uri "/wp-config.php.old"] [unique_id "aswprcSATG7qc76wCo2NnQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-11 23:11:05
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:996:1000:83f1:f75e:fd73:4133 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:996:1000:83f1:f75e:fd73:4133 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 19:10:58.537434 2026] [security2:error] [pid 16276:tid 16276] [client 2400:cb00:996:1000:83f1:f75e:fd73:4133:10241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ahsigns.com"] [uri "/.env.production"] [unique_id "aswXgrgfWctqV48psJatjgAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-11 16:17:33
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:996:1000:83f1:f75e:fd73:4133 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:996:1000:83f1:f75e:fd73:4133 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 12:17:24.379312 2026] [security2:error] [pid 24808:tid 24808] [client 2400:cb00:996:1000:83f1:f75e:fd73:4133:13585] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.petesplaza.com"] [uri "/.env.save"] [unique_id "asu2lApBMTKyDmjyJn0GCAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
