π«π·
dynamix
2026-06-02 02:49:46
(4 weeks ago)
Multiple WAF Violations
Web App Attack
πΊπΈ
TPI-Abuse
2026-06-02 02:41:40
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:2b:2032:0:2d53:c16:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:2b:2032:0:2d53:c16:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 22:41:32.898404 2026] [security2:error] [pid 3302:tid 3302] [client 2a02:4780:2b:2032:0:2d53:c16:1:64694] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thehappywillow.com"] [uri "/backend/.env"] [unique_id "ah5C3D7sHqF1DS0hAbIZFgAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-06-02 02:22:03
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:2b:2032:0:2d53:c16:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:2b:2032:0:2d53:c16:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 22:21:56.225363 2026] [security2:error] [pid 480:tid 480] [client 2a02:4780:2b:2032:0:2d53:c16:1:31198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "flightclaimservices.com"] [uri "/api/.env"] [unique_id "ah4-ROtubC-pYEjI0x_68wAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-06-02 00:35:11
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:2b:2032:0:2d53:c16:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:2b:2032:0:2d53:c16:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 20:35:07.735349 2026] [security2:error] [pid 21856:tid 21856] [client 2a02:4780:2b:2032:0:2d53:c16:1:38454] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rohn.com"] [uri "/api/.env"] [unique_id "ah4lO2qFtAlbMIG2F4UmOwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-06-01 23:50:20
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:2b:2032:0:2d53:c16:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:2b:2032:0:2d53:c16:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 19:50:16.494511 2026] [security2:error] [pid 4466:tid 4466] [client 2a02:4780:2b:2032:0:2d53:c16:1:20508] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "crowmoonmarketing.com"] [uri "/app/.env"] [unique_id "ah4auE4cPOPY3qULKd8AGgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-06-01 23:25:41
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:2b:2032:0:2d53:c16:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:2b:2032:0:2d53:c16:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 19:25:36.266040 2026] [security2:error] [pid 9723:tid 9723] [client 2a02:4780:2b:2032:0:2d53:c16:1:59712] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rocky-ridgeco.com"] [uri "/member/.env"] [unique_id "ah4U8OA_9IYWKZ53yxNZtAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π§πͺ
cmbplf
2026-06-01 22:40:49
(4 weeks ago)
587 requests with url.path *.env
Brute-Force
Bad Web Bot
πΊπΈ
TPI-Abuse
2026-06-01 22:06:50
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:2b:2032:0:2d53:c16:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:2b:2032:0:2d53:c16:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 18:06:44.719465 2026] [security2:error] [pid 1638:tid 1638] [client 2a02:4780:2b:2032:0:2d53:c16:1:47002] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nifeconsult.com"] [uri "/dev/.env"] [unique_id "ah4CdBt5WCmXLGAem2JYFAAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-06-01 21:32:37
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:2b:2032:0:2d53:c16:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:2b:2032:0:2d53:c16:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 17:32:30.528256 2026] [security2:error] [pid 14609:tid 14689] [client 2a02:4780:2b:2032:0:2d53:c16:1:34796] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "schoprint.com"] [uri "/member/.env"] [unique_id "ah36bnLsEqSkEh7u6DNzlgAAANA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-06-01 21:00:08
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:2b:2032:0:2d53:c16:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:2b:2032:0:2d53:c16:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 17:00:04.096803 2026] [security2:error] [pid 1002:tid 1002] [client 2a02:4780:2b:2032:0:2d53:c16:1:31086] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "natasways.com"] [uri "/new/.env"] [unique_id "ah3y1J03dZEI0yRPoae39AAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-06-01 20:17:55
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:2b:2032:0:2d53:c16:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:2b:2032:0:2d53:c16:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 16:17:50.912099 2026] [security2:error] [pid 9384:tid 9462] [client 2a02:4780:2b:2032:0:2d53:c16:1:44894] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "teanaunz.com"] [uri "/.env"] [unique_id "ah3o7p2R7Y1XaPcIR0RsBgAAAJc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-06-01 19:51:56
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:2b:2032:0:2d53:c16:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:2b:2032:0:2d53:c16:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 15:51:51.045814 2026] [security2:error] [pid 30690:tid 30690] [client 2a02:4780:2b:2032:0:2d53:c16:1:34184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tremulant.com"] [uri "/new/.env"] [unique_id "ah3i17aeqqC_iXqGlBIhygAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-06-01 19:00:46
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:2b:2032:0:2d53:c16:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:2b:2032:0:2d53:c16:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 15:00:39.309270 2026] [security2:error] [pid 8797:tid 8797] [client 2a02:4780:2b:2032:0:2d53:c16:1:26308] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gp-cm.com"] [uri "/core/.env"] [unique_id "ah3W1-CQd6fHSM8mfyhdqQAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π³π±
e.fierstra
2026-06-01 18:27:29
(4 weeks ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-06-01 18:27:26
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:2b:2032:0:2d53:c16:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:2b:2032:0:2d53:c16:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 14:27:18.569628 2026] [security2:error] [pid 13203:tid 13203] [client 2a02:4780:2b:2032:0:2d53:c16:1:29456] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "djemjaybeats.com"] [uri "/api/.env"] [unique_id "ah3PBhm9ew9ynsOj12vpfAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack