๐บ๐ธ
TPI-Abuse
2026-06-04 05:44:01
(45 minutes ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:6:1254:0:3166:f11d:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:6:1254:0:3166:f11d:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 01:43:54.128858 2026] [security2:error] [pid 12404:tid 12404] [client 2a02:4780:6:1254:0:3166:f11d:1:47586] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jiffycareers.com"] [uri "/backend/.env"] [unique_id "aiEQmvYriyj7LKcAF1CrgwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-04 03:04:10
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:6:1254:0:3166:f11d:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:6:1254:0:3166:f11d:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 23:04:05.678356 2026] [security2:error] [pid 21597:tid 21597] [client 2a02:4780:6:1254:0:3166:f11d:1:39890] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "serranoscoffee.com"] [uri "/admin/.env"] [unique_id "aiDrJdv1bIBCorLXKtvfJAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
e.fierstra
2026-06-03 21:53:31
(8 hours ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
๐ซ๐ท
dynamix
2026-06-03 14:57:11
(15 hours ago)
Multiple WAF Violations
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-03 13:05:06
(17 hours ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:6:1254:0:3166:f11d:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:6:1254:0:3166:f11d:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 09:04:58.319196 2026] [security2:error] [pid 12499:tid 12499] [client 2a02:4780:6:1254:0:3166:f11d:1:44148] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sixsensehealing.com"] [uri "/member/.env"] [unique_id "aiAmeogppwcHNR4lqrbXQgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
gadix
2026-06-03 10:53:05
(19 hours ago)
[03/Jun/2026:12:53:03.500606 +0200] aiAHj7xoa52_UQyceR4YwwAAAAE 2a02:4780:6:1254:0:3166:f11d:1 59114 ...
show more
[03/Jun/2026:12:53:03.500606 +0200] aiAHj7xoa52_UQyceR4YwwAAAAE 2a02:4780:6:1254:0:3166:f11d:1 59114 127.0.0.1 7081
[03/Jun/2026:12:53:03.504967 +0200] aiAHj2IyjQZZ_MeUBRStYwAAAAk 2a02:4780:6:1254:0:3166:f11d:1 59126 127.0.0.1 7081
[03/Jun/2026:12:53:03.507218 +0200] aiAHjx-oDYgxZ15aCpi7AQAAAAI 2a02:4780:6:1254:0:3166:f11d:1 59142 127.0.0.1 7081
...
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-03 07:31:51
(22 hours ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:6:1254:0:3166:f11d:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:6:1254:0:3166:f11d:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 03:31:44.605658 2026] [security2:error] [pid 15547:tid 15584] [client 2a02:4780:6:1254:0:3166:f11d:1:65036] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paulvester.com"] [uri "/.env"] [unique_id "ah_YYAbkKi-_mpGskkDdhQAAAJc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-03 07:04:13
(23 hours ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:6:1254:0:3166:f11d:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:6:1254:0:3166:f11d:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 03:04:05.568501 2026] [security2:error] [pid 21756:tid 21756] [client 2a02:4780:6:1254:0:3166:f11d:1:30494] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mayiasteadman.com"] [uri "/core/.env"] [unique_id "ah_R5Txb6GOt3hzePkBU2AAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-03 05:03:27
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:6:1254:0:3166:f11d:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:6:1254:0:3166:f11d:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 01:03:22.464291 2026] [security2:error] [pid 1405:tid 1405] [client 2a02:4780:6:1254:0:3166:f11d:1:62498] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "civilwarzone.com"] [uri "/dev/.env"] [unique_id "ah-1mj3bvNEg-A2vmq3RSQAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-02 23:29:54
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:6:1254:0:3166:f11d:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:6:1254:0:3166:f11d:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 19:29:48.633471 2026] [security2:error] [pid 32145:tid 32145] [client 2a02:4780:6:1254:0:3166:f11d:1:18118] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "keeftone.com"] [uri "/app/.env"] [unique_id "ah9nbPCs_ceED1xAprOM4AAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
4server
2026-06-02 17:00:43
(1 day ago)
[TueJun0219:00:40.3720132026][security2:error][pid447351:tid447439][client2a02:4780:6:1254:0:3166:f1 ...
show more
[TueJun0219:00:40.3720132026][security2:error][pid447351:tid447439][client2a02:4780:6:1254:0:3166:f11d:1:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\b\(\?:\\\\\\\\.\(\?:ht\(\?:access\|passwd\|group\)\|www_\?acl\)\|global\\\\\\\\.asa\|httpd\\\\\\\\.conf\|boot\\\\\\\\.ini\|web.config\)\\\\\\\\b\|\(\|\^\|\\\\\\\\.\\\\\\\\.\)/etc/\|/\\\\\\\\.\(\?:history\|bash_history\|sh_history\|env\)\$\)\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"204\"][id\"390709\"][rev\"30\"][msg\"Atomicorp.comWAFRules:Attempttoaccessprotectedfileremotely\"][data\"/.env\"][severity\"CRITICAL\"][hostname\"enricoalbertini.com\"][uri\"/api/.env\"][unique_id\"ah8MOMLb7jBZ4wFaYsN5hgAAAEQ\"]
show less
Port Scan
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-02 09:19:23
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:6:1254:0:3166:f11d:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:6:1254:0:3166:f11d:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 05:19:16.109491 2026] [security2:error] [pid 729:tid 729] [client 2a02:4780:6:1254:0:3166:f11d:1:60182] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "notepromd.com"] [uri "/member/.env"] [unique_id "ah6gFFRgGtVNCh7Ee_iWRAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
dynamix
2026-06-02 09:10:28
(1 day ago)
Multiple WAF Violations
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-02 04:54:48
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:6:1254:0:3166:f11d:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:6:1254:0:3166:f11d:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 00:54:41.428776 2026] [security2:error] [pid 5266:tid 5266] [client 2a02:4780:6:1254:0:3166:f11d:1:23506] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "leothecolorman.com"] [uri "/admin/.env"] [unique_id "ah5iEaCwGbAnaQBEd13A8QAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-02 00:25:36
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:6:1254:0:3166:f11d:1 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:6:1254:0:3166:f11d:1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 20:25:28.439141 2026] [security2:error] [pid 30330:tid 30330] [client 2a02:4780:6:1254:0:3166:f11d:1:18374] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "crossfiregold.com"] [uri "/app/.env"] [unique_id "ah4i-HbH7qBeUmonwuaC0QAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack