๐ซ๐ฎ
Vaino Karppi
2026-06-03 00:33:54
(21 hours ago)
Honeypot triggered: Tried to access restricted page /admin/.env
Hacking
๐บ๐ธ
TPI-Abuse
2026-06-02 23:22:34
(22 hours ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:1799:0:ad9:29bb:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:1799:0:ad9:29bb:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 19:22:30.125993 2026] [security2:error] [pid 10651:tid 10651] [client 2a02:4780:3f:1799:0:ad9:29bb:1:31458] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "carra.org"] [uri "/.env"] [unique_id "ah9ltvP6sf1TG8YvaQMTSwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-02 22:35:32
(23 hours ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:1799:0:ad9:29bb:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:1799:0:ad9:29bb:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 18:35:27.590377 2026] [security2:error] [pid 6653:tid 6744] [client 2a02:4780:3f:1799:0:ad9:29bb:1:19744] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "soluciona.biz"] [uri "/.env"] [unique_id "ah9ar_-8bIux7aY8NFQ0-wAAAJU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-02 20:35:08
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:1799:0:ad9:29bb:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:1799:0:ad9:29bb:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 16:35:00.558748 2026] [security2:error] [pid 30436:tid 30436] [client 2a02:4780:3f:1799:0:ad9:29bb:1:46114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tomweston.net"] [uri "/core/.env"] [unique_id "ah8-dHPfG5c_nONWIWksFgAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-02 17:42:15
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:1799:0:ad9:29bb:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:1799:0:ad9:29bb:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 13:42:09.515333 2026] [security2:error] [pid 30381:tid 30381] [client 2a02:4780:3f:1799:0:ad9:29bb:1:64986] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seacor.us"] [uri "/core/.env"] [unique_id "ah8V8dJbAI8E2LzCAyNH_gAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-02 17:12:56
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:1799:0:ad9:29bb:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:1799:0:ad9:29bb:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 13:12:51.539492 2026] [security2:error] [pid 31168:tid 31168] [client 2a02:4780:3f:1799:0:ad9:29bb:1:41276] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "advancedmachininginc.com"] [uri "/.env"] [unique_id "ah8PE_cYB62zGyi4ThBs2gAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
4server
2026-06-02 16:12:39
(1 day ago)
[TueJun0218:12:35.6859622026][security2:error][pid371326:tid371434][client2a02:4780:3f:1799:0:ad9:29 ...
show more
[TueJun0218:12:35.6859622026][security2:error][pid371326:tid371434][client2a02:4780:3f:1799:0:ad9:29bb:1:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\b\(\?:\\\\\\\\.\(\?:ht\(\?:access\|passwd\|group\)\|www_\?acl\)\|global\\\\\\\\.asa\|httpd\\\\\\\\.conf\|boot\\\\\\\\.ini\|web.config\)\\\\\\\\b\|\(\|\^\|\\\\\\\\.\\\\\\\\.\)/etc/\|/\\\\\\\\.\(\?:history\|bash_history\|sh_history\|env\)\$\)\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"204\"][id\"390709\"][rev\"30\"][msg\"Atomicorp.comWAFRules:Attempttoaccessprotectedfileremotely\"][data\"/.env\"][severity\"CRITICAL\"][hostname\"tourkomanis.ch\"][uri\"/core/.env\"][unique_id\"ah8A8yujC5v_2wtyOK6BhQAAAFY\"]
show less
Port Scan
Brute-Force
Web App Attack
๐ฌ๐ง
Aetherweb Ark
2026-06-02 15:25:44
(1 day ago)
(mod_security) mod_security (id:949110) triggered by 2a02:4780:3f:1799:0:ad9:29bb:1 (Unknown): N in ...
show more
(mod_security) mod_security (id:949110) triggered by 2a02:4780:3f:1799:0:ad9:29bb:1 (Unknown): N in the last X secs
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-02 13:38:20
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:1799:0:ad9:29bb:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:1799:0:ad9:29bb:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 09:38:16.114817 2026] [security2:error] [pid 6091:tid 6091] [client 2a02:4780:3f:1799:0:ad9:29bb:1:17024] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hillcrest.us"] [uri "/app/.env"] [unique_id "ah7cyOHLB5YZnaIdbgZW-gAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-02 13:01:38
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:1799:0:ad9:29bb:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:1799:0:ad9:29bb:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 09:01:30.416517 2026] [security2:error] [pid 2374:tid 2374] [client 2a02:4780:3f:1799:0:ad9:29bb:1:33154] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "feministvoice.blog"] [uri "/core/.env"] [unique_id "ah7UKo3afnl-96wUpXvRRAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-02 12:41:00
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:1799:0:ad9:29bb:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:1799:0:ad9:29bb:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 08:40:53.052418 2026] [security2:error] [pid 6986:tid 6986] [client 2a02:4780:3f:1799:0:ad9:29bb:1:26184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "saveourstats.com"] [uri "/api/.env"] [unique_id "ah7PVR6sHxYtl5_cfZ49WwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-02 12:25:15
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:1799:0:ad9:29bb:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:1799:0:ad9:29bb:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 08:25:09.257875 2026] [security2:error] [pid 6611:tid 6611] [client 2a02:4780:3f:1799:0:ad9:29bb:1:50194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "al-bukhari.org"] [uri "/admin/.env"] [unique_id "ah7LpXeE7MMWxuKG_ywF3AAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-02 10:42:59
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:1799:0:ad9:29bb:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:1799:0:ad9:29bb:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 06:42:55.460511 2026] [security2:error] [pid 12793:tid 12793] [client 2a02:4780:3f:1799:0:ad9:29bb:1:29514] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "alaskadreamspublishing.com"] [uri "/admin/.env"] [unique_id "ah6zr8sysGXmSzMBx6dDsAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-02 10:22:51
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:1799:0:ad9:29bb:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:1799:0:ad9:29bb:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 06:22:47.995376 2026] [security2:error] [pid 17968:tid 17968] [client 2a02:4780:3f:1799:0:ad9:29bb:1:43618] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lacycustombuilt.com"] [uri "/app/.env"] [unique_id "ah6u98kz6oSAj45HNimIZwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-02 10:07:37
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:1799:0:ad9:29bb:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:1799:0:ad9:29bb:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 06:07:33.966576 2026] [security2:error] [pid 1261:tid 1261] [client 2a02:4780:3f:1799:0:ad9:29bb:1:40328] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gdijoe.com"] [uri "/core/.env"] [unique_id "ah6rZZuIc9TZ5NxpiP8gQQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack