๐บ๐ธ
TPI-Abuse
2026-09-16 08:52:14
(23 hours ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:7:e1ce::1 (srv1327841.hstgr.cloud): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:7:e1ce::1 (srv1327841.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 04:52:06.798460 2026] [security2:error] [pid 24089:tid 24191] [client 2a02:4780:7:e1ce::1:46396] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.jpdesign.us.jean-paullederer.com"] [uri "/.env"] [unique_id "aqpYtjgfeUc5bssYvaK-ogAAAdE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-15 21:00:48
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:7:e1ce::1 (srv1327841.hstgr.cloud): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:7:e1ce::1 (srv1327841.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 17:00:40.396642 2026] [security2:error] [pid 1571834:tid 1571834] [client 2a02:4780:7:e1ce::1:39736] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "automatebi.com"] [uri "/wp-config.php.swp"] [unique_id "aqmx-Fiv-jdIzNaIWF6LrAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-15 18:18:38
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:7:e1ce::1 (srv1327841.hstgr.cloud): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:7:e1ce::1 (srv1327841.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 14:18:31.516247 2026] [security2:error] [pid 32418:tid 32435] [client 2a02:4780:7:e1ce::1:53648] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.cityofmiddleton.org"] [uri "/.git/config"] [unique_id "aqmL99vUv2NBrs5oDNOwZgAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
4server
2026-09-15 17:31:34
(1 day ago)
[TueSep1519:31:29.2898302026][security2:error][pid3582738:tid3582859][client2a02:4780:7:e1ce::1:0]Mo ...
show more
[TueSep1519:31:29.2898302026][security2:error][pid3582738:tid3582859][client2a02:4780:7:e1ce::1:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"webdisk.maurokorangraf.ch\"][uri\"/.env.bak\"][unique_id\"aqmA8UI5HNY4iGaQklZZ6AAAAko\"]
show less
Port Scan
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-15 17:12:01
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:7:e1ce::1 (srv1327841.hstgr.cloud): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:7:e1ce::1 (srv1327841.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 13:11:53.419932 2026] [security2:error] [pid 1633:tid 1633] [client 2a02:4780:7:e1ce::1:40540] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "crittergetterpestcontrol.com"] [uri "/wp-config.php.save"] [unique_id "aql8WUXd7dyR78cqNbTiRQAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-15 16:41:56
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:7:e1ce::1 (srv1327841.hstgr.cloud): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:7:e1ce::1 (srv1327841.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 12:41:50.019436 2026] [security2:error] [pid 24377:tid 24377] [client 2a02:4780:7:e1ce::1:38510] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "activethinkers.net"] [uri "/wp-config.php~"] [unique_id "aql1Tlcxv-_Y9n-M3xL3jAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-15 13:16:04
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:7:e1ce::1 (srv1327841.hstgr.cloud): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:7:e1ce::1 (srv1327841.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 09:15:57.137097 2026] [security2:error] [pid 4324:tid 4324] [client 2a02:4780:7:e1ce::1:60274] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stinsonbeachsurfandkayak.com"] [uri "/wp-config.php~"] [unique_id "aqlFDYFrc6s9PULyOAqFigAAACg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-15 11:44:56
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:7:e1ce::1 (srv1327841.hstgr.cloud): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:7:e1ce::1 (srv1327841.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 07:44:50.957164 2026] [security2:error] [pid 15150:tid 15195] [client 2a02:4780:7:e1ce::1:39986] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.ayubhamdardfoundation.org"] [uri "/.git/config"] [unique_id "aqkvsqvDwVuldm645gNt6QAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-15 03:51:24
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:7:e1ce::1 (srv1327841.hstgr.cloud): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:7:e1ce::1 (srv1327841.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 14 23:51:19.425742 2026] [security2:error] [pid 26590:tid 26590] [client 2a02:4780:7:e1ce::1:38696] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ironsightsarmory.com"] [uri "/wp-config.php~"] [unique_id "aqjAtxmQwbn-jrpBuxTfCwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-15 00:35:38
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:7:e1ce::1 (srv1327841.hstgr.cloud): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:7:e1ce::1 (srv1327841.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 14 20:35:31.526617 2026] [security2:error] [pid 10013:tid 10013] [client 2a02:4780:7:e1ce::1:39056] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "asdfwordpro.com"] [uri "/.env.txt"] [unique_id "aqiS0_wMF38gSKXKHENcJwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-14 23:39:26
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:7:e1ce::1 (srv1327841.hstgr.cloud): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:7:e1ce::1 (srv1327841.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 14 19:39:21.940498 2026] [security2:error] [pid 16378:tid 16378] [client 2a02:4780:7:e1ce::1:36176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arklahomaflooring.com"] [uri "/.env.txt"] [unique_id "aqiFqU1-UhAcJme5V8JYdwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฎ๐น
VHosting
2026-09-14 20:45:04
(2 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
๐ฉ๐ช
IVski.com
2026-09-14 18:31:08
(2 days ago)
IVski WAF | Metabase CVE-2026-72898 probe - querying /api/session/properties
Hacking
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-14 16:45:29
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:7:e1ce::1 (srv1327841.hstgr.cloud): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:7:e1ce::1 (srv1327841.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 14 12:45:20.835001 2026] [security2:error] [pid 12586:tid 12586] [client 2a02:4780:7:e1ce::1:36890] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "anthearodgers.com"] [uri "/.env.txt"] [unique_id "aqgkoEXUWZsYnBJsK0dGVQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack