🇺🇸
TPI-Abuse
2026-10-15 18:55:38
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:996:1000:cf43:da5:a189:48b3 (Unknown) ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:996:1000:cf43:da5:a189:48b3 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 14:55:32.431914 2026] [security2:error] [pid 13381:tid 13381] [client 2400:cb00:996:1000:cf43:da5:a189:48b3:10140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gegraphics.biz"] [uri "/wp-config.php"] [unique_id "atEhpDByA5LpbXCXnHsLRAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 18:00:29
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:996:1000:cf43:da5:a189:48b3 (Unknown) ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:996:1000:cf43:da5:a189:48b3 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 14:00:14.187396 2026] [security2:error] [pid 13728:tid 13728] [client 2400:cb00:996:1000:cf43:da5:a189:48b3:10601] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "halotoys.com"] [uri "/wp-config.php.save"] [unique_id "atEUrhLBjUTERX_pra4KlwAAACc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 11:24:13
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:996:1000:cf43:da5:a189:48b3 (Unknown) ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:996:1000:cf43:da5:a189:48b3 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 07:24:09.599823 2026] [security2:error] [pid 23680:tid 23680] [client 2400:cb00:996:1000:cf43:da5:a189:48b3:10473] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southernislands.com"] [uri "/.env.old"] [unique_id "atC32Qi1khSs0-Hk9ozfpwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 23:27:27
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:996:1000:cf43:da5:a189:48b3 (Unknown) ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:996:1000:cf43:da5:a189:48b3 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 19:27:19.402826 2026] [security2:error] [pid 1437:tid 1437] [client 2400:cb00:996:1000:cf43:da5:a189:48b3:9584] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.blaslandsporthorses.com"] [uri "/wp-config.php.save"] [unique_id "atAP10V2UYnBh3fKVNXAJwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 10:36:45
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:996:1000:cf43:da5:a189:48b3 (Unknown) ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:996:1000:cf43:da5:a189:48b3 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 06:36:37.534734 2026] [security2:error] [pid 1478:tid 1478] [client 2400:cb00:996:1000:cf43:da5:a189:48b3:11695] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "go-901.com"] [uri "/.env.save"] [unique_id "as9bNfHQu2CxnWpGB31z3gAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
4server
2026-10-14 08:43:41
(1 week ago)
[WedOct1410:43:32.2179222026][security2:error][pid1174909:tid1174963][client2400:cb00:996:1000:cf43: ...
show more
[WedOct1410:43:32.2179222026][security2:error][pid1174909:tid1174963][client2400:cb00:996:1000:cf43:da5:a189:48b3:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\"wp-config\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"710\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"foodelivery.benvenutialfood.ch\"][uri\"/wp-config.php.old\"][unique_id\"as9AtMkdhZK8W5DtjVkBnQAAABc\"]
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 03:31:37
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:996:1000:cf43:da5:a189:48b3 (Unknown) ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:996:1000:cf43:da5:a189:48b3 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 23:31:32.756486 2026] [security2:error] [pid 1400:tid 1400] [client 2400:cb00:996:1000:cf43:da5:a189:48b3:12374] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hoofprints.us"] [uri "/.env.save"] [unique_id "as2mFGxEovi8hLBCSv1EYwAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-12 21:20:15
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:996:1000:cf43:da5:a189:48b3 (Unknown) ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:996:1000:cf43:da5:a189:48b3 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 17:20:11.630059 2026] [security2:error] [pid 7151:tid 7151] [client 2400:cb00:996:1000:cf43:da5:a189:48b3:13084] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.studio716.info"] [uri "/.htaccess"] [unique_id "as1PC0MTQblQsJ9SqSwK8wAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-12 06:28:42
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:996:1000:cf43:da5:a189:48b3 (Unknown) ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:996:1000:cf43:da5:a189:48b3 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 02:28:35.747321 2026] [security2:error] [pid 14347:tid 14347] [client 2400:cb00:996:1000:cf43:da5:a189:48b3:11140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "celtickyss.com"] [uri "/.env.staging"] [unique_id "asx-E05UkybafnXe95RQMAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-12 01:25:38
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:996:1000:cf43:da5:a189:48b3 (Unknown) ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:996:1000:cf43:da5:a189:48b3 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 21:25:31.629492 2026] [security2:error] [pid 19532:tid 19532] [client 2400:cb00:996:1000:cf43:da5:a189:48b3:12576] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jmarkcapital.com"] [uri "/.env.bak"] [unique_id "asw3C-FRr2iHSTNM9QKzsgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-12 00:32:54
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:996:1000:cf43:da5:a189:48b3 (Unknown) ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:996:1000:cf43:da5:a189:48b3 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 20:32:48.490655 2026] [security2:error] [pid 14886:tid 14886] [client 2400:cb00:996:1000:cf43:da5:a189:48b3:11779] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "worshipconcert.com"] [uri "/.env.production"] [unique_id "aswqsDeyL4EHfuhOa_aRKQAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-11 23:55:40
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:996:1000:cf43:da5:a189:48b3 (Unknown) ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:996:1000:cf43:da5:a189:48b3 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 19:55:34.122645 2026] [security2:error] [pid 2645:tid 2654] [client 2400:cb00:996:1000:cf43:da5:a189:48b3:13168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "coloradocritterpics.com"] [uri "/.env.production"] [unique_id "aswh9so0pg3kbBdxIVYTJwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-11 12:06:32
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:996:1000:cf43:da5:a189:48b3 (Unknown) ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:996:1000:cf43:da5:a189:48b3 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 08:06:28.894687 2026] [security2:error] [pid 17288:tid 17330] [client 2400:cb00:996:1000:cf43:da5:a189:48b3:12287] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vinylnotespodcast.com"] [uri "/.env.save"] [unique_id "ast7xP6WB5m_whLB7GAI0AAAAIc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-11 03:13:11
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 2400:cb00:996:1000:cf43:da5:a189:48b3 (Unknown) ...
show more
(mod_security) mod_security (id:210730) triggered by 2400:cb00:996:1000:cf43:da5:a189:48b3 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 23:13:03.852381 2026] [security2:error] [pid 25705:tid 25705] [client 2400:cb00:996:1000:cf43:da5:a189:48b3:12789] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||sutherlandyogastudio.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "sutherlandyogastudio.com"] [uri "/index.php.bak"] [unique_id "asr-vxM_H8R8NM3wAW7D0gAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-11 01:34:52
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:996:1000:cf43:da5:a189:48b3 (Unknown) ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:996:1000:cf43:da5:a189:48b3 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 21:34:45.020566 2026] [security2:error] [pid 22302:tid 22302] [client 2400:cb00:996:1000:cf43:da5:a189:48b3:11347] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "konahawaii.com"] [uri "/wp-config.php.old"] [unique_id "asrnteEiuBxDRx_o9-2pDgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
