🇺🇸
TPI-Abuse
2026-06-10 04:45:10
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:63:e4f0::1 (Unknown): 1 in the last 3 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:63:e4f0::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 00:44:54.912019 2026] [security2:error] [pid 18623:tid 18623] [client 2a02:4780:63:e4f0::1:40334] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "austli.com"] [uri "/api/.env"] [unique_id "aijrxpHjImwgwI5VIs9umQAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-06-08 22:00:41
(4 days ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-07.
show less
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-06-07 22:54:49
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:63:e4f0::1 (Unknown): 1 in the last 3 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:63:e4f0::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 18:54:44.295095 2026] [security2:error] [pid 20389:tid 20389] [client 2a02:4780:63:e4f0::1:57034] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kochcreative.com"] [uri "/dev/.env"] [unique_id "aiX2tF6ADxSP0mOieiHg6AAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-06-07 20:48:45
(5 days ago)
[SunJun0722:48:41.1692172026][security2:error][pid149179:tid149254][client2a02:4780:63:e4f0::1:0]Mod ...
show more
[SunJun0722:48:41.1692172026][security2:error][pid149179:tid149254][client2a02:4780:63:e4f0::1:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\b\(\?:\\\\\\\\.\(\?:ht\(\?:access\|passwd\|group\)\|www_\?acl\)\|global\\\\\\\\.asa\|httpd\\\\\\\\.conf\|boot\\\\\\\\.ini\|web.config\)\\\\\\\\b\|\(\|\^\|\\\\\\\\.\\\\\\\\.\)/etc/\|/\\\\\\\\.\(\?:history\|bash_history\|sh_history\|env\)\$\)\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"204\"][id\"390709\"][rev\"30\"][msg\"Atomicorp.comWAFRules:Attempttoaccessprotectedfileremotely\"][data\"/.env\"][severity\"CRITICAL\"][hostname\"morandi-trasporti.ch\"][uri\"/dev/.env\"][unique_id\"aiXZKfRzj9ErXskKUKIIvQAAAIw\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-07 13:31:21
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:63:e4f0::1 (Unknown): 1 in the last 3 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:63:e4f0::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 09:31:14.890788 2026] [security2:error] [pid 18108:tid 18108] [client 2a02:4780:63:e4f0::1:59818] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kayelynn.com"] [uri "/.env.save"] [unique_id "aiVyoj8LIhh9c60vilnBOgAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-07 12:36:46
(5 days ago)
(mod_security) mod_security (id:949110) triggered by 2a02:4780:63:e4f0::1 (Unknown): 1 in the last 3 ...
show more
(mod_security) mod_security (id:949110) triggered by 2a02:4780:63:e4f0::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 08:36:40.286662 2026] [security2:error] [pid 1837:tid 1837] [client 2a02:4780:63:e4f0::1:56264] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "captaincookfj.com"] [uri "/api/.env"] [unique_id "aiVl2HX9gTfBVejJf7nOFgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
e.fierstra
2026-06-07 12:15:17
(5 days ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-07 11:58:02
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:63:e4f0::1 (Unknown): 1 in the last 3 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:63:e4f0::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 07:57:55.338443 2026] [security2:error] [pid 9343:tid 9343] [client 2a02:4780:63:e4f0::1:56640] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "furbabieslivesmatter.com"] [uri "/.env"] [unique_id "aiVcw2PzBECSfCPo9zYpqwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-07 11:20:58
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:63:e4f0::1 (Unknown): 1 in the last 3 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:63:e4f0::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 07:20:54.693336 2026] [security2:error] [pid 19702:tid 19726] [client 2a02:4780:63:e4f0::1:43556] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mcprocapital.com"] [uri "/core/.env"] [unique_id "aiVUFitep6GL0CsgSFLAoQAAANQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-07 09:44:20
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:63:e4f0::1 (Unknown): 1 in the last 3 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:63:e4f0::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 05:44:14.246510 2026] [security2:error] [pid 10987:tid 10987] [client 2a02:4780:63:e4f0::1:51988] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "reelfruits.com"] [uri "/core/.env.save"] [unique_id "aiU9bqUV1NLFMu_a_EFn8QAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-07 09:18:11
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:63:e4f0::1 (Unknown): 1 in the last 3 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:63:e4f0::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 05:18:05.020000 2026] [security2:error] [pid 9220:tid 9220] [client 2a02:4780:63:e4f0::1:55980] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cossey.me"] [uri "/dev/.env"] [unique_id "aiU3TY9k7RRhiAi1naTJkAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-07 07:39:28
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:63:e4f0::1 (Unknown): 1 in the last 3 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:63:e4f0::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 03:39:20.690465 2026] [security2:error] [pid 29674:tid 29674] [client 2a02:4780:63:e4f0::1:47002] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "twilighthackers.com"] [uri "/laravel/.env"] [unique_id "aiUgKLJewbmEwszMUbBCCwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Melle
2026-06-07 06:57:20
(6 days ago)
Blocked by CrowdSec | Scenario: crowdsecurity/http-sensitive-files | 2a02:4780:63:e4f0::1 triggered ...
show more
Blocked by CrowdSec | Scenario: crowdsecurity/http-sensitive-files | 2a02:4780:63:e4f0::1 triggered 5 events | Detected: 2026-06-07T06:57:19.947937152Z
show less
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-06-07 05:29:22
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:63:e4f0::1 (Unknown): 1 in the last 3 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:63:e4f0::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 01:29:17.425598 2026] [security2:error] [pid 14071:tid 14071] [client 2a02:4780:63:e4f0::1:42958] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "treeofloveproductions.com"] [uri "/dev/.env"] [unique_id "aiUBrbr9VsWwtSmsa8CT2wAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-07 04:00:30
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:63:e4f0::1 (Unknown): 1 in the last 3 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:63:e4f0::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 00:00:26.401549 2026] [security2:error] [pid 30460:tid 30460] [client 2a02:4780:63:e4f0::1:59864] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hockey312.com"] [uri "/backend/.env"] [unique_id "aiTs2nrV6v2Nd40bQDu_egAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack