๐ซ๐ท
dynamix
2026-08-26 12:35:32
(1 hour ago)
Multiple WAF Violations
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-26 10:47:52
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:2069:0:973:3890:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:2069:0:973:3890:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 06:47:45.704658 2026] [security2:error] [pid 28933:tid 28933] [client 2a02:4780:3f:2069:0:973:3890:1:56524] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vrevgaming.net"] [uri "/core/.env"] [unique_id "ao7EUXZGlf7qFoyiR66H2QAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-26 09:15:46
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:2069:0:973:3890:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:2069:0:973:3890:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 05:15:38.029983 2026] [security2:error] [pid 18393:tid 18393] [client 2a02:4780:3f:2069:0:973:3890:1:57848] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "scsurfside.net"] [uri "/backend/.env"] [unique_id "ao6uukua84F_H3_2m4r82gAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-26 07:34:12
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:2069:0:973:3890:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:2069:0:973:3890:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 03:34:08.268183 2026] [security2:error] [pid 3096:tid 3096] [client 2a02:4780:3f:2069:0:973:3890:1:18862] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "henryweb.net"] [uri "/core/.env"] [unique_id "ao6W8Ni1K2GpKNxgMIcfzQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
dbmwebdesign
2026-08-26 04:50:02
(8 hours ago)
WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail
Web App Attack
๐ฉ๐ช
Melle
2026-08-26 02:52:04
(10 hours ago)
Blocked by CrowdSec | Scenario: crowdsecurity/http-sensitive-files | 2a02:4780:3f:2069:0:973:3890:1 ...
show more
Blocked by CrowdSec | Scenario: crowdsecurity/http-sensitive-files | 2a02:4780:3f:2069:0:973:3890:1 triggered 5 events | Detected: 2026-08-26T02:52:04.187693759Z
show less
Web App Attack
Hacking
๐ฉ๐ช
sverson
2026-08-26 02:06:43
(11 hours ago)
Abusive use detected / Unauthorized connection attempt / Mutliple unauthorized attempts to access we ...
show more
Abusive use detected / Unauthorized connection attempt / Mutliple unauthorized attempts to access web resources
show less
Hacking
Brute-Force
Web App Attack
๐ณ๐ฑ
WeCloudit-Anti-Abuse
2026-08-26 01:33:05
(12 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
๐บ๐ธ
TPI-Abuse
2026-08-26 00:31:23
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:2069:0:973:3890:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:2069:0:973:3890:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 20:31:17.616519 2026] [security2:error] [pid 5586:tid 5586] [client 2a02:4780:3f:2069:0:973:3890:1:16976] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whaleyhouse.net"] [uri "/test/.env"] [unique_id "ao4z1faJv_p0IXWInwWE2QAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-25 23:31:41
(14 hours ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:2069:0:973:3890:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:2069:0:973:3890:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 19:31:36.264306 2026] [security2:error] [pid 15801:tid 15801] [client 2a02:4780:3f:2069:0:973:3890:1:41488] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ronniejohnson.net"] [uri "/dev/.env"] [unique_id "ao4l2JPlT_UmVRz6mR9DagAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-25 21:12:21
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:2069:0:973:3890:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:2069:0:973:3890:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 17:12:13.858109 2026] [security2:error] [pid 7937:tid 7937] [client 2a02:4780:3f:2069:0:973:3890:1:38804] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ryanc.net"] [uri "/api/.env"] [unique_id "ao4FLdBhKHgJeOZ3BG6KaAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-25 19:55:38
(17 hours ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:2069:0:973:3890:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:2069:0:973:3890:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 15:55:31.571823 2026] [security2:error] [pid 10346:tid 10346] [client 2a02:4780:3f:2069:0:973:3890:1:41086] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hsoftwaresystems.net"] [uri "/api/.env"] [unique_id "ao3zM666s1hJ4NtKLiBtgQAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
gadix
2026-08-25 18:07:46
(19 hours ago)
[25/Aug/2026:20:07:46.001348 +0200] ao3Z8pRbWVpAeVKJieFQhQAAAEY 2a02:4780:3f:2069:0:973:3890:1 49754 ...
show more
[25/Aug/2026:20:07:46.001348 +0200] ao3Z8pRbWVpAeVKJieFQhQAAAEY 2a02:4780:3f:2069:0:973:3890:1 49754 127.0.0.1 7081
[25/Aug/2026:20:07:46.002215 +0200] ao3Z8o_fzeZiR75FgQ0CWwAAABM 2a02:4780:3f:2069:0:973:3890:1 49766 127.0.0.1 7081
[25/Aug/2026:20:07:46.002850 +0200] ao3Z8pRbWVpAeVKJieFQhgAAAEI 2a02:4780:3f:2069:0:973:3890:1 49764 127.0.0.1 7081
...
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-25 18:07:36
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:2069:0:973:3890:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:2069:0:973:3890:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 14:07:32.184829 2026] [security2:error] [pid 13968:tid 13968] [client 2a02:4780:3f:2069:0:973:3890:1:17084] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "the-schlosser.net"] [uri "/dev/.env"] [unique_id "ao3Z5BPJT244ThZXS4C3-QAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-25 16:31:29
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:2069:0:973:3890:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:3f:2069:0:973:3890:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 12:31:22.995437 2026] [security2:error] [pid 26370:tid 26370] [client 2a02:4780:3f:2069:0:973:3890:1:44288] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "softwarezz.net"] [uri "/admin/.env"] [unique_id "ao3DWqPfcee-Hvu8V0TWVwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack