๐บ๐ธ
TPI-Abuse
2026-06-08 00:36:47
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:11:1778:0:dfd:f0ab:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:11:1778:0:dfd:f0ab:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 20:36:42.892990 2026] [security2:error] [pid 17258:tid 17258] [client 2a02:4780:11:1778:0:dfd:f0ab:1:39108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "scadainthecloud.com"] [uri "/backend/.env"] [unique_id "aiYOmp7dDe7Sf64oNwm8RgAAAGw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-07 23:12:03
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:11:1778:0:dfd:f0ab:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:11:1778:0:dfd:f0ab:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 19:11:56.042101 2026] [security2:error] [pid 27688:tid 27706] [client 2a02:4780:11:1778:0:dfd:f0ab:1:32420] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "shaneblair.com"] [uri "/backend/.env"] [unique_id "aiX6vBb9k4q4dp2Y5ACB6QAAARA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-07 22:48:05
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:11:1778:0:dfd:f0ab:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:11:1778:0:dfd:f0ab:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 18:48:00.544432 2026] [security2:error] [pid 17645:tid 17645] [client 2a02:4780:11:1778:0:dfd:f0ab:1:58806] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "firstexplorer.us"] [uri "/member/.env"] [unique_id "aiX1IByowtyJKKnIC0g6zgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
homeshowdomain.nl
2026-06-07 22:07:45
(1 week ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-06.
show less
Web App Attack
SSH
Hacking
๐บ๐ธ
TPI-Abuse
2026-06-07 21:54:43
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:11:1778:0:dfd:f0ab:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:11:1778:0:dfd:f0ab:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 17:54:40.108713 2026] [security2:error] [pid 16160:tid 16160] [client 2a02:4780:11:1778:0:dfd:f0ab:1:56796] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "celebritybikinigossip.com"] [uri "/dev/.env"] [unique_id "aiXooHq0AgPTVuPT6R2PKgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-07 20:23:05
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:11:1778:0:dfd:f0ab:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:11:1778:0:dfd:f0ab:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 16:22:58.852464 2026] [security2:error] [pid 1562:tid 1666] [client 2a02:4780:11:1778:0:dfd:f0ab:1:33598] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "twinsonderhoud.nl"] [uri "/member/.env"] [unique_id "aiXTIoKgd8UONuVsPyTDEQAAAgw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-07 20:00:42
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:11:1778:0:dfd:f0ab:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:11:1778:0:dfd:f0ab:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 16:00:35.408701 2026] [security2:error] [pid 22862:tid 22862] [client 2a02:4780:11:1778:0:dfd:f0ab:1:39066] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kwijlen.com"] [uri "/backend/.env"] [unique_id "aiXN4_SxJY6FGaZ3QV6svQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ต๐ฑ
ketovoila.pl
2026-06-07 18:19:07
(2 weeks ago)
ketovoila.pl web app secret/repository scan: hits=9; unique_paths=9; sample_paths=/.env,/admin/.env, ...
show more
ketovoila.pl web app secret/repository scan: hits=9; unique_paths=9; sample_paths=/.env,/admin/.env,/api/.env; UA="Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"; window=2026-06-07T18:19:07Z..2026-06-07T18:19:07Z
show less
Bad Web Bot
Web App Attack
๐ณ๐ฑ
BlueWire Hosting
2026-06-07 12:13:50
(2 weeks ago)
Probing websites for vulnerabilities
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-07 10:21:41
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:11:1778:0:dfd:f0ab:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:11:1778:0:dfd:f0ab:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 06:21:36.442489 2026] [security2:error] [pid 4909:tid 4909] [client 2a02:4780:11:1778:0:dfd:f0ab:1:38666] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "urlpick.com"] [uri "/app/.env"] [unique_id "aiVGMBugNYPAIw5HkafOXwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-07 07:30:31
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:11:1778:0:dfd:f0ab:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:11:1778:0:dfd:f0ab:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 03:30:28.667195 2026] [security2:error] [pid 28362:tid 28362] [client 2a02:4780:11:1778:0:dfd:f0ab:1:50260] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kikopoke.com"] [uri "/.env"] [unique_id "aiUeFGG2ZZ59wt0vtuAHiAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-07 06:14:59
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:11:1778:0:dfd:f0ab:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:11:1778:0:dfd:f0ab:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 02:14:52.945249 2026] [security2:error] [pid 3821:tid 3821] [client 2a02:4780:11:1778:0:dfd:f0ab:1:59508] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "apushistoryexamprep.com"] [uri "/core/.env"] [unique_id "aiUMXCNcgKEo89hEaIO89AAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-07 05:34:56
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:11:1778:0:dfd:f0ab:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:11:1778:0:dfd:f0ab:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 01:34:51.377016 2026] [security2:error] [pid 16322:tid 16322] [client 2a02:4780:11:1778:0:dfd:f0ab:1:62086] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "warshaw1.com"] [uri "/member/.env"] [unique_id "aiUC-wtM7QMbd3I2TzoXHwAAAEE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-07 04:20:48
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:11:1778:0:dfd:f0ab:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:11:1778:0:dfd:f0ab:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 00:20:42.911616 2026] [security2:error] [pid 3930:tid 3930] [client 2a02:4780:11:1778:0:dfd:f0ab:1:62258] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rdsparts.com"] [uri "/.env"] [unique_id "aiTxmvu3WMdMlMIMG5oc3AAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-07 02:25:20
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:11:1778:0:dfd:f0ab:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:11:1778:0:dfd:f0ab:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 06 22:25:16.833337 2026] [security2:error] [pid 2763:tid 2763] [client 2a02:4780:11:1778:0:dfd:f0ab:1:41336] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "misfitranch.com"] [uri "/.env"] [unique_id "aiTWjJGjObDYdiOvgqUipQAAACY"]
show less
Brute-Force
Bad Web Bot
Web App Attack