๐บ๐ธ
TPI-Abuse
2026-06-01 05:30:28
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:1912:0:2d8a:cc0b:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:1912:0:2d8a:cc0b:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 01:30:25.043402 2026] [security2:error] [pid 6959:tid 6959] [client 2a02:4780:3f:1912:0:2d8a:cc0b:1:52238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aromatherapyricebags.com"] [uri "/backend/.env"] [unique_id "ah0Y8S-kRC81RmQrvRxw9gAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-01 05:09:09
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:1912:0:2d8a:cc0b:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:1912:0:2d8a:cc0b:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 01:09:04.768370 2026] [security2:error] [pid 25761:tid 25761] [client 2a02:4780:3f:1912:0:2d8a:cc0b:1:65008] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lindaporcello.com"] [uri "/admin/.env"] [unique_id "ah0T8FbyVkM1KD41MD9dlQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-01 03:51:43
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:1912:0:2d8a:cc0b:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:1912:0:2d8a:cc0b:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 23:51:38.933244 2026] [security2:error] [pid 8270:tid 8270] [client 2a02:4780:3f:1912:0:2d8a:cc0b:1:39862] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dvdmasters.com"] [uri "/member/.env"] [unique_id "ah0Bylcch16SEO8dTUMKLwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-01 03:12:13
(2 days ago)
(mod_security) mod_security (id:949110) triggered by 2a02:4780:3f:1912:0:2d8a:cc0b:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:949110) triggered by 2a02:4780:3f:1912:0:2d8a:cc0b:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 23:12:07.560040 2026] [security2:error] [pid 1558:tid 1558] [client 2a02:4780:3f:1912:0:2d8a:cc0b:1:29216] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "spmbookings.com"] [uri "/backend/.env"] [unique_id "ahz4hzhN00ydmBmYmTr0yAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-01 02:30:31
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:1912:0:2d8a:cc0b:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:1912:0:2d8a:cc0b:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 22:30:27.821634 2026] [security2:error] [pid 16578:tid 16578] [client 2a02:4780:3f:1912:0:2d8a:cc0b:1:49812] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kalourislawfirm.com"] [uri "/new/.env"] [unique_id "ahzuw5-Rw_Ry_hyyVSVDJgAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-01 01:21:48
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:1912:0:2d8a:cc0b:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:1912:0:2d8a:cc0b:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 21:21:44.155781 2026] [security2:error] [pid 14126:tid 14126] [client 2a02:4780:3f:1912:0:2d8a:cc0b:1:40404] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "loneoakhoney.com"] [uri "/backend/.env"] [unique_id "ahzeqLar65hxM4jmTAXWQwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-01 00:31:48
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:1912:0:2d8a:cc0b:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:1912:0:2d8a:cc0b:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 20:31:40.849925 2026] [security2:error] [pid 11182:tid 11182] [client 2a02:4780:3f:1912:0:2d8a:cc0b:1:44828] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dodojuice.com"] [uri "/app/.env"] [unique_id "ahzS7N-I_FTwyqzy12-ApwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-05-31 23:34:10
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:1912:0:2d8a:cc0b:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:1912:0:2d8a:cc0b:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 19:34:07.080925 2026] [security2:error] [pid 15103:tid 15103] [client 2a02:4780:3f:1912:0:2d8a:cc0b:1:32938] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "climasyequipos.com"] [uri "/backend/.env"] [unique_id "ahzFb-6RVObsoD5XznWRjwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-05-31 23:15:32
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:1912:0:2d8a:cc0b:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:1912:0:2d8a:cc0b:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 19:15:26.487786 2026] [security2:error] [pid 27886:tid 27886] [client 2a02:4780:3f:1912:0:2d8a:cc0b:1:53382] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "praedari.com"] [uri "/backend/.env"] [unique_id "ahzBDiubq37pVbKUXBUHYgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
Al Coholic
2026-05-31 23:06:42
(3 days ago)
Detected By Fail2ban
Hacking
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-05-31 22:36:02
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:1912:0:2d8a:cc0b:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:1912:0:2d8a:cc0b:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 18:35:57.502201 2026] [security2:error] [pid 28312:tid 28312] [client 2a02:4780:3f:1912:0:2d8a:cc0b:1:49312] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "13waggoners.com"] [uri "/api/.env"] [unique_id "ahy3zVdEWc80cYeC28p-kgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ง๐ช
cmbplf
2026-05-31 21:33:59
(3 days ago)
398 requests with url.path *.env
Brute-Force
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-05-31 21:25:05
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:1912:0:2d8a:cc0b:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:1912:0:2d8a:cc0b:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 17:25:00.149748 2026] [security2:error] [pid 25769:tid 25769] [client 2a02:4780:3f:1912:0:2d8a:cc0b:1:44602] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "butkiewiczfamilyfarm.com"] [uri "/member/.env"] [unique_id "ahynLLRszKDzWvhQIpqUgQAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-05-31 20:40:52
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:1912:0:2d8a:cc0b:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:1912:0:2d8a:cc0b:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 16:40:44.654063 2026] [security2:error] [pid 26575:tid 26575] [client 2a02:4780:3f:1912:0:2d8a:cc0b:1:28810] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tobyscott.com"] [uri "/member/.env"] [unique_id "ahyczDZL6qdz5EFYKSekEwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-05-31 18:45:00
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:1912:0:2d8a:cc0b:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:1912:0:2d8a:cc0b:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 14:44:56.002225 2026] [security2:error] [pid 10465:tid 10465] [client 2a02:4780:3f:1912:0:2d8a:cc0b:1:22414] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pocketstyleinvitations.com"] [uri "/member/.env"] [unique_id "ahyBqN5vgnboQBvLIijVawAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack